Summary
Traffic Dictator version 1.9 has been released on 24.01.2026. This article describes changes in the new version.
Software image update
Starting from 1.9, TD image is based on debian trixie (previously: bookworm). Also, python was updated from 3.11 to 3.13, java was updated from 17 to 21, rust compiler was updated from 1.85.1 to 1.92.0.
New feature: Web-UI
Traffic Dictator now has a graphical interface! As of now, the following features are available from Web-UI:
- Create/delete/monitor SR-TE policies and mesh templtaes
- View BGP-LS topology
- Monitor BGP and PCEP sessions
Configuring various system settings, BGP, PCEP, affinities, explicit paths, ACL and peer-groups for now is only possible via CLI or HTTP API.
Enable and connect to Web-UI
Web-UI listens on HTTP port 80 and HTTPS port 443 by default; however HTTPS requires a certificate and key to be configured. You also need a local user (or RADIUS configured for Docker container with TD). Config example:
management web-ui
protocol http
port 80
protocol https
port 443
certificate server.cert key server.key
!
management users
!
user tdadmin
password encrypted $6$OdmN1UDWOCmP9kX5$MV8FyN2FGoKDNin8uXT2D1GLdvK2xcvMtIOkzS8zaKK1RjPSC5qEz9TJjPHmVEvfz/p9tL6fRLlMc/Rgwl37p/
Go to TD container/VM IP in your browser and login:
Topology view
By default, after login, the topology view will open. Here you can see topologies advertised to TD via BGP-LS:
Clicking on a router icon will open some details about this node; you can also see all policies where this router is the headend, or create a new policy. Clicking on a link will show some link details.
Policies view
Here you can see all policies, edit, delete and create new policies.
Mesh templates view
This is very similar to policies view, you can create, edit and delete templates, or check policies generated from each template.
BGP and PCEP sessions
Here you can check the status of BGP and PCEP sessions. The sessions as of now need to be configured from the CLI or API.
Check Web-UI status and change configuration
The following CLI command shows Web-UI status:
TD1#show management web-ui Web-UI server statistics HTTP enabled: True HTTP running: True HTTP port: 80 HTTP port conflict: None HTTPS enabled: True HTTPS running: True HTTPS port: 443 HTTPS port conflict: None HTTPS certificate: server.cert HTTPS key: server.key
It is also possible to change ports, certificates or disable HTTP
TD1#conf TD1(config)#management web-ui TD1(config-mgmt-web-ui)#protocol http TD1(config-mgmt-web-ui-http)#shut
Note: if you change Web-UI or HTTP API ports while running TD container not in host mode, you also need to expose the new ports in Docker.
Improvements
Relative path for certificates
In HTTPS API config and Web-UI config, it is now possible to specify certificate and key without absolute path. TD will check for these files in /usr/local/td/certs. If the absolute path is specified, that will work too.
Port conflict check
Since it is possible to change port number for HTTP API and Web-UI, there is now a port conflict check. In case of conflict, you will see log messages:
2026-01-22 17:59:54,513 lmk-vm102-dev-td1 ERROR: Management-server: HTTP API port conflicts with service web_ui_http
If conflicting ports exist in startup-config, TD will not start neither of the conflicting services. If conflict is detected after a live config change, the service that was changed will not start but the other service will keep running.
Bug fixes
- When deleting a PCE-initiated LSP, set delegate flag to 1. This is specifically to interwork with FRR; other PCEP implementations don’t check this flag in deletion messages.
- Access list configuration is not synced to redundancy peer during incremental sync (bug #70)
- BGP flaps due to bad marker with reassembled TCP segments (bug #71)
- Empty AS seq sent to iBGP neighbor (bug #72)
- Redundancy server logging config is not updated with dynamic config changes (bug #73)
Download
You can pull the latest TD version from Docker Hub:
sudo docker pull vegvisirsystems/td:latest
Alternatively, download the new version of Traffic Dictator from the Downloads page.