james.maesandClaude Opus 5.5 c8a231f5f8 fix(sftp): no connection-log row for connections that never sign in ...

The row was inserted at TCP accept with a provisional AUTH_FAILED, so the
kubelet's TCP readiness probe on the SFTP port wrote a "failed sign-in"
row every 5 seconds per pod in kof22 prod (about 35k a day). The row is
now written at the first authentication attempt or a pre-auth refusal
(the connection rate limit); probes and port scans leave nothing. The
per-IP connection rate is still counted at accept.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-15 07:15:38 -05:00

..

ddl

feat(ddl): indexes for the job queue, dedupe, live sessions and retention

2026-10-13 22:56:01 -05:00

k8s

docs(k8s): note the older io.cilium/lb-ipam-ips annotation (k8s-galaxy)

2026-10-13 23:02:59 -05:00

DESIGN.md

fix(sftp): no connection-log row for connections that never sign in

2026-10-15 07:15:38 -05:00