Verify bounded VPN fabric fanout

2026-05-16 12:43:17 +03:00
parent a6ee9ba26f
commit a73591d917
2 changed files with 28 additions and 0 deletions
@@ -406,6 +406,8 @@ not collapse onto the first packet's logical stream.
 fabric-session batch and requires them to remain sharded.
 The smoke report also exposes the mixed-batch frame fanout so regressions show
 up as a concrete fanout drop, not just a failed boolean.
+Batch fanout is bounded by configured stream shards, so a large batch with many
+flows cannot explode into unbounded fabric frames.
 Fabric-session packet transport snapshots now report packets per stream plus
 last/max batch fanout, making real multi-site load distribution measurable from
 gateway status.