[deploy] #10 Single disarm + blast-radius caps #179

New issue

Open

opened 2026-07-11 13:45:52 +00:00 by vxfemboy · 0 comments

vxfemboy commented

2026-07-11 13:45:52 +00:00

(Migrated from github.com)

M1 (#167). One audited blackwalld disarm that withdraws all RTBH+FlowSpec+XDP without killing the daemon; hard caps + mandatory auto-expiry.
Status: PARTIAL (max_blackholes/hold_down/max_ttl enforced; process-kill = de-facto disarm) · Size: S/M · Home: blackwalld/rtbh.
Pro: a clear kill switch + a ceiling on false-positive damage. Con: small — add the audited CLI verb + FlowSpec caps.

**M1** ([#167](../167)). One audited `blackwalld disarm` that withdraws all RTBH+FlowSpec+XDP without killing the daemon; hard caps + mandatory auto-expiry. **Status:** PARTIAL (max_blackholes/hold_down/max_ttl enforced; process-kill = de-facto disarm) · **Size:** S/M · **Home:** blackwalld/rtbh. **Pro:** a clear kill switch + a ceiling on false-positive damage. **Con:** small — add the audited CLI verb + FlowSpec caps.