Issues

• test: HA smokes reset Manual holds only as preamble; runs leave RGs held

  psaab/xpf#18757 · Filter by author psaab opened on Nov 1, 2026

• test: cluster-key byte check untested; key-generate opt-in persists across deploys

  psaab/xpf#18756 · Filter by author psaab opened on Nov 1, 2026
  1

• make check-nft-deadcode cannot run under go1.27: x/tools v0.40 SSA panics (unexpected expr *ast.KeyValueExpr)

  psaab/xpf#18753 · Filter by author psaab opened on Nov 1, 2026

• HA: failback refused with "cold prime owed without pending outbound bulk" after crash-reboot when helper restarts preceded it (udp, master)

  psaab/xpf#18752 · Filter by author psaab opened on Nov 1, 2026

• test: step-8 iperf locator misses a prefix address and an export override

  psaab/xpf#18750 · Filter by author psaab opened on Nov 1, 2026

• refactoring-audit-accepted: forwarding/state.rs is past the WATCH floor with no entry; three entries cite a removed vrrp/instance.go entry

  psaab/xpf#18749 · Filter by author psaab opened on Nov 1, 2026

• CoS: a backlogged exact class starves per-worker instances of a non-exact class under root saturation

  psaab/xpf#18748 · Filter by author psaab opened on Nov 1, 2026

• lo0 kernel mirror: family inet lo0 terms match IPv6 packets (no nfproto guard)

  psaab/xpf#18747 · Filter by author psaab opened on Nov 1, 2026

• #16841's zero-hop DROP breaks four more nftables readback predicates (uncertain-ACK recovery, TableDropsInput, TableEnforcing, lo0 rule count)

  psaab/xpf#18746 · Filter by author psaab opened on Nov 1, 2026

• pkg/nftables netns kernel cells: 6 red on master, and no forced leg runs them (#15241 class)

  psaab/xpf#18745 · Filter by author psaab opened on Nov 1, 2026

• config: refuse committing a published placeholder cluster key over an active config

  bug
  psaab/xpf#18744 · Filter by author psaab opened on Nov 1, 2026

• dataplane: every commit attaches then detaches XDP on em0/fxp0 (HA control link); one heartbeat frame lost

  bugdataplane
  psaab/xpf#18740 · Filter by author psaab opened on Nov 1, 2026
  1

• userspace-dp: seed the served baseline at install so opening replicas reap in one window

  psaab/xpf#18739 · Filter by author psaab opened on Nov 1, 2026

• harness fixtures left stale by intended changes: fairness precheck sibling lib, mouse-latency lock path, shim parity test rename

  psaab/xpf#18737 · Filter by author psaab opened on Nov 1, 2026

• test: uncached-census predicate is literal; factoryreset sources a file the go cache can't see

  psaab/xpf#18736 · Filter by author psaab opened on Nov 1, 2026

• fabric: carry the forwarding class in the fabric stamp, removing the #13967 BA fallback (design)

  psaab/xpf#18734 · Filter by author psaab opened on Nov 1, 2026

• fabric: authenticate the zone stamp in-band with a keyed tag from the cluster auth key (design)

  psaab/xpf#18733 · Filter by author psaab opened on Nov 1, 2026

• cluster: the #12164 arm-debt yield does not require the peer to be takeover-ready; a sync-held peer can be yielded to and leave the RG ownerless

  psaab/xpf#18731 · Filter by author psaab opened on Nov 1, 2026

• lo0: explicit lo0 filter terms drop internal traffic (iif lo, control link, fabric)

  psaab/xpf#18729 · Filter by author psaab opened on Nov 1, 2026

• filter: adopt Junos implicit final discard for stateless firewall filters

  psaab/xpf#18728 · Filter by author psaab opened on Nov 1, 2026
  1

• userspace-dp: GC node-served evidence scans the whole shared map under its lock per idle candidate

  psaab/xpf#18727 · Filter by author psaab opened on Nov 1, 2026

• userspace-dp: idle established TCP sessions are never reaped; keep-alive uses cumulative not recent evidence

  psaab/xpf#18722 · Filter by author psaab opened on Nov 1, 2026

• IPsec host-input fence readback fails since #16841: the zero-hop DROP now leads the input chain

  psaab/xpf#18721 · Filter by author psaab opened on Nov 1, 2026
  1

• daemon: bounded rg_active writes against a wedged helper have no single-flight; one abandoned goroutine per RG per reconcile pass

  psaab/xpf#18720 · Filter by author psaab opened on Nov 1, 2026

• config: two fabric advisories print on every commit and can't be satisfied or silenced

  psaab/xpf#18719 · Filter by author psaab opened on Nov 1, 2026
  1