feat(swap): import .md files and webp transition from myst/current

Selective import from origin/myst/current (cf9c9b34):
- Add/update 255 .md files (full MyST conversion plus webp ref updates)
- Delete 175 PNG/JPG from docs/_static/images (webp twins already present)
- Delete 5 autotest topology.png (webp twins already present)

Preserved on swap (untouched):
- All .rst files (incremental swap pattern)
- conf.py, _ext/, _include/*.txt, .gitignore
- 115 canary md-*.md files
- 7 superpowers/specs/*.md design docs
- Logos vyos-logo.png / vyos-logo-icon.png (referenced by conf.py)

🤖 Generated by [robots](https://vyos.io)

1 files changed, 42 insertions, 0 deletions

diff --git a/docs/vpp/limitations.md b/docs/vpp/limitations.md
new file mode 100644
index 00000000..9582347a
--- /dev/null
+++ b/docs/vpp/limitations.md
@@ -0,0 +1,42 @@
+---
+lastproofread: '2026-02-17'
+---
+
+(vpp-limitations)=
+
+```{include} /_include/need_improvement.txt
+```
+
+# VPP Dataplane Limitations
+
+VPP Dataplane provides significant performance advantages, but has some
+limitations you should consider.
+
+- **Feature Parity**
+
+  VPP does not support all features available in the Linux kernel dataplane.
+  Some networking features, specific protocols, or services may not be
+  available.
+
+  While VPP supports various interface types similar to the kernel, their
+  capabilities may differ.
+
+- **NIC and Driver Compatibility**
+
+  VyOS currently supports only DPDK drivers for network interfaces.
+  Not all network interface cards are compatible with DPDK drivers.
+
+- **Data Path Limitations**
+
+  If a feature exists only in the kernel dataplane, traffic that uses that
+  feature cannot traverse VPP interfaces. Examples include:
+
+  - Firewall
+  - QoS
+
+  When traffic uses the pure VPP path, it does not reach the kernel, where
+  such features are implemented. Plan how traffic flows through your VyOS
+  instance to ensure it reaches the necessary features.
+
+  VPP provides native alternatives for some features. For example, VPP
+  native ACLs provide basic firewall functionality.