From 224167ce396c4441070dc3705e74579933c16e3a Mon Sep 17 00:00:00 2001
From: Pim van Pelt <pim@ipng.ch>
Date: Tue, 14 Apr 2026 14:39:52 +0200
Subject: [PATCH] Dataplane reconcile fixes; LB counters cleanup; SPA scope
 cookie
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Checker / reload:
- Reload's update-in-place branch now mirrors b.Address onto the
  runtime health.Backend. Without this, GetBackend kept returning
  the pre-reload address indefinitely after a config edit that
  touched addresses but not healthcheck settings — the VPP sync
  path reads cfg.Backends directly so the dataplane moved on
  while the gRPC and SPA view stayed wedged on the old IPv4/IPv6.

Sync (internal/vpp/lbsync.go):
- reconcileVIP now detects encap mismatch in addition to
  src-ip-sticky mismatch and takes the full tear-down / re-add
  path via a new shared recreateVIP helper. Triggered when every
  backend flips address family (gre4 <-> gre6) and the existing
  VIP can no longer accept new ASes — previously the sync wedged
  with 'Invalid address family' until a full maglevd restart.
- setASWeight is issued whenever the state machine requests
  flush (a.Flush=true), not only on the weight-value transition
  edge. Fixes the case where a backend reached StateDisabled
  after its effective weight had already been drained to 0 by
  pool failover — the sticky-cache entries pointing at it were
  previously never cleared.

maglev-frontend:
- signal.Ignore(SIGHUP) so a controlling-terminal disconnect
  doesn't kill the daemon.
- debian/vpp-maglev.service grants CAP_SYS_ADMIN in addition to
  CAP_NET_RAW so setns(CLONE_NEWNET) can join the healthcheck
  netns. Comment documents the 'operation not permitted' symptom
  and notes the knob can be dropped if the deployment doesn't use
  the 'netns:' healthcheck option.

LB plugin counters (internal/vpp/lbstats.go + friends):
- Fix the VIP counter regex: the LB plugin registers
  vlib_simple_counter_main_t names without a leading '/'
  (vlib_validate_simple_counter in counter.c:50 uses cm->name
  verbatim; only entries that set cm->stat_segment_name get a
  slash). first/next/untracked/no-server now read through as
  live values instead of zero.
- Drop the per-backend FIB counter block end-to-end (proto,
  grpcapi, metrics, vpp.Client, lbstats, maglevc). Traced from
  lb/node.c:558 into ip{4,6}_forward.h:141 — the LB plugin
  forwards by writing adj_index[VLIB_TX] directly and bypassing
  ip{4,6}_lookup_inline, which is the only path that increments
  lbm_to_counters. The backend's FIB load_balance stats_index
  literally never ticks for LB-forwarded traffic, so the column
  was always zero and misleading. docs/implementation/TODO
  records the full investigation and the recommended upstream
  path (new lb_as_stats_dump API message) for when we're ready
  to carry that VPP patch.
- maglevc show vpp lb counters: plain-text tabular headers.
  label() wraps strings in ANSI escapes (~11 bytes of overhead),
  but tabwriter counts bytes, not rendered width — so a header
  row with label()'d cells and data rows with plain cells drifts
  column alignment on every row. color.go comment now spells
  out the constraint: label() only works when column N is
  wrapped identically in every row (key-value layouts are fine,
  multi-column tables with header-only labelling are not).

SPA:
- stores/scope.ts is cookie-backed (maglev_scope, 1 year,
  SameSite=Lax). App.tsx hydrates from the cookie then validates
  against the fetched snapshots: a cookie referencing a maglevd
  that no longer exists falls through to snaps[0] instead of
  leaving the user on a ghost selection.
- components/Flash.tsx wraps props.value in createMemo. Solid's
  on() fires its callback on every dep notification, not on
  value change — source is right in solid-js/dist/solid.js:460,
  no equality check. Without the memo, flipping scope between
  two 'connected' maglevds (or any other cross-store reactive
  re-eval that doesn't actually change the concrete string)
  replays the animation every time. createMemo's default ===
  dedupe fixes it in one place for every Flash consumer,
  superseding the local createMemo workaround we'd added in
  BackendRow earlier.
---
 cmd/frontend/main.go                          |   6 +
 .../web/dist/assets/index-3m4Pjc8_.js         |   1 +
 .../web/dist/assets/index-DCJJqBMY.js         |   1 -
 cmd/frontend/web/dist/index.html              |   2 +-
 cmd/frontend/web/src/App.tsx                  |   9 +-
 cmd/frontend/web/src/components/Flash.tsx     |  21 +-
 cmd/frontend/web/src/stores/scope.ts          |  46 ++-
 cmd/frontend/web/src/stores/state.ts          |   7 +-
 cmd/frontend/web/src/stores/zippy.ts          |   4 +-
 cmd/maglevc/color.go                          |  17 +-
 cmd/maglevc/commands.go                       |  64 ++-
 debian/vpp-maglev.service                     |  17 +-
 internal/checker/checker.go                   |  14 +
 internal/grpcapi/maglev.pb.go                 | 364 +++++++-----------
 internal/grpcapi/server.go                    |  26 +-
 internal/metrics/metrics.go                   |  50 +--
 internal/vpp/client.go                        |  18 -
 internal/vpp/lbstats.go                       | 102 ++---
 internal/vpp/lbsync.go                        | 117 ++++--
 proto/maglev.proto                            |  20 +-
 20 files changed, 435 insertions(+), 471 deletions(-)
 create mode 100644 cmd/frontend/web/dist/assets/index-3m4Pjc8_.js
 delete mode 100644 cmd/frontend/web/dist/assets/index-DCJJqBMY.js

diff --git a/cmd/frontend/main.go b/cmd/frontend/main.go
index bd15371..707bc68 100644
--- a/cmd/frontend/main.go
+++ b/cmd/frontend/main.go
@@ -94,6 +94,12 @@ func run() error {
 		ReadHeaderTimeout: 10 * time.Second,
 	}
 
+	// Ignore SIGHUP so a controlling-terminal disconnect (or any
+	// stray process-group SIGHUP) doesn't kill the daemon — the
+	// default Go handler terminates the process with "Hangup",
+	// which is the wrong behaviour for a long-running network
+	// service. SIGTERM / SIGINT remain the clean-shutdown signals.
+	signal.Ignore(syscall.SIGHUP)
 	sigCh := make(chan os.Signal, 1)
 	signal.Notify(sigCh, syscall.SIGTERM, syscall.SIGINT)
 
diff --git a/cmd/frontend/web/dist/assets/index-3m4Pjc8_.js b/cmd/frontend/web/dist/assets/index-3m4Pjc8_.js
new file mode 100644
index 0000000..7f1bfe1
--- /dev/null
+++ b/cmd/frontend/web/dist/assets/index-3m4Pjc8_.js
@@ -0,0 +1 @@
+(function(){const t=document.createElement("link").relList;if(t&&t.supports&&t.supports("modulepreload"))return;for(const s of document.querySelectorAll('link[rel="modulepreload"]'))r(s);new MutationObserver(s=>{for(const i of s)if(i.type==="childList")for(const o of i.addedNodes)o.tagName==="LINK"&&o.rel==="modulepreload"&&r(o)}).observe(document,{childList:!0,subtree:!0});function n(s){const i={};return s.integrity&&(i.integrity=s.integrity),s.referrerPolicy&&(i.referrerPolicy=s.referrerPolicy),s.crossOrigin==="use-credentials"?i.credentials="include":s.crossOrigin==="anonymous"?i.credentials="omit":i.credentials="same-origin",i}function r(s){if(s.ep)return;s.ep=!0;const i=n(s);fetch(s.href,i)}})();const gt=!1,ht=(e,t)=>e===t,G=Symbol("solid-proxy"),Ce=Symbol("solid-track"),de={equals:ht};let Ke=Ye;const V=1,ge=2,Ge={owned:null,cleanups:null,context:null,owner:null};var k=null;let Ee=null,bt=null,_=null,O=null,R=null,_e=0;function ie(e,t){const n=_,r=k,s=e.length===0,i=t===void 0?r:t,o=s?Ge:{owned:null,cleanups:null,context:i?i.context:null,owner:i},l=s?e:()=>e(()=>U(()=>oe(o)));k=o,_=null;try{return Y(l,!0)}finally{_=n,k=r}}function A(e,t){t=t?Object.assign({},de,t):de;const n={value:e,observers:null,observerSlots:null,comparator:t.equals||void 0},r=s=>(typeof s=="function"&&(s=s(n.value)),Xe(n,s));return[qe.bind(n),r]}function E(e,t,n){const r=Le(e,t,!1,V);ce(r)}function K(e,t,n){Ke=kt;const r=Le(e,t,!1,V);(!n||!n.render)&&(r.user=!0),R?R.push(r):ce(r)}function B(e,t,n){n=n?Object.assign({},de,n):de;const r=Le(e,t,!0,0);return r.observers=null,r.observerSlots=null,r.comparator=n.equals||void 0,ce(r),qe.bind(r)}function mt(e){return Y(e,!1)}function U(e){if(_===null)return e();const t=_;_=null;try{return e()}finally{_=t}}function pt(e,t,n){const r=Array.isArray(e);let s,i=n&&n.defer;return o=>{let l;if(r){l=Array(e.length);for(let c=0;c<e.length;c++)l[c]=e[c]()}else l=e();if(i)return i=!1,o;const a=U(()=>t(l,s,o));return s=l,a}}function $t(e){K(()=>U(e))}function q(e){return k===null||(k.cleanups===null?k.cleanups=[e]:k.cleanups.push(e)),e}function Oe(){return _}function vt(){return k}function wt(e,t){const n=k,r=_;k=e,_=null;try{return Y(t,!0)}catch(s){Ne(s)}finally{k=n,_=r}}function qe(){if(this.sources&&this.state)if(this.state===V)ce(this);else{const e=O;O=null,Y(()=>be(this),!1),O=e}if(_){const e=this.observers?this.observers.length:0;_.sources?(_.sources.push(this),_.sourceSlots.push(e)):(_.sources=[this],_.sourceSlots=[e]),this.observers?(this.observers.push(_),this.observerSlots.push(_.sources.length-1)):(this.observers=[_],this.observerSlots=[_.sources.length-1])}return this.value}function Xe(e,t,n){let r=e.value;return(!e.comparator||!e.comparator(r,t))&&(e.value=t,e.observers&&e.observers.length&&Y(()=>{for(let s=0;s<e.observers.length;s+=1){const i=e.observers[s],o=Ee&&Ee.running;o&&Ee.disposed.has(i),(o?!i.tState:!i.state)&&(i.pure?O.push(i):R.push(i),i.observers&&Je(i)),o||(i.state=V)}if(O.length>1e6)throw O=[],new Error},!1)),t}function ce(e){if(!e.fn)return;oe(e);const t=_e;yt(e,e.value,t)}function yt(e,t,n){let r;const s=k,i=_;_=k=e;try{r=e.fn(t)}catch(o){return e.pure&&(e.state=V,e.owned&&e.owned.forEach(oe),e.owned=null),e.updatedAt=n+1,Ne(o)}finally{_=i,k=s}(!e.updatedAt||e.updatedAt<=n)&&(e.updatedAt!=null&&"observers"in e?Xe(e,r):e.value=r,e.updatedAt=n)}function Le(e,t,n,r=V,s){const i={fn:e,state:r,updatedAt:null,owned:null,sources:null,sourceSlots:null,cleanups:null,value:t,owner:k,context:k?k.context:null,pure:n};return k===null||k!==Ge&&(k.owned?k.owned.push(i):k.owned=[i]),i}function he(e){if(e.state===0)return;if(e.state===ge)return be(e);if(e.suspense&&U(e.suspense.inFallback))return e.suspense.effects.push(e);const t=[e];for(;(e=e.owner)&&(!e.updatedAt||e.updatedAt<_e);)e.state&&t.push(e);for(let n=t.length-1;n>=0;n--)if(e=t[n],e.state===V)ce(e);else if(e.state===ge){const r=O;O=null,Y(()=>be(e,t[0]),!1),O=r}}function Y(e,t){if(O)return e();let n=!1;t||(O=[]),R?n=!0:R=[],_e++;try{const r=e();return _t(n),r}catch(r){n||(R=null),O=null,Ne(r)}}function _t(e){if(O&&(Ye(O),O=null),e)return;const t=R;R=null,t.length&&Y(()=>Ke(t),!1)}function Ye(e){for(let t=0;t<e.length;t++)he(e[t])}function kt(e){let t,n=0;for(t=0;t<e.length;t++){const r=e[t];r.user?e[n++]=r:he(r)}for(t=0;t<n;t++)he(e[t])}function be(e,t){e.state=0;for(let n=0;n<e.sources.length;n+=1){const r=e.sources[n];if(r.sources){const s=r.state;s===V?r!==t&&(!r.updatedAt||r.updatedAt<_e)&&he(r):s===ge&&be(r,t)}}}function Je(e){for(let t=0;t<e.observers.length;t+=1){const n=e.observers[t];n.state||(n.state=ge,n.pure?O.push(n):R.push(n),n.observers&&Je(n))}}function oe(e){let t;if(e.sources)for(;e.sources.length;){const n=e.sources.pop(),r=e.sourceSlots.pop(),s=n.observers;if(s&&s.length){const i=s.pop(),o=n.observerSlots.pop();r<s.length&&(i.sourceSlots[o]=r,s[r]=i,n.observerSlots[r]=o)}}if(e.tOwned){for(t=e.tOwned.length-1;t>=0;t--)oe(e.tOwned[t]);delete e.tOwned}if(e.owned){for(t=e.owned.length-1;t>=0;t--)oe(e.owned[t]);e.owned=null}if(e.cleanups){for(t=e.cleanups.length-1;t>=0;t--)e.cleanups[t]();e.cleanups=null}e.state=0}function St(e){return e instanceof Error?e:new Error(typeof e=="string"?e:"Unknown error",{cause:e})}function Ne(e,t=k){throw St(e)}const xt=Symbol("fallback");function Ue(e){for(let t=0;t<e.length;t++)e[t]()}function At(e,t,n={}){let r=[],s=[],i=[],o=0,l=t.length>1?[]:null;return q(()=>Ue(i)),()=>{let a=e()||[],c=a.length,u,f;return a[Ce],U(()=>{let g,w,v,T,C,p,m,y,S;if(c===0)o!==0&&(Ue(i),i=[],r=[],s=[],o=0,l&&(l=[])),n.fallback&&(r=[xt],s[0]=ie(x=>(i[0]=x,n.fallback())),o=1);else if(o===0){for(s=new Array(c),f=0;f<c;f++)r[f]=a[f],s[f]=ie($);o=c}else{for(v=new Array(c),T=new Array(c),l&&(C=new Array(c)),p=0,m=Math.min(o,c);p<m&&r[p]===a[p];p++);for(m=o-1,y=c-1;m>=p&&y>=p&&r[m]===a[y];m--,y--)v[y]=s[m],T[y]=i[m],l&&(C[y]=l[m]);for(g=new Map,w=new Array(y+1),f=y;f>=p;f--)S=a[f],u=g.get(S),w[f]=u===void 0?-1:u,g.set(S,f);for(u=p;u<=m;u++)S=r[u],f=g.get(S),f!==void 0&&f!==-1?(v[f]=s[u],T[f]=i[u],l&&(C[f]=l[u]),f=w[f],g.set(S,f)):i[u]();for(f=p;f<c;f++)f in v?(s[f]=v[f],i[f]=T[f],l&&(l[f]=C[f],l[f](f))):s[f]=ie($);s=s.slice(0,o=c),r=a.slice(0)}return s});function $(g){if(i[f]=g,l){const[w,v]=A(f);return l[f]=v,t(a[f],w)}return t(a[f])}}}function h(e,t){return U(()=>e(t||{}))}const Et=e=>`Stale read from <${e}>.`;function Q(e){const t="fallback"in e&&{fallback:()=>e.fallback};return B(At(()=>e.each,e.children,t||void 0))}function L(e){const t=e.keyed,n=B(()=>e.when,void 0,void 0),r=t?n:B(n,void 0,{equals:(s,i)=>!s==!i});return B(()=>{const s=r();if(s){const i=e.children;return typeof i=="function"&&i.length>0?U(()=>i(t?s:()=>{if(!U(r))throw Et("Show");return n()})):i}return e.fallback},void 0,void 0)}const I=e=>B(()=>e());function Ct(e,t,n){let r=n.length,s=t.length,i=r,o=0,l=0,a=t[s-1].nextSibling,c=null;for(;o<s||l<i;){if(t[o]===n[l]){o++,l++;continue}for(;t[s-1]===n[i-1];)s--,i--;if(s===o){const u=i<r?l?n[l-1].nextSibling:n[i-l]:a;for(;l<i;)e.insertBefore(n[l++],u)}else if(i===l)for(;o<s;)(!c||!c.has(t[o]))&&t[o].remove(),o++;else if(t[o]===n[i-1]&&n[l]===t[s-1]){const u=t[--s].nextSibling;e.insertBefore(n[l++],t[o++].nextSibling),e.insertBefore(n[--i],u),t[s]=n[i]}else{if(!c){c=new Map;let f=l;for(;f<i;)c.set(n[f],f++)}const u=c.get(t[o]);if(u!=null)if(l<u&&u<i){let f=o,$=1,g;for(;++f<s&&f<i&&!((g=c.get(t[f]))==null||g!==u+$);)$++;if($>u-l){const w=t[o];for(;l<u;)e.insertBefore(n[l++],w)}else e.replaceChild(n[l++],t[o++])}else o++;else t[o++].remove()}}}const We="_$DX_DELEGATE";function Ot(e,t,n,r={}){let s;return ie(i=>{s=i,t===document?e():d(t,e(),t.firstChild?null:void 0,n)},r.owner),()=>{s(),t.textContent=""}}function b(e,t,n,r){let s;const i=()=>{const l=document.createElement("template");return l.innerHTML=e,l.content.firstChild},o=()=>(s||(s=i())).cloneNode(!0);return o.cloneNode=o,o}function ke(e,t=window.document){const n=t[We]||(t[We]=new Set);for(let r=0,s=e.length;r<s;r++){const i=e[r];n.has(i)||(n.add(i),t.addEventListener(i,Lt))}}function N(e,t,n){n==null?e.removeAttribute(t):e.setAttribute(t,n)}function Tt(e,t){t==null?e.removeAttribute("class"):e.className=t}function Pt(e,t,n,r){Array.isArray(n)?(e[`$$${t}`]=n[0],e[`$$${t}Data`]=n[1]):e[`$$${t}`]=n}function Se(e,t,n){return U(()=>e(t,n))}function d(e,t,n,r){if(n!==void 0&&!r&&(r=[]),typeof t!="function")return me(e,t,r,n);E(s=>me(e,t(),s,n),r)}function Lt(e){let t=e.target;const n=`$$${e.type}`,r=e.target,s=e.currentTarget,i=a=>Object.defineProperty(e,"target",{configurable:!0,value:a}),o=()=>{const a=t[n];if(a&&!t.disabled){const c=t[`${n}Data`];if(c!==void 0?a.call(t,c,e):a.call(t,e),e.cancelBubble)return}return t.host&&typeof t.host!="string"&&!t.host._$host&&t.contains(e.target)&&i(t.host),!0},l=()=>{for(;o()&&(t=t._$host||t.parentNode||t.host););};if(Object.defineProperty(e,"currentTarget",{configurable:!0,get(){return t||document}}),e.composedPath){const a=e.composedPath();i(a[0]);for(let c=0;c<a.length-2&&(t=a[c],!!o());c++){if(t._$host){t=t._$host,l();break}if(t.parentNode===s)break}}else l();i(r)}function me(e,t,n,r,s){for(;typeof n=="function";)n=n();if(t===n)return n;const i=typeof t,o=r!==void 0;if(e=o&&n[0]&&n[0].parentNode||e,i==="string"||i==="number"){if(i==="number"&&(t=t.toString(),t===n))return n;if(o){let l=n[0];l&&l.nodeType===3?l.data!==t&&(l.data=t):l=document.createTextNode(t),n=J(e,n,r,l)}else n!==""&&typeof n=="string"?n=e.firstChild.data=t:n=e.textContent=t}else if(t==null||i==="boolean")n=J(e,n,r);else{if(i==="function")return E(()=>{let l=t();for(;typeof l=="function";)l=l();n=me(e,l,n,r)}),()=>n;if(Array.isArray(t)){const l=[],a=n&&Array.isArray(n);if(Te(l,t,n,s))return E(()=>n=me(e,l,n,r,!0)),()=>n;if(l.length===0){if(n=J(e,n,r),o)return n}else a?n.length===0?He(e,l,r):Ct(e,n,l):(n&&J(e),He(e,l));n=l}else if(t.nodeType){if(Array.isArray(n)){if(o)return n=J(e,n,r,t);J(e,n,null,t)}else n==null||n===""||!e.firstChild?e.appendChild(t):e.replaceChild(t,e.firstChild);n=t}}return n}function Te(e,t,n,r){let s=!1;for(let i=0,o=t.length;i<o;i++){let l=t[i],a=n&&n[e.length],c;if(!(l==null||l===!0||l===!1))if((c=typeof l)=="object"&&l.nodeType)e.push(l);else if(Array.isArray(l))s=Te(e,l,a)||s;else if(c==="function")if(r){for(;typeof l=="function";)l=l();s=Te(e,Array.isArray(l)?l:[l],Array.isArray(a)?a:[a])||s}else e.push(l),s=!0;else{const u=String(l);a&&a.nodeType===3&&a.data===u?e.push(a):e.push(document.createTextNode(u))}}return s}function He(e,t,n=null){for(let r=0,s=t.length;r<s;r++)e.insertBefore(t[r],n)}function J(e,t,n,r){if(n===void 0)return e.textContent="";const s=r||document.createTextNode("");if(t.length){let i=!1;for(let o=t.length-1;o>=0;o--){const l=t[o];if(s!==l){const a=l.parentNode===e;!i&&!o?a?e.replaceChild(s,l):e.insertBefore(s,n):a&&l.remove()}else i=!0}}else e.insertBefore(s,n);return[s]}const Nt="http://www.w3.org/2000/svg";function It(e,t=!1,n=void 0){return t?document.createElementNS(Nt,e):document.createElement(e,{is:n})}function Mt(e){const{useShadow:t}=e,n=document.createTextNode(""),r=()=>e.mount||document.body,s=vt();let i;return K(()=>{i||(i=wt(s,()=>B(()=>e.children)));const o=r();if(o instanceof HTMLHeadElement){const[l,a]=A(!1),c=()=>a(!0);ie(u=>d(o,()=>l()?u():i(),null)),q(c)}else{const l=It(e.isSVG?"g":"div",e.isSVG),a=t&&l.attachShadow?l.attachShadow({mode:"open"}):l;Object.defineProperty(l,"_$host",{get(){return n.parentNode},configurable:!0}),d(a,i),o.appendChild(l),e.ref&&e.ref(l),q(()=>o.removeChild(l))}},void 0,{render:!0}),n}async function Ze(e){const t=await fetch(e,{credentials:"same-origin"});if(!t.ok)throw new Error(`${e}: ${t.status} ${t.statusText}`);return await t.json()}function ze(){return Ze("/view/api/state")}function jt(){return Ze("/view/api/version")}const pe=Symbol("store-raw"),z=Symbol("store-node"),D=Symbol("store-has"),Qe=Symbol("store-self");function et(e){let t=e[G];if(!t&&(Object.defineProperty(e,G,{value:t=new Proxy(e,Bt)}),!Array.isArray(e))){const n=Object.keys(e),r=Object.getOwnPropertyDescriptors(e);for(let s=0,i=n.length;s<i;s++){const o=n[s];r[o].get&&Object.defineProperty(e,o,{enumerable:r[o].enumerable,get:r[o].get.bind(t)})}}return t}function ee(e){let t;return e!=null&&typeof e=="object"&&(e[G]||!(t=Object.getPrototypeOf(e))||t===Object.prototype||Array.isArray(e))}function te(e,t=new Set){let n,r,s,i;if(n=e!=null&&e[pe])return n;if(!ee(e)||t.has(e))return e;if(Array.isArray(e)){Object.isFrozen(e)?e=e.slice(0):t.add(e);for(let o=0,l=e.length;o<l;o++)s=e[o],(r=te(s,t))!==s&&(e[o]=r)}else{Object.isFrozen(e)?e=Object.assign({},e):t.add(e);const o=Object.keys(e),l=Object.getOwnPropertyDescriptors(e);for(let a=0,c=o.length;a<c;a++)i=o[a],!l[i].get&&(s=e[i],(r=te(s,t))!==s&&(e[i]=r))}return e}function $e(e,t){let n=e[t];return n||Object.defineProperty(e,t,{value:n=Object.create(null)}),n}function ae(e,t,n){if(e[t])return e[t];const[r,s]=A(n,{equals:!1,internal:!0});return r.$=s,e[t]=r}function Dt(e,t){const n=Reflect.getOwnPropertyDescriptor(e,t);return!n||n.get||!n.configurable||t===G||t===z||(delete n.value,delete n.writable,n.get=()=>e[G][t]),n}function tt(e){Oe()&&ae($e(e,z),Qe)()}function Rt(e){return tt(e),Reflect.ownKeys(e)}const Bt={get(e,t,n){if(t===pe)return e;if(t===G)return n;if(t===Ce)return tt(e),n;const r=$e(e,z),s=r[t];let i=s?s():e[t];if(t===z||t===D||t==="__proto__")return i;if(!s){const o=Object.getOwnPropertyDescriptor(e,t);Oe()&&(typeof i!="function"||e.hasOwnProperty(t))&&!(o&&o.get)&&(i=ae(r,t,i)())}return ee(i)?et(i):i},has(e,t){return t===pe||t===G||t===Ce||t===z||t===D||t==="__proto__"?!0:(Oe()&&ae($e(e,D),t)(),t in e)},set(){return!0},deleteProperty(){return!0},ownKeys:Rt,getOwnPropertyDescriptor:Dt};function ne(e,t,n,r=!1){if(!r&&e[t]===n)return;const s=e[t],i=e.length;n===void 0?(delete e[t],e[D]&&e[D][t]&&s!==void 0&&e[D][t].$()):(e[t]=n,e[D]&&e[D][t]&&s===void 0&&e[D][t].$());let o=$e(e,z),l;if((l=ae(o,t,s))&&l.$(()=>n),Array.isArray(e)&&e.length!==i){for(let a=e.length;a<i;a++)(l=o[a])&&l.$();(l=ae(o,"length",i))&&l.$(e.length)}(l=o[Qe])&&l.$()}function nt(e,t){const n=Object.keys(t);for(let r=0;r<n.length;r+=1){const s=n[r];ne(e,s,t[s])}}function Ut(e,t){if(typeof t=="function"&&(t=t(e)),t=te(t),Array.isArray(t)){if(e===t)return;let n=0,r=t.length;for(;n<r;n++){const s=t[n];e[n]!==s&&ne(e,n,s)}ne(e,"length",r)}else nt(e,t)}function se(e,t,n=[]){let r,s=e;if(t.length>1){r=t.shift();const o=typeof r,l=Array.isArray(e);if(Array.isArray(r)){for(let a=0;a<r.length;a++)se(e,[r[a]].concat(t),n);return}else if(l&&o==="function"){for(let a=0;a<e.length;a++)r(e[a],a)&&se(e,[a].concat(t),n);return}else if(l&&o==="object"){const{from:a=0,to:c=e.length-1,by:u=1}=r;for(let f=a;f<=c;f+=u)se(e,[f].concat(t),n);return}else if(t.length>1){se(e[r],t,[r].concat(n));return}s=e[r],n=[r].concat(n)}let i=t[0];typeof i=="function"&&(i=i(s,n),i===s)||r===void 0&&i==null||(i=te(i),r===void 0||ee(s)&&ee(i)&&!Array.isArray(i)?nt(s,i):ne(e,r,i))}function Wt(...[e,t]){const n=te(e||{}),r=Array.isArray(n),s=et(n);function i(...o){mt(()=>{r&&o.length===1?Ut(n,o[0]):se(n,o)})}return[s,i]}const ve=new WeakMap,rt={get(e,t){if(t===pe)return e;const n=e[t];let r;return ee(n)?ve.get(n)||(ve.set(n,r=new Proxy(n,rt)),r):n},set(e,t,n){return ne(e,t,te(n)),!0},deleteProperty(e,t){return ne(e,t,void 0,!0),!0}};function F(e){return t=>{if(ee(t)){let n;(n=ve.get(t))||ve.set(t,n=new Proxy(t,rt)),e(n)}return t}}const[Ht,Ft]=A(0);setInterval(()=>Ft(e=>e+1),5e3);function Ie(e){const t={};for(const n of e.backends)t[n.name]=n.state;for(const n of e.frontends){let r=0;for(let a=0;a<n.pools.length;a++){let c=!1;for(const u of n.pools[a].backends)if(t[u.name]==="up"&&u.weight>0){c=!0;break}if(c){r=a;break}}let s=!1,i=!1,o=!0;const l=new Set;for(let a=0;a<n.pools.length;a++)for(const c of n.pools[a].backends){const u=t[c.name];c.effective_weight=u==="up"&&a===r?c.weight:0,c.effective_weight>0&&(s=!0),l.has(c.name)||(l.add(c.name),i=!0,u!=="unknown"&&(o=!1))}!i||o?n.state="unknown":s?n.state="up":n.state="down"}}const[X,W]=Wt({byName:{},settling:{}}),Vt=2e3,le=new Map;function Kt(e,t){return`${e}\0${t}`}function st(e,t){W(F(s=>{s.settling[e]||(s.settling[e]={}),s.settling[e][t]=!0}));const n=Kt(e,t),r=le.get(n);r&&clearTimeout(r),le.set(n,setTimeout(()=>{le.delete(n),W(F(s=>{s.settling[e]&&delete s.settling[e][t]}))},Vt))}function Gt(e){for(const[t,n]of le)t.startsWith(e+"\0")&&(clearTimeout(n),le.delete(t));W(F(t=>{t.settling[e]&&(t.settling[e]={})}))}function it(e){const t={};for(const n of e)Ie(n),t[n.maglevd.name]=n;W({byName:t})}function qt(e,t){W(F(r=>{const s=r.byName[e];if(!s)return;const i=s.backends.find(o=>o.name===t.backend);i&&(i.state=t.transition.to,i.enabled=t.transition.to!=="disabled",i.last_transition=t.transition,i.transitions||(i.transitions=[]),i.transitions.push(t.transition),i.transitions.length>20&&(i.transitions=i.transitions.slice(i.transitions.length-20)),Ie(s))}));const n=X.byName[e];if(n)for(const r of n.frontends)r.pools.some(s=>s.backends.some(i=>i.name===t.backend))&&st(e,r.name)}function Xt(e,t){W(F(n=>{const r=n.byName[e];if(!r)return;const s=t.per_frontend;if(!s||Object.keys(s).length===0){r.lb_state!==void 0&&(r.lb_state=void 0);return}r.lb_state||(r.lb_state={per_frontend:{}});const o=r.lb_state.per_frontend;for(const l of Object.keys(s)){o[l]||(o[l]={});const a=o[l],c=s[l];for(const u of Object.keys(c))a[u]!==c[u]&&(a[u]=c[u]);for(const u of Object.keys(a))u in c||delete a[u]}for(const l of Object.keys(o))l in s||delete o[l]})),Gt(e)}function Yt(e,t,n){return e?.lb_state?.per_frontend?.[t]?.[n]}function Jt(e,t){W(F(n=>{const r=n.byName[e];r&&(r.vpp_state=t)}))}function Zt(e,t){W(F(n=>{const r=n.byName[e];r&&(r.maglevd.connected=t.connected,r.maglevd.last_error=t.last_error)}))}function zt(e,t,n,r,s){W(F(i=>{const o=i.byName[e];if(!o)return;const l=o.frontends.find(u=>u.name===t);if(!l)return;const a=l.pools.find(u=>u.name===n);if(!a)return;const c=a.backends.find(u=>u.name===r);c&&(c.weight=s,Ie(o))})),st(e,t)}function Qt(e,t){const n={};for(const f of e.backends)n[f.name]=f.state;const r=!!e.lb_state,s=e.lb_state?.per_frontend?.[t.name],i=!!X.settling[e.maglevd.name]?.[t.name];let o=!1,l=!1;for(const f of t.pools)for(const $ of f.backends)if(n[$.name]!=="up"&&(o=!0),!i&&r&&$.effective_weight>0){const g=s?.[$.name];(g===void 0||g===0)&&(l=!0)}const a=t.pools[0],c=!!a&&a.backends.some(f=>f.weight>0),u=!a||a.backends.every(f=>f.effective_weight===0);return!o&&c&&!l?"ok":l?"bug-buckets":u?"primary-drained":o?"degraded":"unknown"}function en(e,t){switch(Qt(e,t)){case"ok":return"✅";case"bug-buckets":return"‼️";case"primary-drained":return"❗";case"degraded":return"⚠️";case"unknown":return"❓"}}function tn(e,t){return e.includes(":")?`[${e}]:${t}`:`${e}:${t}`}function nn(e){if(Ht(),!e||!e.at_unix_ns||e.at_unix_ns<=0)return"";const t=Date.now()-e.at_unix_ns/1e6,n=Math.floor(t/1e3);if(n<=1)return"now";const r=n%60,s=Math.floor(n/60);if(s<1)return`${n}s ago`;const i=s%60,o=Math.floor(s/60);if(o<1)return`${i}m${r}s ago`;const l=o%24,a=Math.floor(o/24);return a<1?`${o}h${i}m ago`:`${a}d${l}h ago`}const Fe=500,[we,rn]=A([]);function sn(e){rn(t=>{const n=[...t,e];return n.length>Fe?n.slice(n.length-Fe):n})}const ln=1e4,on=3e4;function an(){let e,t=!1;const n=l=>{try{const a=JSON.parse(l.data);cn(a)}catch(a){console.error("sse parse error",a,l.data)}},r=async()=>{try{const l=await ze();it(l)}catch(l){console.error("resync refetch failed",l)}},s=()=>{e&&(e.close(),e=void 0),e=new EventSource("/view/api/events"),e.onmessage=n,e.addEventListener("resync",r),e.onerror=l=>{console.debug("sse error, browser will reconnect",l)}},i=l=>{t||(t=!0,console.info("sse reconnecting:",l),s(),setTimeout(()=>{t=!1},1e3))};let o=Date.now();setInterval(()=>{const l=Date.now(),a=l-o;o=l,a>on&&i(`wake detected (${Math.round(a/1e3)}s gap)`)},ln),s()}function cn(e){switch(sn(e),e.type){case"backend":qt(e.maglevd,e.payload);break;case"frontend":e.maglevd,e.payload;break;case"maglevd-status":Zt(e.maglevd,e.payload);break;case"vpp-status":Jt(e.maglevd,e.payload.state);break;case"lb-state":Xt(e.maglevd,e.payload);break}}const ye="maglev_scope",un=60*60*24*365;function fn(){try{const e=document.cookie.split("; ").find(n=>n.startsWith(ye+"="));return e&&decodeURIComponent(e.slice(ye.length+1))||void 0}catch{return}}function dn(e){try{if(!e){document.cookie=`${ye}=; Path=/; Max-Age=0; SameSite=Lax`;return}const t=encodeURIComponent(e);document.cookie=`${ye}=${t}; Path=/; Max-Age=${un}; SameSite=Lax`}catch{}}const[xe,gn]=A(fn());function lt(e){gn(e),dn(e)}var hn=b("<nav class=scope-selector>"),bn=b("<button class=scope-tab><span class=dot>");const mn=()=>{const e=()=>Object.keys(X.byName).sort();return(()=>{var t=hn();return d(t,h(Q,{get each(){return e()},children:n=>{const r=()=>X.byName[n],s=()=>r()?.maglevd.connected??!1;return(()=>{var i=bn();return i.firstChild,i.$$click=()=>lt(n),d(i,n,null),E(o=>{var l=xe()===n,a=!!s(),c=!s(),u=r()?.maglevd.address??"";return l!==o.e&&i.classList.toggle("active",o.e=l),a!==o.t&&i.classList.toggle("connected",o.t=a),c!==o.a&&i.classList.toggle("disconnected",o.a=c),u!==o.o&&N(i,"title",o.o=u),o},{e:void 0,t:void 0,a:void 0,o:void 0}),i})()}})),t})()};ke(["click"]);var pn=b("<span class=status-badge>");const ot=e=>(()=>{var t=pn();return d(t,()=>e.label??e.state),E(()=>N(t,"data-state",e.state)),t})();var $n=b("<span class=probe-heartbeat>");const vn="▶",wn="⏸",yn="⏹",_n="❤️",Ve=400;function kn(e){switch(e){case"paused":return wn;case"disabled":case"removed":return yn;default:return vn}}const Sn=e=>{const[t,n]=A(!1);let r,s;return K(()=>{const i=we();if(i.length===0)return;const o=i[i.length-1];if(o.type!=="log"||o.maglevd!==e.maglevd)return;const l=o.payload;l.attrs?.backend===e.backend&&l.msg==="probe-start"&&(n(!0),r?.animate([{transform:"scale(1)"},{transform:"scale(1.6)",offset:.25},{transform:"scale(1)"}],{duration:Ve,easing:"ease-out"}),s!==void 0&&clearTimeout(s),s=window.setTimeout(()=>{n(!1),s=void 0},Ve))}),q(()=>{s!==void 0&&clearTimeout(s)}),(()=>{var i=$n(),o=r;return typeof o=="function"?Se(o,i):r=i,d(i,(()=>{var l=I(()=>!!t());return()=>l()?_n:kn(e.state)})()),E(()=>i.classList.toggle("in-flight",!!t())),i})()};var xn=b("<span class=flash-target>");const Z=e=>{let t;const n=B(()=>e.value);return K(pt(n,()=>{t?.animate([{transform:"scale(1)",backgroundColor:"#facc15",boxShadow:"0 0 0 2px #facc15",offset:0},{transform:"scale(1.35)",backgroundColor:"#facc15",boxShadow:"0 0 0 4px #facc15",offset:.18},{transform:"scale(1)",backgroundColor:"#facc15",boxShadow:"0 0 0 2px #facc15",offset:.5},{transform:"scale(1)",backgroundColor:"transparent",boxShadow:"0 0 0 0 transparent",offset:1}],{duration:1500,easing:"ease-out"})},{defer:!0})),(()=>{var r=xn(),s=t;return typeof s=="function"?Se(s,r):t=r,d(r,()=>e.children??e.value),r})()};async function An(e,t,n){const r=`/admin/api/${encodeURIComponent(e)}/backend/${encodeURIComponent(t)}/${n}`,s=await fetch(r,{method:"POST",credentials:"same-origin"});if(!s.ok){const i=(await s.text()).trim();throw new Error(i||`${s.status} ${s.statusText}`)}return await s.json()}async function En(e,t,n,r,s,i){const o=`/admin/api/${encodeURIComponent(e)}/frontend/${encodeURIComponent(t)}/pool/${encodeURIComponent(n)}/backend/${encodeURIComponent(r)}/weight`,l=await fetch(o,{method:"POST",credentials:"same-origin",headers:{"Content-Type":"application/json"},body:JSON.stringify({weight:s,flush:i})});if(!l.ok){const a=(await l.text()).trim();throw new Error(a||`${l.status} ${l.statusText}`)}return await l.json()}var Cn=b("<div class=modal-backdrop><div class=modal-card role=dialog aria-modal=true><header class=modal-header><h3></h3><button type=button class=modal-close aria-label=close>×</button></header><div class=modal-body>");const On=e=>(K(()=>{const t=n=>{n.key==="Escape"&&e.onClose()};document.addEventListener("keydown",t),q(()=>document.removeEventListener("keydown",t))}),h(Mt,{get mount(){return document.body},get children(){var t=Cn(),n=t.firstChild,r=n.firstChild,s=r.firstChild,i=s.nextSibling,o=r.nextSibling;return t.$$mousedown=l=>{l.target===l.currentTarget&&e.onClose()},d(s,()=>e.title),Pt(i,"click",e.onClose),d(o,()=>e.children),E(()=>N(n,"aria-label",e.title)),t}}));ke(["mousedown","click"]);var Tn=b("<div class=kebab-menu role=menu>"),Pn=b('<div class=kebab-wrap><button type=button class=kebab-btn aria-haspopup=menu title="backend actions">⋮'),Ln=b("<button type=button class=kebab-item role=menuitem>"),Nn=b("<p class=dialog-error>"),In=b("<footer class=dialog-footer><button type=button class=btn-secondary>cancel</button><button type=button class=btn-primary>"),Mn=b("<p class=dialog-warn>VPP's flow table will be cleared for this backend. Active sessions will be dropped immediately."),jn=b('<div class=dialog-body><p class=dialog-target><code></code> in pool <code></code> of frontend <code></code></p><label class=dialog-field><span class=weight-slider-label>weight<output class=weight-slider-value></output></span><input type=range class=weight-slider min=0 max=100 step=1><small>0–100; 0 keeps the backend in the pool but assigns it no traffic</small></label><label class="dialog-field checkbox"><input type=checkbox><span>flush existing flows'),Dn=b("<p class=dialog-note>VPP's flow table is left alone. Existing sessions keep reaching this backend until they finish."),Rn=b("<div class=dialog-body><p class=dialog-consequence>");function Bn(e){const t={label:"set weight…",action:"weight"};switch(e){case"up":case"down":case"unknown":return[t,{label:"pause",action:"pause"},{label:"disable",action:"disable"}];case"paused":return[t,{label:"resume",action:"resume"},{label:"disable",action:"disable"}];case"disabled":return[t,{label:"enable",action:"enable"}];default:return[]}}function Un(e){switch(e){case"pause":return"This will stop health checks and set the weight to 0, but existing flows to this backend are kept. New traffic will be rerouted to other backends.";case"resume":return"This will restart health checks. The backend re-enters the 'unknown' state and will start receiving traffic once it probes up.";case"disable":return"This will stop health checks, set the weight to 0, AND flush VPP's flow table for this backend. Active sessions will be dropped immediately.";case"enable":return"This will restart health checks on a previously disabled backend. It re-enters the 'unknown' state and will start receiving traffic once it probes up."}}const Wn=e=>{const[t,n]=A(!1),[r,s]=A(),[i,o]=A(!1),[l,a]=A(),[c,u]=A(e.configuredWeight),[f,$]=A(!1);let g;const w=()=>Bn(e.state);K(()=>{if(!t())return;const p=y=>{g&&(g.contains(y.target)||n(!1))},m=y=>{y.key==="Escape"&&n(!1)};document.addEventListener("mousedown",p),document.addEventListener("keydown",m),q(()=>{document.removeEventListener("mousedown",p),document.removeEventListener("keydown",m)})});const v=p=>{n(!1),a(void 0),p==="weight"&&(u(e.configuredWeight),$(!1)),s(p)},T=()=>{i()||(s(void 0),a(void 0))},C=async()=>{const p=r();if(p){o(!0),a(void 0);try{if(p==="weight"){const m=c();if(!Number.isFinite(m)||m<0||m>100)throw new Error("weight must be an integer in [0, 100]");const y=Math.floor(m);await En(e.maglevd,e.frontend,e.pool,e.backend,y,f()),zt(e.maglevd,e.frontend,e.pool,e.backend,y)}else await An(e.maglevd,e.backend,p);s(void 0)}catch(m){a(`${m}`)}finally{o(!1)}}};return h(L,{get when(){return w().length>0},get children(){var p=Pn(),m=p.firstChild,y=g;return typeof y=="function"?Se(y,p):g=p,m.$$click=S=>{S.stopPropagation(),n(x=>!x)},d(p,h(L,{get when(){return t()},get children(){var S=Tn();return d(S,h(Q,{get each(){return w()},children:x=>(()=>{var P=Ln();return P.$$click=()=>v(x.action),d(P,()=>x.label),P})()})),S}}),null),d(p,h(L,{get when(){return r()},children:S=>h(On,{get title(){return Hn(S(),e.backend)},onClose:T,get children(){return[I(()=>I(()=>S()==="weight")()?(()=>{var x=jn(),P=x.firstChild,M=P.firstChild,j=M.nextSibling,re=j.nextSibling,ue=re.nextSibling,fe=ue.nextSibling,je=P.nextSibling,De=je.firstChild,ut=De.firstChild,ft=ut.nextSibling,Re=De.nextSibling,dt=je.nextSibling,Be=dt.firstChild;return d(M,()=>e.backend),d(re,()=>e.pool),d(fe,()=>e.frontend),d(ft,c),Re.$$input=Ae=>u(Number(Ae.currentTarget.value)),Be.addEventListener("change",Ae=>$(Ae.currentTarget.checked)),d(x,h(L,{get when(){return f()},get fallback(){return Dn()},get children(){return Mn()}}),null),E(()=>Re.value=c()),E(()=>Be.checked=f()),x})():(()=>{var x=Rn(),P=x.firstChild;return d(P,()=>Un(S())),x})()),h(L,{get when(){return l()},get children(){var x=Nn();return d(x,l),x}}),(()=>{var x=In(),P=x.firstChild,M=P.nextSibling;return P.$$click=T,M.$$click=C,d(M,()=>i()?"committing…":"commit"),E(j=>{var re=i(),ue=!!(S()==="disable"||S()==="weight"&&f()),fe=i();return re!==j.e&&(P.disabled=j.e=re),ue!==j.t&&M.classList.toggle("btn-danger",j.t=ue),fe!==j.a&&(M.disabled=j.a=fe),j},{e:void 0,t:void 0,a:void 0}),x})()]}})}),null),E(()=>N(m,"aria-expanded",t())),p}})};function Hn(e,t){switch(e){case"weight":return`Set weight — ${t}`;case"pause":return`Pause ${t}?`;case"resume":return`Resume ${t}?`;case"disable":return`Disable ${t}?`;case"enable":return`Enable ${t}?`}}ke(["click","input"]);const H=window.location.pathname.startsWith("/admin");var Fn=b("<td class=actions>"),Vn=b("<tr class=backend-row><td class=col-pool></td><td class=backend-name><span class=backend-name-text></span></td><td class=backend-address></td><td></td><td class=numeric></td><td class=numeric></td><td class=numeric></td><td class=age>");const Kn=e=>{const t=()=>e.backend,n=B(()=>{const r=Yt(X.byName[e.maglevd],e.frontend,t().name);return r===void 0?"—":r});return(()=>{var r=Vn(),s=r.firstChild,i=s.nextSibling,o=i.firstChild,l=i.nextSibling,a=l.nextSibling,c=a.nextSibling,u=c.nextSibling,f=u.nextSibling,$=f.nextSibling;return d(s,(()=>{var g=I(()=>!!e.showPool);return()=>g()?e.pool:""})()),d(i,h(Sn,{get maglevd(){return e.maglevd},get backend(){return t().name},get state(){return t().state}}),o),d(o,()=>t().name),d(l,()=>t().address),d(a,h(Z,{get value(){return t().state},get children(){return h(ot,{get state(){return t().state}})}})),d(c,h(Z,{get value(){return e.poolBackend.weight}})),d(u,h(Z,{get value(){return e.poolBackend.effective_weight}})),d(f,h(Z,{get value(){return n()}})),d($,()=>nn(t().last_transition)),d(r,h(L,{when:H,get children(){var g=Fn();return d(g,h(Wn,{get maglevd(){return e.maglevd},get frontend(){return e.frontend},get pool(){return e.pool},get backend(){return t().name},get state(){return t().state},get configuredWeight(){return e.poolBackend.weight}})),g}}),null),E(g=>{var w=!e.poolActive,v=t().state;return w!==g.e&&r.classList.toggle("pool-standby",g.e=w),v!==g.t&&N(r,"data-state",g.t=v),g},{e:void 0,t:void 0}),r})()},Pe="maglev_zippy_open",Gn=60*60*24*365;function qn(){try{const e=document.cookie.split("; ").find(n=>n.startsWith(Pe+"="));if(!e)return new Set;const t=decodeURIComponent(e.slice(Pe.length+1));return t?new Set(t.split(",")):new Set}catch{return new Set}}function Xn(e){try{const t=encodeURIComponent([...e].join(","));document.cookie=`${Pe}=${t}; Path=/; Max-Age=${Gn}; SameSite=Lax`}catch{}}const[at,Yn]=A(qn());function Jn(e){return at().has(e)}function Zn(e,t){const n=at();if(t===n.has(e))return;const r=new Set(n);t?r.add(e):r.delete(e),Yn(r),Xn(r)}var zn=b("<details class=zippy><summary></summary><div class=zippy-body>");const Me=e=>(()=>{var t=zn(),n=t.firstChild,r=n.nextSibling;return t.addEventListener("toggle",s=>Zn(e.id,s.currentTarget.open)),d(n,()=>e.title),d(r,()=>e.children),E(()=>t.open=Jn(e.id)),t})();var Qn=b("<span class=frontend-title><span class=frontend-title-icon aria-label=health role=img></span><span class=frontend-title-name></span><span class=frontend-title-addr></span><span class=frontend-title-proto>"),er=b("<span class=tag>sticky"),tr=b("<span class=frontend-title-desc>"),nr=b('<th class="col-actions actions">'),rr=b('<table class=backend-table><thead><tr><th class=col-pool>pool</th><th class=col-name>backend</th><th class=col-address>address</th><th class=col-state>state</th><th class="col-weight numeric">weight</th><th class="col-effective numeric">effective</th><th class="col-buckets numeric">lb buckets</th><th class=col-age>last transition</th></tr></thead><tbody>');const sr=e=>{const t=()=>Object.fromEntries(e.snap.backends.map(s=>[s.name,s])),n=()=>e.frontend,r=(()=>{var s=Qn(),i=s.firstChild,o=i.nextSibling,l=o.nextSibling,a=l.nextSibling;return d(i,()=>en(e.snap,n())),d(o,()=>n().name),d(s,h(Z,{get value(){return n().state??"unknown"},get children(){return h(ot,{get state(){return n().state??"unknown"}})}}),l),d(l,()=>tn(n().address,n().port)),d(a,()=>n().protocol.toUpperCase()),d(s,(()=>{var c=I(()=>!!n().src_ip_sticky);return()=>c()&&er()})(),null),d(s,(()=>{var c=I(()=>!!n().description);return()=>c()&&(()=>{var u=tr();return d(u,()=>n().description),u})()})(),null),s})();return h(Me,{get id(){return`frontend-${e.snap.maglevd.name}-${n().name}`},title:r,get children(){var s=rr(),i=s.firstChild,o=i.firstChild,l=o.firstChild,a=l.nextSibling,c=a.nextSibling,u=c.nextSibling,f=u.nextSibling,$=f.nextSibling,g=$.nextSibling;g.nextSibling;var w=i.nextSibling;return d(o,h(L,{when:H,get children(){return nr()}}),null),d(w,h(Q,{get each(){return n().pools},children:v=>{const T=()=>v.backends.some(C=>C.effective_weight>0);return h(Q,{get each(){return v.backends},children:(C,p)=>{const m=t()[C.name];return m?h(Kn,{get maglevd(){return e.snap.maglevd.name},get frontend(){return n().name},get pool(){return v.name},get showPool(){return p()===0},get poolActive(){return T()},backend:m,poolBackend:C}):null}})}})),s}})};var ir=b("<span class=vpp-badge>"),lr=b("<span class=zippy-title>VPP<span class=vpp-io aria-hidden=true><span class=vpp-io-label>API:</span><span class=vpp-tx>↑</span><span class=vpp-rx>↓"),or=b("<p class=empty>No VPP information available."),ar=b("<dl class=kv><dt>version</dt><dd></dd><dt>build date</dt><dd></dd><dt>pid</dt><dd></dd><dt>booted</dt><dd></dd><dt>connected</dt><dd>");const cr=e=>{const t=()=>e.info?.boottime_ns?new Date(e.info.boottime_ns/1e6).toISOString():"",n=()=>e.info?.connecttime_ns?new Date(e.info.connecttime_ns/1e6).toISOString():"",r=()=>e.state==="connected"?"connected":"disconnected",[s,i]=A(!1),[o,l]=A(!1);let a,c;const u=()=>{i(!0),a&&clearTimeout(a),a=window.setTimeout(()=>{i(!1),a=void 0},250)},f=()=>{l(!0),c&&clearTimeout(c),c=window.setTimeout(()=>{l(!1),c=void 0},250)};K(()=>{const g=we();if(!g.length)return;const w=g[g.length-1];if(w.maglevd!==e.name||w.type!=="log")return;const v=w.payload?.msg;v&&(v.startsWith("vpp-api-send")?u():v.startsWith("vpp-api-recv")&&f())}),q(()=>{a&&clearTimeout(a),c&&clearTimeout(c)});const $=(()=>{var g=lr(),w=g.firstChild,v=w.nextSibling,T=v.firstChild,C=T.nextSibling,p=C.nextSibling;return d(g,h(Z,{get value(){return r()},get children(){var m=ir();return d(m,r),E(()=>N(m,"data-state",r())),m}}),v),E(m=>{var y=!!s(),S=!!o();return y!==m.e&&C.classList.toggle("lit",m.e=y),S!==m.t&&p.classList.toggle("lit",m.t=S),m},{e:void 0,t:void 0}),g})();return h(Me,{get id(){return`vpp-${e.name}`},title:$,get children(){return h(L,{get when(){return e.info},get fallback(){return or()},children:g=>(()=>{var w=ar(),v=w.firstChild,T=v.nextSibling,C=T.nextSibling,p=C.nextSibling,m=p.nextSibling,y=m.nextSibling,S=y.nextSibling,x=S.nextSibling,P=x.nextSibling,M=P.nextSibling;return d(T,()=>g().version),d(p,()=>g().build_date),d(y,()=>g().pid),d(x,t),d(M,n),w})()})}})};var ur=b("<main class=overview>"),fr=b("<p class=empty>No maglevd selected."),dr=b('<div class="banner warn"> disconnected'),gr=b("<div class=frontend-list>");const hr=()=>{const e=()=>{const t=xe();return t?X.byName[t]:void 0};return(()=>{var t=ur();return d(t,h(L,{get when(){return e()},get fallback(){return fr()},children:n=>[h(L,{get when(){return!n().maglevd.connected},get children(){var r=dr(),s=r.firstChild;return d(r,()=>n().maglevd.name,s),d(r,(()=>{var i=I(()=>!!n().maglevd.last_error);return()=>i()&&`: ${n().maglevd.last_error}`})(),null),r}}),(()=>{var r=gr();return d(r,h(Q,{get each(){return n().frontends},children:s=>h(sr,{get snap(){return n()},frontend:s})})),r})(),h(cr,{get name(){return n().maglevd.name},get info(){return n().vpp_info},get state(){return n().vpp_state}})]})),t})()};var br=b("<ol class=event-tail>"),mr=b("<div class=debug-toolbar><label><input type=checkbox>all maglevds</label><button></button><span class=count> events"),pr=b("<li>");const $r=()=>{const[e,t]=A(!1),[n,r]=A(!1),[s,i]=A([]),o=B(()=>{const c=n()?s():we();if(e())return c;const u=xe();return u?c.filter(f=>f.maglevd===u):c}),l=()=>{n()?r(!1):(i([...we()]),r(!0))};let a;return K(()=>{o(),!n()&&a&&(a.scrollTop=a.scrollHeight)}),h(Me,{id:"debug-events",title:"Event stream",get children(){return[(()=>{var c=br(),u=a;return typeof u=="function"?Se(u,c):a=c,d(c,h(Q,{get each(){return o()},children:f=>(()=>{var $=pr();return d($,()=>yr(f)),E(g=>{var w=`event-row event-${f.type}`,v=!!vr(f);return w!==g.e&&Tt($,g.e=w),v!==g.t&&$.classList.toggle("event-sync",g.t=v),g},{e:void 0,t:void 0}),$})()})),c})(),(()=>{var c=mr(),u=c.firstChild,f=u.firstChild,$=u.nextSibling,g=$.nextSibling,w=g.firstChild;return f.addEventListener("change",v=>t(v.currentTarget.checked)),$.$$click=l,d($,()=>n()?"resume":"pause"),d(g,()=>o().length,w),E(()=>f.checked=e()),c})()]}})};function vr(e){return e.type!=="log"?!1:e.payload.msg.startsWith("vpp-lb-sync-")}function wr(e){if(!e)return"";const t=["vip","protocol","port","address","weight","from","to","encap","src-ip-sticky","flush"],n=[],r=new Set;for(const s of t)s in e&&(n.push(`${s}=${e[s]}`),r.add(s));for(const[s,i]of Object.entries(e))r.has(s)||n.push(`${s}=${i}`);return n.join(" ")}function yr(e){const t=new Date(e.at_unix_ns/1e6).toISOString().substring(11,23),n=`[${e.maglevd}]`;switch(e.type){case"backend":{const r=e.payload;return`${t} ${n} backend ${r.backend}: ${r.transition.from} → ${r.transition.to}`}case"frontend":{const r=e.payload;return`${t} ${n} frontend ${r.frontend}: ${r.transition.from} → ${r.transition.to}`}case"log":{const r=e.payload;if(r.msg.startsWith("vpp-lb-sync-"))return`${t} ${n} ${r.msg} ${wr(r.attrs)}`.trimEnd();const s=r.attrs?Object.entries(r.attrs).map(([i,o])=>`${i}=${o}`).join(" "):"";return`${t} ${n} ${r.level} ${r.msg} ${s}`.trimEnd()}case"maglevd-status":return`${t} ${n} maglevd status: ${JSON.stringify(e.payload)}`;default:return`${t} ${n} ${e.type}`}}ke(["click"]);const _r="/view/assets/logo-bimi-Bguc6E_L.svg";var kr=b("<span class=mode-tag>"),Sr=b("<a class=admin-toggle>"),xr=b('<div class=app><header class=app-header><div class=brand><a class=brand-logo href=https://ipng.ch/ target=_blank rel=noopener title="IPng Networks"><img alt=IPng></a><a class=brand-name href=https://git.ipng.ch/ipng/vpp-maglev target=_blank rel=noopener title="vpp-maglev on git.ipng.ch"><strong>vpp-maglev'),Ar=b("<span class=version> (<!>)"),Er=b('<div class="banner err">'),Cr=b("<p class=loading>Loading…");const Or=()=>{const[e,t]=A(),[n,r]=A();$t(async()=>{try{const[i,o]=await Promise.all([ze(),jt()]);it(i),r(o);const l=xe();!(l&&i.some(c=>c.maglevd.name===l))&&i.length>0&&lt(i[0].maglevd.name),an()}catch(i){t(`${i}`)}});const s=()=>n()?.admin_enabled===!0;return(()=>{var i=xr(),o=i.firstChild,l=o.firstChild,a=l.firstChild,c=a.firstChild;return a.nextSibling,N(c,"src",_r),d(l,(()=>{var u=I(()=>!!n());return()=>u()&&(()=>{var f=Ar(),$=f.firstChild,g=$.nextSibling;return g.nextSibling,d(f,()=>n().version,$),d(f,()=>n().commit,g),E(()=>N(f,"title",`commit ${n().commit} · built ${n().date}`)),f})()})(),null),d(o,h(mn,{}),null),d(o,h(L,{get when(){return H||s()},get children(){var u=kr();return d(u,H?"admin":"view"),u}}),null),d(o,h(L,{get when(){return s()},get children(){var u=Sr();return N(u,"href",H?"/view/":"/admin/"),N(u,"title",H?"exit admin mode":"enter admin mode"),d(u,H?"exit admin":"admin…"),u}}),null),d(i,(()=>{var u=I(()=>!!e());return()=>u()&&(()=>{var f=Er();return d(f,e),f})()})(),null),d(i,(()=>{var u=I(()=>!e()&&Object.keys(X.byName).length===0);return()=>u()&&Cr()})(),null),d(i,h(hr,{}),null),d(i,h(L,{when:H,get children(){return h($r,{})}}),null),i})()},ct=document.getElementById("root");if(!ct)throw new Error("no #root element");Ot(()=>h(Or,{}),ct);
diff --git a/cmd/frontend/web/dist/assets/index-DCJJqBMY.js b/cmd/frontend/web/dist/assets/index-DCJJqBMY.js
deleted file mode 100644
index 4aa163d..0000000
--- a/cmd/frontend/web/dist/assets/index-DCJJqBMY.js
+++ /dev/null
@@ -1 +0,0 @@
-(function(){const t=document.createElement("link").relList;if(t&&t.supports&&t.supports("modulepreload"))return;for(const s of document.querySelectorAll('link[rel="modulepreload"]'))r(s);new MutationObserver(s=>{for(const l of s)if(l.type==="childList")for(const o of l.addedNodes)o.tagName==="LINK"&&o.rel==="modulepreload"&&r(o)}).observe(document,{childList:!0,subtree:!0});function n(s){const l={};return s.integrity&&(l.integrity=s.integrity),s.referrerPolicy&&(l.referrerPolicy=s.referrerPolicy),s.crossOrigin==="use-credentials"?l.credentials="include":s.crossOrigin==="anonymous"?l.credentials="omit":l.credentials="same-origin",l}function r(s){if(s.ep)return;s.ep=!0;const l=n(s);fetch(s.href,l)}})();const dt=!1,gt=(e,t)=>e===t,G=Symbol("solid-proxy"),Ee=Symbol("solid-track"),de={equals:gt};let Ve=Ye;const V=1,ge=2,Ke={owned:null,cleanups:null,context:null,owner:null};var k=null;let Ae=null,ht=null,_=null,O=null,R=null,ye=0;function le(e,t){const n=_,r=k,s=e.length===0,l=t===void 0?r:t,o=s?Ke:{owned:null,cleanups:null,context:l?l.context:null,owner:l},i=s?e:()=>e(()=>B(()=>oe(o)));k=o,_=null;try{return J(i,!0)}finally{_=n,k=r}}function A(e,t){t=t?Object.assign({},de,t):de;const n={value:e,observers:null,observerSlots:null,comparator:t.equals||void 0},r=s=>(typeof s=="function"&&(s=s(n.value)),qe(n,s));return[Ge.bind(n),r]}function E(e,t,n){const r=Pe(e,t,!1,V);ce(r)}function K(e,t,n){Ve=_t;const r=Pe(e,t,!1,V);(!n||!n.render)&&(r.user=!0),R?R.push(r):ce(r)}function H(e,t,n){n=n?Object.assign({},de,n):de;const r=Pe(e,t,!0,0);return r.observers=null,r.observerSlots=null,r.comparator=n.equals||void 0,ce(r),Ge.bind(r)}function bt(e){return J(e,!1)}function B(e){if(_===null)return e();const t=_;_=null;try{return e()}finally{_=t}}function mt(e,t,n){const r=Array.isArray(e);let s,l=n&&n.defer;return o=>{let i;if(r){i=Array(e.length);for(let c=0;c<e.length;c++)i[c]=e[c]()}else i=e();if(l)return l=!1,o;const a=B(()=>t(i,s,o));return s=i,a}}function pt(e){K(()=>B(e))}function q(e){return k===null||(k.cleanups===null?k.cleanups=[e]:k.cleanups.push(e)),e}function Ce(){return _}function $t(){return k}function wt(e,t){const n=k,r=_;k=e,_=null;try{return J(t,!0)}catch(s){Ne(s)}finally{k=n,_=r}}function Ge(){if(this.sources&&this.state)if(this.state===V)ce(this);else{const e=O;O=null,J(()=>be(this),!1),O=e}if(_){const e=this.observers?this.observers.length:0;_.sources?(_.sources.push(this),_.sourceSlots.push(e)):(_.sources=[this],_.sourceSlots=[e]),this.observers?(this.observers.push(_),this.observerSlots.push(_.sources.length-1)):(this.observers=[_],this.observerSlots=[_.sources.length-1])}return this.value}function qe(e,t,n){let r=e.value;return(!e.comparator||!e.comparator(r,t))&&(e.value=t,e.observers&&e.observers.length&&J(()=>{for(let s=0;s<e.observers.length;s+=1){const l=e.observers[s],o=Ae&&Ae.running;o&&Ae.disposed.has(l),(o?!l.tState:!l.state)&&(l.pure?O.push(l):R.push(l),l.observers&&Je(l)),o||(l.state=V)}if(O.length>1e6)throw O=[],new Error},!1)),t}function ce(e){if(!e.fn)return;oe(e);const t=ye;vt(e,e.value,t)}function vt(e,t,n){let r;const s=k,l=_;_=k=e;try{r=e.fn(t)}catch(o){return e.pure&&(e.state=V,e.owned&&e.owned.forEach(oe),e.owned=null),e.updatedAt=n+1,Ne(o)}finally{_=l,k=s}(!e.updatedAt||e.updatedAt<=n)&&(e.updatedAt!=null&&"observers"in e?qe(e,r):e.value=r,e.updatedAt=n)}function Pe(e,t,n,r=V,s){const l={fn:e,state:r,updatedAt:null,owned:null,sources:null,sourceSlots:null,cleanups:null,value:t,owner:k,context:k?k.context:null,pure:n};return k===null||k!==Ke&&(k.owned?k.owned.push(l):k.owned=[l]),l}function he(e){if(e.state===0)return;if(e.state===ge)return be(e);if(e.suspense&&B(e.suspense.inFallback))return e.suspense.effects.push(e);const t=[e];for(;(e=e.owner)&&(!e.updatedAt||e.updatedAt<ye);)e.state&&t.push(e);for(let n=t.length-1;n>=0;n--)if(e=t[n],e.state===V)ce(e);else if(e.state===ge){const r=O;O=null,J(()=>be(e,t[0]),!1),O=r}}function J(e,t){if(O)return e();let n=!1;t||(O=[]),R?n=!0:R=[],ye++;try{const r=e();return yt(n),r}catch(r){n||(R=null),O=null,Ne(r)}}function yt(e){if(O&&(Ye(O),O=null),e)return;const t=R;R=null,t.length&&J(()=>Ve(t),!1)}function Ye(e){for(let t=0;t<e.length;t++)he(e[t])}function _t(e){let t,n=0;for(t=0;t<e.length;t++){const r=e[t];r.user?e[n++]=r:he(r)}for(t=0;t<n;t++)he(e[t])}function be(e,t){e.state=0;for(let n=0;n<e.sources.length;n+=1){const r=e.sources[n];if(r.sources){const s=r.state;s===V?r!==t&&(!r.updatedAt||r.updatedAt<ye)&&he(r):s===ge&&be(r,t)}}}function Je(e){for(let t=0;t<e.observers.length;t+=1){const n=e.observers[t];n.state||(n.state=ge,n.pure?O.push(n):R.push(n),n.observers&&Je(n))}}function oe(e){let t;if(e.sources)for(;e.sources.length;){const n=e.sources.pop(),r=e.sourceSlots.pop(),s=n.observers;if(s&&s.length){const l=s.pop(),o=n.observerSlots.pop();r<s.length&&(l.sourceSlots[o]=r,s[r]=l,n.observerSlots[r]=o)}}if(e.tOwned){for(t=e.tOwned.length-1;t>=0;t--)oe(e.tOwned[t]);delete e.tOwned}if(e.owned){for(t=e.owned.length-1;t>=0;t--)oe(e.owned[t]);e.owned=null}if(e.cleanups){for(t=e.cleanups.length-1;t>=0;t--)e.cleanups[t]();e.cleanups=null}e.state=0}function kt(e){return e instanceof Error?e:new Error(typeof e=="string"?e:"Unknown error",{cause:e})}function Ne(e,t=k){throw kt(e)}const St=Symbol("fallback");function Be(e){for(let t=0;t<e.length;t++)e[t]()}function xt(e,t,n={}){let r=[],s=[],l=[],o=0,i=t.length>1?[]:null;return q(()=>Be(l)),()=>{let a=e()||[],c=a.length,u,f;return a[Ee],B(()=>{let g,v,w,T,C,p,m,y,S;if(c===0)o!==0&&(Be(l),l=[],r=[],s=[],o=0,i&&(i=[])),n.fallback&&(r=[St],s[0]=le(x=>(l[0]=x,n.fallback())),o=1);else if(o===0){for(s=new Array(c),f=0;f<c;f++)r[f]=a[f],s[f]=le($);o=c}else{for(w=new Array(c),T=new Array(c),i&&(C=new Array(c)),p=0,m=Math.min(o,c);p<m&&r[p]===a[p];p++);for(m=o-1,y=c-1;m>=p&&y>=p&&r[m]===a[y];m--,y--)w[y]=s[m],T[y]=l[m],i&&(C[y]=i[m]);for(g=new Map,v=new Array(y+1),f=y;f>=p;f--)S=a[f],u=g.get(S),v[f]=u===void 0?-1:u,g.set(S,f);for(u=p;u<=m;u++)S=r[u],f=g.get(S),f!==void 0&&f!==-1?(w[f]=s[u],T[f]=l[u],i&&(C[f]=i[u]),f=v[f],g.set(S,f)):l[u]();for(f=p;f<c;f++)f in w?(s[f]=w[f],l[f]=T[f],i&&(i[f]=C[f],i[f](f))):s[f]=le($);s=s.slice(0,o=c),r=a.slice(0)}return s});function $(g){if(l[f]=g,i){const[v,w]=A(f);return i[f]=w,t(a[f],v)}return t(a[f])}}}function h(e,t){return B(()=>e(t||{}))}const At=e=>`Stale read from <${e}>.`;function Q(e){const t="fallback"in e&&{fallback:()=>e.fallback};return H(xt(()=>e.each,e.children,t||void 0))}function N(e){const t=e.keyed,n=H(()=>e.when,void 0,void 0),r=t?n:H(n,void 0,{equals:(s,l)=>!s==!l});return H(()=>{const s=r();if(s){const l=e.children;return typeof l=="function"&&l.length>0?B(()=>l(t?s:()=>{if(!B(r))throw At("Show");return n()})):l}return e.fallback},void 0,void 0)}const I=e=>H(()=>e());function Et(e,t,n){let r=n.length,s=t.length,l=r,o=0,i=0,a=t[s-1].nextSibling,c=null;for(;o<s||i<l;){if(t[o]===n[i]){o++,i++;continue}for(;t[s-1]===n[l-1];)s--,l--;if(s===o){const u=l<r?i?n[i-1].nextSibling:n[l-i]:a;for(;i<l;)e.insertBefore(n[i++],u)}else if(l===i)for(;o<s;)(!c||!c.has(t[o]))&&t[o].remove(),o++;else if(t[o]===n[l-1]&&n[i]===t[s-1]){const u=t[--s].nextSibling;e.insertBefore(n[i++],t[o++].nextSibling),e.insertBefore(n[--l],u),t[s]=n[l]}else{if(!c){c=new Map;let f=i;for(;f<l;)c.set(n[f],f++)}const u=c.get(t[o]);if(u!=null)if(i<u&&u<l){let f=o,$=1,g;for(;++f<s&&f<l&&!((g=c.get(t[f]))==null||g!==u+$);)$++;if($>u-i){const v=t[o];for(;i<u;)e.insertBefore(n[i++],v)}else e.replaceChild(n[i++],t[o++])}else o++;else t[o++].remove()}}}const We="_$DX_DELEGATE";function Ct(e,t,n,r={}){let s;return le(l=>{s=l,t===document?e():d(t,e(),t.firstChild?null:void 0,n)},r.owner),()=>{s(),t.textContent=""}}function b(e,t,n,r){let s;const l=()=>{const i=document.createElement("template");return i.innerHTML=e,i.content.firstChild},o=()=>(s||(s=l())).cloneNode(!0);return o.cloneNode=o,o}function _e(e,t=window.document){const n=t[We]||(t[We]=new Set);for(let r=0,s=e.length;r<s;r++){const l=e[r];n.has(l)||(n.add(l),t.addEventListener(l,Pt))}}function L(e,t,n){n==null?e.removeAttribute(t):e.setAttribute(t,n)}function Ot(e,t){t==null?e.removeAttribute("class"):e.className=t}function Tt(e,t,n,r){Array.isArray(n)?(e[`$$${t}`]=n[0],e[`$$${t}Data`]=n[1]):e[`$$${t}`]=n}function ke(e,t,n){return B(()=>e(t,n))}function d(e,t,n,r){if(n!==void 0&&!r&&(r=[]),typeof t!="function")return me(e,t,r,n);E(s=>me(e,t(),s,n),r)}function Pt(e){let t=e.target;const n=`$$${e.type}`,r=e.target,s=e.currentTarget,l=a=>Object.defineProperty(e,"target",{configurable:!0,value:a}),o=()=>{const a=t[n];if(a&&!t.disabled){const c=t[`${n}Data`];if(c!==void 0?a.call(t,c,e):a.call(t,e),e.cancelBubble)return}return t.host&&typeof t.host!="string"&&!t.host._$host&&t.contains(e.target)&&l(t.host),!0},i=()=>{for(;o()&&(t=t._$host||t.parentNode||t.host););};if(Object.defineProperty(e,"currentTarget",{configurable:!0,get(){return t||document}}),e.composedPath){const a=e.composedPath();l(a[0]);for(let c=0;c<a.length-2&&(t=a[c],!!o());c++){if(t._$host){t=t._$host,i();break}if(t.parentNode===s)break}}else i();l(r)}function me(e,t,n,r,s){for(;typeof n=="function";)n=n();if(t===n)return n;const l=typeof t,o=r!==void 0;if(e=o&&n[0]&&n[0].parentNode||e,l==="string"||l==="number"){if(l==="number"&&(t=t.toString(),t===n))return n;if(o){let i=n[0];i&&i.nodeType===3?i.data!==t&&(i.data=t):i=document.createTextNode(t),n=X(e,n,r,i)}else n!==""&&typeof n=="string"?n=e.firstChild.data=t:n=e.textContent=t}else if(t==null||l==="boolean")n=X(e,n,r);else{if(l==="function")return E(()=>{let i=t();for(;typeof i=="function";)i=i();n=me(e,i,n,r)}),()=>n;if(Array.isArray(t)){const i=[],a=n&&Array.isArray(n);if(Oe(i,t,n,s))return E(()=>n=me(e,i,n,r,!0)),()=>n;if(i.length===0){if(n=X(e,n,r),o)return n}else a?n.length===0?Ue(e,i,r):Et(e,n,i):(n&&X(e),Ue(e,i));n=i}else if(t.nodeType){if(Array.isArray(n)){if(o)return n=X(e,n,r,t);X(e,n,null,t)}else n==null||n===""||!e.firstChild?e.appendChild(t):e.replaceChild(t,e.firstChild);n=t}}return n}function Oe(e,t,n,r){let s=!1;for(let l=0,o=t.length;l<o;l++){let i=t[l],a=n&&n[e.length],c;if(!(i==null||i===!0||i===!1))if((c=typeof i)=="object"&&i.nodeType)e.push(i);else if(Array.isArray(i))s=Oe(e,i,a)||s;else if(c==="function")if(r){for(;typeof i=="function";)i=i();s=Oe(e,Array.isArray(i)?i:[i],Array.isArray(a)?a:[a])||s}else e.push(i),s=!0;else{const u=String(i);a&&a.nodeType===3&&a.data===u?e.push(a):e.push(document.createTextNode(u))}}return s}function Ue(e,t,n=null){for(let r=0,s=t.length;r<s;r++)e.insertBefore(t[r],n)}function X(e,t,n,r){if(n===void 0)return e.textContent="";const s=r||document.createTextNode("");if(t.length){let l=!1;for(let o=t.length-1;o>=0;o--){const i=t[o];if(s!==i){const a=i.parentNode===e;!l&&!o?a?e.replaceChild(s,i):e.insertBefore(s,n):a&&i.remove()}else l=!0}}else e.insertBefore(s,n);return[s]}const Nt="http://www.w3.org/2000/svg";function Lt(e,t=!1,n=void 0){return t?document.createElementNS(Nt,e):document.createElement(e,{is:n})}function It(e){const{useShadow:t}=e,n=document.createTextNode(""),r=()=>e.mount||document.body,s=$t();let l;return K(()=>{l||(l=wt(s,()=>H(()=>e.children)));const o=r();if(o instanceof HTMLHeadElement){const[i,a]=A(!1),c=()=>a(!0);le(u=>d(o,()=>i()?u():l(),null)),q(c)}else{const i=Lt(e.isSVG?"g":"div",e.isSVG),a=t&&i.attachShadow?i.attachShadow({mode:"open"}):i;Object.defineProperty(i,"_$host",{get(){return n.parentNode},configurable:!0}),d(a,l),o.appendChild(i),e.ref&&e.ref(i),q(()=>o.removeChild(i))}},void 0,{render:!0}),n}async function Xe(e){const t=await fetch(e,{credentials:"same-origin"});if(!t.ok)throw new Error(`${e}: ${t.status} ${t.statusText}`);return await t.json()}function Ze(){return Xe("/view/api/state")}function jt(){return Xe("/view/api/version")}const pe=Symbol("store-raw"),z=Symbol("store-node"),M=Symbol("store-has"),ze=Symbol("store-self");function Qe(e){let t=e[G];if(!t&&(Object.defineProperty(e,G,{value:t=new Proxy(e,Rt)}),!Array.isArray(e))){const n=Object.keys(e),r=Object.getOwnPropertyDescriptors(e);for(let s=0,l=n.length;s<l;s++){const o=n[s];r[o].get&&Object.defineProperty(e,o,{enumerable:r[o].enumerable,get:r[o].get.bind(t)})}}return t}function ee(e){let t;return e!=null&&typeof e=="object"&&(e[G]||!(t=Object.getPrototypeOf(e))||t===Object.prototype||Array.isArray(e))}function te(e,t=new Set){let n,r,s,l;if(n=e!=null&&e[pe])return n;if(!ee(e)||t.has(e))return e;if(Array.isArray(e)){Object.isFrozen(e)?e=e.slice(0):t.add(e);for(let o=0,i=e.length;o<i;o++)s=e[o],(r=te(s,t))!==s&&(e[o]=r)}else{Object.isFrozen(e)?e=Object.assign({},e):t.add(e);const o=Object.keys(e),i=Object.getOwnPropertyDescriptors(e);for(let a=0,c=o.length;a<c;a++)l=o[a],!i[l].get&&(s=e[l],(r=te(s,t))!==s&&(e[l]=r))}return e}function $e(e,t){let n=e[t];return n||Object.defineProperty(e,t,{value:n=Object.create(null)}),n}function ae(e,t,n){if(e[t])return e[t];const[r,s]=A(n,{equals:!1,internal:!0});return r.$=s,e[t]=r}function Dt(e,t){const n=Reflect.getOwnPropertyDescriptor(e,t);return!n||n.get||!n.configurable||t===G||t===z||(delete n.value,delete n.writable,n.get=()=>e[G][t]),n}function et(e){Ce()&&ae($e(e,z),ze)()}function Mt(e){return et(e),Reflect.ownKeys(e)}const Rt={get(e,t,n){if(t===pe)return e;if(t===G)return n;if(t===Ee)return et(e),n;const r=$e(e,z),s=r[t];let l=s?s():e[t];if(t===z||t===M||t==="__proto__")return l;if(!s){const o=Object.getOwnPropertyDescriptor(e,t);Ce()&&(typeof l!="function"||e.hasOwnProperty(t))&&!(o&&o.get)&&(l=ae(r,t,l)())}return ee(l)?Qe(l):l},has(e,t){return t===pe||t===G||t===Ee||t===z||t===M||t==="__proto__"?!0:(Ce()&&ae($e(e,M),t)(),t in e)},set(){return!0},deleteProperty(){return!0},ownKeys:Mt,getOwnPropertyDescriptor:Dt};function ne(e,t,n,r=!1){if(!r&&e[t]===n)return;const s=e[t],l=e.length;n===void 0?(delete e[t],e[M]&&e[M][t]&&s!==void 0&&e[M][t].$()):(e[t]=n,e[M]&&e[M][t]&&s===void 0&&e[M][t].$());let o=$e(e,z),i;if((i=ae(o,t,s))&&i.$(()=>n),Array.isArray(e)&&e.length!==l){for(let a=e.length;a<l;a++)(i=o[a])&&i.$();(i=ae(o,"length",l))&&i.$(e.length)}(i=o[ze])&&i.$()}function tt(e,t){const n=Object.keys(t);for(let r=0;r<n.length;r+=1){const s=n[r];ne(e,s,t[s])}}function Bt(e,t){if(typeof t=="function"&&(t=t(e)),t=te(t),Array.isArray(t)){if(e===t)return;let n=0,r=t.length;for(;n<r;n++){const s=t[n];e[n]!==s&&ne(e,n,s)}ne(e,"length",r)}else tt(e,t)}function se(e,t,n=[]){let r,s=e;if(t.length>1){r=t.shift();const o=typeof r,i=Array.isArray(e);if(Array.isArray(r)){for(let a=0;a<r.length;a++)se(e,[r[a]].concat(t),n);return}else if(i&&o==="function"){for(let a=0;a<e.length;a++)r(e[a],a)&&se(e,[a].concat(t),n);return}else if(i&&o==="object"){const{from:a=0,to:c=e.length-1,by:u=1}=r;for(let f=a;f<=c;f+=u)se(e,[f].concat(t),n);return}else if(t.length>1){se(e[r],t,[r].concat(n));return}s=e[r],n=[r].concat(n)}let l=t[0];typeof l=="function"&&(l=l(s,n),l===s)||r===void 0&&l==null||(l=te(l),r===void 0||ee(s)&&ee(l)&&!Array.isArray(l)?tt(s,l):ne(e,r,l))}function Wt(...[e,t]){const n=te(e||{}),r=Array.isArray(n),s=Qe(n);function l(...o){bt(()=>{r&&o.length===1?Bt(n,o[0]):se(n,o)})}return[s,l]}const we=new WeakMap,nt={get(e,t){if(t===pe)return e;const n=e[t];let r;return ee(n)?we.get(n)||(we.set(n,r=new Proxy(n,nt)),r):n},set(e,t,n){return ne(e,t,te(n)),!0},deleteProperty(e,t){return ne(e,t,void 0,!0),!0}};function F(e){return t=>{if(ee(t)){let n;(n=we.get(t))||we.set(t,n=new Proxy(t,nt)),e(n)}return t}}const[Ut,Ht]=A(0);setInterval(()=>Ht(e=>e+1),5e3);function Le(e){const t={};for(const n of e.backends)t[n.name]=n.state;for(const n of e.frontends){let r=0;for(let a=0;a<n.pools.length;a++){let c=!1;for(const u of n.pools[a].backends)if(t[u.name]==="up"&&u.weight>0){c=!0;break}if(c){r=a;break}}let s=!1,l=!1,o=!0;const i=new Set;for(let a=0;a<n.pools.length;a++)for(const c of n.pools[a].backends){const u=t[c.name];c.effective_weight=u==="up"&&a===r?c.weight:0,c.effective_weight>0&&(s=!0),i.has(c.name)||(i.add(c.name),l=!0,u!=="unknown"&&(o=!1))}!l||o?n.state="unknown":s?n.state="up":n.state="down"}}const[Y,W]=Wt({byName:{},settling:{}}),Ft=2e3,ie=new Map;function Vt(e,t){return`${e}\0${t}`}function rt(e,t){W(F(s=>{s.settling[e]||(s.settling[e]={}),s.settling[e][t]=!0}));const n=Vt(e,t),r=ie.get(n);r&&clearTimeout(r),ie.set(n,setTimeout(()=>{ie.delete(n),W(F(s=>{s.settling[e]&&delete s.settling[e][t]}))},Ft))}function Kt(e){for(const[t,n]of ie)t.startsWith(e+"\0")&&(clearTimeout(n),ie.delete(t));W(F(t=>{t.settling[e]&&(t.settling[e]={})}))}function st(e){const t={};for(const n of e)Le(n),t[n.maglevd.name]=n;W({byName:t})}function Gt(e,t){W(F(r=>{const s=r.byName[e];if(!s)return;const l=s.backends.find(o=>o.name===t.backend);l&&(l.state=t.transition.to,l.enabled=t.transition.to!=="disabled",l.last_transition=t.transition,l.transitions||(l.transitions=[]),l.transitions.push(t.transition),l.transitions.length>20&&(l.transitions=l.transitions.slice(l.transitions.length-20)),Le(s))}));const n=Y.byName[e];if(n)for(const r of n.frontends)r.pools.some(s=>s.backends.some(l=>l.name===t.backend))&&rt(e,r.name)}function qt(e,t){W(F(n=>{const r=n.byName[e];if(!r)return;const s=t.per_frontend;if(!s||Object.keys(s).length===0){r.lb_state!==void 0&&(r.lb_state=void 0);return}r.lb_state||(r.lb_state={per_frontend:{}});const o=r.lb_state.per_frontend;for(const i of Object.keys(s)){o[i]||(o[i]={});const a=o[i],c=s[i];for(const u of Object.keys(c))a[u]!==c[u]&&(a[u]=c[u]);for(const u of Object.keys(a))u in c||delete a[u]}for(const i of Object.keys(o))i in s||delete o[i]})),Kt(e)}function Yt(e,t,n){return e?.lb_state?.per_frontend?.[t]?.[n]}function Jt(e,t){W(F(n=>{const r=n.byName[e];r&&(r.vpp_state=t)}))}function Xt(e,t){W(F(n=>{const r=n.byName[e];r&&(r.maglevd.connected=t.connected,r.maglevd.last_error=t.last_error)}))}function Zt(e,t,n,r,s){W(F(l=>{const o=l.byName[e];if(!o)return;const i=o.frontends.find(u=>u.name===t);if(!i)return;const a=i.pools.find(u=>u.name===n);if(!a)return;const c=a.backends.find(u=>u.name===r);c&&(c.weight=s,Le(o))})),rt(e,t)}function zt(e,t){const n={};for(const f of e.backends)n[f.name]=f.state;const r=!!e.lb_state,s=e.lb_state?.per_frontend?.[t.name],l=!!Y.settling[e.maglevd.name]?.[t.name];let o=!1,i=!1;for(const f of t.pools)for(const $ of f.backends)if(n[$.name]!=="up"&&(o=!0),!l&&r&&$.effective_weight>0){const g=s?.[$.name];(g===void 0||g===0)&&(i=!0)}const a=t.pools[0],c=!!a&&a.backends.some(f=>f.weight>0),u=!a||a.backends.every(f=>f.effective_weight===0);return!o&&c&&!i?"ok":i?"bug-buckets":u?"primary-drained":o?"degraded":"unknown"}function Qt(e,t){switch(zt(e,t)){case"ok":return"✅";case"bug-buckets":return"‼️";case"primary-drained":return"❗";case"degraded":return"⚠️";case"unknown":return"❓"}}function en(e,t){return e.includes(":")?`[${e}]:${t}`:`${e}:${t}`}function tn(e){if(Ut(),!e||!e.at_unix_ns||e.at_unix_ns<=0)return"";const t=Date.now()-e.at_unix_ns/1e6,n=Math.floor(t/1e3);if(n<=1)return"now";const r=n%60,s=Math.floor(n/60);if(s<1)return`${n}s ago`;const l=s%60,o=Math.floor(s/60);if(o<1)return`${l}m${r}s ago`;const i=o%24,a=Math.floor(o/24);return a<1?`${o}h${l}m ago`:`${a}d${i}h ago`}const He=500,[ve,nn]=A([]);function rn(e){nn(t=>{const n=[...t,e];return n.length>He?n.slice(n.length-He):n})}const sn=1e4,ln=3e4;function on(){let e,t=!1;const n=i=>{try{const a=JSON.parse(i.data);an(a)}catch(a){console.error("sse parse error",a,i.data)}},r=async()=>{try{const i=await Ze();st(i)}catch(i){console.error("resync refetch failed",i)}},s=()=>{e&&(e.close(),e=void 0),e=new EventSource("/view/api/events"),e.onmessage=n,e.addEventListener("resync",r),e.onerror=i=>{console.debug("sse error, browser will reconnect",i)}},l=i=>{t||(t=!0,console.info("sse reconnecting:",i),s(),setTimeout(()=>{t=!1},1e3))};let o=Date.now();setInterval(()=>{const i=Date.now(),a=i-o;o=i,a>ln&&l(`wake detected (${Math.round(a/1e3)}s gap)`)},sn),s()}function an(e){switch(rn(e),e.type){case"backend":Gt(e.maglevd,e.payload);break;case"frontend":e.maglevd,e.payload;break;case"maglevd-status":Xt(e.maglevd,e.payload);break;case"vpp-status":Jt(e.maglevd,e.payload.state);break;case"lb-state":qt(e.maglevd,e.payload);break}}const[Se,lt]=A(void 0);var cn=b("<nav class=scope-selector>"),un=b("<button class=scope-tab><span class=dot>");const fn=()=>{const e=()=>Object.keys(Y.byName).sort();return(()=>{var t=cn();return d(t,h(Q,{get each(){return e()},children:n=>{const r=()=>Y.byName[n],s=()=>r()?.maglevd.connected??!1;return(()=>{var l=un();return l.firstChild,l.$$click=()=>lt(n),d(l,n,null),E(o=>{var i=Se()===n,a=!!s(),c=!s(),u=r()?.maglevd.address??"";return i!==o.e&&l.classList.toggle("active",o.e=i),a!==o.t&&l.classList.toggle("connected",o.t=a),c!==o.a&&l.classList.toggle("disconnected",o.a=c),u!==o.o&&L(l,"title",o.o=u),o},{e:void 0,t:void 0,a:void 0,o:void 0}),l})()}})),t})()};_e(["click"]);var dn=b("<span class=status-badge>");const it=e=>(()=>{var t=dn();return d(t,()=>e.label??e.state),E(()=>L(t,"data-state",e.state)),t})();var gn=b("<span class=probe-heartbeat>");const hn="▶",bn="⏸",mn="⏹",pn="❤️",Fe=400;function $n(e){switch(e){case"paused":return bn;case"disabled":case"removed":return mn;default:return hn}}const wn=e=>{const[t,n]=A(!1);let r,s;return K(()=>{const l=ve();if(l.length===0)return;const o=l[l.length-1];if(o.type!=="log"||o.maglevd!==e.maglevd)return;const i=o.payload;i.attrs?.backend===e.backend&&i.msg==="probe-start"&&(n(!0),r?.animate([{transform:"scale(1)"},{transform:"scale(1.6)",offset:.25},{transform:"scale(1)"}],{duration:Fe,easing:"ease-out"}),s!==void 0&&clearTimeout(s),s=window.setTimeout(()=>{n(!1),s=void 0},Fe))}),q(()=>{s!==void 0&&clearTimeout(s)}),(()=>{var l=gn(),o=r;return typeof o=="function"?ke(o,l):r=l,d(l,(()=>{var i=I(()=>!!t());return()=>i()?pn:$n(e.state)})()),E(()=>l.classList.toggle("in-flight",!!t())),l})()};var vn=b("<span class=flash-target>");const Z=e=>{let t;return K(mt(()=>e.value,()=>{t?.animate([{transform:"scale(1)",backgroundColor:"#facc15",boxShadow:"0 0 0 2px #facc15",offset:0},{transform:"scale(1.35)",backgroundColor:"#facc15",boxShadow:"0 0 0 4px #facc15",offset:.18},{transform:"scale(1)",backgroundColor:"#facc15",boxShadow:"0 0 0 2px #facc15",offset:.5},{transform:"scale(1)",backgroundColor:"transparent",boxShadow:"0 0 0 0 transparent",offset:1}],{duration:1500,easing:"ease-out"})},{defer:!0})),(()=>{var n=vn(),r=t;return typeof r=="function"?ke(r,n):t=n,d(n,()=>e.children??e.value),n})()};async function yn(e,t,n){const r=`/admin/api/${encodeURIComponent(e)}/backend/${encodeURIComponent(t)}/${n}`,s=await fetch(r,{method:"POST",credentials:"same-origin"});if(!s.ok){const l=(await s.text()).trim();throw new Error(l||`${s.status} ${s.statusText}`)}return await s.json()}async function _n(e,t,n,r,s,l){const o=`/admin/api/${encodeURIComponent(e)}/frontend/${encodeURIComponent(t)}/pool/${encodeURIComponent(n)}/backend/${encodeURIComponent(r)}/weight`,i=await fetch(o,{method:"POST",credentials:"same-origin",headers:{"Content-Type":"application/json"},body:JSON.stringify({weight:s,flush:l})});if(!i.ok){const a=(await i.text()).trim();throw new Error(a||`${i.status} ${i.statusText}`)}return await i.json()}var kn=b("<div class=modal-backdrop><div class=modal-card role=dialog aria-modal=true><header class=modal-header><h3></h3><button type=button class=modal-close aria-label=close>×</button></header><div class=modal-body>");const Sn=e=>(K(()=>{const t=n=>{n.key==="Escape"&&e.onClose()};document.addEventListener("keydown",t),q(()=>document.removeEventListener("keydown",t))}),h(It,{get mount(){return document.body},get children(){var t=kn(),n=t.firstChild,r=n.firstChild,s=r.firstChild,l=s.nextSibling,o=r.nextSibling;return t.$$mousedown=i=>{i.target===i.currentTarget&&e.onClose()},d(s,()=>e.title),Tt(l,"click",e.onClose),d(o,()=>e.children),E(()=>L(n,"aria-label",e.title)),t}}));_e(["mousedown","click"]);var xn=b("<div class=kebab-menu role=menu>"),An=b('<div class=kebab-wrap><button type=button class=kebab-btn aria-haspopup=menu title="backend actions">⋮'),En=b("<button type=button class=kebab-item role=menuitem>"),Cn=b("<p class=dialog-error>"),On=b("<footer class=dialog-footer><button type=button class=btn-secondary>cancel</button><button type=button class=btn-primary>"),Tn=b("<p class=dialog-warn>VPP's flow table will be cleared for this backend. Active sessions will be dropped immediately."),Pn=b('<div class=dialog-body><p class=dialog-target><code></code> in pool <code></code> of frontend <code></code></p><label class=dialog-field><span class=weight-slider-label>weight<output class=weight-slider-value></output></span><input type=range class=weight-slider min=0 max=100 step=1><small>0–100; 0 keeps the backend in the pool but assigns it no traffic</small></label><label class="dialog-field checkbox"><input type=checkbox><span>flush existing flows'),Nn=b("<p class=dialog-note>VPP's flow table is left alone. Existing sessions keep reaching this backend until they finish."),Ln=b("<div class=dialog-body><p class=dialog-consequence>");function In(e){const t={label:"set weight…",action:"weight"};switch(e){case"up":case"down":case"unknown":return[t,{label:"pause",action:"pause"},{label:"disable",action:"disable"}];case"paused":return[t,{label:"resume",action:"resume"},{label:"disable",action:"disable"}];case"disabled":return[t,{label:"enable",action:"enable"}];default:return[]}}function jn(e){switch(e){case"pause":return"This will stop health checks and set the weight to 0, but existing flows to this backend are kept. New traffic will be rerouted to other backends.";case"resume":return"This will restart health checks. The backend re-enters the 'unknown' state and will start receiving traffic once it probes up.";case"disable":return"This will stop health checks, set the weight to 0, AND flush VPP's flow table for this backend. Active sessions will be dropped immediately.";case"enable":return"This will restart health checks on a previously disabled backend. It re-enters the 'unknown' state and will start receiving traffic once it probes up."}}const Dn=e=>{const[t,n]=A(!1),[r,s]=A(),[l,o]=A(!1),[i,a]=A(),[c,u]=A(e.configuredWeight),[f,$]=A(!1);let g;const v=()=>In(e.state);K(()=>{if(!t())return;const p=y=>{g&&(g.contains(y.target)||n(!1))},m=y=>{y.key==="Escape"&&n(!1)};document.addEventListener("mousedown",p),document.addEventListener("keydown",m),q(()=>{document.removeEventListener("mousedown",p),document.removeEventListener("keydown",m)})});const w=p=>{n(!1),a(void 0),p==="weight"&&(u(e.configuredWeight),$(!1)),s(p)},T=()=>{l()||(s(void 0),a(void 0))},C=async()=>{const p=r();if(p){o(!0),a(void 0);try{if(p==="weight"){const m=c();if(!Number.isFinite(m)||m<0||m>100)throw new Error("weight must be an integer in [0, 100]");const y=Math.floor(m);await _n(e.maglevd,e.frontend,e.pool,e.backend,y,f()),Zt(e.maglevd,e.frontend,e.pool,e.backend,y)}else await yn(e.maglevd,e.backend,p);s(void 0)}catch(m){a(`${m}`)}finally{o(!1)}}};return h(N,{get when(){return v().length>0},get children(){var p=An(),m=p.firstChild,y=g;return typeof y=="function"?ke(y,p):g=p,m.$$click=S=>{S.stopPropagation(),n(x=>!x)},d(p,h(N,{get when(){return t()},get children(){var S=xn();return d(S,h(Q,{get each(){return v()},children:x=>(()=>{var P=En();return P.$$click=()=>w(x.action),d(P,()=>x.label),P})()})),S}}),null),d(p,h(N,{get when(){return r()},children:S=>h(Sn,{get title(){return Mn(S(),e.backend)},onClose:T,get children(){return[I(()=>I(()=>S()==="weight")()?(()=>{var x=Pn(),P=x.firstChild,j=P.firstChild,D=j.nextSibling,re=D.nextSibling,ue=re.nextSibling,fe=ue.nextSibling,je=P.nextSibling,De=je.firstChild,ct=De.firstChild,ut=ct.nextSibling,Me=De.nextSibling,ft=je.nextSibling,Re=ft.firstChild;return d(j,()=>e.backend),d(re,()=>e.pool),d(fe,()=>e.frontend),d(ut,c),Me.$$input=xe=>u(Number(xe.currentTarget.value)),Re.addEventListener("change",xe=>$(xe.currentTarget.checked)),d(x,h(N,{get when(){return f()},get fallback(){return Nn()},get children(){return Tn()}}),null),E(()=>Me.value=c()),E(()=>Re.checked=f()),x})():(()=>{var x=Ln(),P=x.firstChild;return d(P,()=>jn(S())),x})()),h(N,{get when(){return i()},get children(){var x=Cn();return d(x,i),x}}),(()=>{var x=On(),P=x.firstChild,j=P.nextSibling;return P.$$click=T,j.$$click=C,d(j,()=>l()?"committing…":"commit"),E(D=>{var re=l(),ue=!!(S()==="disable"||S()==="weight"&&f()),fe=l();return re!==D.e&&(P.disabled=D.e=re),ue!==D.t&&j.classList.toggle("btn-danger",D.t=ue),fe!==D.a&&(j.disabled=D.a=fe),D},{e:void 0,t:void 0,a:void 0}),x})()]}})}),null),E(()=>L(m,"aria-expanded",t())),p}})};function Mn(e,t){switch(e){case"weight":return`Set weight — ${t}`;case"pause":return`Pause ${t}?`;case"resume":return`Resume ${t}?`;case"disable":return`Disable ${t}?`;case"enable":return`Enable ${t}?`}}_e(["click","input"]);const U=window.location.pathname.startsWith("/admin");var Rn=b("<td class=actions>"),Bn=b("<tr class=backend-row><td class=col-pool></td><td class=backend-name><span class=backend-name-text></span></td><td class=backend-address></td><td></td><td class=numeric></td><td class=numeric></td><td class=numeric></td><td class=age>");const Wn=e=>{const t=()=>e.backend,n=H(()=>{const r=Yt(Y.byName[e.maglevd],e.frontend,t().name);return r===void 0?"—":r});return(()=>{var r=Bn(),s=r.firstChild,l=s.nextSibling,o=l.firstChild,i=l.nextSibling,a=i.nextSibling,c=a.nextSibling,u=c.nextSibling,f=u.nextSibling,$=f.nextSibling;return d(s,(()=>{var g=I(()=>!!e.showPool);return()=>g()?e.pool:""})()),d(l,h(wn,{get maglevd(){return e.maglevd},get backend(){return t().name},get state(){return t().state}}),o),d(o,()=>t().name),d(i,()=>t().address),d(a,h(Z,{get value(){return t().state},get children(){return h(it,{get state(){return t().state}})}})),d(c,h(Z,{get value(){return e.poolBackend.weight}})),d(u,h(Z,{get value(){return e.poolBackend.effective_weight}})),d(f,h(Z,{get value(){return n()}})),d($,()=>tn(t().last_transition)),d(r,h(N,{when:U,get children(){var g=Rn();return d(g,h(Dn,{get maglevd(){return e.maglevd},get frontend(){return e.frontend},get pool(){return e.pool},get backend(){return t().name},get state(){return t().state},get configuredWeight(){return e.poolBackend.weight}})),g}}),null),E(g=>{var v=!e.poolActive,w=t().state;return v!==g.e&&r.classList.toggle("pool-standby",g.e=v),w!==g.t&&L(r,"data-state",g.t=w),g},{e:void 0,t:void 0}),r})()},Te="maglev_zippy_open",Un=60*60*24*365;function Hn(){try{const e=document.cookie.split("; ").find(n=>n.startsWith(Te+"="));if(!e)return new Set;const t=decodeURIComponent(e.slice(Te.length+1));return t?new Set(t.split(",")):new Set}catch{return new Set}}function Fn(e){try{const t=encodeURIComponent([...e].join(","));document.cookie=`${Te}=${t}; Path=/; Max-Age=${Un}; SameSite=Lax`}catch{}}const[ot,Vn]=A(Hn());function Kn(e){return ot().has(e)}function Gn(e,t){const n=ot();if(t===n.has(e))return;const r=new Set(n);t?r.add(e):r.delete(e),Vn(r),Fn(r)}var qn=b("<details class=zippy><summary></summary><div class=zippy-body>");const Ie=e=>(()=>{var t=qn(),n=t.firstChild,r=n.nextSibling;return t.addEventListener("toggle",s=>Gn(e.id,s.currentTarget.open)),d(n,()=>e.title),d(r,()=>e.children),E(()=>t.open=Kn(e.id)),t})();var Yn=b("<span class=frontend-title><span class=frontend-title-icon aria-label=health role=img></span><span class=frontend-title-name></span><span class=frontend-title-addr></span><span class=frontend-title-proto>"),Jn=b("<span class=tag>sticky"),Xn=b("<span class=frontend-title-desc>"),Zn=b('<th class="col-actions actions">'),zn=b('<table class=backend-table><thead><tr><th class=col-pool>pool</th><th class=col-name>backend</th><th class=col-address>address</th><th class=col-state>state</th><th class="col-weight numeric">weight</th><th class="col-effective numeric">effective</th><th class="col-buckets numeric">lb buckets</th><th class=col-age>last transition</th></tr></thead><tbody>');const Qn=e=>{const t=()=>Object.fromEntries(e.snap.backends.map(s=>[s.name,s])),n=()=>e.frontend,r=(()=>{var s=Yn(),l=s.firstChild,o=l.nextSibling,i=o.nextSibling,a=i.nextSibling;return d(l,()=>Qt(e.snap,n())),d(o,()=>n().name),d(s,h(Z,{get value(){return n().state??"unknown"},get children(){return h(it,{get state(){return n().state??"unknown"}})}}),i),d(i,()=>en(n().address,n().port)),d(a,()=>n().protocol.toUpperCase()),d(s,(()=>{var c=I(()=>!!n().src_ip_sticky);return()=>c()&&Jn()})(),null),d(s,(()=>{var c=I(()=>!!n().description);return()=>c()&&(()=>{var u=Xn();return d(u,()=>n().description),u})()})(),null),s})();return h(Ie,{get id(){return`frontend-${e.snap.maglevd.name}-${n().name}`},title:r,get children(){var s=zn(),l=s.firstChild,o=l.firstChild,i=o.firstChild,a=i.nextSibling,c=a.nextSibling,u=c.nextSibling,f=u.nextSibling,$=f.nextSibling,g=$.nextSibling;g.nextSibling;var v=l.nextSibling;return d(o,h(N,{when:U,get children(){return Zn()}}),null),d(v,h(Q,{get each(){return n().pools},children:w=>{const T=()=>w.backends.some(C=>C.effective_weight>0);return h(Q,{get each(){return w.backends},children:(C,p)=>{const m=t()[C.name];return m?h(Wn,{get maglevd(){return e.snap.maglevd.name},get frontend(){return n().name},get pool(){return w.name},get showPool(){return p()===0},get poolActive(){return T()},backend:m,poolBackend:C}):null}})}})),s}})};var er=b("<span class=vpp-badge>"),tr=b("<span class=zippy-title>VPP<span class=vpp-io aria-hidden=true><span class=vpp-io-label>API:</span><span class=vpp-tx>↑</span><span class=vpp-rx>↓"),nr=b("<p class=empty>No VPP information available."),rr=b("<dl class=kv><dt>version</dt><dd></dd><dt>build date</dt><dd></dd><dt>pid</dt><dd></dd><dt>booted</dt><dd></dd><dt>connected</dt><dd>");const sr=e=>{const t=()=>e.info?.boottime_ns?new Date(e.info.boottime_ns/1e6).toISOString():"",n=()=>e.info?.connecttime_ns?new Date(e.info.connecttime_ns/1e6).toISOString():"",r=()=>e.state==="connected"?"connected":"disconnected",[s,l]=A(!1),[o,i]=A(!1);let a,c;const u=()=>{l(!0),a&&clearTimeout(a),a=window.setTimeout(()=>{l(!1),a=void 0},250)},f=()=>{i(!0),c&&clearTimeout(c),c=window.setTimeout(()=>{i(!1),c=void 0},250)};K(()=>{const g=ve();if(!g.length)return;const v=g[g.length-1];if(v.maglevd!==e.name||v.type!=="log")return;const w=v.payload?.msg;w&&(w.startsWith("vpp-api-send")?u():w.startsWith("vpp-api-recv")&&f())}),q(()=>{a&&clearTimeout(a),c&&clearTimeout(c)});const $=(()=>{var g=tr(),v=g.firstChild,w=v.nextSibling,T=w.firstChild,C=T.nextSibling,p=C.nextSibling;return d(g,h(Z,{get value(){return r()},get children(){var m=er();return d(m,r),E(()=>L(m,"data-state",r())),m}}),w),E(m=>{var y=!!s(),S=!!o();return y!==m.e&&C.classList.toggle("lit",m.e=y),S!==m.t&&p.classList.toggle("lit",m.t=S),m},{e:void 0,t:void 0}),g})();return h(Ie,{get id(){return`vpp-${e.name}`},title:$,get children(){return h(N,{get when(){return e.info},get fallback(){return nr()},children:g=>(()=>{var v=rr(),w=v.firstChild,T=w.nextSibling,C=T.nextSibling,p=C.nextSibling,m=p.nextSibling,y=m.nextSibling,S=y.nextSibling,x=S.nextSibling,P=x.nextSibling,j=P.nextSibling;return d(T,()=>g().version),d(p,()=>g().build_date),d(y,()=>g().pid),d(x,t),d(j,n),v})()})}})};var lr=b("<main class=overview>"),ir=b("<p class=empty>No maglevd selected."),or=b('<div class="banner warn"> disconnected'),ar=b("<div class=frontend-list>");const cr=()=>{const e=()=>{const t=Se();return t?Y.byName[t]:void 0};return(()=>{var t=lr();return d(t,h(N,{get when(){return e()},get fallback(){return ir()},children:n=>[h(N,{get when(){return!n().maglevd.connected},get children(){var r=or(),s=r.firstChild;return d(r,()=>n().maglevd.name,s),d(r,(()=>{var l=I(()=>!!n().maglevd.last_error);return()=>l()&&`: ${n().maglevd.last_error}`})(),null),r}}),(()=>{var r=ar();return d(r,h(Q,{get each(){return n().frontends},children:s=>h(Qn,{get snap(){return n()},frontend:s})})),r})(),h(sr,{get name(){return n().maglevd.name},get info(){return n().vpp_info},get state(){return n().vpp_state}})]})),t})()};var ur=b("<ol class=event-tail>"),fr=b("<div class=debug-toolbar><label><input type=checkbox>all maglevds</label><button></button><span class=count> events"),dr=b("<li>");const gr=()=>{const[e,t]=A(!1),[n,r]=A(!1),[s,l]=A([]),o=H(()=>{const c=n()?s():ve();if(e())return c;const u=Se();return u?c.filter(f=>f.maglevd===u):c}),i=()=>{n()?r(!1):(l([...ve()]),r(!0))};let a;return K(()=>{o(),!n()&&a&&(a.scrollTop=a.scrollHeight)}),h(Ie,{id:"debug-events",title:"Event stream",get children(){return[(()=>{var c=ur(),u=a;return typeof u=="function"?ke(u,c):a=c,d(c,h(Q,{get each(){return o()},children:f=>(()=>{var $=dr();return d($,()=>mr(f)),E(g=>{var v=`event-row event-${f.type}`,w=!!hr(f);return v!==g.e&&Ot($,g.e=v),w!==g.t&&$.classList.toggle("event-sync",g.t=w),g},{e:void 0,t:void 0}),$})()})),c})(),(()=>{var c=fr(),u=c.firstChild,f=u.firstChild,$=u.nextSibling,g=$.nextSibling,v=g.firstChild;return f.addEventListener("change",w=>t(w.currentTarget.checked)),$.$$click=i,d($,()=>n()?"resume":"pause"),d(g,()=>o().length,v),E(()=>f.checked=e()),c})()]}})};function hr(e){return e.type!=="log"?!1:e.payload.msg.startsWith("vpp-lb-sync-")}function br(e){if(!e)return"";const t=["vip","protocol","port","address","weight","from","to","encap","src-ip-sticky","flush"],n=[],r=new Set;for(const s of t)s in e&&(n.push(`${s}=${e[s]}`),r.add(s));for(const[s,l]of Object.entries(e))r.has(s)||n.push(`${s}=${l}`);return n.join(" ")}function mr(e){const t=new Date(e.at_unix_ns/1e6).toISOString().substring(11,23),n=`[${e.maglevd}]`;switch(e.type){case"backend":{const r=e.payload;return`${t} ${n} backend ${r.backend}: ${r.transition.from} → ${r.transition.to}`}case"frontend":{const r=e.payload;return`${t} ${n} frontend ${r.frontend}: ${r.transition.from} → ${r.transition.to}`}case"log":{const r=e.payload;if(r.msg.startsWith("vpp-lb-sync-"))return`${t} ${n} ${r.msg} ${br(r.attrs)}`.trimEnd();const s=r.attrs?Object.entries(r.attrs).map(([l,o])=>`${l}=${o}`).join(" "):"";return`${t} ${n} ${r.level} ${r.msg} ${s}`.trimEnd()}case"maglevd-status":return`${t} ${n} maglevd status: ${JSON.stringify(e.payload)}`;default:return`${t} ${n} ${e.type}`}}_e(["click"]);const pr="/view/assets/logo-bimi-Bguc6E_L.svg";var $r=b("<span class=mode-tag>"),wr=b("<a class=admin-toggle>"),vr=b('<div class=app><header class=app-header><div class=brand><a class=brand-logo href=https://ipng.ch/ target=_blank rel=noopener title="IPng Networks"><img alt=IPng></a><a class=brand-name href=https://git.ipng.ch/ipng/vpp-maglev target=_blank rel=noopener title="vpp-maglev on git.ipng.ch"><strong>vpp-maglev'),yr=b("<span class=version> (<!>)"),_r=b('<div class="banner err">'),kr=b("<p class=loading>Loading…");const Sr=()=>{const[e,t]=A(),[n,r]=A();pt(async()=>{try{const[l,o]=await Promise.all([Ze(),jt()]);st(l),r(o),!Se()&&l.length>0&&lt(l[0].maglevd.name),on()}catch(l){t(`${l}`)}});const s=()=>n()?.admin_enabled===!0;return(()=>{var l=vr(),o=l.firstChild,i=o.firstChild,a=i.firstChild,c=a.firstChild;return a.nextSibling,L(c,"src",pr),d(i,(()=>{var u=I(()=>!!n());return()=>u()&&(()=>{var f=yr(),$=f.firstChild,g=$.nextSibling;return g.nextSibling,d(f,()=>n().version,$),d(f,()=>n().commit,g),E(()=>L(f,"title",`commit ${n().commit} · built ${n().date}`)),f})()})(),null),d(o,h(fn,{}),null),d(o,h(N,{get when(){return U||s()},get children(){var u=$r();return d(u,U?"admin":"view"),u}}),null),d(o,h(N,{get when(){return s()},get children(){var u=wr();return L(u,"href",U?"/view/":"/admin/"),L(u,"title",U?"exit admin mode":"enter admin mode"),d(u,U?"exit admin":"admin…"),u}}),null),d(l,(()=>{var u=I(()=>!!e());return()=>u()&&(()=>{var f=_r();return d(f,e),f})()})(),null),d(l,(()=>{var u=I(()=>!e()&&Object.keys(Y.byName).length===0);return()=>u()&&kr()})(),null),d(l,h(cr,{}),null),d(l,h(N,{when:U,get children(){return h(gr,{})}}),null),l})()},at=document.getElementById("root");if(!at)throw new Error("no #root element");Ct(()=>h(Sr,{}),at);
diff --git a/cmd/frontend/web/dist/index.html b/cmd/frontend/web/dist/index.html
index 607e52f..16a4ca9 100644
--- a/cmd/frontend/web/dist/index.html
+++ b/cmd/frontend/web/dist/index.html
@@ -5,7 +5,7 @@
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <link rel="icon" type="image/x-icon" href="/view/favicon.ico" />
     <title>maglev</title>
-    <script type="module" crossorigin src="/view/assets/index-DCJJqBMY.js"></script>
+    <script type="module" crossorigin src="/view/assets/index-3m4Pjc8_.js"></script>
     <link rel="stylesheet" crossorigin href="/view/assets/index-3BvNJ7QB.css">
   </head>
   <body>
diff --git a/cmd/frontend/web/src/App.tsx b/cmd/frontend/web/src/App.tsx
index 1a51598..4f69cc3 100644
--- a/cmd/frontend/web/src/App.tsx
+++ b/cmd/frontend/web/src/App.tsx
@@ -19,7 +19,14 @@ const App: Component = () => {
       const [snaps, ver] = await Promise.all([fetchAllState(), fetchVersion()]);
       replaceAll(snaps);
       setVersion(ver);
-      if (!scope() && snaps.length > 0) {
+      // Hydrate the scope: prefer a cookie-loaded value, but only if it
+      // still matches a maglevd we actually got back in the snapshot.
+      // Otherwise fall back to the first server in the list so the user
+      // never sees a "ghost selection" pointing at a maglevd that was
+      // removed or renamed since their last visit.
+      const current = scope();
+      const valid = current && snaps.some((s) => s.maglevd.name === current);
+      if (!valid && snaps.length > 0) {
         setScope(snaps[0].maglevd.name);
       }
       openEventStream();
diff --git a/cmd/frontend/web/src/components/Flash.tsx b/cmd/frontend/web/src/components/Flash.tsx
index 743be2e..1cce6b2 100644
--- a/cmd/frontend/web/src/components/Flash.tsx
+++ b/cmd/frontend/web/src/components/Flash.tsx
@@ -1,4 +1,4 @@
-import { createEffect, on, type Component, type JSX } from "solid-js";
+import { createEffect, createMemo, on, type Component, type JSX } from "solid-js";
 
 type Props = {
   // value is used solely for change detection. When it changes the
@@ -26,9 +26,26 @@ type Props = {
 const Flash: Component<Props> = (props) => {
   let el: HTMLSpanElement | undefined;
 
+  // Solid's on() fires its callback whenever a tracked dep *notifies*,
+  // not whenever the tracked value actually changes — the source is
+  // right there in dist/solid.js:460, there's no equality check, just
+  // `fn(input, prevInput, prevValue)` on every notification. That's a
+  // problem for Flash because props.value is typically a reactive
+  // expression chained through the store (e.g. a per-maglevd
+  // vpp_state read), and changing an upstream signal like scope()
+  // causes every downstream reactive to re-evaluate even when the
+  // concrete value it produces is identical. Without this memo, the
+  // badge flashes every time you flip from one maglevd to another
+  // where both are 'connected'.
+  //
+  // createMemo gives us the equality dedupe we need: its default
+  // equality is ===, so an upstream notification that doesn't change
+  // the memoized output never propagates to the effect below.
+  const value = createMemo(() => props.value);
+
   createEffect(
     on(
-      () => props.value,
+      value,
       () => {
         el?.animate(
           [
diff --git a/cmd/frontend/web/src/stores/scope.ts b/cmd/frontend/web/src/stores/scope.ts
index 1830c30..e9dd167 100644
--- a/cmd/frontend/web/src/stores/scope.ts
+++ b/cmd/frontend/web/src/stores/scope.ts
@@ -1,6 +1,48 @@
 import { createSignal } from "solid-js";
 
-// The currently selected maglevd name, or undefined before first fetch.
-const [scope, setScope] = createSignal<string | undefined>(undefined);
+// Persisted selection of which maglevd the SPA is currently scoped to.
+// The cookie is a best-effort hint: if it's missing, corrupt, or names a
+// maglevd that no longer exists, we fall back to whatever App.tsx's
+// hydration path picks (typically the first server in byName order).
+// SameSite=Lax keeps it from leaking to third-party iframes; Max-Age is
+// a year so the selection survives browser restarts.
+
+const COOKIE_NAME = "maglev_scope";
+const COOKIE_MAX_AGE = 60 * 60 * 24 * 365;
+
+function readCookie(): string | undefined {
+  try {
+    const raw = document.cookie.split("; ").find((c) => c.startsWith(COOKIE_NAME + "="));
+    if (!raw) return undefined;
+    const value = decodeURIComponent(raw.slice(COOKIE_NAME.length + 1));
+    return value || undefined;
+  } catch {
+    return undefined;
+  }
+}
+
+function writeCookie(name: string | undefined) {
+  try {
+    if (!name) {
+      // Clear by setting Max-Age=0. Works across every mainstream browser.
+      document.cookie = `${COOKIE_NAME}=; Path=/; Max-Age=0; SameSite=Lax`;
+      return;
+    }
+    const value = encodeURIComponent(name);
+    document.cookie = `${COOKIE_NAME}=${value}; Path=/; Max-Age=${COOKIE_MAX_AGE}; SameSite=Lax`;
+  } catch {
+    // quota / third-party-cookie blocks / private window — best effort
+  }
+}
+
+const [scope, setScopeRaw] = createSignal<string | undefined>(readCookie());
+
+// setScope wraps the raw signal setter so every selection change writes
+// back to the cookie. Callers use this exactly like the old setScope —
+// the cookie plumbing is invisible at the call site.
+function setScope(name: string | undefined) {
+  setScopeRaw(name);
+  writeCookie(name);
+}
 
 export { scope, setScope };
diff --git a/cmd/frontend/web/src/stores/state.ts b/cmd/frontend/web/src/stores/state.ts
index 6582563..dda89ae 100644
--- a/cmd/frontend/web/src/stores/state.ts
+++ b/cmd/frontend/web/src/stores/state.ts
@@ -377,12 +377,7 @@ export function applyConfiguredWeight(
 //                        worse — typical maintenance / outage state
 //   "unknown"          → fallthrough; should be unreachable, kept as
 //                        a safety net for logic bugs in this function
-export type FrontendHealth =
-  | "ok"
-  | "bug-buckets"
-  | "primary-drained"
-  | "degraded"
-  | "unknown";
+export type FrontendHealth = "ok" | "bug-buckets" | "primary-drained" | "degraded" | "unknown";
 
 export function frontendHealth(snap: StateSnapshot, fe: FrontendSnapshot): FrontendHealth {
   const stateOf: Record<string, string> = {};
diff --git a/cmd/frontend/web/src/stores/zippy.ts b/cmd/frontend/web/src/stores/zippy.ts
index 5ceaffe..ff51ccc 100644
--- a/cmd/frontend/web/src/stores/zippy.ts
+++ b/cmd/frontend/web/src/stores/zippy.ts
@@ -17,9 +17,7 @@ const COOKIE_MAX_AGE = 60 * 60 * 24 * 365; // 1 year
 
 function readCookie(): Set<string> {
   try {
-    const raw = document.cookie
-      .split("; ")
-      .find((c) => c.startsWith(COOKIE_NAME + "="));
+    const raw = document.cookie.split("; ").find((c) => c.startsWith(COOKIE_NAME + "="));
     if (!raw) return new Set();
     const value = decodeURIComponent(raw.slice(COOKIE_NAME.length + 1));
     if (!value) return new Set();
diff --git a/cmd/maglevc/color.go b/cmd/maglevc/color.go
index 05a8935..3364b8a 100644
--- a/cmd/maglevc/color.go
+++ b/cmd/maglevc/color.go
@@ -14,9 +14,20 @@ const (
 var colorEnabled bool
 
 // label wraps s in dark-blue ANSI when color output is enabled.
-// Because every label receives the same fixed-length prefix/suffix, tabwriter
-// alignment is preserved: the extra bytes are equal for all rows so relative
-// widths remain correct.
+//
+// Tabwriter caveat: tabwriter.Writer counts *bytes* per cell, not
+// rendered columns. ANSI escape codes (`\x1b[34m…\x1b[0m`, 11 bytes)
+// inflate a cell's apparent width without affecting what the terminal
+// draws. Two things follow:
+//
+//  1. Key-value layouts where column 1 is *always* labelled and
+//     column 2 is *always* plain (e.g. `show vpp info`) stay aligned,
+//     because every row adds the same 11 bytes to column 1.
+//  2. Multi-column tables where only the *header* row is labelled
+//     drift: the header cells each carry 11 extra bytes that the data
+//     rows don't, so data cells get over-padded. In those tables,
+//     leave the header plain (see runShowVPPLBCounters) and only use
+//     label() for labels that appear uniformly column-wise.
 func label(s string) string {
 	if !colorEnabled {
 		return s
diff --git a/cmd/maglevc/commands.go b/cmd/maglevc/commands.go
index e776a99..36441a6 100644
--- a/cmd/maglevc/commands.go
+++ b/cmd/maglevc/commands.go
@@ -337,9 +337,11 @@ func runShowVPPLBState(ctx context.Context, client grpcapi.MaglevClient, _ []str
 	return nil
 }
 
-// runShowVPPLBCounters prints the per-VIP and per-backend runtime counters
-// captured by maglevd's 5s scrape loop. Values are up to 5 seconds stale;
-// Prometheus is the right tool if you need live rates.
+// runShowVPPLBCounters prints the per-VIP runtime counters captured by
+// maglevd's 5s scrape loop. Values are up to 5 seconds stale; Prometheus
+// is the right tool if you need live rates. There is no per-backend
+// block — see internal/vpp/lbstats.go::scrapeLBStats for why VPP's LB
+// plugin doesn't expose per-backend packet counters today.
 func runShowVPPLBCounters(ctx context.Context, client grpcapi.MaglevClient, _ []string) error {
 	ctx, cancel := context.WithTimeout(ctx, callTimeout)
 	defer cancel()
@@ -348,52 +350,30 @@ func runShowVPPLBCounters(ctx context.Context, client grpcapi.MaglevClient, _ []
 		return err
 	}
 
-	if len(resp.Vips) == 0 && len(resp.Backends) == 0 {
+	if len(resp.Vips) == 0 {
 		fmt.Println("(no counters — VPP disconnected or scrape pending)")
 		return nil
 	}
 
 	// ---- frontend-counters ----
+	//
+	// Column headers are plain strings, not label()-wrapped. tabwriter
+	// counts bytes (not rendered width), so wrapping a header cell in
+	// ANSI escape codes inflates its apparent width by ~11 bytes and
+	// the data rows below — which are plain numeric strings — end up
+	// over-padded. The label() convention only works when every cell
+	// in a column shares the same wrapping, which the key-value show
+	// commands do but this table can't (we're not about to colourise
+	// every packet count).
 	fmt.Println(label("frontend-counters"))
-	if len(resp.Vips) == 0 {
-		fmt.Println("  (none)")
-	} else {
-		w := tabwriter.NewWriter(os.Stdout, 0, 0, 2, ' ', 0)
-		fmt.Fprintf(w, "  %s\t%s\t%s\t%s\t%s\t%s\t%s\t%s\t%s\n",
-			label("vip"), label("proto"), label("port"),
-			label("first"), label("next"),
-			label("untracked"), label("no-server"),
-			label("fib-packets"), label("fib-bytes"),
-		)
-		for _, v := range resp.Vips {
-			fmt.Fprintf(w, "  %s\t%s\t%d\t%d\t%d\t%d\t%d\t%d\t%d\n",
-				stripHostMask(v.Prefix), v.Protocol, v.Port,
-				v.FirstPacket, v.NextPacket,
-				v.UntrackedPacket, v.NoServer,
-				v.Packets, v.Bytes,
-			)
-		}
-		if err := w.Flush(); err != nil {
-			return err
-		}
-	}
-
-	fmt.Println()
-
-	// ---- backend-counters ----
-	fmt.Println(label("backend-counters"))
-	if len(resp.Backends) == 0 {
-		fmt.Println("  (none)")
-		return nil
-	}
 	w := tabwriter.NewWriter(os.Stdout, 0, 0, 2, ' ', 0)
-	fmt.Fprintf(w, "  %s\t%s\t%s\t%s\n",
-		label("backend"), label("address"),
-		label("fib-packets"), label("fib-bytes"),
-	)
-	for _, b := range resp.Backends {
-		fmt.Fprintf(w, "  %s\t%s\t%d\t%d\n",
-			b.Backend, b.Address, b.Packets, b.Bytes,
+	fmt.Fprintf(w, "  vip\tproto\tport\tfirst\tnext\tuntracked\tno-server\tfib-packets\tfib-bytes\n")
+	for _, v := range resp.Vips {
+		fmt.Fprintf(w, "  %s\t%s\t%d\t%d\t%d\t%d\t%d\t%d\t%d\n",
+			stripHostMask(v.Prefix), v.Protocol, v.Port,
+			v.FirstPacket, v.NextPacket,
+			v.UntrackedPacket, v.NoServer,
+			v.Packets, v.Bytes,
 		)
 	}
 	return w.Flush()
diff --git a/debian/vpp-maglev.service b/debian/vpp-maglev.service
index f70df30..9cf887e 100644
--- a/debian/vpp-maglev.service
+++ b/debian/vpp-maglev.service
@@ -13,9 +13,20 @@ Restart=on-failure
 RestartSec=5s
 Type=simple
 
-# Grant only CAP_NET_RAW (needed for ICMP probes) and drop everything else.
-AmbientCapabilities=CAP_NET_RAW
-CapabilityBoundingSet=CAP_NET_RAW
+# Capabilities:
+#   CAP_NET_RAW   — required to open ICMP raw sockets for L3 probes.
+#   CAP_SYS_ADMIN — required for setns(CLONE_NEWNET) when the healthcheck
+#                   block sets `netns: <name>` in maglev.yaml. Per
+#                   setns(2) the kernel demands CAP_SYS_ADMIN in the
+#                   user namespace that owns the target net namespace;
+#                   without it the probe loop logs
+#                   `enter netns "<name>": operation not permitted`
+#                   and every backend flips to down/L4CON on first probe.
+#                   Drop this bound + ambient pair if the deployment
+#                   doesn't use `netns:` — the probes still work, they
+#                   just run in maglevd's own namespace.
+AmbientCapabilities=CAP_NET_RAW CAP_SYS_ADMIN
+CapabilityBoundingSet=CAP_NET_RAW CAP_SYS_ADMIN
 NoNewPrivileges=yes
 
 [Install]
diff --git a/internal/checker/checker.go b/internal/checker/checker.go
index bd279e5..46f6432 100644
--- a/internal/checker/checker.go
+++ b/internal/checker/checker.go
@@ -155,6 +155,20 @@ func (c *Checker) Reload(ctx context.Context, cfg *config.Config) error {
 				runtimeEnabled := w.entry.Enabled
 				w.entry = b
 				w.entry.Enabled = runtimeEnabled
+				// Mirror the new address onto the runtime
+				// health.Backend. health.New captured the old
+				// address at worker-creation time and nothing
+				// else tracks subsequent config edits, so without
+				// this line GetBackend keeps returning the pre-
+				// reload address via snap.Health.Address — which
+				// propagates into maglev-frontend's cache and
+				// leaves the SPA showing a stale address even
+				// though VPP (and the rest of maglevd) has
+				// already moved on. The probe loop re-reads
+				// w.entry.Address on its next iteration, so the
+				// healthcheck target follows the new value on
+				// its own.
+				w.backend.Address = b.Address
 				continue
 			}
 			slog.Info("backend-restart", "backend", name)
diff --git a/internal/grpcapi/maglev.pb.go b/internal/grpcapi/maglev.pb.go
index 4eb8ffe..aea851e 100644
--- a/internal/grpcapi/maglev.pb.go
+++ b/internal/grpcapi/maglev.pb.go
@@ -1191,87 +1191,22 @@ func (x *VPPLBVIPCounters) GetBytes() uint64 {
 	return 0
 }
 
-// VPPLBBackendCounters is the FIB combined counter for a single backend's
-// host prefix, summed across worker threads.
-type VPPLBBackendCounters struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	Backend       string                 `protobuf:"bytes,1,opt,name=backend,proto3" json:"backend,omitempty"` // backend name from config
-	Address       string                 `protobuf:"bytes,2,opt,name=address,proto3" json:"address,omitempty"` // backend IP address
-	Packets       uint64                 `protobuf:"varint,3,opt,name=packets,proto3" json:"packets,omitempty"`
-	Bytes         uint64                 `protobuf:"varint,4,opt,name=bytes,proto3" json:"bytes,omitempty"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *VPPLBBackendCounters) Reset() {
-	*x = VPPLBBackendCounters{}
-	mi := &file_proto_maglev_proto_msgTypes[22]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *VPPLBBackendCounters) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*VPPLBBackendCounters) ProtoMessage() {}
-
-func (x *VPPLBBackendCounters) ProtoReflect() protoreflect.Message {
-	mi := &file_proto_maglev_proto_msgTypes[22]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use VPPLBBackendCounters.ProtoReflect.Descriptor instead.
-func (*VPPLBBackendCounters) Descriptor() ([]byte, []int) {
-	return file_proto_maglev_proto_rawDescGZIP(), []int{22}
-}
-
-func (x *VPPLBBackendCounters) GetBackend() string {
-	if x != nil {
-		return x.Backend
-	}
-	return ""
-}
-
-func (x *VPPLBBackendCounters) GetAddress() string {
-	if x != nil {
-		return x.Address
-	}
-	return ""
-}
-
-func (x *VPPLBBackendCounters) GetPackets() uint64 {
-	if x != nil {
-		return x.Packets
-	}
-	return 0
-}
-
-func (x *VPPLBBackendCounters) GetBytes() uint64 {
-	if x != nil {
-		return x.Bytes
-	}
-	return 0
-}
-
+// VPPLBCounters wraps the per-VIP counter list returned by
+// GetVPPLBCounters. There is no per-backend counter block: VPP's LB
+// plugin forwarding node bypasses ip{4,6}_lookup_inline and writes
+// adj_index[VLIB_TX] directly, so /net/route/to at a backend's FIB
+// entry never ticks for LB-forwarded traffic — the four per-VIP
+// counters are the only per-VIP-and-coarser signal VPP exposes today.
 type VPPLBCounters struct {
-	state         protoimpl.MessageState  `protogen:"open.v1"`
-	Vips          []*VPPLBVIPCounters     `protobuf:"bytes,1,rep,name=vips,proto3" json:"vips,omitempty"`
-	Backends      []*VPPLBBackendCounters `protobuf:"bytes,2,rep,name=backends,proto3" json:"backends,omitempty"`
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	Vips          []*VPPLBVIPCounters    `protobuf:"bytes,1,rep,name=vips,proto3" json:"vips,omitempty"`
 	unknownFields protoimpl.UnknownFields
 	sizeCache     protoimpl.SizeCache
 }
 
 func (x *VPPLBCounters) Reset() {
 	*x = VPPLBCounters{}
-	mi := &file_proto_maglev_proto_msgTypes[23]
+	mi := &file_proto_maglev_proto_msgTypes[22]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -1283,7 +1218,7 @@ func (x *VPPLBCounters) String() string {
 func (*VPPLBCounters) ProtoMessage() {}
 
 func (x *VPPLBCounters) ProtoReflect() protoreflect.Message {
-	mi := &file_proto_maglev_proto_msgTypes[23]
+	mi := &file_proto_maglev_proto_msgTypes[22]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1296,7 +1231,7 @@ func (x *VPPLBCounters) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use VPPLBCounters.ProtoReflect.Descriptor instead.
 func (*VPPLBCounters) Descriptor() ([]byte, []int) {
-	return file_proto_maglev_proto_rawDescGZIP(), []int{23}
+	return file_proto_maglev_proto_rawDescGZIP(), []int{22}
 }
 
 func (x *VPPLBCounters) GetVips() []*VPPLBVIPCounters {
@@ -1306,13 +1241,6 @@ func (x *VPPLBCounters) GetVips() []*VPPLBVIPCounters {
 	return nil
 }
 
-func (x *VPPLBCounters) GetBackends() []*VPPLBBackendCounters {
-	if x != nil {
-		return x.Backends
-	}
-	return nil
-}
-
 type SetWeightRequest struct {
 	state    protoimpl.MessageState `protogen:"open.v1"`
 	Frontend string                 `protobuf:"bytes,1,opt,name=frontend,proto3" json:"frontend,omitempty"`
@@ -1330,7 +1258,7 @@ type SetWeightRequest struct {
 
 func (x *SetWeightRequest) Reset() {
 	*x = SetWeightRequest{}
-	mi := &file_proto_maglev_proto_msgTypes[24]
+	mi := &file_proto_maglev_proto_msgTypes[23]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -1342,7 +1270,7 @@ func (x *SetWeightRequest) String() string {
 func (*SetWeightRequest) ProtoMessage() {}
 
 func (x *SetWeightRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_proto_maglev_proto_msgTypes[24]
+	mi := &file_proto_maglev_proto_msgTypes[23]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1355,7 +1283,7 @@ func (x *SetWeightRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use SetWeightRequest.ProtoReflect.Descriptor instead.
 func (*SetWeightRequest) Descriptor() ([]byte, []int) {
-	return file_proto_maglev_proto_rawDescGZIP(), []int{24}
+	return file_proto_maglev_proto_rawDescGZIP(), []int{23}
 }
 
 func (x *SetWeightRequest) GetFrontend() string {
@@ -1407,7 +1335,7 @@ type WatchRequest struct {
 
 func (x *WatchRequest) Reset() {
 	*x = WatchRequest{}
-	mi := &file_proto_maglev_proto_msgTypes[25]
+	mi := &file_proto_maglev_proto_msgTypes[24]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -1419,7 +1347,7 @@ func (x *WatchRequest) String() string {
 func (*WatchRequest) ProtoMessage() {}
 
 func (x *WatchRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_proto_maglev_proto_msgTypes[25]
+	mi := &file_proto_maglev_proto_msgTypes[24]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1432,7 +1360,7 @@ func (x *WatchRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use WatchRequest.ProtoReflect.Descriptor instead.
 func (*WatchRequest) Descriptor() ([]byte, []int) {
-	return file_proto_maglev_proto_rawDescGZIP(), []int{25}
+	return file_proto_maglev_proto_rawDescGZIP(), []int{24}
 }
 
 func (x *WatchRequest) GetLog() bool {
@@ -1472,7 +1400,7 @@ type ListFrontendsResponse struct {
 
 func (x *ListFrontendsResponse) Reset() {
 	*x = ListFrontendsResponse{}
-	mi := &file_proto_maglev_proto_msgTypes[26]
+	mi := &file_proto_maglev_proto_msgTypes[25]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -1484,7 +1412,7 @@ func (x *ListFrontendsResponse) String() string {
 func (*ListFrontendsResponse) ProtoMessage() {}
 
 func (x *ListFrontendsResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_proto_maglev_proto_msgTypes[26]
+	mi := &file_proto_maglev_proto_msgTypes[25]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1497,7 +1425,7 @@ func (x *ListFrontendsResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use ListFrontendsResponse.ProtoReflect.Descriptor instead.
 func (*ListFrontendsResponse) Descriptor() ([]byte, []int) {
-	return file_proto_maglev_proto_rawDescGZIP(), []int{26}
+	return file_proto_maglev_proto_rawDescGZIP(), []int{25}
 }
 
 func (x *ListFrontendsResponse) GetFrontendNames() []string {
@@ -1518,7 +1446,7 @@ type PoolBackendInfo struct {
 
 func (x *PoolBackendInfo) Reset() {
 	*x = PoolBackendInfo{}
-	mi := &file_proto_maglev_proto_msgTypes[27]
+	mi := &file_proto_maglev_proto_msgTypes[26]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -1530,7 +1458,7 @@ func (x *PoolBackendInfo) String() string {
 func (*PoolBackendInfo) ProtoMessage() {}
 
 func (x *PoolBackendInfo) ProtoReflect() protoreflect.Message {
-	mi := &file_proto_maglev_proto_msgTypes[27]
+	mi := &file_proto_maglev_proto_msgTypes[26]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1543,7 +1471,7 @@ func (x *PoolBackendInfo) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use PoolBackendInfo.ProtoReflect.Descriptor instead.
 func (*PoolBackendInfo) Descriptor() ([]byte, []int) {
-	return file_proto_maglev_proto_rawDescGZIP(), []int{27}
+	return file_proto_maglev_proto_rawDescGZIP(), []int{26}
 }
 
 func (x *PoolBackendInfo) GetName() string {
@@ -1577,7 +1505,7 @@ type PoolInfo struct {
 
 func (x *PoolInfo) Reset() {
 	*x = PoolInfo{}
-	mi := &file_proto_maglev_proto_msgTypes[28]
+	mi := &file_proto_maglev_proto_msgTypes[27]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -1589,7 +1517,7 @@ func (x *PoolInfo) String() string {
 func (*PoolInfo) ProtoMessage() {}
 
 func (x *PoolInfo) ProtoReflect() protoreflect.Message {
-	mi := &file_proto_maglev_proto_msgTypes[28]
+	mi := &file_proto_maglev_proto_msgTypes[27]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1602,7 +1530,7 @@ func (x *PoolInfo) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use PoolInfo.ProtoReflect.Descriptor instead.
 func (*PoolInfo) Descriptor() ([]byte, []int) {
-	return file_proto_maglev_proto_rawDescGZIP(), []int{28}
+	return file_proto_maglev_proto_rawDescGZIP(), []int{27}
 }
 
 func (x *PoolInfo) GetName() string {
@@ -1634,7 +1562,7 @@ type FrontendInfo struct {
 
 func (x *FrontendInfo) Reset() {
 	*x = FrontendInfo{}
-	mi := &file_proto_maglev_proto_msgTypes[29]
+	mi := &file_proto_maglev_proto_msgTypes[28]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -1646,7 +1574,7 @@ func (x *FrontendInfo) String() string {
 func (*FrontendInfo) ProtoMessage() {}
 
 func (x *FrontendInfo) ProtoReflect() protoreflect.Message {
-	mi := &file_proto_maglev_proto_msgTypes[29]
+	mi := &file_proto_maglev_proto_msgTypes[28]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1659,7 +1587,7 @@ func (x *FrontendInfo) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use FrontendInfo.ProtoReflect.Descriptor instead.
 func (*FrontendInfo) Descriptor() ([]byte, []int) {
-	return file_proto_maglev_proto_rawDescGZIP(), []int{29}
+	return file_proto_maglev_proto_rawDescGZIP(), []int{28}
 }
 
 func (x *FrontendInfo) GetName() string {
@@ -1720,7 +1648,7 @@ type ListBackendsResponse struct {
 
 func (x *ListBackendsResponse) Reset() {
 	*x = ListBackendsResponse{}
-	mi := &file_proto_maglev_proto_msgTypes[30]
+	mi := &file_proto_maglev_proto_msgTypes[29]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -1732,7 +1660,7 @@ func (x *ListBackendsResponse) String() string {
 func (*ListBackendsResponse) ProtoMessage() {}
 
 func (x *ListBackendsResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_proto_maglev_proto_msgTypes[30]
+	mi := &file_proto_maglev_proto_msgTypes[29]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1745,7 +1673,7 @@ func (x *ListBackendsResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use ListBackendsResponse.ProtoReflect.Descriptor instead.
 func (*ListBackendsResponse) Descriptor() ([]byte, []int) {
-	return file_proto_maglev_proto_rawDescGZIP(), []int{30}
+	return file_proto_maglev_proto_rawDescGZIP(), []int{29}
 }
 
 func (x *ListBackendsResponse) GetBackendNames() []string {
@@ -1764,7 +1692,7 @@ type ListHealthChecksResponse struct {
 
 func (x *ListHealthChecksResponse) Reset() {
 	*x = ListHealthChecksResponse{}
-	mi := &file_proto_maglev_proto_msgTypes[31]
+	mi := &file_proto_maglev_proto_msgTypes[30]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -1776,7 +1704,7 @@ func (x *ListHealthChecksResponse) String() string {
 func (*ListHealthChecksResponse) ProtoMessage() {}
 
 func (x *ListHealthChecksResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_proto_maglev_proto_msgTypes[31]
+	mi := &file_proto_maglev_proto_msgTypes[30]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1789,7 +1717,7 @@ func (x *ListHealthChecksResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use ListHealthChecksResponse.ProtoReflect.Descriptor instead.
 func (*ListHealthChecksResponse) Descriptor() ([]byte, []int) {
-	return file_proto_maglev_proto_rawDescGZIP(), []int{31}
+	return file_proto_maglev_proto_rawDescGZIP(), []int{30}
 }
 
 func (x *ListHealthChecksResponse) GetNames() []string {
@@ -1814,7 +1742,7 @@ type HTTPCheckParams struct {
 
 func (x *HTTPCheckParams) Reset() {
 	*x = HTTPCheckParams{}
-	mi := &file_proto_maglev_proto_msgTypes[32]
+	mi := &file_proto_maglev_proto_msgTypes[31]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -1826,7 +1754,7 @@ func (x *HTTPCheckParams) String() string {
 func (*HTTPCheckParams) ProtoMessage() {}
 
 func (x *HTTPCheckParams) ProtoReflect() protoreflect.Message {
-	mi := &file_proto_maglev_proto_msgTypes[32]
+	mi := &file_proto_maglev_proto_msgTypes[31]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1839,7 +1767,7 @@ func (x *HTTPCheckParams) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use HTTPCheckParams.ProtoReflect.Descriptor instead.
 func (*HTTPCheckParams) Descriptor() ([]byte, []int) {
-	return file_proto_maglev_proto_rawDescGZIP(), []int{32}
+	return file_proto_maglev_proto_rawDescGZIP(), []int{31}
 }
 
 func (x *HTTPCheckParams) GetPath() string {
@@ -1902,7 +1830,7 @@ type TCPCheckParams struct {
 
 func (x *TCPCheckParams) Reset() {
 	*x = TCPCheckParams{}
-	mi := &file_proto_maglev_proto_msgTypes[33]
+	mi := &file_proto_maglev_proto_msgTypes[32]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -1914,7 +1842,7 @@ func (x *TCPCheckParams) String() string {
 func (*TCPCheckParams) ProtoMessage() {}
 
 func (x *TCPCheckParams) ProtoReflect() protoreflect.Message {
-	mi := &file_proto_maglev_proto_msgTypes[33]
+	mi := &file_proto_maglev_proto_msgTypes[32]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1927,7 +1855,7 @@ func (x *TCPCheckParams) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use TCPCheckParams.ProtoReflect.Descriptor instead.
 func (*TCPCheckParams) Descriptor() ([]byte, []int) {
-	return file_proto_maglev_proto_rawDescGZIP(), []int{33}
+	return file_proto_maglev_proto_rawDescGZIP(), []int{32}
 }
 
 func (x *TCPCheckParams) GetSsl() bool {
@@ -1972,7 +1900,7 @@ type HealthCheckInfo struct {
 
 func (x *HealthCheckInfo) Reset() {
 	*x = HealthCheckInfo{}
-	mi := &file_proto_maglev_proto_msgTypes[34]
+	mi := &file_proto_maglev_proto_msgTypes[33]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -1984,7 +1912,7 @@ func (x *HealthCheckInfo) String() string {
 func (*HealthCheckInfo) ProtoMessage() {}
 
 func (x *HealthCheckInfo) ProtoReflect() protoreflect.Message {
-	mi := &file_proto_maglev_proto_msgTypes[34]
+	mi := &file_proto_maglev_proto_msgTypes[33]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -1997,7 +1925,7 @@ func (x *HealthCheckInfo) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use HealthCheckInfo.ProtoReflect.Descriptor instead.
 func (*HealthCheckInfo) Descriptor() ([]byte, []int) {
-	return file_proto_maglev_proto_rawDescGZIP(), []int{34}
+	return file_proto_maglev_proto_rawDescGZIP(), []int{33}
 }
 
 func (x *HealthCheckInfo) GetName() string {
@@ -2105,7 +2033,7 @@ type BackendInfo struct {
 
 func (x *BackendInfo) Reset() {
 	*x = BackendInfo{}
-	mi := &file_proto_maglev_proto_msgTypes[35]
+	mi := &file_proto_maglev_proto_msgTypes[34]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -2117,7 +2045,7 @@ func (x *BackendInfo) String() string {
 func (*BackendInfo) ProtoMessage() {}
 
 func (x *BackendInfo) ProtoReflect() protoreflect.Message {
-	mi := &file_proto_maglev_proto_msgTypes[35]
+	mi := &file_proto_maglev_proto_msgTypes[34]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2130,7 +2058,7 @@ func (x *BackendInfo) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use BackendInfo.ProtoReflect.Descriptor instead.
 func (*BackendInfo) Descriptor() ([]byte, []int) {
-	return file_proto_maglev_proto_rawDescGZIP(), []int{35}
+	return file_proto_maglev_proto_rawDescGZIP(), []int{34}
 }
 
 func (x *BackendInfo) GetName() string {
@@ -2186,7 +2114,7 @@ type TransitionRecord struct {
 
 func (x *TransitionRecord) Reset() {
 	*x = TransitionRecord{}
-	mi := &file_proto_maglev_proto_msgTypes[36]
+	mi := &file_proto_maglev_proto_msgTypes[35]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -2198,7 +2126,7 @@ func (x *TransitionRecord) String() string {
 func (*TransitionRecord) ProtoMessage() {}
 
 func (x *TransitionRecord) ProtoReflect() protoreflect.Message {
-	mi := &file_proto_maglev_proto_msgTypes[36]
+	mi := &file_proto_maglev_proto_msgTypes[35]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2211,7 +2139,7 @@ func (x *TransitionRecord) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use TransitionRecord.ProtoReflect.Descriptor instead.
 func (*TransitionRecord) Descriptor() ([]byte, []int) {
-	return file_proto_maglev_proto_rawDescGZIP(), []int{36}
+	return file_proto_maglev_proto_rawDescGZIP(), []int{35}
 }
 
 func (x *TransitionRecord) GetFrom() string {
@@ -2246,7 +2174,7 @@ type LogAttr struct {
 
 func (x *LogAttr) Reset() {
 	*x = LogAttr{}
-	mi := &file_proto_maglev_proto_msgTypes[37]
+	mi := &file_proto_maglev_proto_msgTypes[36]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -2258,7 +2186,7 @@ func (x *LogAttr) String() string {
 func (*LogAttr) ProtoMessage() {}
 
 func (x *LogAttr) ProtoReflect() protoreflect.Message {
-	mi := &file_proto_maglev_proto_msgTypes[37]
+	mi := &file_proto_maglev_proto_msgTypes[36]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2271,7 +2199,7 @@ func (x *LogAttr) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use LogAttr.ProtoReflect.Descriptor instead.
 func (*LogAttr) Descriptor() ([]byte, []int) {
-	return file_proto_maglev_proto_rawDescGZIP(), []int{37}
+	return file_proto_maglev_proto_rawDescGZIP(), []int{36}
 }
 
 func (x *LogAttr) GetKey() string {
@@ -2301,7 +2229,7 @@ type LogEvent struct {
 
 func (x *LogEvent) Reset() {
 	*x = LogEvent{}
-	mi := &file_proto_maglev_proto_msgTypes[38]
+	mi := &file_proto_maglev_proto_msgTypes[37]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -2313,7 +2241,7 @@ func (x *LogEvent) String() string {
 func (*LogEvent) ProtoMessage() {}
 
 func (x *LogEvent) ProtoReflect() protoreflect.Message {
-	mi := &file_proto_maglev_proto_msgTypes[38]
+	mi := &file_proto_maglev_proto_msgTypes[37]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2326,7 +2254,7 @@ func (x *LogEvent) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use LogEvent.ProtoReflect.Descriptor instead.
 func (*LogEvent) Descriptor() ([]byte, []int) {
-	return file_proto_maglev_proto_rawDescGZIP(), []int{38}
+	return file_proto_maglev_proto_rawDescGZIP(), []int{37}
 }
 
 func (x *LogEvent) GetAtUnixNs() int64 {
@@ -2368,7 +2296,7 @@ type BackendEvent struct {
 
 func (x *BackendEvent) Reset() {
 	*x = BackendEvent{}
-	mi := &file_proto_maglev_proto_msgTypes[39]
+	mi := &file_proto_maglev_proto_msgTypes[38]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -2380,7 +2308,7 @@ func (x *BackendEvent) String() string {
 func (*BackendEvent) ProtoMessage() {}
 
 func (x *BackendEvent) ProtoReflect() protoreflect.Message {
-	mi := &file_proto_maglev_proto_msgTypes[39]
+	mi := &file_proto_maglev_proto_msgTypes[38]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2393,7 +2321,7 @@ func (x *BackendEvent) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use BackendEvent.ProtoReflect.Descriptor instead.
 func (*BackendEvent) Descriptor() ([]byte, []int) {
-	return file_proto_maglev_proto_rawDescGZIP(), []int{39}
+	return file_proto_maglev_proto_rawDescGZIP(), []int{38}
 }
 
 func (x *BackendEvent) GetBackendName() string {
@@ -2422,7 +2350,7 @@ type FrontendEvent struct {
 
 func (x *FrontendEvent) Reset() {
 	*x = FrontendEvent{}
-	mi := &file_proto_maglev_proto_msgTypes[40]
+	mi := &file_proto_maglev_proto_msgTypes[39]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -2434,7 +2362,7 @@ func (x *FrontendEvent) String() string {
 func (*FrontendEvent) ProtoMessage() {}
 
 func (x *FrontendEvent) ProtoReflect() protoreflect.Message {
-	mi := &file_proto_maglev_proto_msgTypes[40]
+	mi := &file_proto_maglev_proto_msgTypes[39]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2447,7 +2375,7 @@ func (x *FrontendEvent) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use FrontendEvent.ProtoReflect.Descriptor instead.
 func (*FrontendEvent) Descriptor() ([]byte, []int) {
-	return file_proto_maglev_proto_rawDescGZIP(), []int{40}
+	return file_proto_maglev_proto_rawDescGZIP(), []int{39}
 }
 
 func (x *FrontendEvent) GetFrontendName() string {
@@ -2479,7 +2407,7 @@ type Event struct {
 
 func (x *Event) Reset() {
 	*x = Event{}
-	mi := &file_proto_maglev_proto_msgTypes[41]
+	mi := &file_proto_maglev_proto_msgTypes[40]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -2491,7 +2419,7 @@ func (x *Event) String() string {
 func (*Event) ProtoMessage() {}
 
 func (x *Event) ProtoReflect() protoreflect.Message {
-	mi := &file_proto_maglev_proto_msgTypes[41]
+	mi := &file_proto_maglev_proto_msgTypes[40]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -2504,7 +2432,7 @@ func (x *Event) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use Event.ProtoReflect.Descriptor instead.
 func (*Event) Descriptor() ([]byte, []int) {
-	return file_proto_maglev_proto_rawDescGZIP(), []int{41}
+	return file_proto_maglev_proto_rawDescGZIP(), []int{40}
 }
 
 func (x *Event) GetEvent() isEvent_Event {
@@ -2642,15 +2570,9 @@ const file_proto_maglev_proto_rawDesc = "" +
 	"\x10untracked_packet\x18\x06 \x01(\x04R\x0funtrackedPacket\x12\x1b\n" +
 	"\tno_server\x18\a \x01(\x04R\bnoServer\x12\x18\n" +
 	"\apackets\x18\b \x01(\x04R\apackets\x12\x14\n" +
-	"\x05bytes\x18\t \x01(\x04R\x05bytes\"z\n" +
-	"\x14VPPLBBackendCounters\x12\x18\n" +
-	"\abackend\x18\x01 \x01(\tR\abackend\x12\x18\n" +
-	"\aaddress\x18\x02 \x01(\tR\aaddress\x12\x18\n" +
-	"\apackets\x18\x03 \x01(\x04R\apackets\x12\x14\n" +
-	"\x05bytes\x18\x04 \x01(\x04R\x05bytes\"w\n" +
+	"\x05bytes\x18\t \x01(\x04R\x05bytes\"C\n" +
 	"\rVPPLBCounters\x12,\n" +
-	"\x04vips\x18\x01 \x03(\v2\x18.maglev.VPPLBVIPCountersR\x04vips\x128\n" +
-	"\bbackends\x18\x02 \x03(\v2\x1c.maglev.VPPLBBackendCountersR\bbackends\"\x8a\x01\n" +
+	"\x04vips\x18\x01 \x03(\v2\x18.maglev.VPPLBVIPCountersR\x04vipsJ\x04\b\x02\x10\x03\"\x8a\x01\n" +
 	"\x10SetWeightRequest\x12\x1a\n" +
 	"\bfrontend\x18\x01 \x01(\tR\bfrontend\x12\x12\n" +
 	"\x04pool\x18\x02 \x01(\tR\x04pool\x12\x18\n" +
@@ -2788,7 +2710,7 @@ func file_proto_maglev_proto_rawDescGZIP() []byte {
 	return file_proto_maglev_proto_rawDescData
 }
 
-var file_proto_maglev_proto_msgTypes = make([]protoimpl.MessageInfo, 42)
+var file_proto_maglev_proto_msgTypes = make([]protoimpl.MessageInfo, 41)
 var file_proto_maglev_proto_goTypes = []any{
 	(*ListFrontendsRequest)(nil),     // 0: maglev.ListFrontendsRequest
 	(*GetFrontendRequest)(nil),       // 1: maglev.GetFrontendRequest
@@ -2812,85 +2734,83 @@ var file_proto_maglev_proto_goTypes = []any{
 	(*SyncVPPLBStateResponse)(nil),   // 19: maglev.SyncVPPLBStateResponse
 	(*GetVPPLBCountersRequest)(nil),  // 20: maglev.GetVPPLBCountersRequest
 	(*VPPLBVIPCounters)(nil),         // 21: maglev.VPPLBVIPCounters
-	(*VPPLBBackendCounters)(nil),     // 22: maglev.VPPLBBackendCounters
-	(*VPPLBCounters)(nil),            // 23: maglev.VPPLBCounters
-	(*SetWeightRequest)(nil),         // 24: maglev.SetWeightRequest
-	(*WatchRequest)(nil),             // 25: maglev.WatchRequest
-	(*ListFrontendsResponse)(nil),    // 26: maglev.ListFrontendsResponse
-	(*PoolBackendInfo)(nil),          // 27: maglev.PoolBackendInfo
-	(*PoolInfo)(nil),                 // 28: maglev.PoolInfo
-	(*FrontendInfo)(nil),             // 29: maglev.FrontendInfo
-	(*ListBackendsResponse)(nil),     // 30: maglev.ListBackendsResponse
-	(*ListHealthChecksResponse)(nil), // 31: maglev.ListHealthChecksResponse
-	(*HTTPCheckParams)(nil),          // 32: maglev.HTTPCheckParams
-	(*TCPCheckParams)(nil),           // 33: maglev.TCPCheckParams
-	(*HealthCheckInfo)(nil),          // 34: maglev.HealthCheckInfo
-	(*BackendInfo)(nil),              // 35: maglev.BackendInfo
-	(*TransitionRecord)(nil),         // 36: maglev.TransitionRecord
-	(*LogAttr)(nil),                  // 37: maglev.LogAttr
-	(*LogEvent)(nil),                 // 38: maglev.LogEvent
-	(*BackendEvent)(nil),             // 39: maglev.BackendEvent
-	(*FrontendEvent)(nil),            // 40: maglev.FrontendEvent
-	(*Event)(nil),                    // 41: maglev.Event
+	(*VPPLBCounters)(nil),            // 22: maglev.VPPLBCounters
+	(*SetWeightRequest)(nil),         // 23: maglev.SetWeightRequest
+	(*WatchRequest)(nil),             // 24: maglev.WatchRequest
+	(*ListFrontendsResponse)(nil),    // 25: maglev.ListFrontendsResponse
+	(*PoolBackendInfo)(nil),          // 26: maglev.PoolBackendInfo
+	(*PoolInfo)(nil),                 // 27: maglev.PoolInfo
+	(*FrontendInfo)(nil),             // 28: maglev.FrontendInfo
+	(*ListBackendsResponse)(nil),     // 29: maglev.ListBackendsResponse
+	(*ListHealthChecksResponse)(nil), // 30: maglev.ListHealthChecksResponse
+	(*HTTPCheckParams)(nil),          // 31: maglev.HTTPCheckParams
+	(*TCPCheckParams)(nil),           // 32: maglev.TCPCheckParams
+	(*HealthCheckInfo)(nil),          // 33: maglev.HealthCheckInfo
+	(*BackendInfo)(nil),              // 34: maglev.BackendInfo
+	(*TransitionRecord)(nil),         // 35: maglev.TransitionRecord
+	(*LogAttr)(nil),                  // 36: maglev.LogAttr
+	(*LogEvent)(nil),                 // 37: maglev.LogEvent
+	(*BackendEvent)(nil),             // 38: maglev.BackendEvent
+	(*FrontendEvent)(nil),            // 39: maglev.FrontendEvent
+	(*Event)(nil),                    // 40: maglev.Event
 }
 var file_proto_maglev_proto_depIdxs = []int32{
 	15, // 0: maglev.VPPLBVIP.application_servers:type_name -> maglev.VPPLBAS
 	14, // 1: maglev.VPPLBState.conf:type_name -> maglev.VPPLBConf
 	16, // 2: maglev.VPPLBState.vips:type_name -> maglev.VPPLBVIP
 	21, // 3: maglev.VPPLBCounters.vips:type_name -> maglev.VPPLBVIPCounters
-	22, // 4: maglev.VPPLBCounters.backends:type_name -> maglev.VPPLBBackendCounters
-	27, // 5: maglev.PoolInfo.backends:type_name -> maglev.PoolBackendInfo
-	28, // 6: maglev.FrontendInfo.pools:type_name -> maglev.PoolInfo
-	32, // 7: maglev.HealthCheckInfo.http:type_name -> maglev.HTTPCheckParams
-	33, // 8: maglev.HealthCheckInfo.tcp:type_name -> maglev.TCPCheckParams
-	36, // 9: maglev.BackendInfo.transitions:type_name -> maglev.TransitionRecord
-	37, // 10: maglev.LogEvent.attrs:type_name -> maglev.LogAttr
-	36, // 11: maglev.BackendEvent.transition:type_name -> maglev.TransitionRecord
-	36, // 12: maglev.FrontendEvent.transition:type_name -> maglev.TransitionRecord
-	38, // 13: maglev.Event.log:type_name -> maglev.LogEvent
-	39, // 14: maglev.Event.backend:type_name -> maglev.BackendEvent
-	40, // 15: maglev.Event.frontend:type_name -> maglev.FrontendEvent
-	0,  // 16: maglev.Maglev.ListFrontends:input_type -> maglev.ListFrontendsRequest
-	1,  // 17: maglev.Maglev.GetFrontend:input_type -> maglev.GetFrontendRequest
-	2,  // 18: maglev.Maglev.ListBackends:input_type -> maglev.ListBackendsRequest
-	3,  // 19: maglev.Maglev.GetBackend:input_type -> maglev.GetBackendRequest
-	4,  // 20: maglev.Maglev.PauseBackend:input_type -> maglev.BackendRequest
-	4,  // 21: maglev.Maglev.ResumeBackend:input_type -> maglev.BackendRequest
-	4,  // 22: maglev.Maglev.EnableBackend:input_type -> maglev.BackendRequest
-	4,  // 23: maglev.Maglev.DisableBackend:input_type -> maglev.BackendRequest
-	5,  // 24: maglev.Maglev.ListHealthChecks:input_type -> maglev.ListHealthChecksRequest
-	6,  // 25: maglev.Maglev.GetHealthCheck:input_type -> maglev.GetHealthCheckRequest
-	24, // 26: maglev.Maglev.SetFrontendPoolBackendWeight:input_type -> maglev.SetWeightRequest
-	25, // 27: maglev.Maglev.WatchEvents:input_type -> maglev.WatchRequest
-	7,  // 28: maglev.Maglev.CheckConfig:input_type -> maglev.CheckConfigRequest
-	9,  // 29: maglev.Maglev.ReloadConfig:input_type -> maglev.ReloadConfigRequest
-	11, // 30: maglev.Maglev.GetVPPInfo:input_type -> maglev.GetVPPInfoRequest
-	13, // 31: maglev.Maglev.GetVPPLBState:input_type -> maglev.GetVPPLBStateRequest
-	18, // 32: maglev.Maglev.SyncVPPLBState:input_type -> maglev.SyncVPPLBStateRequest
-	20, // 33: maglev.Maglev.GetVPPLBCounters:input_type -> maglev.GetVPPLBCountersRequest
-	26, // 34: maglev.Maglev.ListFrontends:output_type -> maglev.ListFrontendsResponse
-	29, // 35: maglev.Maglev.GetFrontend:output_type -> maglev.FrontendInfo
-	30, // 36: maglev.Maglev.ListBackends:output_type -> maglev.ListBackendsResponse
-	35, // 37: maglev.Maglev.GetBackend:output_type -> maglev.BackendInfo
-	35, // 38: maglev.Maglev.PauseBackend:output_type -> maglev.BackendInfo
-	35, // 39: maglev.Maglev.ResumeBackend:output_type -> maglev.BackendInfo
-	35, // 40: maglev.Maglev.EnableBackend:output_type -> maglev.BackendInfo
-	35, // 41: maglev.Maglev.DisableBackend:output_type -> maglev.BackendInfo
-	31, // 42: maglev.Maglev.ListHealthChecks:output_type -> maglev.ListHealthChecksResponse
-	34, // 43: maglev.Maglev.GetHealthCheck:output_type -> maglev.HealthCheckInfo
-	29, // 44: maglev.Maglev.SetFrontendPoolBackendWeight:output_type -> maglev.FrontendInfo
-	41, // 45: maglev.Maglev.WatchEvents:output_type -> maglev.Event
-	8,  // 46: maglev.Maglev.CheckConfig:output_type -> maglev.CheckConfigResponse
-	10, // 47: maglev.Maglev.ReloadConfig:output_type -> maglev.ReloadConfigResponse
-	12, // 48: maglev.Maglev.GetVPPInfo:output_type -> maglev.VPPInfo
-	17, // 49: maglev.Maglev.GetVPPLBState:output_type -> maglev.VPPLBState
-	19, // 50: maglev.Maglev.SyncVPPLBState:output_type -> maglev.SyncVPPLBStateResponse
-	23, // 51: maglev.Maglev.GetVPPLBCounters:output_type -> maglev.VPPLBCounters
-	34, // [34:52] is the sub-list for method output_type
-	16, // [16:34] is the sub-list for method input_type
-	16, // [16:16] is the sub-list for extension type_name
-	16, // [16:16] is the sub-list for extension extendee
-	0,  // [0:16] is the sub-list for field type_name
+	26, // 4: maglev.PoolInfo.backends:type_name -> maglev.PoolBackendInfo
+	27, // 5: maglev.FrontendInfo.pools:type_name -> maglev.PoolInfo
+	31, // 6: maglev.HealthCheckInfo.http:type_name -> maglev.HTTPCheckParams
+	32, // 7: maglev.HealthCheckInfo.tcp:type_name -> maglev.TCPCheckParams
+	35, // 8: maglev.BackendInfo.transitions:type_name -> maglev.TransitionRecord
+	36, // 9: maglev.LogEvent.attrs:type_name -> maglev.LogAttr
+	35, // 10: maglev.BackendEvent.transition:type_name -> maglev.TransitionRecord
+	35, // 11: maglev.FrontendEvent.transition:type_name -> maglev.TransitionRecord
+	37, // 12: maglev.Event.log:type_name -> maglev.LogEvent
+	38, // 13: maglev.Event.backend:type_name -> maglev.BackendEvent
+	39, // 14: maglev.Event.frontend:type_name -> maglev.FrontendEvent
+	0,  // 15: maglev.Maglev.ListFrontends:input_type -> maglev.ListFrontendsRequest
+	1,  // 16: maglev.Maglev.GetFrontend:input_type -> maglev.GetFrontendRequest
+	2,  // 17: maglev.Maglev.ListBackends:input_type -> maglev.ListBackendsRequest
+	3,  // 18: maglev.Maglev.GetBackend:input_type -> maglev.GetBackendRequest
+	4,  // 19: maglev.Maglev.PauseBackend:input_type -> maglev.BackendRequest
+	4,  // 20: maglev.Maglev.ResumeBackend:input_type -> maglev.BackendRequest
+	4,  // 21: maglev.Maglev.EnableBackend:input_type -> maglev.BackendRequest
+	4,  // 22: maglev.Maglev.DisableBackend:input_type -> maglev.BackendRequest
+	5,  // 23: maglev.Maglev.ListHealthChecks:input_type -> maglev.ListHealthChecksRequest
+	6,  // 24: maglev.Maglev.GetHealthCheck:input_type -> maglev.GetHealthCheckRequest
+	23, // 25: maglev.Maglev.SetFrontendPoolBackendWeight:input_type -> maglev.SetWeightRequest
+	24, // 26: maglev.Maglev.WatchEvents:input_type -> maglev.WatchRequest
+	7,  // 27: maglev.Maglev.CheckConfig:input_type -> maglev.CheckConfigRequest
+	9,  // 28: maglev.Maglev.ReloadConfig:input_type -> maglev.ReloadConfigRequest
+	11, // 29: maglev.Maglev.GetVPPInfo:input_type -> maglev.GetVPPInfoRequest
+	13, // 30: maglev.Maglev.GetVPPLBState:input_type -> maglev.GetVPPLBStateRequest
+	18, // 31: maglev.Maglev.SyncVPPLBState:input_type -> maglev.SyncVPPLBStateRequest
+	20, // 32: maglev.Maglev.GetVPPLBCounters:input_type -> maglev.GetVPPLBCountersRequest
+	25, // 33: maglev.Maglev.ListFrontends:output_type -> maglev.ListFrontendsResponse
+	28, // 34: maglev.Maglev.GetFrontend:output_type -> maglev.FrontendInfo
+	29, // 35: maglev.Maglev.ListBackends:output_type -> maglev.ListBackendsResponse
+	34, // 36: maglev.Maglev.GetBackend:output_type -> maglev.BackendInfo
+	34, // 37: maglev.Maglev.PauseBackend:output_type -> maglev.BackendInfo
+	34, // 38: maglev.Maglev.ResumeBackend:output_type -> maglev.BackendInfo
+	34, // 39: maglev.Maglev.EnableBackend:output_type -> maglev.BackendInfo
+	34, // 40: maglev.Maglev.DisableBackend:output_type -> maglev.BackendInfo
+	30, // 41: maglev.Maglev.ListHealthChecks:output_type -> maglev.ListHealthChecksResponse
+	33, // 42: maglev.Maglev.GetHealthCheck:output_type -> maglev.HealthCheckInfo
+	28, // 43: maglev.Maglev.SetFrontendPoolBackendWeight:output_type -> maglev.FrontendInfo
+	40, // 44: maglev.Maglev.WatchEvents:output_type -> maglev.Event
+	8,  // 45: maglev.Maglev.CheckConfig:output_type -> maglev.CheckConfigResponse
+	10, // 46: maglev.Maglev.ReloadConfig:output_type -> maglev.ReloadConfigResponse
+	12, // 47: maglev.Maglev.GetVPPInfo:output_type -> maglev.VPPInfo
+	17, // 48: maglev.Maglev.GetVPPLBState:output_type -> maglev.VPPLBState
+	19, // 49: maglev.Maglev.SyncVPPLBState:output_type -> maglev.SyncVPPLBStateResponse
+	22, // 50: maglev.Maglev.GetVPPLBCounters:output_type -> maglev.VPPLBCounters
+	33, // [33:51] is the sub-list for method output_type
+	15, // [15:33] is the sub-list for method input_type
+	15, // [15:15] is the sub-list for extension type_name
+	15, // [15:15] is the sub-list for extension extendee
+	0,  // [0:15] is the sub-list for field type_name
 }
 
 func init() { file_proto_maglev_proto_init() }
@@ -2899,8 +2819,8 @@ func file_proto_maglev_proto_init() {
 		return
 	}
 	file_proto_maglev_proto_msgTypes[18].OneofWrappers = []any{}
-	file_proto_maglev_proto_msgTypes[25].OneofWrappers = []any{}
-	file_proto_maglev_proto_msgTypes[41].OneofWrappers = []any{
+	file_proto_maglev_proto_msgTypes[24].OneofWrappers = []any{}
+	file_proto_maglev_proto_msgTypes[40].OneofWrappers = []any{
 		(*Event_Log)(nil),
 		(*Event_Backend)(nil),
 		(*Event_Frontend)(nil),
@@ -2911,7 +2831,7 @@ func file_proto_maglev_proto_init() {
 			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
 			RawDescriptor: unsafe.Slice(unsafe.StringData(file_proto_maglev_proto_rawDesc), len(file_proto_maglev_proto_rawDesc)),
 			NumEnums:      0,
-			NumMessages:   42,
+			NumMessages:   41,
 			NumExtensions: 0,
 			NumServices:   1,
 		},
diff --git a/internal/grpcapi/server.go b/internal/grpcapi/server.go
index 1cee718..168e631 100644
--- a/internal/grpcapi/server.go
+++ b/internal/grpcapi/server.go
@@ -375,10 +375,17 @@ func (s *Server) GetVPPLBState(_ context.Context, _ *GetVPPLBStateRequest) (*VPP
 	return lbStateToProto(state), nil
 }
 
-// GetVPPLBCounters returns the most recent per-VIP and per-backend counter
-// snapshot captured by the client's 5s scrape loop. The call is served
-// from an in-process cache and does not hit VPP. An empty response is
-// returned when VPP is disconnected or no scrape has completed yet.
+// GetVPPLBCounters returns the most recent per-VIP counter snapshot
+// captured by the client's 5s scrape loop. The call is served from an
+// in-process cache and does not hit VPP. An empty response is returned
+// when VPP is disconnected or no scrape has completed yet.
+//
+// Per-backend counters are deliberately not included: the LB plugin's
+// forwarding node bypasses the ip{4,6}-lookup path, so the FIB's
+// /net/route/to counter at a backend's stats_index never ticks for
+// LB-forwarded traffic (see internal/vpp/lbstats.go::scrapeLBStats
+// for the full chain). Exposing a zero-valued "packets" column would
+// just mislead operators.
 func (s *Server) GetVPPLBCounters(_ context.Context, _ *GetVPPLBCountersRequest) (*VPPLBCounters, error) {
 	if s.vppClient == nil {
 		return nil, status.Error(codes.Unavailable, "VPP integration is disabled")
@@ -406,17 +413,6 @@ func (s *Server) GetVPPLBCounters(_ context.Context, _ *GetVPPLBCountersRequest)
 		}
 		return out.Vips[i].Port < out.Vips[j].Port
 	})
-	for _, b := range s.vppClient.BackendRouteStats() {
-		out.Backends = append(out.Backends, &VPPLBBackendCounters{
-			Backend: b.Backend,
-			Address: b.Address,
-			Packets: b.Packets,
-			Bytes:   b.Bytes,
-		})
-	}
-	sort.Slice(out.Backends, func(i, j int) bool {
-		return out.Backends[i].Backend < out.Backends[j].Backend
-	})
 	return out, nil
 }
 
diff --git a/internal/metrics/metrics.go b/internal/metrics/metrics.go
index 567117c..4ff91ae 100644
--- a/internal/metrics/metrics.go
+++ b/internal/metrics/metrics.go
@@ -66,17 +66,6 @@ type VIPStatEntry struct {
 	Bytes   uint64
 }
 
-// BackendRouteStat is a point-in-time snapshot of the FIB combined counter
-// (/net/route/to) for a single backend's host prefix. Values are summed
-// across worker threads. Labels match the backend's identity so a time
-// series corresponds 1:1 to a maglev backend entry.
-type BackendRouteStat struct {
-	Backend string // backend name from the config
-	Address string // backend IP address as a string (e.g. "192.0.2.10")
-	Packets uint64
-	Bytes   uint64
-}
-
 // VPPSource provides read-only access to the VPP client's state. vpp.Client
 // is adapted to this interface via a small shim in the collector so the
 // metrics package stays decoupled from the vpp package's concrete types.
@@ -87,11 +76,6 @@ type VPPSource interface {
 	// counters, as captured by the LB stats loop. Returns nil when VPP is
 	// disconnected or no scrape has happened yet.
 	VIPStats() []VIPStatEntry
-	// BackendRouteStats returns the most recent snapshot of per-backend
-	// FIB combined counters (/net/route/to), as captured by the LB stats
-	// loop. Returns nil when VPP is disconnected, no scrape has happened
-	// yet, or the route lookup for every backend failed.
-	BackendRouteStats() []BackendRouteStat
 }
 
 // ---- inline metrics (updated per probe) ------------------------------------
@@ -160,11 +144,9 @@ type Collector struct {
 	vppConnectedFor  *prometheus.Desc
 	vppInfo          *prometheus.Desc
 
-	vipPackets       *prometheus.Desc // per-VIP LB counters from stats segment
-	vipRoutePkts     *prometheus.Desc // per-VIP FIB combined counter: packets
-	vipRouteByts     *prometheus.Desc // per-VIP FIB combined counter: bytes
-	backendRoutePkts *prometheus.Desc // per-backend FIB combined counter: packets
-	backendRouteByts *prometheus.Desc // per-backend FIB combined counter: bytes
+	vipPackets   *prometheus.Desc // per-VIP LB counters from stats segment
+	vipRoutePkts *prometheus.Desc // per-VIP FIB combined counter: packets
+	vipRouteByts *prometheus.Desc // per-VIP FIB combined counter: bytes
 }
 
 // NewCollector creates a Collector backed by the given StateSource. vpp may
@@ -229,16 +211,6 @@ func NewCollector(src StateSource, vpp VPPSource) *Collector {
 			"Bytes forwarded by VPP's FIB toward each VIP's host prefix (from /net/route/to), summed across workers.",
 			[]string{"prefix", "protocol", "port"}, nil,
 		),
-		backendRoutePkts: prometheus.NewDesc(
-			"maglev_vpp_backend_route_packets_total",
-			"Packets forwarded by VPP's FIB toward each backend's host prefix (from /net/route/to), summed across workers.",
-			[]string{"backend", "address"}, nil,
-		),
-		backendRouteByts: prometheus.NewDesc(
-			"maglev_vpp_backend_route_bytes_total",
-			"Bytes forwarded by VPP's FIB toward each backend's host prefix (from /net/route/to), summed across workers.",
-			[]string{"backend", "address"}, nil,
-		),
 	}
 }
 
@@ -255,8 +227,6 @@ func (c *Collector) Describe(ch chan<- *prometheus.Desc) {
 	ch <- c.vipPackets
 	ch <- c.vipRoutePkts
 	ch <- c.vipRouteByts
-	ch <- c.backendRoutePkts
-	ch <- c.backendRouteByts
 }
 
 // Collect implements prometheus.Collector.
@@ -353,6 +323,13 @@ func (c *Collector) Collect(ch chan<- prometheus.Metric) {
 	// stats loop in internal/vpp. CounterValue so rate()/increase() work
 	// as expected; VPP counter resets (e.g. VIP recreate) are handled by
 	// Prometheus's built-in counter-reset detection.
+	//
+	// No per-backend counters are exposed here: the LB plugin's
+	// forwarding node sets adj_index[VLIB_TX] directly and bypasses
+	// ip{4,6}_lookup_inline, which is the only path that increments
+	// lbm_to_counters — so /net/route/to at the backend's stats_index
+	// never ticks for LB-forwarded traffic. See the comment block in
+	// internal/vpp/lbstats.go::scrapeLBStats for the full chain.
 	for _, v := range c.vpp.VIPStats() {
 		port := fmt.Sprintf("%d", v.Port)
 		ch <- prometheus.MustNewConstMetric(c.vipPackets, prometheus.CounterValue, float64(v.NextPkt), v.Prefix, v.Protocol, port, "next")
@@ -362,13 +339,6 @@ func (c *Collector) Collect(ch chan<- prometheus.Metric) {
 		ch <- prometheus.MustNewConstMetric(c.vipRoutePkts, prometheus.CounterValue, float64(v.Packets), v.Prefix, v.Protocol, port)
 		ch <- prometheus.MustNewConstMetric(c.vipRouteByts, prometheus.CounterValue, float64(v.Bytes), v.Prefix, v.Protocol, port)
 	}
-
-	// Per-backend FIB counters from /net/route/to. Same CounterValue
-	// semantics as above.
-	for _, b := range c.vpp.BackendRouteStats() {
-		ch <- prometheus.MustNewConstMetric(c.backendRoutePkts, prometheus.CounterValue, float64(b.Packets), b.Backend, b.Address)
-		ch <- prometheus.MustNewConstMetric(c.backendRouteByts, prometheus.CounterValue, float64(b.Bytes), b.Backend, b.Address)
-	}
 }
 
 // Register registers all metrics with the given registry. vpp may be nil
diff --git a/internal/vpp/client.go b/internal/vpp/client.go
index f15536d..c9414ec 100644
--- a/internal/vpp/client.go
+++ b/internal/vpp/client.go
@@ -66,11 +66,6 @@ type Client struct {
 	// lbStatsLoop. Published as an immutable slice via atomic.Pointer so
 	// Prometheus scrapes (metrics.Collector.Collect) don't take any lock.
 	lbStatsSnap atomic.Pointer[[]metrics.VIPStatEntry]
-
-	// backendRouteSnap is the most recent per-backend FIB stats snapshot
-	// captured by lbStatsLoop. Same atomic-pointer publish pattern as
-	// lbStatsSnap; see logBackendRouteStats in fibstats.go.
-	backendRouteSnap atomic.Pointer[[]metrics.BackendRouteStat]
 }
 
 // SetStateSource attaches a live config + health state source. When set, the
@@ -241,18 +236,6 @@ func (c *Client) VIPStats() []metrics.VIPStatEntry {
 	return *p
 }
 
-// BackendRouteStats satisfies metrics.VPPSource. It returns the latest
-// snapshot of per-backend FIB combined counters (/net/route/to) captured
-// by lbStatsLoop. Returns nil until the first scrape completes, or after
-// a disconnect.
-func (c *Client) BackendRouteStats() []metrics.BackendRouteStat {
-	p := c.backendRouteSnap.Load()
-	if p == nil {
-		return nil
-	}
-	return *p
-}
-
 // VPPInfo satisfies metrics.VPPSource. It returns a copy of the cached
 // connection info as a metrics-local struct so the metrics package doesn't
 // need to import internal/vpp. Second return is false when VPP is not
@@ -309,7 +292,6 @@ func (c *Client) disconnect() {
 	c.lastLBConf = nil // force re-push of lb_conf on reconnect
 	c.mu.Unlock()
 	c.lbStatsSnap.Store(nil)
-	c.backendRouteSnap.Store(nil)
 
 	safeDisconnectAPI(apiConn)
 	safeDisconnectStats(statsConn)
diff --git a/internal/vpp/lbstats.go b/internal/vpp/lbstats.go
index ff1052a..2fcfdbd 100644
--- a/internal/vpp/lbstats.go
+++ b/internal/vpp/lbstats.go
@@ -6,7 +6,6 @@ import (
 	"context"
 	"fmt"
 	"log/slog"
-	"sort"
 	"time"
 
 	"go.fd.io/govpp/adapter"
@@ -20,25 +19,30 @@ import (
 const lbStatsInterval = 5 * time.Second
 
 // LB VIP counter names as they appear in the VPP stats segment. These
-// come from lb_foreach_vip_counter in src/plugins/lb/lb.h — each entry is
-// registered with only .name set, so the stats segment exposes them at
-// the top level (spaces and all). Replace if the VPP plugin renames them.
+// come from lb_foreach_vip_counter in src/plugins/lb/lb.h — the plugin
+// passes them through vlib_simple_counter_main_t with only .name set
+// (.stat_segment_name unset), so vlib_validate_simple_counter /
+// vlib_stats_add_counter_vector register them under the name verbatim
+// with no leading slash. Contrast with /net/route/to below, which IS
+// registered with stat_segment_name="/net/route/to" in
+// src/vnet/dpo/load_balance.c. Replace if the VPP plugin renames them
+// or starts setting stat_segment_name.
 const (
-	lbStatNextPacket   = "/packet from existing sessions"
-	lbStatFirstPacket  = "/first session packet"
-	lbStatUntrackedPkt = "/untracked packet"
-	lbStatNoServer     = "/no server configured"
+	lbStatNextPacket   = "packet from existing sessions"
+	lbStatFirstPacket  = "first session packet"
+	lbStatUntrackedPkt = "untracked packet"
+	lbStatNoServer     = "no server configured"
 )
 
 // lbStatPatterns is the full list of anchored regexes passed to DumpStats
 // for one scrape cycle: the four LB-plugin SimpleCounters plus the FIB
-// CombinedCounter for per-route packet+byte totals. Doing it in a single
+// CombinedCounter for per-VIP packet+byte totals. Doing it in a single
 // DumpStats avoids walking the stats segment twice.
 var lbStatPatterns = []string{
-	`^/packet from existing sessions$`,
-	`^/first session packet$`,
-	`^/untracked packet$`,
-	`^/no server configured$`,
+	`^packet from existing sessions$`,
+	`^first session packet$`,
+	`^untracked packet$`,
+	`^no server configured$`,
 	`^/net/route/to$`,
 }
 
@@ -63,9 +67,24 @@ func (c *Client) lbStatsLoop(ctx context.Context) {
 }
 
 // scrapeLBStats runs one full scrape cycle: discover VIPs via cli_inband,
-// look up FIB stats_indices for every VIP and every backend via
-// ip_route_lookup, dump all five stats-segment paths in one DumpStats
-// call, and reduce the counters into the two published snapshots.
+// look up the FIB stats_index for every VIP via ip_route_lookup, dump
+// all five stats-segment paths in one DumpStats call, and reduce the
+// counters into the per-VIP snapshot.
+//
+// NOTE: there is no per-backend counter here. The LB plugin's forwarding
+// node (src/plugins/lb/node.c) sets adj_index[VLIB_TX] to the AS's DPO
+// directly and enqueues into the lb*-gre* encap node, bypassing
+// ip6_lookup_inline / ip4_lookup_inline entirely. Since
+// lbm_to_counters is only incremented in those lookup paths (see
+// ip6_forward.h / ip4_forward.h), the backend's FIB-entry
+// load_balance stats_index never ticks for LB-forwarded traffic —
+// /net/route/to at that index would always report zero. Per-backend
+// packet/byte counters would need a new counter inside the LB plugin
+// itself (e.g. a vlib_combined_counter_main_t keyed by AS index
+// incremented in lb4-gre4 / lb6-gre6 / etc.). Until that lands
+// upstream we simply don't expose per-backend rates; the VIP-level
+// counters tell the dataplane story on the granularity VPP actually
+// provides today.
 func (c *Client) scrapeLBStats() error {
 	if !c.IsConnected() {
 		return nil
@@ -100,37 +119,6 @@ func (c *Client) scrapeLBStats() error {
 		vipStatsIdx[k] = idx
 	}
 
-	// Resolve FIB stats_indices for every backend in the running config.
-	type backendLookup struct {
-		name, addr string
-		index      uint32
-	}
-	var backends []backendLookup
-	if src := c.getStateSource(); src != nil {
-		if cfg := src.Config(); cfg != nil {
-			names := make([]string, 0, len(cfg.Backends))
-			for name := range cfg.Backends {
-				names = append(names, name)
-			}
-			sort.Strings(names) // stable snapshot order
-			for _, name := range names {
-				b := cfg.Backends[name]
-				if b.Address == nil {
-					continue
-				}
-				idx, err := fibStatsIndex(ch, b.Address)
-				if err != nil {
-					slog.Debug("vpp-backend-route-lookup-failed",
-						"backend", name, "address", b.Address.String(), "err", err)
-					continue
-				}
-				backends = append(backends, backendLookup{
-					name: name, addr: b.Address.String(), index: idx,
-				})
-			}
-		}
-	}
-
 	c.mu.Lock()
 	sc := c.statsClient
 	c.mu.Unlock()
@@ -178,26 +166,6 @@ func (c *Client) scrapeLBStats() error {
 		)
 	}
 	c.lbStatsSnap.Store(&vipOut)
-
-	// ---- backend snapshot ----
-	backendOut := make([]metrics.BackendRouteStat, 0, len(backends))
-	for _, l := range backends {
-		pkts, byts := reduceCombinedCounter(routeTo, int(l.index))
-		entry := metrics.BackendRouteStat{
-			Backend: l.name,
-			Address: l.addr,
-			Packets: pkts,
-			Bytes:   byts,
-		}
-		backendOut = append(backendOut, entry)
-		slog.Debug("vpp-backend-route-stats",
-			"backend", entry.Backend,
-			"address", entry.Address,
-			"packets", entry.Packets,
-			"bytes", entry.Bytes,
-		)
-	}
-	c.backendRouteSnap.Store(&backendOut)
 	return nil
 }
 
diff --git a/internal/vpp/lbsync.go b/internal/vpp/lbsync.go
index 01b30c5..11c0184 100644
--- a/internal/vpp/lbsync.go
+++ b/internal/vpp/lbsync.go
@@ -251,27 +251,25 @@ func reconcileVIP(ch *loggedChannel, d desiredVIP, cur *LBVIP, curSticky bool, f
 	}
 
 	if curSticky != d.SrcIPSticky {
-		slog.Info("vpp-lb-sync-vip-recreate",
-			"vip", d.Prefix.IP.String(),
-			"protocol", protocolName(d.Protocol),
-			"port", d.Port,
-			"reason", "src-ip-sticky-changed",
-			"from", curSticky,
-			"to", d.SrcIPSticky)
-		if err := removeVIP(ch, *cur, st); err != nil {
-			return err
-		}
-		if err := addVIP(ch, d); err != nil {
-			return err
-		}
-		st.vipAdd++
-		for _, as := range d.ASes {
-			if err := addAS(ch, d.Prefix, d.Protocol, d.Port, as); err != nil {
-				return err
-			}
-			st.asAdd++
-		}
-		return nil
+		return recreateVIP(ch, d, *cur, st, "src-ip-sticky-changed",
+			"from", curSticky, "to", d.SrcIPSticky)
+	}
+
+	// Encap mismatch: every backend flipped address family (e.g. all
+	// IPv6 → all IPv4 after a config edit). VPP's encap is a VIP-level
+	// attribute set at lb_add_del_vip time with no mutation API, so
+	// adding new-family ASes under the old encap wedges the
+	// reconciler: packets would be wrapped for the wrong family and
+	// the new backends never see traffic. The only recovery is a VIP
+	// recreate. The old-family ASes end up orphaned in VPP's pool and
+	// are GC'd on the plugin's own ~40s "USED-flag=false" schedule;
+	// the next regular sync tick confirms steady state. A recreate
+	// does tear down existing flows to the VIP, which is why we gate
+	// on an explicit encap difference rather than reconciling every
+	// sync cycle.
+	if desiredEncap := encapString(d.Encap); desiredEncap != cur.Encap {
+		return recreateVIP(ch, d, *cur, st, "encap-changed",
+			"from", cur.Encap, "to", desiredEncap)
 	}
 
 	// VIP exists in both — reconcile ASes.
@@ -301,20 +299,38 @@ func reconcileVIP(ch *loggedChannel, d desiredVIP, cur *LBVIP, curSticky bool, f
 			st.asAdd++
 			continue
 		}
-		if c.Weight != a.Weight {
-			// Flush only on the transition from serving traffic (cur > 0) to
-			// zero, and only when the desired state explicitly asks for it
-			// (i.e. the backend was disabled, not merely drained). Steady-
-			// state syncs where weight doesn't change never re-flush.
-			flush := a.Flush && c.Weight > 0 && a.Weight == 0
-			// Caller-forced flush: used by SetFrontendPoolBackendWeight
-			// with flush=true to explicitly drop live sessions for a
-			// single backend. The address match is exact — no other
-			// AS's weight change is affected, even if several happen
-			// in the same reconcile pass.
-			if flushAddress != "" && addr == flushAddress {
-				flush = true
-			}
+		// setASWeight is issued whenever the weight changes OR whenever
+		// the state machine asks for a flush (a.Flush=true, currently
+		// emitted only for StateDisabled). The a.Flush path has to
+		// fire even on a no-op weight change, because a backend can
+		// reach StateDisabled via a pool-failover that already drained
+		// its VPP weight to 0 on an earlier tick — at that moment
+		// c.Weight == a.Weight == 0, and a gate keyed solely on the
+		// weight diff would silently drop the flush intent and leave
+		// stale sticky-cache entries pointing at the now-disabled AS
+		// (see the "disable nlams0 after fallback deactivation" trace
+		// in the bug investigation).
+		//
+		// Firing unconditionally on a.Flush is idempotent at VPP's
+		// side: lb_as_set_weight with an unchanged weight is a no-op
+		// on the Maglev table (lb_vip_update_new_flow_table rebuilds
+		// the same table), and a redundant lb_flush_vip_as is bounded
+		// — it walks each per-worker sticky_ht once. The trade-off is
+		// that disabled backends re-issue the flush on every periodic
+		// SyncLBStateAll tick, and any sticky entries that happened to
+		// land in the meantime get cleared; both are acceptable for
+		// the "correctness over churn" semantics we want here.
+		weightChanged := c.Weight != a.Weight
+		flush := a.Flush
+		// Caller-forced flush: used by SetFrontendPoolBackendWeight
+		// with flush=true to explicitly drop live sessions for a
+		// single backend. The address match is exact — no other
+		// AS's weight change is affected, even if several happen
+		// in the same reconcile pass.
+		if flushAddress != "" && addr == flushAddress {
+			flush = true
+		}
+		if weightChanged || flush {
 			if err := setASWeight(ch, d.Prefix, d.Protocol, d.Port, a, c.Weight, flush); err != nil {
 				return err
 			}
@@ -324,6 +340,37 @@ func reconcileVIP(ch *loggedChannel, d desiredVIP, cur *LBVIP, curSticky bool, f
 	return nil
 }
 
+// recreateVIP tears down an existing VIP and rebuilds it with the
+// desired configuration and ASes. Used when a VIP attribute that VPP
+// can't mutate in place has changed — today src_ip_sticky and the
+// encap family. reason is logged as an operator-facing explanation;
+// extra is appended to the slog call as additional fields (typically
+// "from", <oldvalue>, "to", <newvalue>).
+func recreateVIP(ch *loggedChannel, d desiredVIP, cur LBVIP, st *syncStats, reason string, extra ...any) error {
+	logAttrs := []any{
+		"vip", d.Prefix.IP.String(),
+		"protocol", protocolName(d.Protocol),
+		"port", d.Port,
+		"reason", reason,
+	}
+	logAttrs = append(logAttrs, extra...)
+	slog.Info("vpp-lb-sync-vip-recreate", logAttrs...)
+	if err := removeVIP(ch, cur, st); err != nil {
+		return err
+	}
+	if err := addVIP(ch, d); err != nil {
+		return err
+	}
+	st.vipAdd++
+	for _, as := range d.ASes {
+		if err := addAS(ch, d.Prefix, d.Protocol, d.Port, as); err != nil {
+			return err
+		}
+		st.asAdd++
+	}
+	return nil
+}
+
 // removeVIP flushes all ASes from a VIP and then deletes the VIP itself.
 func removeVIP(ch *loggedChannel, v LBVIP, st *syncStats) error {
 	for _, as := range v.ASes {
diff --git a/proto/maglev.proto b/proto/maglev.proto
index 2478eec..a443d25 100644
--- a/proto/maglev.proto
+++ b/proto/maglev.proto
@@ -152,18 +152,18 @@ message VPPLBVIPCounters {
   uint64 bytes = 9;             // /net/route/to (FIB, summed across workers)
 }
 
-// VPPLBBackendCounters is the FIB combined counter for a single backend's
-// host prefix, summed across worker threads.
-message VPPLBBackendCounters {
-  string backend = 1; // backend name from config
-  string address = 2; // backend IP address
-  uint64 packets = 3;
-  uint64 bytes = 4;
-}
-
+// VPPLBCounters wraps the per-VIP counter list returned by
+// GetVPPLBCounters. There is no per-backend counter block: VPP's LB
+// plugin forwarding node bypasses ip{4,6}_lookup_inline and writes
+// adj_index[VLIB_TX] directly, so /net/route/to at a backend's FIB
+// entry never ticks for LB-forwarded traffic — the four per-VIP
+// counters are the only per-VIP-and-coarser signal VPP exposes today.
 message VPPLBCounters {
   repeated VPPLBVIPCounters vips = 1;
-  repeated VPPLBBackendCounters backends = 2;
+  // Field 2 (repeated VPPLBBackendCounters backends) was removed; the
+  // index is reserved so a future replacement doesn't accidentally
+  // reuse it.
+  reserved 2;
 }
 
 message SetWeightRequest {