Batfish Network Analysis Updates

Latest: Batfish v2026.08.27 · 27 Aug 2026 - What's Changed New vendor: Nokia SR OS (MD-CLI) , our longest-standing vendor request ( #3047 ). Both the configure { ... } and flat /configure forms are detected, parsed, and converted: interfaces and LAG, static routes with ECMP, multi-area OSPF, IS-IS, BGP with route reflection, redistribution, prefix-list and community policy, aggregate routes, and VPRN (L3VPN) with RD/route-targets. Thanks @ghankins at Nokia for getting us a vSIM image and license so this could be lab-validated. New vendor: Broadcom FASTPATH by @Murt2005 , management plane to start. Experimental Azure support by @RP38 , alongside the existing AWS cloud modeling. Docker images now publish multi-platform manifests for linux/amd64 and linux/arm64 , so docker pull batfish/batfish or batfish/allinone gets a native image on Apple Silicon and other arm64 hosts. Both architectures run the image and pybatfish cross-version tests before publishing. Thanks @ryanmerolle for the request ( batfish/docker#76 ). A beta MCP server now ships in pybatfish, exposing 36 tools that let AI agents drive snapshot management, traceroute and reachability, ACL and filter inspection, routing and BGP queries, and parse/conversion diagnostics. Install it with pip install 'pybatfish[mcp]' and run batfish-mcp . Tool names and parameters may still change. Thanks @sanskarsawaneml-bit and @sandy1279 for the requests ( batfish/pybatfish#969 , #9828 ). AWS Direct Connect is modeled end to end: DX Gateways and Private VIFs, including customer-side BGP and the downstream VGW path. Palo Alto IKE gateways and IPsec tunnels are modeled ( #8633 , thanks @kevinhuy ), along with vlan-type SVIs on layer-2 ae trunks, tunnel sub-interface units, and address objects used as BGP peers or static route next hops ( #8934 , thanks @hochkurz ). Much of this came from @gh-ajinks . BGP correctness: confederation session types and AS_CONFED_SEQUENCE in the RIB ( #9869 , #9877 , thanks @rsingha108 ), local preference and weight reset on export ( #9262 , thanks @RajdeepMondal ), non-transitive extended communities stripped on eBGP export, advertise-inactive / suppress-inactive , 32-bit administrative cost ( #8808 , thanks @nickgian ), and tcp_l3mdev_accept for FRR/SONiC/Cumulus sessions accepted from any VRF. Arista: EVPN import/export route-targets as collections ( #10113 , thanks @demiurges-tech ), aggregate-address AS_PATH and advertise-only semantics, unnumbered BGP peering and ip address unnumbered ( #7227 , thanks @rmcmilli ), and OSPF default interface cost. Several of these came from @MicahFulton and @btarno . IS-IS modeling for NX-OS ( #10003 , thanks @Tsafac ) and interface-level IS-IS for Arista EOS and Cisco ( @btarno ). IOS and IOS-XR fixes for route-map match semantics ( #9522 , thanks @zeero778 ), object-group service ICMP types ( #9514 , thanks @Kerjox ), chained ingress ACLs with common ( #9398 , thanks @mmitchell4 ), and 4-byte asplain ASNs in rd and extcommunity-set rt ( #10062 , thanks @btarno ). Lots more Junos parsing, extraction, and conversion, including EVPN Type 5 ( @jtwb ), class-of-service, firewall policers, MPLS, forwarding-table export, and static route defaults , plus new FATAL warnings for configuration the device would reject at commit time. Parser error recovery no longer drops the line following an unrecognized one ( #9718 , thanks @jtwb ). NTP authentication, syslog, and DNS extraction across IOS, NX-OS, ASA, and Junos, from @Murt2005 . General performance and scaling work throughout the stack, covering parsing, preprocessing, and the dataplane. Build and toolchain: WORKSPACE to bzlmod, Bazel 9.2, Python 3.14, CI on JDK 25, and projects/batfish-common-protocol renamed to projects/common . New developer tooling: a delta debugger that minimizes bug-reproducing snapshots, a preprocessed-configuration diff tool, and async-profiler integration. Improved documentation, including developer guides for eight core questions and a rewritten add-a-vendor tutorial. Breaking changes: JDK 21 is now the minimum (was 17), and JDK 25 is preferred. The routes , bgpRib , and evpnRib questions no longer emit the legacy Next_Hop_IP and Next_Hop_Interface columns. Use the structured Next_Hop column, which has carried the same information for several releases. The Java Batfish CLI's interactive mode has been removed. New Contributors @matthoug made their first contribution in #9577 @RP38 made their first contribution in #9346 @jtwb made their first contribution in #9712 @natl-set made their first contribution in #9730 @MicahFulton made their first contribution in #9894 @gh-ajinks made their first contribution in #9924 @zphw made their first contribution in #10001 @btarno made their first contribution in #10066 @akgerrish made their first contribution in #10070 @Murt2005 made their first contribution in #10060 Full Changelog : v2025.07.07...v2026.08.27