fix: harden ip table failover and config verification under extreme networks#12529

Open

originalix wants to merge 20 commits into

xfrom

worktree-iptable-hardening

Commits on Jul 16, 2026

feat: add ip table endpoint decision and verify result types
originalix
committed
feat: add pure ip table endpoint decision with reachability-first and hysteresis
originalix
committed
feat: reachability-first endpoint selection with fast domain failover
originalix
committed
feat: coalesce concurrent ip table speed tests per domain
originalix
committed
feat: adapter-level fail-open to builtin ip on domain network failures
originalix
committed
feat: structured ip table config verification with allowlist canonicalization
originalix
committed
feat: persist verified config provenance and reject version rollback
originalix
committed
feat: fetch ip table cdn config through iptable-capable client
originalix
committed
feat: server metrics for ip table failover and verify failures
originalix
committed
feat: dev settings kill switch ui for ip table failover
originalix
committed

Commits on Jul 17, 2026