project
Packet filtering tool inspected for rules dropping traffic to the host.
No evidence-backed relationships are recorded.
A robotics fleet project made a five-profile shaped-network matrix a required gate on main. The asymmetric-uplink profile is the one almost nobody runs, and the one teleop dies on.
Reality
One operator flipped Cilium to full kube-proxy replacement and woke at 2:47 AM to a SIEM ingesting zero events. The cluster was healthy. The evidence pipeline was not.
Reality
A tutorial walkthrough of kube-proxy is a useful reminder that a ClusterIP is not an interface. The iptables-to-IPVS-to-eBPF sequence is an answer to per-node rule accounting, not taste.
Reality
A sysadmin's incident writeup argues the reboot reflex destroys the evidence you need. Its fixed check order is the useful part, though only two of the five steps survive in the published text.
Reality