fix(lab): flood trafficgen-foundation with reduced-set (fix fidelity flake) #275

Merged

vxfemboy merged 1 commit from fix/trafficgen-foundation-reduced-set into main

2026-08-04 05:34:50 +00:00

vxfemboy commented

2026-08-04 04:54:36 +00:00

Owner

The trafficgen-foundation (trafficgen) lab gate flooded with full-set (77k pps) and tripped send's hard 50% fidelity floor (38.5k pps), which is unreachable on the contended shared runner — observed 37464 < 38500. The gate's real assertion (the verify per-flow accounting) passes regardless (it did in the failing run). Same flake and fix as deception-syncookie (#262): flood with reduced-set (15.4k pps, the full pattern at 1/5 scale), exercising the same generate→sink→verify paths under the contended ceiling. flow-sflow-live/deception-resilience keep full-set deliberately (they need the volume). Verified locally: 3/3 pass with reduced-set.

The `trafficgen-foundation` (`trafficgen`) lab gate flooded with `full-set` (77k pps) and tripped `send`'s hard 50% fidelity floor (38.5k pps), which is unreachable on the contended shared runner — observed 37464 < 38500. The gate's real assertion (the `verify` per-flow accounting) passes regardless (it did in the failing run). Same flake and fix as deception-syncookie (#262): flood with `reduced-set` (15.4k pps, the full pattern at 1/5 scale), exercising the same generate→sink→verify paths under the contended ceiling. `flow-sflow-live`/`deception-resilience` keep `full-set` deliberately (they need the volume). Verified locally: 3/3 pass with reduced-set.

vxfemboy added 1 commit

2026-08-04 04:54:36 +00:00

fix(lab): flood trafficgen-foundation with reduced-set (fix fidelity flake)

CI / check (pull_request) Successful in 17m58s

Details

CI / lab (pull_request) Successful in 8m39s

Details

417e5f2995

The trafficgen-foundation gate flooded with `full-set` (77k pps) and hit
`send`'s hard 50% generator-fidelity floor (38.5k pps). On the contended
shared runner that target is unreachable, so the floor flakes (observed 37464
< 38500) and fails the gate — even though the gate's real assertion, the
`verify` per-flow accounting step, passes every run (it did in the failing
run too). Same contention flake, and same fix, as deception-syncookie (#262):
flood with `reduced-set` (15.4k pps, the full pattern at 1/5 scale), which
exercises the same generate->sink->verify paths under the contended ceiling.

flow-sflow-live and deception-resilience keep `full-set` on purpose: they
need the volume (>20k pps to trip the live detector / sustain the flood), and
their longer windows average out contention.

Verified locally: the gate passes 3/3 with reduced-set.

vxfemboy merged commit e6265b9883 into main

2026-08-04 05:34:50 +00:00

vxfemboy deleted branch fix/trafficgen-foundation-reduced-set

2026-08-04 05:34:50 +00:00

vxfemboy referenced this pull request from a commit

2026-08-04 05:34:52 +00:00

fix(lab): flood trafficgen-foundation with reduced-set (fix fidelity flake) (#275)

vxfemboy referenced this pull request from a commit

2026-08-04 05:35:55 +00:00

docs(changelog): record the RTBH placeholder-next-hop arm fix (#273) and trafficgen flake fix (#275)

vxfemboy referenced this pull request

2026-08-04 05:36:02 +00:00