Supported feature matrix
Verified, unverified, missing, or deferred.
Statuses match lab evidence for 0.4.0-rc.4. Missing features are never marketed as supported.
| Area | Status | Notes |
|---|---|---|
| IPv4 addresses / routes | verified | Desired → UCI → apply |
| Firewall filter | verified | |
| NAT masquerade | verified | |
| DHCP server / DNS forwarders | verified | |
| Backup / restore (config) | verified | |
| Licensing | verified | Ed25519 only |
| Safe Mode UI | verified | Pending vs applied |
| PPPoE WAN clients + shaping | verified | QEMU measured HTB; disposable lab only |
| Bridges / VLANs | implemented-unverified | UCI export present; dedicated live acceptance pending |
| SNAT / DNAT | implemented-unverified | UCI export present; live nft verify pending |
| Bonding / IPv6 desired / policy routing | missing | Not advertised |
| PPPoE BRAS / RADIUS accounting | intentionally deferred | Out of client scope |
| WireGuard / FRR WinControl | intentionally deferred | Packages only |
| Appliance OTA updates | implemented-unverified | nur-update present; no A/B rollback; suite not public-proven |
| Bare-metal qualification | missing | QEMU/KVM only so far |