T

A. F. DudleyandClaude Opus 4.6 b82d66eeff fix: VRF isolation for mia-sw01 relay, TCP dport mangle for ip_echo

mia-sw01: Replace PBR-based outbound routing with VRF isolation.
TCAM profile tunnel-interface-acl doesn't support PBR or traffic-policy
on tunnel interfaces. Tunnel100 now lives in VRF "relay" whose default
route sends decapsulated traffic to was-sw01 via backbone, avoiding
BCP38 drops on the ISP uplink for src 137.239.194.65.

biscayne: Add TCP dport mangle rule for ip_echo (port 8001). Without it,
outbound ip_echo probes use biscayne's real IP instead of the Ashburn
relay IP, causing entrypoints to probe the wrong address. Also fix
loopback IP idempotency (handle "already assigned" error).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-07 23:31:18 +00:00

ashburn-relay-lab

chore: add containerlab topologies for relay testing

2026-03-07 22:30:03 +00:00

docs

feat: dedicated GRE tunnel (Tunnel100) bypassing DZ-managed Tunnel500

2026-03-07 01:47:58 +00:00

inventory

feat: layer 4 invariants, mount checks, and deployment layer docs

2026-03-07 13:08:04 +00:00

inventory-switches

fix: separate switch inventory to prevent accidental targeting