michal

michal pushed to main at michal/lab

2026-09-06 13:46:45 +00:00

d0b733f831 IPv6 follows master, deployed: vyos002 has a tunnel and a gate that holds it shut

michal pushed to main at michal/lab

2026-09-06 13:30:46 +00:00

395577850c IPv6 was never HA, and the WAN becoming HA is what exposed it

michal pushed to main at michal/lab

2026-09-06 09:40:00 +00:00

061b9e3d7e Close the last two items: config.boot pinned, and an upgrade runbook

michal pushed to main at michal/lab

2026-09-06 09:31:58 +00:00

bda5854563 vif53-pin-boot-disable: get disable into config.boot without losing the WAN

michal pushed to main at michal/lab

2026-09-06 08:42:14 +00:00

d08f68e28b PPPOE-HA: step 8 done -- model merged, zero drift

michal pushed to main at michal/lab

2026-09-06 08:38:22 +00:00

e1c571d004 PPPOE-HA: the drill closed the two biggest unknowns

michal pushed to main at michal/lab

2026-09-06 08:35:06 +00:00

47ce0c1aea wan-drill: run the failover drill unattended, because the operator goes offline

michal pushed to main at michal/lab

2026-09-06 08:34:07 +00:00

85819e40c1 wan-drill-watchdog: bound the blast radius of a failover drill

michal pushed to main at michal/lab

2026-09-06 08:29:24 +00:00

13dcdff1ef wan-panic: a one-command revert that works with no internet and no Claude

michal pushed to main at michal/lab

2026-09-06 00:27:09 +00:00

8aa3d0ebaa PPPOE-HA: record that vyos001's config.boot lacks vif 53 disable

michal pushed to main at michal/lab

2026-09-06 00:26:40 +00:00

8fce03e705 PPPOE-HA: deployed to production

michal pushed to main at michal/lab

2026-09-05 23:42:02 +00:00

5ed0e4888a labsim: both matrices green end to end, numbers reproduced

michal pushed to main at michal/lab

2026-09-05 23:27:39 +00:00

97efb5abb2 labsim: record the failover numbers and how they were nearly wrong

michal pushed to main at michal/lab

2026-09-05 23:25:02 +00:00

6987b324f1 vrrp-wan: size GRACE from the measured hostile failover, not the theory

michal pushed to main at michal/lab

2026-09-05 23:15:46 +00:00

9221c71ff0 labsim: the session-control matrix was never setting session-control

michal pushed to main at michal/lab

2026-09-05 23:11:33 +00:00

4d47b609a2 PPPOE-HA: record the two failure modes found by running the thing

michal pushed to main at michal/lab

2026-09-05 23:04:49 +00:00

b659e0d47e vrrp-wan: a flap holdoff must not tear down a live WAN session

michal pushed to main at michal/lab

2026-09-05 18:21:15 +00:00

d626750010 labsim: hard failover and reboot safety hold; runbook for the production apply

michal pushed to main at michal/lab

2026-09-05 18:11:09 +00:00

93fed7826b labsim: PPPoE HA passes the matrix, and the health check had a real flap bug

michal pushed to main at michal/lab

2026-09-05 17:50:18 +00:00

4efd70c987 vyos: move PPPoE off the config plane onto a gated systemd unit