v1.0.0-beta.2

Second beta. Brings the dual-stack firewall, connection tracking, and NAT to the data path.

Added

• Dual-stack L3/L4 firewall ACL + IP blocklist, folded into the attached bridge and gateway programs.
• Stateful connection tracking with established-flow admit.
• SNAT/masquerade + DNAT/port-forward on the gateway forwarder.

Fixed

• Anti-spoof: corrected an IPv6-NDP neighbor-advertisement match that let a spoofed target slip through on dual-stack bridges.

Performance

• Fewer per-packet map lookups on the bridge fast path.