Skip to content

Allow NLB backends by address within a VPC - #845

Draft
scotwells wants to merge 2 commits into
codex/nlb-backend-addresses-galacticfrom
codex/nlb-addresses-without-selector-galactic
Draft

scotwells wants to merge 2 commits into
codex/nlb-backend-addresses-galacticfrom
codex/nlb-addresses-without-selector-galactic

Conversation

@scotwells

@scotwells scotwells commented Oct 12, 2026 •

Copy link
Copy Markdown
Contributor

Product change

NLB routes can supply eligible backend IPv6 addresses without depending on a VPCAttachment label. Galactic matches those addresses only against attachments whose observed VPC equals the rule's VPC, and an explicit empty address list withdraws the rule and its backend bindings.

Verification

  • Added gateway and binding tests for address-only selection, same-address attachments in different VPCs, and empty-list withdrawal.
  • Build, lint, and both unit suites passed in CI.

Depends on datum-cloud/network#34 and #844. Existing DSR supports only one IPv6 VIP for a backend address, port, and protocol; a separate delivery path is needed for two VIPs sharing one backend socket.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant