Skip to content

feat: Only send load balancer traffic to verified backends - #627

Merged
scotwells merged 1 commit into
codex/nlb-api-foundationfrom
codex/nlb-source-identity
Oct 23, 2026
Merged

scotwells merged 1 commit into
codex/nlb-api-foundationfrom
codex/nlb-source-identity

Conversation

@scotwells

@scotwells scotwells commented Oct 12, 2026 •

Copy link
Copy Markdown
Contributor

Closed by mistake while restacking; continued in #714.

Related to #611 and datum-cloud/enhancements#884

@scotwells scotwells changed the title Preserve source interface identity for load balancing feat: Only send load balancer traffic to verified backends Oct 23, 2026
@scotwells
scotwells requested review from ecv and kevwilliams October 23, 2026 14:55
@scotwells
scotwells marked this pull request as ready for review October 23, 2026 14:55
@scotwells
scotwells requested a review from a team as a code owner October 23, 2026 14:55
Keep the original interface identity through projection so a serving
location can confirm a backend still belongs to the right VPC before it
sends it traffic. Backends without a verified identity are left out.

Key changes:
- Preserve the source interface UID on projected interfaces
- Exclude route endpoints without a verified source identity
- Document the serving-location contract
@scotwells
scotwells force-pushed the codex/nlb-route-reconcile branch from 9b0b72a to ff35564 Compare October 23, 2026 15:40
@scotwells
scotwells force-pushed the codex/nlb-source-identity branch from 8bafdab to 8162a4b Compare October 23, 2026 15:40
Base automatically changed from codex/nlb-route-reconcile to codex/nlb-api-foundation October 23, 2026 15:40
@scotwells
scotwells merged commit 8162a4b into codex/nlb-api-foundation Oct 23, 2026
@scotwells
scotwells deleted the codex/nlb-source-identity branch October 23, 2026 15:40
@cla-assistant

cla-assistant Bot commented Oct 23, 2026

Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

@scotwells
scotwells restored the codex/nlb-source-identity branch October 23, 2026 15:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants