diff --git a/.gitignore b/.gitignore
index 7d3a46a..ce0f71c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -6,3 +6,9 @@ tests/.venv/
 tests/**/maglevd.log
 tests/**/clab-*/
 cmd/frontend/web/node_modules/
+# Binaries built at the repo root via `go build ./cmd/<name>/` (no -o).
+# Anchored with a leading slash so they don't also match the source
+# dirs under cmd/.
+/frontend
+/maglevc
+/maglevd
diff --git a/cmd/frontend/client.go b/cmd/frontend/client.go
index 44c15a7..b29529d 100644
--- a/cmd/frontend/client.go
+++ b/cmd/frontend/client.go
@@ -10,6 +10,7 @@ import (
 	"io"
 	"log/slog"
 	"net"
+	"sort"
 	"strings"
 	"sync"
 	"time"
@@ -125,6 +126,23 @@ func (c *maglevClient) BackendAction(ctx context.Context, name, action string) (
 	return backendFromProto(bi), nil
 }
 
+// SetBackendWeight runs the SetFrontendPoolBackendWeight gRPC call. A
+// fresh FrontendSnapshot is returned so admin callers get the
+// post-mutation effective weights in one round-trip.
+func (c *maglevClient) SetBackendWeight(ctx context.Context, frontend, pool, backend string, weight int32, flush bool) (*FrontendSnapshot, error) {
+	fi, err := c.api.SetFrontendPoolBackendWeight(ctx, &grpcapi.SetWeightRequest{
+		Frontend: frontend,
+		Pool:     pool,
+		Backend:  backend,
+		Weight:   weight,
+		Flush:    flush,
+	})
+	if err != nil {
+		return nil, err
+	}
+	return frontendFromProto(fi), nil
+}
+
 func (c *maglevClient) Start(ctx context.Context) {
 	go c.watchLoop(ctx)
 	go c.refreshLoop(ctx)
@@ -209,7 +227,12 @@ func (c *maglevClient) refreshAll(ctx context.Context) error {
 	if err != nil {
 		return fmt.Errorf("list frontends: %w", err)
 	}
+	// Sort alphabetically so the UI layout is stable across
+	// reloads/restarts. maglevd's checker.ListFrontends already sorts
+	// in current versions, but older builds don't — sort here too as
+	// a belt-and-braces guarantee.
 	frontendsOrder := append([]string(nil), fl.GetFrontendNames()...)
+	sort.Strings(frontendsOrder)
 	for _, name := range frontendsOrder {
 		fi, err := c.api.GetFrontend(rctx, &grpcapi.GetFrontendRequest{Name: name})
 		if err != nil {
@@ -360,6 +383,18 @@ func (c *maglevClient) handleEvent(ev *grpcapi.Event) {
 			attrs[a.GetKey()] = a.GetValue()
 		}
 		c.applyVPPLogHeartbeat(le.GetMsg())
+		// A config reload on maglevd can shuffle anything: add or
+		// remove frontends, change pool membership, flip configured
+		// weights, move backends between pools. Rather than try to
+		// incrementally update the cache for every possible change,
+		// refresh the whole maglevd state and tell every connected
+		// browser to re-hydrate from the fresh snapshot. Only the
+		// "-done" event triggers this, not "-start": a failed reload
+		// (which never emits "-done") leaves the running config
+		// unchanged, so no refresh is needed.
+		if le.GetMsg() == "config-reload-done" {
+			c.triggerConfigResync()
+		}
 		payload, _ := json.Marshal(LogEventPayload{
 			Level: le.GetLevel(),
 			Msg:   le.GetMsg(),
@@ -428,6 +463,43 @@ func (c *maglevClient) handleEvent(ev *grpcapi.Event) {
 	}
 }
 
+// triggerConfigResync runs refreshAll off the event-dispatch goroutine
+// (so the stream.Recv loop isn't blocked while the full config refetch
+// hits several gRPC calls) and then publishes a BrowserEvent of type
+// "resync" so every connected browser re-fetches /view/api/state from
+// the now-fresh cache. Fired in response to a maglevd "config-reload-
+// done" log event.
+//
+// The refresh-then-publish order matters: if we published first, the
+// SPA would fetchState from a stale cache and display old data until
+// the next 30s refresh tick. Running refreshAll synchronously inside
+// this goroutine closes that window.
+//
+// The resync event goes through the normal broker → ring buffer path,
+// so a browser that reconnects shortly after the reload (within the
+// 30s / 2000-event replay window) still sees the resync on its first
+// live event and re-hydrates without needing a separate out-of-band
+// signal.
+func (c *maglevClient) triggerConfigResync() {
+	go func() {
+		ctx, cancel := context.WithTimeout(context.Background(), 15*time.Second)
+		defer cancel()
+		if err := c.refreshAll(ctx); err != nil {
+			slog.Warn("config-resync-refresh", "maglevd", c.name, "err", err)
+			// Publish anyway — the SPA's refetch will see the
+			// cache in whatever state refreshAll left it, and
+			// the periodic refreshLoop will retry. Better than
+			// silently dropping the signal.
+		}
+		c.broker.Publish(BrowserEvent{
+			Maglevd:  c.name,
+			Type:     "resync",
+			AtUnixNs: time.Now().UnixNano(),
+			Payload:  json.RawMessage("{}"),
+		})
+	}()
+}
+
 // applyFrontendState writes the given state into the cached frontend
 // snapshot. Called both by synthetic replay events on subscribe and by
 // live transitions afterwards.
@@ -479,11 +551,25 @@ func (c *maglevClient) applyBackendTransition(name string, tr *TransitionRecord)
 	defer c.mu.Unlock()
 	b, ok := c.cache.Backends[name]
 	if !ok {
+		// Partial-create fallback for a transition that arrives before
+		// the first refreshAll has seen this backend. The real fields
+		// (address, healthcheck, pool memberships) are filled in on
+		// the next refresh tick; here we just stamp Name so the entry
+		// exists.
 		b = &BackendSnapshot{Name: name}
 		c.cache.Backends[name] = b
 		c.cache.BackendsOrder = append(c.cache.BackendsOrder, name)
 	}
 	b.State = tr.To
+	// Derive Enabled from State. In maglevd, state="disabled" and
+	// config.enabled=false are two ways of expressing the same
+	// condition — DisableBackend / EnableBackend flip both together,
+	// and no other state corresponds to enabled=false. Keeping them
+	// in sync in the reducer closes a race where the cache's cached
+	// Enabled could lag behind state by up to a refreshLoop tick,
+	// causing the SPA to render a bogus [disabled] tag next to an
+	// "up" badge on a freshly-re-enabled backend.
+	b.Enabled = tr.To != "disabled"
 	b.LastTransition = tr
 	b.Transitions = append(b.Transitions, tr)
 	// Cap history to the most recent 20 entries to mirror what maglevd
@@ -566,8 +652,16 @@ func backendFromProto(bi *grpcapi.BackendInfo) *BackendSnapshot {
 		Enabled:     bi.GetEnabled(),
 		HealthCheck: bi.GetHealthcheck(),
 	}
-	for _, t := range bi.GetTransitions() {
-		out.Transitions = append(out.Transitions, transitionFromProto(t))
+	// maglevd stores and returns transitions newest-first (it prepends
+	// in health.Backend.transition()). The client stores them
+	// oldest-first so applyBackendTransition can simply append new
+	// events to the end. Reverse on read to reconcile the two
+	// conventions — then out.Transitions[n-1] is the newest, which is
+	// the correct LastTransition.
+	trs := bi.GetTransitions()
+	out.Transitions = make([]*TransitionRecord, len(trs))
+	for i, t := range trs {
+		out.Transitions[len(trs)-1-i] = transitionFromProto(t)
 	}
 	if n := len(out.Transitions); n > 0 {
 		out.LastTransition = out.Transitions[n-1]
diff --git a/cmd/frontend/handlers.go b/cmd/frontend/handlers.go
index b4149f3..62cd066 100644
--- a/cmd/frontend/handlers.go
+++ b/cmd/frontend/handlers.go
@@ -124,17 +124,21 @@ func registerHandlers(mux *http.ServeMux, clients []*maglevClient, broker *Broke
 
 // handleAdminAPI dispatches mutation requests under /admin/api/.
 //
-// Currently the only supported shape is:
+// Supported shapes:
 //
 //	POST /admin/api/{maglevd}/backend/{name}/{pause|resume|enable|disable}
+//	  → fresh BackendSnapshot as JSON
 //
-// The response body is the fresh BackendSnapshot (JSON) returned by
-// maglevd. The WatchEvents stream also delivers a transition event
-// so every connected browser converges through the normal reducer
-// path — the POST response is primarily for the originating SPA to
-// learn about failures immediately. Errors from the gRPC side are
-// surfaced as 400 (bad request / unknown action / unknown target)
-// or 502 (maglevd returned an error).
+//	POST /admin/api/{maglevd}/frontend/{fe}/pool/{pool}/backend/{name}/weight
+//	  body: {"weight": 0-100, "flush": bool}
+//	  → fresh FrontendSnapshot as JSON
+//
+// The WatchEvents stream also delivers a backend-transition (and, for
+// the weight case, no event — since the config mutation doesn't flip
+// the health state). The POST response is primarily for the
+// originating SPA to learn about failures and to refresh effective
+// weights immediately. Errors from the gRPC side are surfaced as
+// 400 (bad request) or 502 (maglevd returned an error).
 func handleAdminAPI(w http.ResponseWriter, r *http.Request, byName map[string]*maglevClient) {
 	if r.Method != http.MethodPost {
 		w.Header().Set("Allow", "POST")
@@ -142,17 +146,32 @@ func handleAdminAPI(w http.ResponseWriter, r *http.Request, byName map[string]*m
 		return
 	}
 	parts := strings.Split(strings.TrimPrefix(r.URL.Path, "/admin/api/"), "/")
-	// Expect: {maglevd} "backend" {name} {action}
-	if len(parts) != 4 || parts[1] != "backend" {
+	// Peel off the maglevd name (always the first segment).
+	if len(parts) < 2 {
 		http.NotFound(w, r)
 		return
 	}
-	maglevd, name, action := parts[0], parts[2], parts[3]
+	maglevd := parts[0]
 	c, ok := byName[maglevd]
 	if !ok {
 		http.NotFound(w, r)
 		return
 	}
+	rest := parts[1:]
+
+	switch {
+	// {maglevd}/backend/{name}/{action}
+	case len(rest) == 3 && rest[0] == "backend":
+		handleBackendLifecycle(w, r, c, rest[1], rest[2])
+	// {maglevd}/frontend/{fe}/pool/{pool}/backend/{name}/weight
+	case len(rest) == 7 && rest[0] == "frontend" && rest[2] == "pool" && rest[4] == "backend" && rest[6] == "weight":
+		handleBackendWeight(w, r, c, rest[1], rest[3], rest[5])
+	default:
+		http.NotFound(w, r)
+	}
+}
+
+func handleBackendLifecycle(w http.ResponseWriter, r *http.Request, c *maglevClient, name, action string) {
 	switch action {
 	case "pause", "resume", "enable", "disable":
 	default:
@@ -163,12 +182,43 @@ func handleAdminAPI(w http.ResponseWriter, r *http.Request, byName map[string]*m
 	defer cancel()
 	snap, err := c.BackendAction(ctx, name, action)
 	if err != nil {
-		slog.Warn("admin-backend-action", "maglevd", maglevd, "backend", name, "action", action, "err", err)
+		slog.Warn("admin-backend-action", "maglevd", c.name, "backend", name, "action", action, "err", err)
 		http.Error(w, err.Error(), http.StatusBadGateway)
 		return
 	}
 	slog.Info("admin-backend-action",
-		"maglevd", maglevd, "backend", name, "action", action, "state", snap.State)
+		"maglevd", c.name, "backend", name, "action", action, "state", snap.State)
+	writeJSON(w, snap)
+}
+
+type setWeightBody struct {
+	Weight int32 `json:"weight"`
+	Flush  bool  `json:"flush"`
+}
+
+func handleBackendWeight(w http.ResponseWriter, r *http.Request, c *maglevClient, frontend, pool, backend string) {
+	var body setWeightBody
+	if err := json.NewDecoder(r.Body).Decode(&body); err != nil {
+		http.Error(w, fmt.Sprintf("bad json: %v", err), http.StatusBadRequest)
+		return
+	}
+	if body.Weight < 0 || body.Weight > 100 {
+		http.Error(w, fmt.Sprintf("weight %d out of range [0, 100]", body.Weight), http.StatusBadRequest)
+		return
+	}
+	ctx, cancel := context.WithTimeout(r.Context(), 10*time.Second)
+	defer cancel()
+	snap, err := c.SetBackendWeight(ctx, frontend, pool, backend, body.Weight, body.Flush)
+	if err != nil {
+		slog.Warn("admin-set-weight",
+			"maglevd", c.name, "frontend", frontend, "pool", pool, "backend", backend,
+			"weight", body.Weight, "flush", body.Flush, "err", err)
+		http.Error(w, err.Error(), http.StatusBadGateway)
+		return
+	}
+	slog.Info("admin-set-weight",
+		"maglevd", c.name, "frontend", frontend, "pool", pool, "backend", backend,
+		"weight", body.Weight, "flush", body.Flush)
 	writeJSON(w, snap)
 }
 
@@ -264,6 +314,17 @@ func serveSSE(w http.ResponseWriter, r *http.Request, broker *Broker) {
 }
 
 func writeEvent(w http.ResponseWriter, ev deliveredEvent) error {
+	// "resync" goes out as a named SSE event so the SPA's existing
+	// addEventListener("resync", ...) handler fires (and not the
+	// default onmessage path). Every other event type keeps the
+	// default onmessage path with a JSON body. We still emit an id
+	// so a reconnecting browser can replay from the right point in
+	// the ring; the resync handler is idempotent (a duplicate
+	// replay just triggers a redundant fetchState).
+	if ev.Event.Type == "resync" {
+		_, err := fmt.Fprintf(w, "id: %s\nevent: resync\ndata: {}\n\n", ev.ID)
+		return err
+	}
 	body, err := json.Marshal(ev.Event)
 	if err != nil {
 		return err
diff --git a/cmd/frontend/web/dist/assets/index-AsNHMKdQ.js b/cmd/frontend/web/dist/assets/index-AsNHMKdQ.js
deleted file mode 100644
index 453dc5a..0000000
--- a/cmd/frontend/web/dist/assets/index-AsNHMKdQ.js
+++ /dev/null
@@ -1 +0,0 @@
-(function(){const t=document.createElement("link").relList;if(t&&t.supports&&t.supports("modulepreload"))return;for(const s of document.querySelectorAll('link[rel="modulepreload"]'))r(s);new MutationObserver(s=>{for(const l of s)if(l.type==="childList")for(const i of l.addedNodes)i.tagName==="LINK"&&i.rel==="modulepreload"&&r(i)}).observe(document,{childList:!0,subtree:!0});function n(s){const l={};return s.integrity&&(l.integrity=s.integrity),s.referrerPolicy&&(l.referrerPolicy=s.referrerPolicy),s.crossOrigin==="use-credentials"?l.credentials="include":s.crossOrigin==="anonymous"?l.credentials="omit":l.credentials="same-origin",l}function r(s){if(s.ep)return;s.ep=!0;const l=n(s);fetch(s.href,l)}})();const Je=!1,Xe=(e,t)=>e===t,I=Symbol("solid-proxy"),pe=Symbol("solid-track"),re={equals:Xe};let Ce=Te;const D=1,se=2,Oe={owned:null,cleanups:null,context:null,owner:null};var v=null;let he=null,ze=null,y=null,w=null,N=null,de=0;function ne(e,t){const n=y,r=v,s=e.length===0,l=t===void 0?r:t,i=s?Oe:{owned:null,cleanups:null,context:l?l.context:null,owner:l},o=s?e:()=>e(()=>L(()=>z(i)));v=i,y=null;try{return q(o,!0)}finally{y=n,v=r}}function _(e,t){t=t?Object.assign({},re,t):re;const n={value:e,observers:null,observerSlots:null,comparator:t.equals||void 0},r=s=>(typeof s=="function"&&(s=s(n.value)),Le(n,s));return[Ne.bind(n),r]}function S(e,t,n){const r=ve(e,t,!1,D);Z(r)}function Y(e,t,n){Ce=nt;const r=ve(e,t,!1,D);r.user=!0,N?N.push(r):Z(r)}function R(e,t,n){n=n?Object.assign({},re,n):re;const r=ve(e,t,!0,0);return r.observers=null,r.observerSlots=null,r.comparator=n.equals||void 0,Z(r),Ne.bind(r)}function Qe(e){return q(e,!1)}function L(e){if(y===null)return e();const t=y;y=null;try{return e()}finally{y=t}}function Ye(e,t,n){const r=Array.isArray(e);let s,l=n&&n.defer;return i=>{let o;if(r){o=Array(e.length);for(let f=0;f<e.length;f++)o[f]=e[f]()}else o=e();if(l)return l=!1,i;const a=L(()=>t(o,s,i));return s=o,a}}function Ze(e){Y(()=>L(e))}function Pe(e){return v===null||(v.cleanups===null?v.cleanups=[e]:v.cleanups.push(e)),e}function $e(){return y}function Ne(){if(this.sources&&this.state)if(this.state===D)Z(this);else{const e=w;w=null,q(()=>ie(this),!1),w=e}if(y){const e=this.observers?this.observers.length:0;y.sources?(y.sources.push(this),y.sourceSlots.push(e)):(y.sources=[this],y.sourceSlots=[e]),this.observers?(this.observers.push(y),this.observerSlots.push(y.sources.length-1)):(this.observers=[y],this.observerSlots=[y.sources.length-1])}return this.value}function Le(e,t,n){let r=e.value;return(!e.comparator||!e.comparator(r,t))&&(e.value=t,e.observers&&e.observers.length&&q(()=>{for(let s=0;s<e.observers.length;s+=1){const l=e.observers[s],i=he&&he.running;i&&he.disposed.has(l),(i?!l.tState:!l.state)&&(l.pure?w.push(l):N.push(l),l.observers&&je(l)),i||(l.state=D)}if(w.length>1e6)throw w=[],new Error},!1)),t}function Z(e){if(!e.fn)return;z(e);const t=de;et(e,e.value,t)}function et(e,t,n){let r;const s=v,l=y;y=v=e;try{r=e.fn(t)}catch(i){return e.pure&&(e.state=D,e.owned&&e.owned.forEach(z),e.owned=null),e.updatedAt=n+1,Be(i)}finally{y=l,v=s}(!e.updatedAt||e.updatedAt<=n)&&(e.updatedAt!=null&&"observers"in e?Le(e,r):e.value=r,e.updatedAt=n)}function ve(e,t,n,r=D,s){const l={fn:e,state:r,updatedAt:null,owned:null,sources:null,sourceSlots:null,cleanups:null,value:t,owner:v,context:v?v.context:null,pure:n};return v===null||v!==Oe&&(v.owned?v.owned.push(l):v.owned=[l]),l}function le(e){if(e.state===0)return;if(e.state===se)return ie(e);if(e.suspense&&L(e.suspense.inFallback))return e.suspense.effects.push(e);const t=[e];for(;(e=e.owner)&&(!e.updatedAt||e.updatedAt<de);)e.state&&t.push(e);for(let n=t.length-1;n>=0;n--)if(e=t[n],e.state===D)Z(e);else if(e.state===se){const r=w;w=null,q(()=>ie(e,t[0]),!1),w=r}}function q(e,t){if(w)return e();let n=!1;t||(w=[]),N?n=!0:N=[],de++;try{const r=e();return tt(n),r}catch(r){n||(N=null),w=null,Be(r)}}function tt(e){if(w&&(Te(w),w=null),e)return;const t=N;N=null,t.length&&q(()=>Ce(t),!1)}function Te(e){for(let t=0;t<e.length;t++)le(e[t])}function nt(e){let t,n=0;for(t=0;t<e.length;t++){const r=e[t];r.user?e[n++]=r:le(r)}for(t=0;t<n;t++)le(e[t])}function ie(e,t){e.state=0;for(let n=0;n<e.sources.length;n+=1){const r=e.sources[n];if(r.sources){const s=r.state;s===D?r!==t&&(!r.updatedAt||r.updatedAt<de)&&le(r):s===se&&ie(r,t)}}}function je(e){for(let t=0;t<e.observers.length;t+=1){const n=e.observers[t];n.state||(n.state=se,n.pure?w.push(n):N.push(n),n.observers&&je(n))}}function z(e){let t;if(e.sources)for(;e.sources.length;){const n=e.sources.pop(),r=e.sourceSlots.pop(),s=n.observers;if(s&&s.length){const l=s.pop(),i=n.observerSlots.pop();r<s.length&&(l.sourceSlots[i]=r,s[r]=l,n.observerSlots[r]=i)}}if(e.tOwned){for(t=e.tOwned.length-1;t>=0;t--)z(e.tOwned[t]);delete e.tOwned}if(e.owned){for(t=e.owned.length-1;t>=0;t--)z(e.owned[t]);e.owned=null}if(e.cleanups){for(t=e.cleanups.length-1;t>=0;t--)e.cleanups[t]();e.cleanups=null}e.state=0}function rt(e){return e instanceof Error?e:new Error(typeof e=="string"?e:"Unknown error",{cause:e})}function Be(e,t=v){throw rt(e)}const st=Symbol("fallback");function ke(e){for(let t=0;t<e.length;t++)e[t]()}function lt(e,t,n={}){let r=[],s=[],l=[],i=0,o=t.length>1?[]:null;return Pe(()=>ke(l)),()=>{let a=e()||[],f=a.length,u,c;return a[pe],L(()=>{let p,$,m,C,M,k,A,x,T;if(f===0)i!==0&&(ke(l),l=[],r=[],s=[],i=0,o&&(o=[])),n.fallback&&(r=[st],s[0]=ne(te=>(l[0]=te,n.fallback())),i=1);else if(i===0){for(s=new Array(f),c=0;c<f;c++)r[c]=a[c],s[c]=ne(b);i=f}else{for(m=new Array(f),C=new Array(f),o&&(M=new Array(f)),k=0,A=Math.min(i,f);k<A&&r[k]===a[k];k++);for(A=i-1,x=f-1;A>=k&&x>=k&&r[A]===a[x];A--,x--)m[x]=s[A],C[x]=l[A],o&&(M[x]=o[A]);for(p=new Map,$=new Array(x+1),c=x;c>=k;c--)T=a[c],u=p.get(T),$[c]=u===void 0?-1:u,p.set(T,c);for(u=k;u<=A;u++)T=r[u],c=p.get(T),c!==void 0&&c!==-1?(m[c]=s[u],C[c]=l[u],o&&(M[c]=o[u]),c=$[c],p.set(T,c)):l[u]();for(c=k;c<f;c++)c in m?(s[c]=m[c],l[c]=C[c],o&&(o[c]=M[c],o[c](c))):s[c]=ne(b);s=s.slice(0,i=f),r=a.slice(0)}return s});function b(p){if(l[c]=p,o){const[$,m]=_(c);return o[c]=m,t(a[c],$)}return t(a[c])}}}function g(e,t){return L(()=>e(t||{}))}const it=e=>`Stale read from <${e}>.`;function V(e){const t="fallback"in e&&{fallback:()=>e.fallback};return R(lt(()=>e.each,e.children,t||void 0))}function E(e){const t=e.keyed,n=R(()=>e.when,void 0,void 0),r=t?n:R(n,void 0,{equals:(s,l)=>!s==!l});return R(()=>{const s=r();if(s){const l=e.children;return typeof l=="function"&&l.length>0?L(()=>l(t?s:()=>{if(!L(r))throw it("Show");return n()})):l}return e.fallback},void 0,void 0)}const B=e=>R(()=>e());function ot(e,t,n){let r=n.length,s=t.length,l=r,i=0,o=0,a=t[s-1].nextSibling,f=null;for(;i<s||o<l;){if(t[i]===n[o]){i++,o++;continue}for(;t[s-1]===n[l-1];)s--,l--;if(s===i){const u=l<r?o?n[o-1].nextSibling:n[l-o]:a;for(;o<l;)e.insertBefore(n[o++],u)}else if(l===o)for(;i<s;)(!f||!f.has(t[i]))&&t[i].remove(),i++;else if(t[i]===n[l-1]&&n[o]===t[s-1]){const u=t[--s].nextSibling;e.insertBefore(n[o++],t[i++].nextSibling),e.insertBefore(n[--l],u),t[s]=n[l]}else{if(!f){f=new Map;let c=o;for(;c<l;)f.set(n[c],c++)}const u=f.get(t[i]);if(u!=null)if(o<u&&u<l){let c=i,b=1,p;for(;++c<s&&c<l&&!((p=f.get(t[c]))==null||p!==u+b);)b++;if(b>u-o){const $=t[i];for(;o<u;)e.insertBefore(n[o++],$)}else e.replaceChild(n[o++],t[i++])}else i++;else t[i++].remove()}}}const Ae="_$DX_DELEGATE";function at(e,t,n,r={}){let s;return ne(l=>{s=l,t===document?e():d(t,e(),t.firstChild?null:void 0,n)},r.owner),()=>{s(),t.textContent=""}}function h(e,t,n,r){let s;const l=()=>{const o=document.createElement("template");return o.innerHTML=e,o.content.firstChild},i=()=>(s||(s=l())).cloneNode(!0);return i.cloneNode=i,i}function we(e,t=window.document){const n=t[Ae]||(t[Ae]=new Set);for(let r=0,s=e.length;r<s;r++){const l=e[r];n.has(l)||(n.add(l),t.addEventListener(l,ut))}}function P(e,t,n){n==null?e.removeAttribute(t):e.setAttribute(t,n)}function ct(e,t){t==null?e.removeAttribute("class"):e.className=t}function _e(e,t,n){return L(()=>e(t,n))}function d(e,t,n,r){if(n!==void 0&&!r&&(r=[]),typeof t!="function")return oe(e,t,r,n);S(s=>oe(e,t(),s,n),r)}function ut(e){let t=e.target;const n=`$$${e.type}`,r=e.target,s=e.currentTarget,l=a=>Object.defineProperty(e,"target",{configurable:!0,value:a}),i=()=>{const a=t[n];if(a&&!t.disabled){const f=t[`${n}Data`];if(f!==void 0?a.call(t,f,e):a.call(t,e),e.cancelBubble)return}return t.host&&typeof t.host!="string"&&!t.host._$host&&t.contains(e.target)&&l(t.host),!0},o=()=>{for(;i()&&(t=t._$host||t.parentNode||t.host););};if(Object.defineProperty(e,"currentTarget",{configurable:!0,get(){return t||document}}),e.composedPath){const a=e.composedPath();l(a[0]);for(let f=0;f<a.length-2&&(t=a[f],!!i());f++){if(t._$host){t=t._$host,o();break}if(t.parentNode===s)break}}else o();l(r)}function oe(e,t,n,r,s){for(;typeof n=="function";)n=n();if(t===n)return n;const l=typeof t,i=r!==void 0;if(e=i&&n[0]&&n[0].parentNode||e,l==="string"||l==="number"){if(l==="number"&&(t=t.toString(),t===n))return n;if(i){let o=n[0];o&&o.nodeType===3?o.data!==t&&(o.data=t):o=document.createTextNode(t),n=F(e,n,r,o)}else n!==""&&typeof n=="string"?n=e.firstChild.data=t:n=e.textContent=t}else if(t==null||l==="boolean")n=F(e,n,r);else{if(l==="function")return S(()=>{let o=t();for(;typeof o=="function";)o=o();n=oe(e,o,n,r)}),()=>n;if(Array.isArray(t)){const o=[],a=n&&Array.isArray(n);if(me(o,t,n,s))return S(()=>n=oe(e,o,n,r,!0)),()=>n;if(o.length===0){if(n=F(e,n,r),i)return n}else a?n.length===0?xe(e,o,r):ot(e,n,o):(n&&F(e),xe(e,o));n=o}else if(t.nodeType){if(Array.isArray(n)){if(i)return n=F(e,n,r,t);F(e,n,null,t)}else n==null||n===""||!e.firstChild?e.appendChild(t):e.replaceChild(t,e.firstChild);n=t}}return n}function me(e,t,n,r){let s=!1;for(let l=0,i=t.length;l<i;l++){let o=t[l],a=n&&n[e.length],f;if(!(o==null||o===!0||o===!1))if((f=typeof o)=="object"&&o.nodeType)e.push(o);else if(Array.isArray(o))s=me(e,o,a)||s;else if(f==="function")if(r){for(;typeof o=="function";)o=o();s=me(e,Array.isArray(o)?o:[o],Array.isArray(a)?a:[a])||s}else e.push(o),s=!0;else{const u=String(o);a&&a.nodeType===3&&a.data===u?e.push(a):e.push(document.createTextNode(u))}}return s}function xe(e,t,n=null){for(let r=0,s=t.length;r<s;r++)e.insertBefore(t[r],n)}function F(e,t,n,r){if(n===void 0)return e.textContent="";const s=r||document.createTextNode("");if(t.length){let l=!1;for(let i=t.length-1;i>=0;i--){const o=t[i];if(s!==o){const a=o.parentNode===e;!l&&!i?a?e.replaceChild(s,o):e.insertBefore(s,n):a&&o.remove()}else l=!0}}else e.insertBefore(s,n);return[s]}async function De(e){const t=await fetch(e,{credentials:"same-origin"});if(!t.ok)throw new Error(`${e}: ${t.status} ${t.statusText}`);return await t.json()}function Ie(){return De("/view/api/state")}function ft(){return De("/view/api/version")}const ae=Symbol("store-raw"),U=Symbol("store-node"),O=Symbol("store-has"),Me=Symbol("store-self");function Fe(e){let t=e[I];if(!t&&(Object.defineProperty(e,I,{value:t=new Proxy(e,ht)}),!Array.isArray(e))){const n=Object.keys(e),r=Object.getOwnPropertyDescriptors(e);for(let s=0,l=n.length;s<l;s++){const i=n[s];r[i].get&&Object.defineProperty(e,i,{enumerable:r[i].enumerable,get:r[i].get.bind(t)})}}return t}function W(e){let t;return e!=null&&typeof e=="object"&&(e[I]||!(t=Object.getPrototypeOf(e))||t===Object.prototype||Array.isArray(e))}function K(e,t=new Set){let n,r,s,l;if(n=e!=null&&e[ae])return n;if(!W(e)||t.has(e))return e;if(Array.isArray(e)){Object.isFrozen(e)?e=e.slice(0):t.add(e);for(let i=0,o=e.length;i<o;i++)s=e[i],(r=K(s,t))!==s&&(e[i]=r)}else{Object.isFrozen(e)?e=Object.assign({},e):t.add(e);const i=Object.keys(e),o=Object.getOwnPropertyDescriptors(e);for(let a=0,f=i.length;a<f;a++)l=i[a],!o[l].get&&(s=e[l],(r=K(s,t))!==s&&(e[l]=r))}return e}function ce(e,t){let n=e[t];return n||Object.defineProperty(e,t,{value:n=Object.create(null)}),n}function Q(e,t,n){if(e[t])return e[t];const[r,s]=_(n,{equals:!1,internal:!0});return r.$=s,e[t]=r}function dt(e,t){const n=Reflect.getOwnPropertyDescriptor(e,t);return!n||n.get||!n.configurable||t===I||t===U||(delete n.value,delete n.writable,n.get=()=>e[I][t]),n}function Re(e){$e()&&Q(ce(e,U),Me)()}function gt(e){return Re(e),Reflect.ownKeys(e)}const ht={get(e,t,n){if(t===ae)return e;if(t===I)return n;if(t===pe)return Re(e),n;const r=ce(e,U),s=r[t];let l=s?s():e[t];if(t===U||t===O||t==="__proto__")return l;if(!s){const i=Object.getOwnPropertyDescriptor(e,t);$e()&&(typeof l!="function"||e.hasOwnProperty(t))&&!(i&&i.get)&&(l=Q(r,t,l)())}return W(l)?Fe(l):l},has(e,t){return t===ae||t===I||t===pe||t===U||t===O||t==="__proto__"?!0:($e()&&Q(ce(e,O),t)(),t in e)},set(){return!0},deleteProperty(){return!0},ownKeys:gt,getOwnPropertyDescriptor:dt};function H(e,t,n,r=!1){if(!r&&e[t]===n)return;const s=e[t],l=e.length;n===void 0?(delete e[t],e[O]&&e[O][t]&&s!==void 0&&e[O][t].$()):(e[t]=n,e[O]&&e[O][t]&&s===void 0&&e[O][t].$());let i=ce(e,U),o;if((o=Q(i,t,s))&&o.$(()=>n),Array.isArray(e)&&e.length!==l){for(let a=e.length;a<l;a++)(o=i[a])&&o.$();(o=Q(i,"length",l))&&o.$(e.length)}(o=i[Me])&&o.$()}function Ue(e,t){const n=Object.keys(t);for(let r=0;r<n.length;r+=1){const s=n[r];H(e,s,t[s])}}function bt(e,t){if(typeof t=="function"&&(t=t(e)),t=K(t),Array.isArray(t)){if(e===t)return;let n=0,r=t.length;for(;n<r;n++){const s=t[n];e[n]!==s&&H(e,n,s)}H(e,"length",r)}else Ue(e,t)}function J(e,t,n=[]){let r,s=e;if(t.length>1){r=t.shift();const i=typeof r,o=Array.isArray(e);if(Array.isArray(r)){for(let a=0;a<r.length;a++)J(e,[r[a]].concat(t),n);return}else if(o&&i==="function"){for(let a=0;a<e.length;a++)r(e[a],a)&&J(e,[a].concat(t),n);return}else if(o&&i==="object"){const{from:a=0,to:f=e.length-1,by:u=1}=r;for(let c=a;c<=f;c+=u)J(e,[c].concat(t),n);return}else if(t.length>1){J(e[r],t,[r].concat(n));return}s=e[r],n=[r].concat(n)}let l=t[0];typeof l=="function"&&(l=l(s,n),l===s)||r===void 0&&l==null||(l=K(l),r===void 0||W(s)&&W(l)&&!Array.isArray(l)?Ue(s,l):H(e,r,l))}function pt(...[e,t]){const n=K(e||{}),r=Array.isArray(n),s=Fe(n);function l(...i){Qe(()=>{r&&i.length===1?bt(n,i[0]):J(n,i)})}return[s,l]}const ue=new WeakMap,Ve={get(e,t){if(t===ae)return e;const n=e[t];let r;return W(n)?ue.get(n)||(ue.set(n,r=new Proxy(n,Ve)),r):n},set(e,t,n){return H(e,t,K(n)),!0},deleteProperty(e,t){return H(e,t,void 0,!0),!0}};function ee(e){return t=>{if(W(t)){let n;(n=ue.get(t))||ue.set(t,n=new Proxy(t,Ve)),e(n)}return t}}const[$t,mt]=_(0);setInterval(()=>mt(e=>e+1),5e3);const[fe,G]=pt({byName:{}});function We(e){const t={};for(const n of e)t[n.maglevd.name]=n;G({byName:t})}function yt(e,t){G(ee(n=>{const r=n.byName[e];if(!r)return;const s=r.backends.find(l=>l.name===t.backend);s&&(s.state=t.transition.to,s.last_transition=t.transition,s.transitions||(s.transitions=[]),s.transitions.push(t.transition),s.transitions.length>20&&(s.transitions=s.transitions.slice(s.transitions.length-20)))}))}function vt(e,t){G(ee(n=>{const r=n.byName[e];if(!r)return;const s=r.frontends.find(l=>l.name===t.frontend);s&&(s.state=t.transition.to)}))}function wt(e,t){G(ee(n=>{const r=n.byName[e];r&&(r.vpp_state=t)}))}function _t(e,t){G(ee(n=>{const r=n.byName[e];r&&(r.maglevd.connected=t.connected,r.maglevd.last_error=t.last_error)}))}function be(e,t,n){G(ee(r=>{const s=r.byName[e];if(!s)return;const l=s.backends.find(i=>i.address===t);if(l)for(const i of s.frontends)for(const o of i.pools)for(const a of o.backends)a.name===l.name&&(a.effective_weight=n)}))}function St(e){if($t(),!e||!e.at_unix_ns||e.at_unix_ns<=0)return"";const t=Date.now()-e.at_unix_ns/1e6,n=Math.floor(t/1e3);if(n<=1)return"now";const r=n%60,s=Math.floor(n/60);if(s<1)return`${n}s ago`;const l=s%60,i=Math.floor(s/60);if(i<1)return`${l}m${r}s ago`;const o=i%24,a=Math.floor(i/24);return a<1?`${i}h${l}m ago`:`${a}d${o}h ago`}const Ee=500,[ye,kt]=_([]);function At(e){kt(t=>{const n=[...t,e];return n.length>Ee?n.slice(n.length-Ee):n})}function xt(){const e=new EventSource("/view/api/events");return e.onmessage=t=>{try{const n=JSON.parse(t.data);Et(n)}catch(n){console.error("sse parse error",n,t.data)}},e.addEventListener("resync",async()=>{try{const t=await Ie();We(t)}catch(t){console.error("resync refetch failed",t)}}),e.onerror=t=>{console.debug("sse error, browser will reconnect",t)},e}function Et(e){switch(At(e),e.type){case"backend":yt(e.maglevd,e.payload);break;case"frontend":vt(e.maglevd,e.payload);break;case"maglevd-status":_t(e.maglevd,e.payload);break;case"vpp-status":wt(e.maglevd,e.payload.state);break;case"log":Ct(e.maglevd,e.payload);break}}function Ct(e,t){if(!t.msg.startsWith("vpp-lb-sync-as-"))return;const n=t.attrs??{},r=n.address;if(r)switch(t.msg){case"vpp-lb-sync-as-added":be(e,r,Number(n.weight??0));break;case"vpp-lb-sync-as-removed":be(e,r,0);break;case"vpp-lb-sync-as-weight-updated":be(e,r,Number(n.to??0));break}}const[ge,Ke]=_(void 0);var Ot=h("<nav class=scope-selector>"),Pt=h("<button class=scope-tab><span class=dot>");const Nt=()=>{const e=()=>Object.keys(fe.byName).sort();return(()=>{var t=Ot();return d(t,g(V,{get each(){return e()},children:n=>{const r=()=>fe.byName[n],s=()=>r()?.maglevd.connected??!1;return(()=>{var l=Pt();return l.firstChild,l.$$click=()=>Ke(n),d(l,n,null),S(i=>{var o=ge()===n,a=!!s(),f=!s(),u=r()?.maglevd.address??"";return o!==i.e&&l.classList.toggle("active",i.e=o),a!==i.t&&l.classList.toggle("connected",i.t=a),f!==i.a&&l.classList.toggle("disconnected",i.a=f),u!==i.o&&P(l,"title",i.o=u),i},{e:void 0,t:void 0,a:void 0,o:void 0}),l})()}})),t})()};we(["click"]);var Lt=h("<span class=status-badge>");const He=e=>(()=>{var t=Lt();return d(t,()=>e.label??e.state),S(()=>P(t,"data-state",e.state)),t})();var Tt=h("<span class=probe-heartbeat>");const jt=e=>{const[t,n]=_(!1);return Y(()=>{const r=ye();if(r.length===0)return;const s=r[r.length-1];if(s.type!=="log"||s.maglevd!==e.maglevd)return;const l=s.payload;l.attrs?.backend===e.backend&&(l.msg==="probe-start"?n(!0):l.msg==="probe-done"&&n(!1))}),(()=>{var r=Tt();return d(r,()=>t()?"❤️":"·"),S(()=>r.classList.toggle("in-flight",!!t())),r})()};var Bt=h("<span class=flash-target>");const X=e=>{let t;return Y(Ye(()=>e.value,()=>{t?.animate([{transform:"scale(1)",backgroundColor:"#facc15",boxShadow:"0 0 0 2px #facc15",offset:0},{transform:"scale(1.35)",backgroundColor:"#facc15",boxShadow:"0 0 0 4px #facc15",offset:.18},{transform:"scale(1)",backgroundColor:"#facc15",boxShadow:"0 0 0 2px #facc15",offset:.5},{transform:"scale(1)",backgroundColor:"transparent",boxShadow:"0 0 0 0 transparent",offset:1}],{duration:1500,easing:"ease-out"})},{defer:!0})),(()=>{var n=Bt(),r=t;return typeof r=="function"?_e(r,n):t=n,d(n,()=>e.children??e.value),n})()};async function Dt(e,t,n){const r=`/admin/api/${encodeURIComponent(e)}/backend/${encodeURIComponent(t)}/${n}`,s=await fetch(r,{method:"POST",credentials:"same-origin"});if(!s.ok){const l=(await s.text()).trim();throw new Error(l||`${s.status} ${s.statusText}`)}return await s.json()}var It=h("<p class=kebab-error>"),Mt=h("<div class=kebab-menu role=menu>"),Ft=h('<div class=kebab-wrap><button type=button class=kebab-btn aria-haspopup=menu title="backend actions">⋮'),Rt=h("<button type=button class=kebab-item role=menuitem>");function Ut(e){switch(e){case"up":case"down":case"unknown":return[{label:"pause",action:"pause"},{label:"disable",action:"disable"}];case"paused":return[{label:"resume",action:"resume"},{label:"disable",action:"disable"}];case"disabled":return[{label:"enable",action:"enable"}];default:return[]}}const Vt=e=>{const[t,n]=_(!1),[r,s]=_(),[l,i]=_();let o;const a=()=>Ut(e.state);Y(()=>{if(!t())return;const u=b=>{o&&(o.contains(b.target)||n(!1))},c=b=>{b.key==="Escape"&&n(!1)};document.addEventListener("mousedown",u),document.addEventListener("keydown",c),Pe(()=>{document.removeEventListener("mousedown",u),document.removeEventListener("keydown",c)})});const f=async u=>{s(u),i(void 0);try{await Dt(e.maglevd,e.backend,u),n(!1)}catch(c){i(`${c}`)}finally{s(void 0)}};return g(E,{get when(){return a().length>0},get children(){var u=Ft(),c=u.firstChild,b=o;return typeof b=="function"?_e(b,u):o=u,c.$$click=p=>{p.stopPropagation(),n($=>!$)},d(u,g(E,{get when(){return t()},get children(){var p=Mt();return d(p,g(V,{get each(){return a()},children:$=>(()=>{var m=Rt();return m.$$click=()=>f($.action),d(m,(()=>{var C=B(()=>r()===$.action);return()=>C()?`${$.label}…`:$.label})()),S(()=>m.disabled=r()!==void 0),m})()}),null),d(p,g(E,{get when(){return l()},get children(){var $=It();return d($,l),$}}),null),p}}),null),S(()=>P(c,"aria-expanded",t())),u}})};we(["click"]);const j=window.location.pathname.startsWith("/admin");var Wt=h("<td class=actions>"),Kt=h("<tr class=backend-row><td class=backend-name></td><td class=backend-address></td><td></td><td class=numeric></td><td class=numeric></td><td class=age>"),Ht=h("<span class=tag>[disabled]");const qt=e=>{const t=()=>e.backend;return(()=>{var n=Kt(),r=n.firstChild,s=r.nextSibling,l=s.nextSibling,i=l.nextSibling,o=i.nextSibling,a=o.nextSibling;return d(r,g(jt,{get maglevd(){return e.maglevd},get backend(){return t().name}}),null),d(r,()=>t().name,null),d(r,(()=>{var f=B(()=>!t().enabled);return()=>f()&&Ht()})(),null),d(s,()=>t().address),d(l,g(X,{get value(){return t().state},get children(){return g(He,{get state(){return t().state}})}})),d(i,g(X,{get value(){return e.poolBackend.weight}})),d(o,g(X,{get value(){return e.poolBackend.effective_weight}})),d(a,()=>St(t().last_transition)),d(n,g(E,{when:j,get children(){var f=Wt();return d(f,g(Vt,{get maglevd(){return e.maglevd},get backend(){return t().name},get state(){return t().state}})),f}}),null),S(()=>P(n,"data-state",t().state)),n})()};var Gt=h("<section class=frontend-card><header class=frontend-header><h2></h2><div class=frontend-meta><span class=addr>:</span><span class=proto>"),Jt=h("<span class=tag>sticky"),Xt=h("<p class=frontend-desc>"),zt=h("<th class=actions>"),Qt=h("<div class=pool-block><h3 class=pool-name>pool: </h3><table class=backend-table><thead><tr><th>backend</th><th>address</th><th>state</th><th class=numeric>weight</th><th class=numeric>effective</th><th>last transition</th></tr></thead><tbody>");const Yt=e=>{const t=()=>Object.fromEntries(e.snap.backends.map(r=>[r.name,r])),n=()=>e.frontend;return(()=>{var r=Gt(),s=r.firstChild,l=s.firstChild,i=l.nextSibling,o=i.firstChild,a=o.firstChild,f=o.nextSibling;return d(l,()=>n().name,null),d(l,g(X,{get value(){return n().state??"unknown"},get children(){return g(He,{get state(){return n().state??"unknown"}})}}),null),d(o,()=>n().address,a),d(o,()=>n().port,null),d(f,()=>n().protocol.toUpperCase()),d(i,(()=>{var u=B(()=>!!n().src_ip_sticky);return()=>u()&&Jt()})(),null),d(s,(()=>{var u=B(()=>!!n().description);return()=>u()&&(()=>{var c=Xt();return d(c,()=>n().description),c})()})(),null),d(r,g(V,{get each(){return n().pools},children:u=>(()=>{var c=Qt(),b=c.firstChild;b.firstChild;var p=b.nextSibling,$=p.firstChild,m=$.firstChild,C=m.firstChild,M=C.nextSibling,k=M.nextSibling,A=k.nextSibling,x=A.nextSibling;x.nextSibling;var T=$.nextSibling;return d(b,()=>u.name,null),d(m,g(E,{when:j,get children(){return zt()}}),null),d(T,g(V,{get each(){return u.backends},children:te=>{const Se=t()[te.name];return Se?g(qt,{get maglevd(){return e.snap.maglevd.name},backend:Se,poolBackend:te}):null}})),c})()}),null),r})()};var Zt=h("<details class=zippy><summary></summary><div class=zippy-body>");const qe=e=>(()=>{var t=Zt(),n=t.firstChild,r=n.nextSibling;return d(n,()=>e.title),d(r,()=>e.children),S(()=>t.open=e.open),t})();var en=h("<span class=vpp-badge>"),tn=h("<span class=zippy-title>VPP"),nn=h("<p class=empty>No VPP information available."),rn=h("<dl class=kv><dt>version</dt><dd></dd><dt>build date</dt><dd></dd><dt>pid</dt><dd></dd><dt>booted</dt><dd></dd><dt>connected</dt><dd>");const sn=e=>{const t=()=>e.info?.boottime_ns?new Date(e.info.boottime_ns/1e6).toISOString():"",n=()=>e.info?.connecttime_ns?new Date(e.info.connecttime_ns/1e6).toISOString():"",r=()=>e.state==="connected"?"connected":"disconnected",s=(()=>{var l=tn();return l.firstChild,d(l,g(X,{get value(){return r()},get children(){var i=en();return d(i,r),S(()=>P(i,"data-state",r())),i}}),null),l})();return g(qe,{title:s,get children(){return g(E,{get when(){return e.info},get fallback(){return nn()},children:l=>(()=>{var i=rn(),o=i.firstChild,a=o.nextSibling,f=a.nextSibling,u=f.nextSibling,c=u.nextSibling,b=c.nextSibling,p=b.nextSibling,$=p.nextSibling,m=$.nextSibling,C=m.nextSibling;return d(a,()=>l().version),d(u,()=>l().build_date),d(b,()=>l().pid),d($,t),d(C,n),i})()})}})};var ln=h("<main class=overview>"),on=h("<p class=empty>No maglevd selected."),an=h('<div class="banner warn"> disconnected'),cn=h("<div class=frontend-grid>");const un=()=>{const e=()=>{const t=ge();return t?fe.byName[t]:void 0};return(()=>{var t=ln();return d(t,g(E,{get when(){return e()},get fallback(){return on()},children:n=>[g(E,{get when(){return!n().maglevd.connected},get children(){var r=an(),s=r.firstChild;return d(r,()=>n().maglevd.name,s),d(r,(()=>{var l=B(()=>!!n().maglevd.last_error);return()=>l()&&`: ${n().maglevd.last_error}`})(),null),r}}),(()=>{var r=cn();return d(r,g(V,{get each(){return n().frontends},children:s=>g(Yt,{get snap(){return n()},frontend:s})})),r})(),g(sn,{get info(){return n().vpp_info},get state(){return n().vpp_state}})]})),t})()};var fn=h("<ol class=event-tail>"),dn=h("<div class=debug-toolbar><label><input type=checkbox>all maglevds</label><button></button><span class=count> events"),gn=h("<li>");const hn=()=>{const[e,t]=_(!1),[n,r]=_(!1),[s,l]=_([]),i=R(()=>{const f=n()?s():ye();if(e())return f;const u=ge();return u?f.filter(c=>c.maglevd===u):f}),o=()=>{n()?r(!1):(l([...ye()]),r(!0))};let a;return Y(()=>{i(),!n()&&a&&(a.scrollTop=a.scrollHeight)}),g(qe,{title:"Event stream",get children(){return[(()=>{var f=fn(),u=a;return typeof u=="function"?_e(u,f):a=f,d(f,g(V,{get each(){return i()},children:c=>(()=>{var b=gn();return d(b,()=>$n(c)),S(p=>{var $=`event-row event-${c.type}`,m=!!bn(c);return $!==p.e&&ct(b,p.e=$),m!==p.t&&b.classList.toggle("event-sync",p.t=m),p},{e:void 0,t:void 0}),b})()})),f})(),(()=>{var f=dn(),u=f.firstChild,c=u.firstChild,b=u.nextSibling,p=b.nextSibling,$=p.firstChild;return c.addEventListener("change",m=>t(m.currentTarget.checked)),b.$$click=o,d(b,()=>n()?"resume":"pause"),d(p,()=>i().length,$),S(()=>c.checked=e()),f})()]}})};function bn(e){return e.type!=="log"?!1:e.payload.msg.startsWith("vpp-lb-sync-")}function pn(e){if(!e)return"";const t=["vip","protocol","port","address","weight","from","to","encap","src-ip-sticky","flush"],n=[],r=new Set;for(const s of t)s in e&&(n.push(`${s}=${e[s]}`),r.add(s));for(const[s,l]of Object.entries(e))r.has(s)||n.push(`${s}=${l}`);return n.join(" ")}function $n(e){const t=new Date(e.at_unix_ns/1e6).toISOString().substring(11,23),n=`[${e.maglevd}]`;switch(e.type){case"backend":{const r=e.payload;return`${t} ${n} backend ${r.backend}: ${r.transition.from} → ${r.transition.to}`}case"frontend":{const r=e.payload;return`${t} ${n} frontend ${r.frontend}: ${r.transition.from} → ${r.transition.to}`}case"log":{const r=e.payload;if(r.msg.startsWith("vpp-lb-sync-"))return`${t} ${n} ${r.msg} ${pn(r.attrs)}`.trimEnd();const s=r.attrs?Object.entries(r.attrs).map(([l,i])=>`${l}=${i}`).join(" "):"";return`${t} ${n} ${r.level} ${r.msg} ${s}`.trimEnd()}case"maglevd-status":return`${t} ${n} maglevd status: ${JSON.stringify(e.payload)}`;default:return`${t} ${n} ${e.type}`}}we(["click"]);const mn="/view/assets/logo-bimi-Bguc6E_L.svg";var yn=h("<span class=mode-tag>"),vn=h("<a class=admin-toggle>"),wn=h('<div class=app><header class=app-header><div class=brand><a class=brand-logo href=https://git.ipng.ch/ipng/vpp-maglev/ target=_blank rel=noopener title="vpp-maglev on git.ipng.ch"><img alt=IPng></a><strong>maglev'),_n=h("<span class=version> (<!>)"),Sn=h('<div class="banner err">'),kn=h("<p class=loading>Loading…");const An=()=>{const[e,t]=_(),[n,r]=_();Ze(async()=>{try{const[l,i]=await Promise.all([Ie(),ft()]);We(l),r(i),!ge()&&l.length>0&&Ke(l[0].maglevd.name),xt()}catch(l){t(`${l}`)}});const s=()=>n()?.admin_enabled===!0;return(()=>{var l=wn(),i=l.firstChild,o=i.firstChild,a=o.firstChild,f=a.firstChild;return a.nextSibling,P(f,"src",mn),d(o,(()=>{var u=B(()=>!!n());return()=>u()&&(()=>{var c=_n(),b=c.firstChild,p=b.nextSibling;return p.nextSibling,d(c,()=>n().version,b),d(c,()=>n().commit,p),S(()=>P(c,"title",`commit ${n().commit} · built ${n().date}`)),c})()})(),null),d(i,g(Nt,{}),null),d(i,g(E,{get when(){return j||s()},get children(){var u=yn();return d(u,j?"admin":"view"),u}}),null),d(i,g(E,{get when(){return s()},get children(){var u=vn();return P(u,"href",j?"/view/":"/admin/"),P(u,"title",j?"exit admin mode":"enter admin mode"),d(u,j?"exit admin":"admin…"),u}}),null),d(l,(()=>{var u=B(()=>!!e());return()=>u()&&(()=>{var c=Sn();return d(c,e),c})()})(),null),d(l,(()=>{var u=B(()=>!e()&&Object.keys(fe.byName).length===0);return()=>u()&&kn()})(),null),d(l,g(un,{}),null),d(l,g(E,{when:j,get children(){return g(hn,{})}}),null),l})()},Ge=document.getElementById("root");if(!Ge)throw new Error("no #root element");at(()=>g(An,{}),Ge);
diff --git a/cmd/frontend/web/dist/assets/index-BBNMNdtq.js b/cmd/frontend/web/dist/assets/index-BBNMNdtq.js
new file mode 100644
index 0000000..039d0ba
--- /dev/null
+++ b/cmd/frontend/web/dist/assets/index-BBNMNdtq.js
@@ -0,0 +1 @@
+(function(){const t=document.createElement("link").relList;if(t&&t.supports&&t.supports("modulepreload"))return;for(const r of document.querySelectorAll('link[rel="modulepreload"]'))s(r);new MutationObserver(r=>{for(const l of r)if(l.type==="childList")for(const i of l.addedNodes)i.tagName==="LINK"&&i.rel==="modulepreload"&&s(i)}).observe(document,{childList:!0,subtree:!0});function n(r){const l={};return r.integrity&&(l.integrity=r.integrity),r.referrerPolicy&&(l.referrerPolicy=r.referrerPolicy),r.crossOrigin==="use-credentials"?l.credentials="include":r.crossOrigin==="anonymous"?l.credentials="omit":l.credentials="same-origin",l}function s(r){if(r.ep)return;r.ep=!0;const l=n(r);fetch(r.href,l)}})();const at=!1,ct=(e,t)=>e===t,F=Symbol("solid-proxy"),xe=Symbol("solid-track"),ue={equals:ct};let Ve=Ge;const U=1,fe=2,We={owned:null,cleanups:null,context:null,owner:null};var v=null;let ke=null,ut=null,p=null,E=null,D=null,we=0;function ne(e,t){const n=p,s=v,r=e.length===0,l=t===void 0?s:t,i=r?We:{owned:null,cleanups:null,context:l?l.context:null,owner:l},o=r?e:()=>e(()=>M(()=>se(i)));v=i,p=null;try{return G(o,!0)}finally{p=n,v=s}}function x(e,t){t=t?Object.assign({},ue,t):ue;const n={value:e,observers:null,observerSlots:null,comparator:t.equals||void 0},s=r=>(typeof r=="function"&&(r=r(n.value)),He(n,r));return[Fe.bind(n),s]}function C(e,t,n){const s=Pe(e,t,!1,U);ie(s)}function H(e,t,n){Ve=pt;const s=Pe(e,t,!1,U);(!n||!n.render)&&(s.user=!0),D?D.push(s):ie(s)}function W(e,t,n){n=n?Object.assign({},ue,n):ue;const s=Pe(e,t,!0,0);return s.observers=null,s.observerSlots=null,s.comparator=n.equals||void 0,ie(s),Fe.bind(s)}function ft(e){return G(e,!1)}function M(e){if(p===null)return e();const t=p;p=null;try{return e()}finally{p=t}}function dt(e,t,n){const s=Array.isArray(e);let r,l=n&&n.defer;return i=>{let o;if(s){o=Array(e.length);for(let u=0;u<e.length;u++)o[u]=e[u]()}else o=e();if(l)return l=!1,i;const a=M(()=>t(o,r,i));return r=o,a}}function gt(e){H(()=>M(e))}function Y(e){return v===null||(v.cleanups===null?v.cleanups=[e]:v.cleanups.push(e)),e}function Ae(){return p}function ht(){return v}function bt(e,t){const n=v,s=p;v=e,p=null;try{return G(t,!0)}catch(r){Oe(r)}finally{v=n,p=s}}function Fe(){if(this.sources&&this.state)if(this.state===U)ie(this);else{const e=E;E=null,G(()=>ge(this),!1),E=e}if(p){const e=this.observers?this.observers.length:0;p.sources?(p.sources.push(this),p.sourceSlots.push(e)):(p.sources=[this],p.sourceSlots=[e]),this.observers?(this.observers.push(p),this.observerSlots.push(p.sources.length-1)):(this.observers=[p],this.observerSlots=[p.sources.length-1])}return this.value}function He(e,t,n){let s=e.value;return(!e.comparator||!e.comparator(s,t))&&(e.value=t,e.observers&&e.observers.length&&G(()=>{for(let r=0;r<e.observers.length;r+=1){const l=e.observers[r],i=ke&&ke.running;i&&ke.disposed.has(l),(i?!l.tState:!l.state)&&(l.pure?E.push(l):D.push(l),l.observers&&Ke(l)),i||(l.state=U)}if(E.length>1e6)throw E=[],new Error},!1)),t}function ie(e){if(!e.fn)return;se(e);const t=we;mt(e,e.value,t)}function mt(e,t,n){let s;const r=v,l=p;p=v=e;try{s=e.fn(t)}catch(i){return e.pure&&(e.state=U,e.owned&&e.owned.forEach(se),e.owned=null),e.updatedAt=n+1,Oe(i)}finally{p=l,v=r}(!e.updatedAt||e.updatedAt<=n)&&(e.updatedAt!=null&&"observers"in e?He(e,s):e.value=s,e.updatedAt=n)}function Pe(e,t,n,s=U,r){const l={fn:e,state:s,updatedAt:null,owned:null,sources:null,sourceSlots:null,cleanups:null,value:t,owner:v,context:v?v.context:null,pure:n};return v===null||v!==We&&(v.owned?v.owned.push(l):v.owned=[l]),l}function de(e){if(e.state===0)return;if(e.state===fe)return ge(e);if(e.suspense&&M(e.suspense.inFallback))return e.suspense.effects.push(e);const t=[e];for(;(e=e.owner)&&(!e.updatedAt||e.updatedAt<we);)e.state&&t.push(e);for(let n=t.length-1;n>=0;n--)if(e=t[n],e.state===U)ie(e);else if(e.state===fe){const s=E;E=null,G(()=>ge(e,t[0]),!1),E=s}}function G(e,t){if(E)return e();let n=!1;t||(E=[]),D?n=!0:D=[],we++;try{const s=e();return $t(n),s}catch(s){n||(D=null),E=null,Oe(s)}}function $t(e){if(E&&(Ge(E),E=null),e)return;const t=D;D=null,t.length&&G(()=>Ve(t),!1)}function Ge(e){for(let t=0;t<e.length;t++)de(e[t])}function pt(e){let t,n=0;for(t=0;t<e.length;t++){const s=e[t];s.user?e[n++]=s:de(s)}for(t=0;t<n;t++)de(e[t])}function ge(e,t){e.state=0;for(let n=0;n<e.sources.length;n+=1){const s=e.sources[n];if(s.sources){const r=s.state;r===U?s!==t&&(!s.updatedAt||s.updatedAt<we)&&de(s):r===fe&&ge(s,t)}}}function Ke(e){for(let t=0;t<e.observers.length;t+=1){const n=e.observers[t];n.state||(n.state=fe,n.pure?E.push(n):D.push(n),n.observers&&Ke(n))}}function se(e){let t;if(e.sources)for(;e.sources.length;){const n=e.sources.pop(),s=e.sourceSlots.pop(),r=n.observers;if(r&&r.length){const l=r.pop(),i=n.observerSlots.pop();s<r.length&&(l.sourceSlots[i]=s,r[s]=l,n.observerSlots[s]=i)}}if(e.tOwned){for(t=e.tOwned.length-1;t>=0;t--)se(e.tOwned[t]);delete e.tOwned}if(e.owned){for(t=e.owned.length-1;t>=0;t--)se(e.owned[t]);e.owned=null}if(e.cleanups){for(t=e.cleanups.length-1;t>=0;t--)e.cleanups[t]();e.cleanups=null}e.state=0}function wt(e){return e instanceof Error?e:new Error(typeof e=="string"?e:"Unknown error",{cause:e})}function Oe(e,t=v){throw wt(e)}const vt=Symbol("fallback");function De(e){for(let t=0;t<e.length;t++)e[t]()}function yt(e,t,n={}){let s=[],r=[],l=[],i=0,o=t.length>1?[]:null;return Y(()=>De(l)),()=>{let a=e()||[],u=a.length,f,c;return a[xe],M(()=>{let b,y,k,P,B,m,w,_,A;if(u===0)i!==0&&(De(l),l=[],s=[],r=[],i=0,o&&(o=[])),n.fallback&&(s=[vt],r[0]=ne(S=>(l[0]=S,n.fallback())),i=1);else if(i===0){for(r=new Array(u),c=0;c<u;c++)s[c]=a[c],r[c]=ne($);i=u}else{for(k=new Array(u),P=new Array(u),o&&(B=new Array(u)),m=0,w=Math.min(i,u);m<w&&s[m]===a[m];m++);for(w=i-1,_=u-1;w>=m&&_>=m&&s[w]===a[_];w--,_--)k[_]=r[w],P[_]=l[w],o&&(B[_]=o[w]);for(b=new Map,y=new Array(_+1),c=_;c>=m;c--)A=a[c],f=b.get(A),y[c]=f===void 0?-1:f,b.set(A,c);for(f=m;f<=w;f++)A=s[f],c=b.get(A),c!==void 0&&c!==-1?(k[c]=r[f],P[c]=l[f],o&&(B[c]=o[f]),c=y[c],b.set(A,c)):l[f]();for(c=m;c<u;c++)c in k?(r[c]=k[c],l[c]=P[c],o&&(o[c]=B[c],o[c](c))):r[c]=ne($);r=r.slice(0,i=u),s=a.slice(0)}return r});function $(b){if(l[c]=b,o){const[y,k]=x(c);return o[c]=k,t(a[c],y)}return t(a[c])}}}function g(e,t){return M(()=>e(t||{}))}const _t=e=>`Stale read from <${e}>.`;function J(e){const t="fallback"in e&&{fallback:()=>e.fallback};return W(yt(()=>e.each,e.children,t||void 0))}function O(e){const t=e.keyed,n=W(()=>e.when,void 0,void 0),s=t?n:W(n,void 0,{equals:(r,l)=>!r==!l});return W(()=>{const r=s();if(r){const l=e.children;return typeof l=="function"&&l.length>0?M(()=>l(t?r:()=>{if(!M(s))throw _t("Show");return n()})):l}return e.fallback},void 0,void 0)}const L=e=>W(()=>e());function St(e,t,n){let s=n.length,r=t.length,l=s,i=0,o=0,a=t[r-1].nextSibling,u=null;for(;i<r||o<l;){if(t[i]===n[o]){i++,o++;continue}for(;t[r-1]===n[l-1];)r--,l--;if(r===i){const f=l<s?o?n[o-1].nextSibling:n[l-o]:a;for(;o<l;)e.insertBefore(n[o++],f)}else if(l===o)for(;i<r;)(!u||!u.has(t[i]))&&t[i].remove(),i++;else if(t[i]===n[l-1]&&n[o]===t[r-1]){const f=t[--r].nextSibling;e.insertBefore(n[o++],t[i++].nextSibling),e.insertBefore(n[--l],f),t[r]=n[l]}else{if(!u){u=new Map;let c=o;for(;c<l;)u.set(n[c],c++)}const f=u.get(t[i]);if(f!=null)if(o<f&&f<l){let c=i,$=1,b;for(;++c<r&&c<l&&!((b=u.get(t[c]))==null||b!==f+$);)$++;if($>f-o){const y=t[i];for(;o<f;)e.insertBefore(n[o++],y)}else e.replaceChild(n[o++],t[i++])}else i++;else t[i++].remove()}}}const Me="_$DX_DELEGATE";function kt(e,t,n,s={}){let r;return ne(l=>{r=l,t===document?e():d(t,e(),t.firstChild?null:void 0,n)},s.owner),()=>{r(),t.textContent=""}}function h(e,t,n,s){let r;const l=()=>{const o=document.createElement("template");return o.innerHTML=e,o.content.firstChild},i=()=>(r||(r=l())).cloneNode(!0);return i.cloneNode=i,i}function ve(e,t=window.document){const n=t[Me]||(t[Me]=new Set);for(let s=0,r=e.length;s<r;s++){const l=e[s];n.has(l)||(n.add(l),t.addEventListener(l,Ct))}}function N(e,t,n){n==null?e.removeAttribute(t):e.setAttribute(t,n)}function xt(e,t){t==null?e.removeAttribute("class"):e.className=t}function At(e,t,n,s){Array.isArray(n)?(e[`$$${t}`]=n[0],e[`$$${t}Data`]=n[1]):e[`$$${t}`]=n}function ye(e,t,n){return M(()=>e(t,n))}function d(e,t,n,s){if(n!==void 0&&!s&&(s=[]),typeof t!="function")return he(e,t,s,n);C(r=>he(e,t(),r,n),s)}function Ct(e){let t=e.target;const n=`$$${e.type}`,s=e.target,r=e.currentTarget,l=a=>Object.defineProperty(e,"target",{configurable:!0,value:a}),i=()=>{const a=t[n];if(a&&!t.disabled){const u=t[`${n}Data`];if(u!==void 0?a.call(t,u,e):a.call(t,e),e.cancelBubble)return}return t.host&&typeof t.host!="string"&&!t.host._$host&&t.contains(e.target)&&l(t.host),!0},o=()=>{for(;i()&&(t=t._$host||t.parentNode||t.host););};if(Object.defineProperty(e,"currentTarget",{configurable:!0,get(){return t||document}}),e.composedPath){const a=e.composedPath();l(a[0]);for(let u=0;u<a.length-2&&(t=a[u],!!i());u++){if(t._$host){t=t._$host,o();break}if(t.parentNode===r)break}}else o();l(s)}function he(e,t,n,s,r){for(;typeof n=="function";)n=n();if(t===n)return n;const l=typeof t,i=s!==void 0;if(e=i&&n[0]&&n[0].parentNode||e,l==="string"||l==="number"){if(l==="number"&&(t=t.toString(),t===n))return n;if(i){let o=n[0];o&&o.nodeType===3?o.data!==t&&(o.data=t):o=document.createTextNode(t),n=K(e,n,s,o)}else n!==""&&typeof n=="string"?n=e.firstChild.data=t:n=e.textContent=t}else if(t==null||l==="boolean")n=K(e,n,s);else{if(l==="function")return C(()=>{let o=t();for(;typeof o=="function";)o=o();n=he(e,o,n,s)}),()=>n;if(Array.isArray(t)){const o=[],a=n&&Array.isArray(n);if(Ce(o,t,n,r))return C(()=>n=he(e,o,n,s,!0)),()=>n;if(o.length===0){if(n=K(e,n,s),i)return n}else a?n.length===0?Be(e,o,s):St(e,n,o):(n&&K(e),Be(e,o));n=o}else if(t.nodeType){if(Array.isArray(n)){if(i)return n=K(e,n,s,t);K(e,n,null,t)}else n==null||n===""||!e.firstChild?e.appendChild(t):e.replaceChild(t,e.firstChild);n=t}}return n}function Ce(e,t,n,s){let r=!1;for(let l=0,i=t.length;l<i;l++){let o=t[l],a=n&&n[e.length],u;if(!(o==null||o===!0||o===!1))if((u=typeof o)=="object"&&o.nodeType)e.push(o);else if(Array.isArray(o))r=Ce(e,o,a)||r;else if(u==="function")if(s){for(;typeof o=="function";)o=o();r=Ce(e,Array.isArray(o)?o:[o],Array.isArray(a)?a:[a])||r}else e.push(o),r=!0;else{const f=String(o);a&&a.nodeType===3&&a.data===f?e.push(a):e.push(document.createTextNode(f))}}return r}function Be(e,t,n=null){for(let s=0,r=t.length;s<r;s++)e.insertBefore(t[s],n)}function K(e,t,n,s){if(n===void 0)return e.textContent="";const r=s||document.createTextNode("");if(t.length){let l=!1;for(let i=t.length-1;i>=0;i--){const o=t[i];if(r!==o){const a=o.parentNode===e;!l&&!i?a?e.replaceChild(r,o):e.insertBefore(r,n):a&&o.remove()}else l=!0}}else e.insertBefore(r,n);return[r]}const Et="http://www.w3.org/2000/svg";function Pt(e,t=!1,n=void 0){return t?document.createElementNS(Et,e):document.createElement(e,{is:n})}function Ot(e){const{useShadow:t}=e,n=document.createTextNode(""),s=()=>e.mount||document.body,r=ht();let l;return H(()=>{l||(l=bt(r,()=>W(()=>e.children)));const i=s();if(i instanceof HTMLHeadElement){const[o,a]=x(!1),u=()=>a(!0);ne(f=>d(i,()=>o()?f():l(),null)),Y(u)}else{const o=Pt(e.isSVG?"g":"div",e.isSVG),a=t&&o.attachShadow?o.attachShadow({mode:"open"}):o;Object.defineProperty(o,"_$host",{get(){return n.parentNode},configurable:!0}),d(a,l),i.appendChild(o),e.ref&&e.ref(o),Y(()=>i.removeChild(o))}},void 0,{render:!0}),n}async function qe(e){const t=await fetch(e,{credentials:"same-origin"});if(!t.ok)throw new Error(`${e}: ${t.status} ${t.statusText}`);return await t.json()}function Ye(){return qe("/view/api/state")}function Tt(){return qe("/view/api/version")}const be=Symbol("store-raw"),q=Symbol("store-node"),j=Symbol("store-has"),Je=Symbol("store-self");function Xe(e){let t=e[F];if(!t&&(Object.defineProperty(e,F,{value:t=new Proxy(e,It)}),!Array.isArray(e))){const n=Object.keys(e),s=Object.getOwnPropertyDescriptors(e);for(let r=0,l=n.length;r<l;r++){const i=n[r];s[i].get&&Object.defineProperty(e,i,{enumerable:s[i].enumerable,get:s[i].get.bind(t)})}}return t}function X(e){let t;return e!=null&&typeof e=="object"&&(e[F]||!(t=Object.getPrototypeOf(e))||t===Object.prototype||Array.isArray(e))}function z(e,t=new Set){let n,s,r,l;if(n=e!=null&&e[be])return n;if(!X(e)||t.has(e))return e;if(Array.isArray(e)){Object.isFrozen(e)?e=e.slice(0):t.add(e);for(let i=0,o=e.length;i<o;i++)r=e[i],(s=z(r,t))!==r&&(e[i]=s)}else{Object.isFrozen(e)?e=Object.assign({},e):t.add(e);const i=Object.keys(e),o=Object.getOwnPropertyDescriptors(e);for(let a=0,u=i.length;a<u;a++)l=i[a],!o[l].get&&(r=e[l],(s=z(r,t))!==r&&(e[l]=s))}return e}function me(e,t){let n=e[t];return n||Object.defineProperty(e,t,{value:n=Object.create(null)}),n}function le(e,t,n){if(e[t])return e[t];const[s,r]=x(n,{equals:!1,internal:!0});return s.$=r,e[t]=s}function Nt(e,t){const n=Reflect.getOwnPropertyDescriptor(e,t);return!n||n.get||!n.configurable||t===F||t===q||(delete n.value,delete n.writable,n.get=()=>e[F][t]),n}function ze(e){Ae()&&le(me(e,q),Je)()}function Lt(e){return ze(e),Reflect.ownKeys(e)}const It={get(e,t,n){if(t===be)return e;if(t===F)return n;if(t===xe)return ze(e),n;const s=me(e,q),r=s[t];let l=r?r():e[t];if(t===q||t===j||t==="__proto__")return l;if(!r){const i=Object.getOwnPropertyDescriptor(e,t);Ae()&&(typeof l!="function"||e.hasOwnProperty(t))&&!(i&&i.get)&&(l=le(s,t,l)())}return X(l)?Xe(l):l},has(e,t){return t===be||t===F||t===xe||t===q||t===j||t==="__proto__"?!0:(Ae()&&le(me(e,j),t)(),t in e)},set(){return!0},deleteProperty(){return!0},ownKeys:Lt,getOwnPropertyDescriptor:Nt};function Q(e,t,n,s=!1){if(!s&&e[t]===n)return;const r=e[t],l=e.length;n===void 0?(delete e[t],e[j]&&e[j][t]&&r!==void 0&&e[j][t].$()):(e[t]=n,e[j]&&e[j][t]&&r===void 0&&e[j][t].$());let i=me(e,q),o;if((o=le(i,t,r))&&o.$(()=>n),Array.isArray(e)&&e.length!==l){for(let a=e.length;a<l;a++)(o=i[a])&&o.$();(o=le(i,"length",l))&&o.$(e.length)}(o=i[Je])&&o.$()}function Qe(e,t){const n=Object.keys(t);for(let s=0;s<n.length;s+=1){const r=n[s];Q(e,r,t[r])}}function jt(e,t){if(typeof t=="function"&&(t=t(e)),t=z(t),Array.isArray(t)){if(e===t)return;let n=0,s=t.length;for(;n<s;n++){const r=t[n];e[n]!==r&&Q(e,n,r)}Q(e,"length",s)}else Qe(e,t)}function te(e,t,n=[]){let s,r=e;if(t.length>1){s=t.shift();const i=typeof s,o=Array.isArray(e);if(Array.isArray(s)){for(let a=0;a<s.length;a++)te(e,[s[a]].concat(t),n);return}else if(o&&i==="function"){for(let a=0;a<e.length;a++)s(e[a],a)&&te(e,[a].concat(t),n);return}else if(o&&i==="object"){const{from:a=0,to:u=e.length-1,by:f=1}=s;for(let c=a;c<=u;c+=f)te(e,[c].concat(t),n);return}else if(t.length>1){te(e[s],t,[s].concat(n));return}r=e[s],n=[s].concat(n)}let l=t[0];typeof l=="function"&&(l=l(r,n),l===r)||s===void 0&&l==null||(l=z(l),s===void 0||X(r)&&X(l)&&!Array.isArray(l)?Qe(r,l):Q(e,s,l))}function Dt(...[e,t]){const n=z(e||{}),s=Array.isArray(n),r=Xe(n);function l(...i){ft(()=>{s&&i.length===1?jt(n,i[0]):te(n,i)})}return[r,l]}const $e=new WeakMap,Ze={get(e,t){if(t===be)return e;const n=e[t];let s;return X(n)?$e.get(n)||($e.set(n,s=new Proxy(n,Ze)),s):n},set(e,t,n){return Q(e,t,z(n)),!0},deleteProperty(e,t){return Q(e,t,void 0,!0),!0}};function oe(e){return t=>{if(X(t)){let n;(n=$e.get(t))||$e.set(t,n=new Proxy(t,Ze)),e(n)}return t}}const[Mt,Bt]=x(0);setInterval(()=>Bt(e=>e+1),5e3);function et(e){const t={};for(const n of e.backends)t[n.name]=n.state;for(const n of e.frontends){let s=0;for(let r=0;r<n.pools.length;r++){let l=!1;for(const i of n.pools[r].backends)if(t[i.name]==="up"&&i.weight>0){l=!0;break}if(l){s=r;break}}for(let r=0;r<n.pools.length;r++)for(const l of n.pools[r].backends){const i=t[l.name];l.effective_weight=i==="up"&&r===s?l.weight:0}}}const[pe,Z]=Dt({byName:{}});function tt(e){const t={};for(const n of e)t[n.maglevd.name]=n;Z({byName:t})}function Rt(e,t){Z(oe(n=>{const s=n.byName[e];if(!s)return;const r=s.backends.find(l=>l.name===t.backend);r&&(r.state=t.transition.to,r.enabled=t.transition.to!=="disabled",r.last_transition=t.transition,r.transitions||(r.transitions=[]),r.transitions.push(t.transition),r.transitions.length>20&&(r.transitions=r.transitions.slice(r.transitions.length-20)),et(s))}))}function Ut(e,t){Z(oe(n=>{const s=n.byName[e];if(!s)return;const r=s.frontends.find(l=>l.name===t.frontend);r&&(r.state=t.transition.to)}))}function Vt(e,t){Z(oe(n=>{const s=n.byName[e];s&&(s.vpp_state=t)}))}function Wt(e,t){Z(oe(n=>{const s=n.byName[e];s&&(s.maglevd.connected=t.connected,s.maglevd.last_error=t.last_error)}))}function Ft(e,t,n,s,r){Z(oe(l=>{const i=l.byName[e];if(!i)return;const o=i.frontends.find(f=>f.name===t);if(!o)return;const a=o.pools.find(f=>f.name===n);if(!a)return;const u=a.backends.find(f=>f.name===s);u&&(u.weight=r,et(i))}))}function Ht(e,t){return e.includes(":")?`[${e}]:${t}`:`${e}:${t}`}function Gt(e){if(Mt(),!e||!e.at_unix_ns||e.at_unix_ns<=0)return"";const t=Date.now()-e.at_unix_ns/1e6,n=Math.floor(t/1e3);if(n<=1)return"now";const s=n%60,r=Math.floor(n/60);if(r<1)return`${n}s ago`;const l=r%60,i=Math.floor(r/60);if(i<1)return`${l}m${s}s ago`;const o=i%24,a=Math.floor(i/24);return a<1?`${i}h${l}m ago`:`${a}d${o}h ago`}const Re=500,[Ee,Kt]=x([]);function qt(e){Kt(t=>{const n=[...t,e];return n.length>Re?n.slice(n.length-Re):n})}function Yt(){const e=new EventSource("/view/api/events");return e.onmessage=t=>{try{const n=JSON.parse(t.data);Jt(n)}catch(n){console.error("sse parse error",n,t.data)}},e.addEventListener("resync",async()=>{try{const t=await Ye();tt(t)}catch(t){console.error("resync refetch failed",t)}}),e.onerror=t=>{console.debug("sse error, browser will reconnect",t)},e}function Jt(e){switch(qt(e),e.type){case"backend":Rt(e.maglevd,e.payload);break;case"frontend":Ut(e.maglevd,e.payload);break;case"maglevd-status":Wt(e.maglevd,e.payload);break;case"vpp-status":Vt(e.maglevd,e.payload.state);break}}const[_e,nt]=x(void 0);var Xt=h("<nav class=scope-selector>"),zt=h("<button class=scope-tab><span class=dot>");const Qt=()=>{const e=()=>Object.keys(pe.byName).sort();return(()=>{var t=Xt();return d(t,g(J,{get each(){return e()},children:n=>{const s=()=>pe.byName[n],r=()=>s()?.maglevd.connected??!1;return(()=>{var l=zt();return l.firstChild,l.$$click=()=>nt(n),d(l,n,null),C(i=>{var o=_e()===n,a=!!r(),u=!r(),f=s()?.maglevd.address??"";return o!==i.e&&l.classList.toggle("active",i.e=o),a!==i.t&&l.classList.toggle("connected",i.t=a),u!==i.a&&l.classList.toggle("disconnected",i.a=u),f!==i.o&&N(l,"title",i.o=f),i},{e:void 0,t:void 0,a:void 0,o:void 0}),l})()}})),t})()};ve(["click"]);var Zt=h("<span class=status-badge>");const rt=e=>(()=>{var t=Zt();return d(t,()=>e.label??e.state),C(()=>N(t,"data-state",e.state)),t})();var en=h("<span class=probe-heartbeat>");const tn="▶",nn="⏸",rn="⏹",sn="❤️",Ue=400;function ln(e){switch(e){case"paused":return nn;case"disabled":case"removed":return rn;default:return tn}}const on=e=>{const[t,n]=x(!1);let s,r;return H(()=>{const l=Ee();if(l.length===0)return;const i=l[l.length-1];if(i.type!=="log"||i.maglevd!==e.maglevd)return;const o=i.payload;o.attrs?.backend===e.backend&&o.msg==="probe-start"&&(n(!0),s?.animate([{transform:"scale(1)"},{transform:"scale(1.6)",offset:.25},{transform:"scale(1)"}],{duration:Ue,easing:"ease-out"}),r!==void 0&&clearTimeout(r),r=window.setTimeout(()=>{n(!1),r=void 0},Ue))}),Y(()=>{r!==void 0&&clearTimeout(r)}),(()=>{var l=en(),i=s;return typeof i=="function"?ye(i,l):s=l,d(l,(()=>{var o=L(()=>!!t());return()=>o()?sn:ln(e.state)})()),C(()=>l.classList.toggle("in-flight",!!t())),l})()};var an=h("<span class=flash-target>");const re=e=>{let t;return H(dt(()=>e.value,()=>{t?.animate([{transform:"scale(1)",backgroundColor:"#facc15",boxShadow:"0 0 0 2px #facc15",offset:0},{transform:"scale(1.35)",backgroundColor:"#facc15",boxShadow:"0 0 0 4px #facc15",offset:.18},{transform:"scale(1)",backgroundColor:"#facc15",boxShadow:"0 0 0 2px #facc15",offset:.5},{transform:"scale(1)",backgroundColor:"transparent",boxShadow:"0 0 0 0 transparent",offset:1}],{duration:1500,easing:"ease-out"})},{defer:!0})),(()=>{var n=an(),s=t;return typeof s=="function"?ye(s,n):t=n,d(n,()=>e.children??e.value),n})()};async function cn(e,t,n){const s=`/admin/api/${encodeURIComponent(e)}/backend/${encodeURIComponent(t)}/${n}`,r=await fetch(s,{method:"POST",credentials:"same-origin"});if(!r.ok){const l=(await r.text()).trim();throw new Error(l||`${r.status} ${r.statusText}`)}return await r.json()}async function un(e,t,n,s,r,l){const i=`/admin/api/${encodeURIComponent(e)}/frontend/${encodeURIComponent(t)}/pool/${encodeURIComponent(n)}/backend/${encodeURIComponent(s)}/weight`,o=await fetch(i,{method:"POST",credentials:"same-origin",headers:{"Content-Type":"application/json"},body:JSON.stringify({weight:r,flush:l})});if(!o.ok){const a=(await o.text()).trim();throw new Error(a||`${o.status} ${o.statusText}`)}return await o.json()}var fn=h("<div class=modal-backdrop><div class=modal-card role=dialog aria-modal=true><header class=modal-header><h3></h3><button type=button class=modal-close aria-label=close>×</button></header><div class=modal-body>");const dn=e=>(H(()=>{const t=n=>{n.key==="Escape"&&e.onClose()};document.addEventListener("keydown",t),Y(()=>document.removeEventListener("keydown",t))}),g(Ot,{get mount(){return document.body},get children(){var t=fn(),n=t.firstChild,s=n.firstChild,r=s.firstChild,l=r.nextSibling,i=s.nextSibling;return t.$$mousedown=o=>{o.target===o.currentTarget&&e.onClose()},d(r,()=>e.title),At(l,"click",e.onClose),d(i,()=>e.children),C(()=>N(n,"aria-label",e.title)),t}}));ve(["mousedown","click"]);var gn=h("<div class=kebab-menu role=menu>"),hn=h('<div class=kebab-wrap><button type=button class=kebab-btn aria-haspopup=menu title="backend actions">⋮'),bn=h("<button type=button class=kebab-item role=menuitem>"),mn=h("<p class=dialog-error>"),$n=h("<footer class=dialog-footer><button type=button class=btn-secondary>cancel</button><button type=button class=btn-primary>"),pn=h("<p class=dialog-warn>VPP's flow table will be cleared for this backend. Active sessions will be dropped immediately."),wn=h('<div class=dialog-body><p class=dialog-target><code></code> in pool <code></code> of frontend <code></code></p><label class=dialog-field><span class=weight-slider-label>weight<output class=weight-slider-value></output></span><input type=range class=weight-slider min=0 max=100 step=1><small>0–100; 0 keeps the backend in the pool but assigns it no traffic</small></label><label class="dialog-field checkbox"><input type=checkbox><span>flush existing flows'),vn=h("<p class=dialog-note>VPP's flow table is left alone. Existing sessions keep reaching this backend until they finish."),yn=h("<div class=dialog-body><p class=dialog-consequence>");function _n(e){const t={label:"set weight…",action:"weight"};switch(e){case"up":case"down":case"unknown":return[t,{label:"pause",action:"pause"},{label:"disable",action:"disable"}];case"paused":return[t,{label:"resume",action:"resume"},{label:"disable",action:"disable"}];case"disabled":return[t,{label:"enable",action:"enable"}];default:return[]}}function Sn(e){switch(e){case"pause":return"This will stop health checks and set the weight to 0, but existing flows to this backend are kept. New traffic will be rerouted to other backends.";case"resume":return"This will restart health checks. The backend re-enters the 'unknown' state and will start receiving traffic once it probes up.";case"disable":return"This will stop health checks, set the weight to 0, AND flush VPP's flow table for this backend. Active sessions will be dropped immediately.";case"enable":return"This will restart health checks on a previously disabled backend. It re-enters the 'unknown' state and will start receiving traffic once it probes up."}}const kn=e=>{const[t,n]=x(!1),[s,r]=x(),[l,i]=x(!1),[o,a]=x(),[u,f]=x(e.configuredWeight),[c,$]=x(!1);let b;const y=()=>_n(e.state);H(()=>{if(!t())return;const m=_=>{b&&(b.contains(_.target)||n(!1))},w=_=>{_.key==="Escape"&&n(!1)};document.addEventListener("mousedown",m),document.addEventListener("keydown",w),Y(()=>{document.removeEventListener("mousedown",m),document.removeEventListener("keydown",w)})});const k=m=>{n(!1),a(void 0),m==="weight"&&(f(e.configuredWeight),$(!1)),r(m)},P=()=>{l()||(r(void 0),a(void 0))},B=async()=>{const m=s();if(m){i(!0),a(void 0);try{if(m==="weight"){const w=u();if(!Number.isFinite(w)||w<0||w>100)throw new Error("weight must be an integer in [0, 100]");const _=Math.floor(w);await un(e.maglevd,e.frontend,e.pool,e.backend,_,c()),Ft(e.maglevd,e.frontend,e.pool,e.backend,_)}else await cn(e.maglevd,e.backend,m);r(void 0)}catch(w){a(`${w}`)}finally{i(!1)}}};return g(O,{get when(){return y().length>0},get children(){var m=hn(),w=m.firstChild,_=b;return typeof _=="function"?ye(_,m):b=m,w.$$click=A=>{A.stopPropagation(),n(S=>!S)},d(m,g(O,{get when(){return t()},get children(){var A=gn();return d(A,g(J,{get each(){return y()},children:S=>(()=>{var T=bn();return T.$$click=()=>k(S.action),d(T,()=>S.label),T})()})),A}}),null),d(m,g(O,{get when(){return s()},children:A=>g(dn,{get title(){return xn(A(),e.backend)},onClose:P,get children(){return[L(()=>L(()=>A()==="weight")()?(()=>{var S=wn(),T=S.firstChild,V=T.firstChild,I=V.nextSibling,ee=I.nextSibling,ae=ee.nextSibling,ce=ae.nextSibling,Ne=T.nextSibling,Le=Ne.firstChild,lt=Le.firstChild,it=lt.nextSibling,Ie=Le.nextSibling,ot=Ne.nextSibling,je=ot.firstChild;return d(V,()=>e.backend),d(ee,()=>e.pool),d(ce,()=>e.frontend),d(it,u),Ie.$$input=Se=>f(Number(Se.currentTarget.value)),je.addEventListener("change",Se=>$(Se.currentTarget.checked)),d(S,g(O,{get when(){return c()},get fallback(){return vn()},get children(){return pn()}}),null),C(()=>Ie.value=u()),C(()=>je.checked=c()),S})():(()=>{var S=yn(),T=S.firstChild;return d(T,()=>Sn(A())),S})()),g(O,{get when(){return o()},get children(){var S=mn();return d(S,o),S}}),(()=>{var S=$n(),T=S.firstChild,V=T.nextSibling;return T.$$click=P,V.$$click=B,d(V,()=>l()?"committing…":"commit"),C(I=>{var ee=l(),ae=!!(A()==="disable"||A()==="weight"&&c()),ce=l();return ee!==I.e&&(T.disabled=I.e=ee),ae!==I.t&&V.classList.toggle("btn-danger",I.t=ae),ce!==I.a&&(V.disabled=I.a=ce),I},{e:void 0,t:void 0,a:void 0}),S})()]}})}),null),C(()=>N(w,"aria-expanded",t())),m}})};function xn(e,t){switch(e){case"weight":return`Set weight — ${t}`;case"pause":return`Pause ${t}?`;case"resume":return`Resume ${t}?`;case"disable":return`Disable ${t}?`;case"enable":return`Enable ${t}?`}}ve(["click","input"]);const R=window.location.pathname.startsWith("/admin");var An=h("<td class=actions>"),Cn=h("<tr class=backend-row><td class=col-pool></td><td class=backend-name><span class=backend-name-text></span></td><td class=backend-address></td><td></td><td class=numeric></td><td class=numeric></td><td class=age>");const En=e=>{const t=()=>e.backend;return(()=>{var n=Cn(),s=n.firstChild,r=s.nextSibling,l=r.firstChild,i=r.nextSibling,o=i.nextSibling,a=o.nextSibling,u=a.nextSibling,f=u.nextSibling;return d(s,(()=>{var c=L(()=>!!e.showPool);return()=>c()?e.pool:""})()),d(r,g(on,{get maglevd(){return e.maglevd},get backend(){return t().name},get state(){return t().state}}),l),d(l,()=>t().name),d(i,()=>t().address),d(o,g(re,{get value(){return t().state},get children(){return g(rt,{get state(){return t().state}})}})),d(a,g(re,{get value(){return e.poolBackend.weight}})),d(u,g(re,{get value(){return e.poolBackend.effective_weight}})),d(f,()=>Gt(t().last_transition)),d(n,g(O,{when:R,get children(){var c=An();return d(c,g(kn,{get maglevd(){return e.maglevd},get frontend(){return e.frontend},get pool(){return e.pool},get backend(){return t().name},get state(){return t().state},get configuredWeight(){return e.poolBackend.weight}})),c}}),null),C(c=>{var $=!e.poolActive,b=t().state;return $!==c.e&&n.classList.toggle("pool-standby",c.e=$),b!==c.t&&N(n,"data-state",c.t=b),c},{e:void 0,t:void 0}),n})()};var Pn=h("<details class=zippy><summary></summary><div class=zippy-body>");const Te=e=>(()=>{var t=Pn(),n=t.firstChild,s=n.nextSibling;return d(n,()=>e.title),d(s,()=>e.children),C(()=>t.open=e.open),t})();var On=h("<span class=frontend-title><span class=frontend-title-name></span><span class=frontend-title-addr></span><span class=frontend-title-proto>"),Tn=h("<span class=tag>sticky"),Nn=h("<span class=frontend-title-desc>"),Ln=h('<th class="col-actions actions">'),In=h('<table class=backend-table><thead><tr><th class=col-pool>pool</th><th class=col-name>backend</th><th class=col-address>address</th><th class=col-state>state</th><th class="col-weight numeric">weight</th><th class="col-effective numeric">effective</th><th class=col-age>last transition</th></tr></thead><tbody>');const jn=e=>{const t=()=>Object.fromEntries(e.snap.backends.map(r=>[r.name,r])),n=()=>e.frontend,s=(()=>{var r=On(),l=r.firstChild,i=l.nextSibling,o=i.nextSibling;return d(l,()=>n().name),d(r,g(re,{get value(){return n().state??"unknown"},get children(){return g(rt,{get state(){return n().state??"unknown"}})}}),i),d(i,()=>Ht(n().address,n().port)),d(o,()=>n().protocol.toUpperCase()),d(r,(()=>{var a=L(()=>!!n().src_ip_sticky);return()=>a()&&Tn()})(),null),d(r,(()=>{var a=L(()=>!!n().description);return()=>a()&&(()=>{var u=Nn();return d(u,()=>n().description),u})()})(),null),r})();return g(Te,{title:s,open:!0,get children(){var r=In(),l=r.firstChild,i=l.firstChild,o=i.firstChild,a=o.nextSibling,u=a.nextSibling,f=u.nextSibling,c=f.nextSibling,$=c.nextSibling;$.nextSibling;var b=l.nextSibling;return d(i,g(O,{when:R,get children(){return Ln()}}),null),d(b,g(J,{get each(){return n().pools},children:y=>{const k=()=>y.backends.some(P=>P.effective_weight>0);return g(J,{get each(){return y.backends},children:(P,B)=>{const m=t()[P.name];return m?g(En,{get maglevd(){return e.snap.maglevd.name},get frontend(){return n().name},get pool(){return y.name},get showPool(){return B()===0},get poolActive(){return k()},backend:m,poolBackend:P}):null}})}})),r}})};var Dn=h("<span class=vpp-badge>"),Mn=h("<span class=zippy-title>VPP"),Bn=h("<p class=empty>No VPP information available."),Rn=h("<dl class=kv><dt>version</dt><dd></dd><dt>build date</dt><dd></dd><dt>pid</dt><dd></dd><dt>booted</dt><dd></dd><dt>connected</dt><dd>");const Un=e=>{const t=()=>e.info?.boottime_ns?new Date(e.info.boottime_ns/1e6).toISOString():"",n=()=>e.info?.connecttime_ns?new Date(e.info.connecttime_ns/1e6).toISOString():"",s=()=>e.state==="connected"?"connected":"disconnected",r=(()=>{var l=Mn();return l.firstChild,d(l,g(re,{get value(){return s()},get children(){var i=Dn();return d(i,s),C(()=>N(i,"data-state",s())),i}}),null),l})();return g(Te,{title:r,get children(){return g(O,{get when(){return e.info},get fallback(){return Bn()},children:l=>(()=>{var i=Rn(),o=i.firstChild,a=o.nextSibling,u=a.nextSibling,f=u.nextSibling,c=f.nextSibling,$=c.nextSibling,b=$.nextSibling,y=b.nextSibling,k=y.nextSibling,P=k.nextSibling;return d(a,()=>l().version),d(f,()=>l().build_date),d($,()=>l().pid),d(y,t),d(P,n),i})()})}})};var Vn=h("<main class=overview>"),Wn=h("<p class=empty>No maglevd selected."),Fn=h('<div class="banner warn"> disconnected'),Hn=h("<div class=frontend-list>");const Gn=()=>{const e=()=>{const t=_e();return t?pe.byName[t]:void 0};return(()=>{var t=Vn();return d(t,g(O,{get when(){return e()},get fallback(){return Wn()},children:n=>[g(O,{get when(){return!n().maglevd.connected},get children(){var s=Fn(),r=s.firstChild;return d(s,()=>n().maglevd.name,r),d(s,(()=>{var l=L(()=>!!n().maglevd.last_error);return()=>l()&&`: ${n().maglevd.last_error}`})(),null),s}}),(()=>{var s=Hn();return d(s,g(J,{get each(){return n().frontends},children:r=>g(jn,{get snap(){return n()},frontend:r})})),s})(),g(Un,{get info(){return n().vpp_info},get state(){return n().vpp_state}})]})),t})()};var Kn=h("<ol class=event-tail>"),qn=h("<div class=debug-toolbar><label><input type=checkbox>all maglevds</label><button></button><span class=count> events"),Yn=h("<li>");const Jn=()=>{const[e,t]=x(!1),[n,s]=x(!1),[r,l]=x([]),i=W(()=>{const u=n()?r():Ee();if(e())return u;const f=_e();return f?u.filter(c=>c.maglevd===f):u}),o=()=>{n()?s(!1):(l([...Ee()]),s(!0))};let a;return H(()=>{i(),!n()&&a&&(a.scrollTop=a.scrollHeight)}),g(Te,{title:"Event stream",get children(){return[(()=>{var u=Kn(),f=a;return typeof f=="function"?ye(f,u):a=u,d(u,g(J,{get each(){return i()},children:c=>(()=>{var $=Yn();return d($,()=>Qn(c)),C(b=>{var y=`event-row event-${c.type}`,k=!!Xn(c);return y!==b.e&&xt($,b.e=y),k!==b.t&&$.classList.toggle("event-sync",b.t=k),b},{e:void 0,t:void 0}),$})()})),u})(),(()=>{var u=qn(),f=u.firstChild,c=f.firstChild,$=f.nextSibling,b=$.nextSibling,y=b.firstChild;return c.addEventListener("change",k=>t(k.currentTarget.checked)),$.$$click=o,d($,()=>n()?"resume":"pause"),d(b,()=>i().length,y),C(()=>c.checked=e()),u})()]}})};function Xn(e){return e.type!=="log"?!1:e.payload.msg.startsWith("vpp-lb-sync-")}function zn(e){if(!e)return"";const t=["vip","protocol","port","address","weight","from","to","encap","src-ip-sticky","flush"],n=[],s=new Set;for(const r of t)r in e&&(n.push(`${r}=${e[r]}`),s.add(r));for(const[r,l]of Object.entries(e))s.has(r)||n.push(`${r}=${l}`);return n.join(" ")}function Qn(e){const t=new Date(e.at_unix_ns/1e6).toISOString().substring(11,23),n=`[${e.maglevd}]`;switch(e.type){case"backend":{const s=e.payload;return`${t} ${n} backend ${s.backend}: ${s.transition.from} → ${s.transition.to}`}case"frontend":{const s=e.payload;return`${t} ${n} frontend ${s.frontend}: ${s.transition.from} → ${s.transition.to}`}case"log":{const s=e.payload;if(s.msg.startsWith("vpp-lb-sync-"))return`${t} ${n} ${s.msg} ${zn(s.attrs)}`.trimEnd();const r=s.attrs?Object.entries(s.attrs).map(([l,i])=>`${l}=${i}`).join(" "):"";return`${t} ${n} ${s.level} ${s.msg} ${r}`.trimEnd()}case"maglevd-status":return`${t} ${n} maglevd status: ${JSON.stringify(e.payload)}`;default:return`${t} ${n} ${e.type}`}}ve(["click"]);const Zn="/view/assets/logo-bimi-Bguc6E_L.svg";var er=h("<span class=mode-tag>"),tr=h("<a class=admin-toggle>"),nr=h('<div class=app><header class=app-header><div class=brand><a class=brand-logo href=https://ipng.ch/ target=_blank rel=noopener title="IPng Networks"><img alt=IPng></a><a class=brand-name href=https://git.ipng.ch/ipng/vpp-maglev target=_blank rel=noopener title="vpp-maglev on git.ipng.ch"><strong>vpp-maglev'),rr=h("<span class=version> (<!>)"),sr=h('<div class="banner err">'),lr=h("<p class=loading>Loading…");const ir=()=>{const[e,t]=x(),[n,s]=x();gt(async()=>{try{const[l,i]=await Promise.all([Ye(),Tt()]);tt(l),s(i),!_e()&&l.length>0&&nt(l[0].maglevd.name),Yt()}catch(l){t(`${l}`)}});const r=()=>n()?.admin_enabled===!0;return(()=>{var l=nr(),i=l.firstChild,o=i.firstChild,a=o.firstChild,u=a.firstChild;return a.nextSibling,N(u,"src",Zn),d(o,(()=>{var f=L(()=>!!n());return()=>f()&&(()=>{var c=rr(),$=c.firstChild,b=$.nextSibling;return b.nextSibling,d(c,()=>n().version,$),d(c,()=>n().commit,b),C(()=>N(c,"title",`commit ${n().commit} · built ${n().date}`)),c})()})(),null),d(i,g(Qt,{}),null),d(i,g(O,{get when(){return R||r()},get children(){var f=er();return d(f,R?"admin":"view"),f}}),null),d(i,g(O,{get when(){return r()},get children(){var f=tr();return N(f,"href",R?"/view/":"/admin/"),N(f,"title",R?"exit admin mode":"enter admin mode"),d(f,R?"exit admin":"admin…"),f}}),null),d(l,(()=>{var f=L(()=>!!e());return()=>f()&&(()=>{var c=sr();return d(c,e),c})()})(),null),d(l,(()=>{var f=L(()=>!e()&&Object.keys(pe.byName).length===0);return()=>f()&&lr()})(),null),d(l,g(Gn,{}),null),d(l,g(O,{when:R,get children(){return g(Jn,{})}}),null),l})()},st=document.getElementById("root");if(!st)throw new Error("no #root element");kt(()=>g(ir,{}),st);
diff --git a/cmd/frontend/web/dist/assets/index-CrBeXDdb.css b/cmd/frontend/web/dist/assets/index-CrBeXDdb.css
deleted file mode 100644
index fb631e1..0000000
--- a/cmd/frontend/web/dist/assets/index-CrBeXDdb.css
+++ /dev/null
@@ -1 +0,0 @@
-*,*:before,*:after{box-sizing:border-box}html,body{margin:0;padding:0}body{font-family:-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,sans-serif;font-size:14px;line-height:1.4;color:var(--fg);background:var(--bg)}h1,h2,h3,h4,p,dl,dd,ol,ul{margin:0;padding:0}ol,ul{list-style:none}a{color:inherit;text-decoration:none}button{font:inherit;color:inherit;background:none;border:1px solid var(--border);border-radius:4px;padding:4px 8px;cursor:pointer}button:hover{background:var(--bg-soft)}table{border-collapse:collapse;width:100%}th,td{text-align:left;padding:4px 8px}code,pre,.mono{font-family:SF Mono,Menlo,Consolas,monospace}:root{--bg: #fafafa;--bg-soft: #f0f0f0;--bg-card: #ffffff;--fg: #1f2937;--fg-muted: #6b7280;--border: #e5e7eb;--accent: #2563eb;--state-up: #16a34a;--state-down: #dc2626;--state-paused: #2563eb;--state-disabled: #6b7280;--state-unknown: #eab308;--state-removed: #374151}.flash-target{display:inline-block;padding:0 4px;border-radius:3px;transform-origin:center center;will-change:transform,background-color,box-shadow}.backend-row td{overflow:visible}.app{max-width:1400px;margin:0 auto;padding:16px}.app-header{display:flex;align-items:center;gap:16px;padding:4px 0;border-bottom:1px solid var(--border);margin-bottom:16px}.brand{display:flex;align-items:center;gap:8px}.brand strong{font-size:18px}.brand-logo{display:inline-flex;align-items:center}.brand-logo img{height:56px;width:56px;display:block}.brand-logo:hover img{opacity:.8}.app-header .mode-tag{margin-left:auto;padding:2px 6px;border-radius:3px;background:var(--bg-soft);color:var(--fg-muted);font-size:11px;text-transform:uppercase}.brand .version{margin-left:8px;color:var(--fg-muted);font-family:SF Mono,Menlo,Consolas,monospace;font-size:11px;cursor:help}.admin-toggle{padding:4px 10px;border:1px solid var(--border);border-radius:4px;color:var(--accent)}.scope-selector{display:flex;gap:6px;flex-wrap:wrap}.scope-tab{display:inline-flex;align-items:center;gap:6px;padding:4px 10px;border-radius:20px}.scope-tab.active{background:var(--accent);color:#fff;border-color:var(--accent)}.scope-tab .dot{display:inline-block;width:8px;height:8px;border-radius:50%;background:var(--state-down)}.scope-tab.connected .dot{background:var(--state-up)}.status-badge{display:inline-block;padding:2px 10px;border-radius:10px;font-size:12px;font-weight:500;color:#fff;text-transform:capitalize}.status-badge[data-state=up]{background:var(--state-up)}.status-badge[data-state=down]{background:var(--state-down)}.status-badge[data-state=paused]{background:var(--state-paused)}.status-badge[data-state=disabled]{background:var(--state-disabled)}.status-badge[data-state=unknown]{background:var(--state-unknown);color:#1f2937}.status-badge[data-state=removed]{background:var(--state-removed);text-decoration:line-through}.frontend-grid{display:grid;gap:16px;grid-template-columns:1fr}@media (min-width: 640px){.frontend-grid{grid-template-columns:1fr 1fr}}@media (min-width: 1024px){.frontend-grid{grid-template-columns:repeat(3,1fr)}}.frontend-card{background:var(--bg-card);border:1px solid var(--border);border-radius:6px;padding:12px}.frontend-header h2{font-size:16px;margin-bottom:4px;display:flex;align-items:center;gap:8px}.frontend-meta{display:flex;gap:8px;color:var(--fg-muted);font-size:12px}.frontend-meta .proto{text-transform:uppercase;font-weight:600}.frontend-desc{font-size:12px;color:var(--fg-muted);margin-top:4px}.tag{display:inline-block;padding:1px 6px;border-radius:3px;background:var(--bg-soft);color:var(--fg-muted);font-size:11px;margin-left:4px}.pool-block{margin-top:12px}.pool-name{font-size:13px;color:var(--fg-muted);margin-bottom:4px}.backend-table th,.backend-table td{white-space:nowrap}.backend-table th{font-size:11px;color:var(--fg-muted);text-transform:uppercase;border-bottom:1px solid var(--border)}.backend-table .numeric{text-align:right}.backend-row td{border-bottom:1px solid var(--border);font-size:13px}.backend-row .backend-name{font-weight:500}.backend-row .backend-address,.backend-row .age{color:var(--fg-muted);font-family:SF Mono,Menlo,Consolas,monospace;font-size:12px}.backend-table th.actions,.backend-row td.actions{width:24px;padding:0 4px;text-align:center}.kebab-wrap{position:relative;display:inline-block}.kebab-btn{width:20px;height:20px;padding:0;line-height:1;font-size:16px;color:var(--fg-muted);border:1px solid transparent;background:transparent;cursor:pointer;border-radius:3px}.kebab-btn:hover,.kebab-btn[aria-expanded=true]{color:var(--fg);background:var(--bg-soft);border-color:var(--border)}.kebab-menu{position:absolute;top:22px;right:0;z-index:20;min-width:120px;background:var(--bg-card);border:1px solid var(--border);border-radius:4px;box-shadow:0 4px 12px #0000001f;padding:4px 0}.kebab-item{display:block;width:100%;padding:6px 12px;border:none;background:transparent;text-align:left;cursor:pointer;font-size:13px;color:var(--fg)}.kebab-item:hover{background:var(--bg-soft)}.kebab-item:disabled{color:var(--fg-muted);cursor:wait}.kebab-error{padding:4px 12px 8px;color:var(--state-down);font-size:11px;font-family:SF Mono,Menlo,Consolas,monospace;max-width:260px;white-space:normal}.probe-heartbeat{display:inline-block;width:16px;height:14px;line-height:14px;margin-right:6px;text-align:center;font-size:10px;color:var(--state-disabled);overflow:hidden;vertical-align:middle}.probe-heartbeat.in-flight{color:inherit}.banner{padding:8px 12px;border-radius:4px;margin-bottom:12px;font-size:13px}.banner.warn{background:#fef3c7;color:#92400e}.banner.err{background:#fee2e2;color:#991b1b}.loading,.empty{color:var(--fg-muted);padding:16px}.zippy{margin-top:16px;border:1px solid var(--border);border-radius:6px;background:var(--bg-card)}.zippy summary{padding:8px 12px;cursor:pointer;font-weight:500}.zippy-body{padding:8px 12px;border-top:1px solid var(--border)}.zippy-title{display:inline-flex;align-items:center;gap:10px}.vpp-badge{display:inline-block;padding:2px 8px;border-radius:10px;font-size:11px;font-weight:500;text-transform:lowercase;color:#fff}.vpp-badge[data-state=connected]{background:var(--state-up)}.vpp-badge[data-state=disconnected]{background:var(--state-down)}.kv{display:grid;grid-template-columns:max-content 1fr;gap:4px 12px}.kv dt{color:var(--fg-muted)}.debug-toolbar{display:flex;gap:12px;align-items:center;margin-top:8px;font-size:12px}.debug-toolbar .count{margin-left:auto;color:var(--fg-muted)}.event-tail{max-height:320px;overflow:auto;font-family:SF Mono,Menlo,Consolas,monospace;font-size:11px;line-height:1.5}.event-row{padding:2px 4px;white-space:pre-wrap;word-break:break-all}.event-row.event-backend{color:var(--state-up)}.event-row.event-frontend{color:var(--accent)}.event-row.event-log{color:var(--fg-muted)}.event-row.event-maglevd-status{color:var(--state-down)}.event-row.event-sync{color:var(--state-paused);font-weight:500}
diff --git a/cmd/frontend/web/dist/assets/index-CxDuAfMR.css b/cmd/frontend/web/dist/assets/index-CxDuAfMR.css
new file mode 100644
index 0000000..a3c5fa6
--- /dev/null
+++ b/cmd/frontend/web/dist/assets/index-CxDuAfMR.css
@@ -0,0 +1 @@
+*,*:before,*:after{box-sizing:border-box}html,body{margin:0;padding:0}body{font-family:-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,sans-serif;font-size:14px;line-height:1.4;color:var(--fg);background:var(--bg)}h1,h2,h3,h4,p,dl,dd,ol,ul{margin:0;padding:0}ol,ul{list-style:none}a{color:inherit;text-decoration:none}button{font:inherit;color:inherit;background:none;border:1px solid var(--border);border-radius:4px;padding:4px 8px;cursor:pointer}button:hover{background:var(--bg-soft)}table{border-collapse:collapse;width:100%}th,td{text-align:left;padding:4px 8px}code,pre,.mono{font-family:SF Mono,Menlo,Consolas,monospace}:root{--bg: #fafafa;--bg-soft: #f0f0f0;--bg-card: #ffffff;--fg: #0f172a;--fg-muted: #6b7280;--border: #e5e7eb;--accent: #2563eb;--state-up: #16a34a;--state-down: #dc2626;--state-paused: #2563eb;--state-disabled: #6b7280;--state-unknown: #eab308;--state-removed: #374151}.flash-target{display:inline-block;padding:0 4px;border-radius:3px;transform-origin:center center;will-change:transform,background-color,box-shadow}.backend-row td{overflow:visible}.app{max-width:1400px;margin:0 auto;padding:16px}.app-header{display:flex;align-items:center;gap:16px;padding:4px 0;border-bottom:1px solid var(--border);margin-bottom:16px}.brand{display:flex;align-items:center;gap:8px}.brand strong{font-size:18px}.brand-name{color:inherit;text-decoration:none}.brand-name:hover{color:var(--accent)}.brand-logo{display:inline-flex;align-items:center}.brand-logo img{height:56px;width:56px;display:block}.brand-logo:hover img{opacity:.8}.app-header .mode-tag{margin-left:auto;padding:2px 6px;border-radius:3px;background:var(--bg-soft);color:var(--fg-muted);font-size:11px;text-transform:uppercase}.brand .version{margin-left:8px;color:var(--fg-muted);font-family:SF Mono,Menlo,Consolas,monospace;font-size:11px;cursor:help}.admin-toggle{padding:4px 10px;border:1px solid var(--border);border-radius:4px;color:var(--accent)}.scope-selector{display:flex;gap:6px;flex-wrap:wrap}.scope-tab{display:inline-flex;align-items:center;gap:6px;padding:4px 10px;border-radius:20px}.scope-tab.active{background:var(--accent);color:#fff;border-color:var(--accent)}.scope-tab .dot{display:inline-block;width:8px;height:8px;border-radius:50%;background:var(--state-down)}.scope-tab.connected .dot{background:var(--state-up)}.status-badge{display:inline-block;padding:2px 10px;border-radius:10px;font-size:12px;font-weight:500;color:#fff;text-transform:capitalize}.status-badge[data-state=up]{background:var(--state-up)}.status-badge[data-state=down]{background:var(--state-down)}.status-badge[data-state=paused]{background:var(--state-paused)}.status-badge[data-state=disabled]{background:var(--state-disabled)}.status-badge[data-state=unknown]{background:var(--state-unknown);color:#1f2937}.status-badge[data-state=removed]{background:var(--state-removed);text-decoration:line-through}.frontend-list{display:flex;flex-direction:column;gap:4px;margin-bottom:12px}.frontend-title{display:inline-flex;align-items:center;gap:10px;flex-wrap:wrap}.frontend-title-name{font-size:15px;font-weight:600}.frontend-title-addr{font-family:SF Mono,Menlo,Consolas,monospace;font-size:12px;color:var(--fg-muted)}.frontend-title-proto{font-size:11px;font-weight:600;color:var(--fg-muted);text-transform:uppercase}.frontend-title-desc{font-size:12px;color:var(--fg-muted);font-style:italic;font-weight:400}.tag{display:inline-block;padding:1px 6px;border-radius:3px;background:var(--bg-soft);color:var(--fg-muted);font-size:11px;margin-left:4px}.backend-table{table-layout:fixed;width:100%}.backend-table th,.backend-table td{white-space:nowrap}.backend-table th{font-size:11px;color:var(--fg-muted);text-transform:uppercase;border-bottom:1px solid var(--border);padding:2px 8px}.backend-table .numeric{text-align:right}.backend-table .col-pool{width:10ch}.backend-row .col-pool{color:var(--fg-muted);font-weight:500}.backend-row.pool-standby>td:not(.actions){opacity:.35}.backend-table .col-address{width:42ch}.backend-table .col-state{width:90px}.backend-table .col-weight{width:80px}.backend-table .col-effective{width:95px}.backend-table .col-age{width:110px}.backend-row td.backend-name{overflow:hidden}.backend-name-text{display:inline-block;max-width:calc(100% - 22px);overflow:hidden;text-overflow:ellipsis;white-space:nowrap;vertical-align:middle}.backend-row td{border-bottom:1px solid var(--border);font-size:13px;padding:2px 8px}.backend-row .backend-name{font-weight:500}.backend-row .backend-address,.backend-row .age{color:var(--fg-muted);font-family:SF Mono,Menlo,Consolas,monospace;font-size:12px}.backend-table th.actions,.backend-row td.actions{width:28px;padding:0 4px;text-align:center}.kebab-wrap{position:relative;display:inline-block}.kebab-btn{width:20px;height:20px;padding:0;line-height:1;font-size:16px;color:var(--fg-muted);border:1px solid transparent;background:transparent;cursor:pointer;border-radius:3px}.kebab-btn:hover,.kebab-btn[aria-expanded=true]{color:var(--fg);background:var(--bg-soft);border-color:var(--border)}.kebab-menu{position:absolute;top:22px;right:0;z-index:20;min-width:120px;background:var(--bg-card);border:1px solid var(--border);border-radius:4px;box-shadow:0 4px 12px #0000001f;padding:4px 0}.kebab-item{display:block;width:100%;padding:6px 12px;border:none;background:transparent;text-align:left;cursor:pointer;font-size:13px;color:var(--fg)}.kebab-item:hover{background:var(--bg-soft)}.kebab-item:disabled{color:var(--fg-muted);cursor:wait}.kebab-error{padding:4px 12px 8px;color:var(--state-down);font-size:11px;font-family:SF Mono,Menlo,Consolas,monospace;max-width:260px;white-space:normal}.modal-backdrop{position:fixed;inset:0;background:#0f172a73;display:flex;align-items:center;justify-content:center;z-index:100;padding:16px}.modal-card{background:var(--bg-card);border:1px solid var(--border);border-radius:6px;box-shadow:0 20px 50px #00000040;width:100%;max-width:480px;display:flex;flex-direction:column}.modal-header{display:flex;align-items:center;padding:12px 16px;border-bottom:1px solid var(--border)}.modal-header h3{margin:0;font-size:15px;flex:1}.modal-close{width:28px;height:28px;padding:0;font-size:20px;line-height:1;border:none;background:transparent;color:var(--fg-muted);cursor:pointer;border-radius:3px}.modal-close:hover{background:var(--bg-soft);color:var(--fg)}.modal-body{padding:16px}.dialog-body{margin-bottom:12px}.dialog-target{margin-bottom:12px;font-size:13px;color:var(--fg-muted)}.dialog-target code{font-family:SF Mono,Menlo,Consolas,monospace;font-size:13px;background:var(--bg-soft);padding:1px 5px;border-radius:3px;color:var(--fg)}.dialog-consequence{font-size:13px;line-height:1.5;color:var(--fg)}.dialog-field{display:flex;flex-direction:column;margin-bottom:12px;font-size:13px}.dialog-field>span{font-weight:500;margin-bottom:4px}.dialog-field input[type=number]{font:inherit;padding:6px 8px;border:1px solid var(--border);border-radius:4px;width:100px}.dialog-field .weight-slider-label{display:flex;align-items:baseline;justify-content:space-between}.dialog-field .weight-slider-value{font-family:SF Mono,Menlo,Consolas,monospace;font-size:18px;font-weight:600;color:var(--accent);min-width:3ch;text-align:right}.dialog-field .weight-slider{width:100%;margin:4px 0;accent-color:var(--accent)}.dialog-field small{margin-top:4px;color:var(--fg-muted);font-size:11px}.dialog-field.checkbox{flex-direction:row;align-items:center;gap:8px}.dialog-field.checkbox>span{margin-bottom:0;font-weight:400}.dialog-note{font-size:12px;color:var(--fg-muted);line-height:1.5;padding:8px 10px;background:var(--bg-soft);border-radius:4px}.dialog-warn{font-size:12px;color:#991b1b;line-height:1.5;padding:8px 10px;background:#fee2e2;border:1px solid #fecaca;border-radius:4px;font-weight:500}.dialog-error{margin-top:8px;padding:8px 10px;background:#fee2e2;color:#991b1b;border-radius:4px;font-family:SF Mono,Menlo,Consolas,monospace;font-size:12px;white-space:pre-wrap;word-break:break-word}.dialog-footer{display:flex;justify-content:flex-end;gap:8px;margin-top:16px;padding-top:12px;border-top:1px solid var(--border)}.btn-primary,.btn-secondary{font:inherit;padding:6px 14px;border-radius:4px;cursor:pointer;border:1px solid var(--border)}.btn-primary{background:var(--accent);color:#fff;border-color:var(--accent)}.btn-primary:hover:not(:disabled){background:var(--accent);filter:brightness(1.12)}.btn-primary.btn-danger{background:var(--state-down);border-color:var(--state-down)}.btn-primary.btn-danger:hover:not(:disabled){background:var(--state-down);filter:brightness(1.12)}.btn-secondary{background:transparent;color:var(--fg)}.btn-secondary:hover:not(:disabled){background:var(--bg-soft)}.btn-primary:disabled,.btn-secondary:disabled{opacity:.6;cursor:wait}.probe-heartbeat{display:inline-block;width:16px;height:14px;line-height:14px;margin-right:6px;text-align:center;font-size:11px;color:var(--state-disabled);overflow:hidden;vertical-align:middle;transform-origin:center center}.probe-heartbeat.in-flight{color:inherit;font-size:10px}.banner{padding:8px 12px;border-radius:4px;margin-bottom:12px;font-size:13px}.banner.warn{background:#fef3c7;color:#92400e}.banner.err{background:#fee2e2;color:#991b1b}.loading,.empty{color:var(--fg-muted);padding:16px}.zippy{border:1px solid var(--border);border-radius:6px;background:var(--bg-card)}.zippy summary{padding:4px 12px;cursor:pointer;font-weight:500}.zippy-body{padding:4px 10px 6px;border-top:1px solid var(--border)}.zippy-title{display:inline-flex;align-items:center;gap:10px}.vpp-badge{display:inline-block;padding:2px 8px;border-radius:10px;font-size:11px;font-weight:500;text-transform:lowercase;color:#fff}.vpp-badge[data-state=connected]{background:var(--state-up)}.vpp-badge[data-state=disconnected]{background:var(--state-down)}.kv{display:grid;grid-template-columns:max-content 1fr;gap:4px 12px}.kv dt{color:var(--fg-muted)}.debug-toolbar{display:flex;gap:12px;align-items:center;margin-top:8px;font-size:12px}.debug-toolbar .count{margin-left:auto;color:var(--fg-muted)}.event-tail{max-height:320px;overflow:auto;font-family:SF Mono,Menlo,Consolas,monospace;font-size:11px;line-height:1.5}.event-row{padding:2px 4px;white-space:pre-wrap;word-break:break-all}.event-row.event-backend{color:var(--state-up)}.event-row.event-frontend{color:var(--accent)}.event-row.event-log{color:var(--fg-muted)}.event-row.event-maglevd-status{color:var(--state-down)}.event-row.event-sync{color:var(--state-paused);font-weight:500}
diff --git a/cmd/frontend/web/dist/index.html b/cmd/frontend/web/dist/index.html
index fb071c8..72f129c 100644
--- a/cmd/frontend/web/dist/index.html
+++ b/cmd/frontend/web/dist/index.html
@@ -4,8 +4,8 @@
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <title>maglev</title>
-    <script type="module" crossorigin src="/view/assets/index-AsNHMKdQ.js"></script>
-    <link rel="stylesheet" crossorigin href="/view/assets/index-CrBeXDdb.css">
+    <script type="module" crossorigin src="/view/assets/index-BBNMNdtq.js"></script>
+    <link rel="stylesheet" crossorigin href="/view/assets/index-CxDuAfMR.css">
   </head>
   <body>
     <div id="root"></div>
diff --git a/cmd/frontend/web/src/App.tsx b/cmd/frontend/web/src/App.tsx
index 2ee1613..1a51598 100644
--- a/cmd/frontend/web/src/App.tsx
+++ b/cmd/frontend/web/src/App.tsx
@@ -39,14 +39,22 @@ const App: Component = () => {
         <div class="brand">
           <a
             class="brand-logo"
-            href="https://git.ipng.ch/ipng/vpp-maglev/"
+            href="https://ipng.ch/"
+            target="_blank"
+            rel="noopener"
+            title="IPng Networks"
+          >
+            <img src={logoUrl} alt="IPng" />
+          </a>
+          <a
+            class="brand-name"
+            href="https://git.ipng.ch/ipng/vpp-maglev"
             target="_blank"
             rel="noopener"
             title="vpp-maglev on git.ipng.ch"
           >
-            <img src={logoUrl} alt="IPng" />
+            <strong>vpp-maglev</strong>
           </a>
-          <strong>maglev</strong>
           {version() && (
             <span class="version" title={`commit ${version()!.commit} · built ${version()!.date}`}>
               {version()!.version} ({version()!.commit})
diff --git a/cmd/frontend/web/src/api/admin.ts b/cmd/frontend/web/src/api/admin.ts
index 3397bcd..c482112 100644
--- a/cmd/frontend/web/src/api/admin.ts
+++ b/cmd/frontend/web/src/api/admin.ts
@@ -1,4 +1,4 @@
-import type { BackendSnapshot } from "../types";
+import type { BackendSnapshot, FrontendSnapshot } from "../types";
 
 export type BackendAction = "pause" | "resume" | "enable" | "disable";
 
@@ -22,3 +22,33 @@ export async function runBackendAction(
   }
   return (await r.json()) as BackendSnapshot;
 }
+
+// Set a backend's weight within a specific frontend/pool. When flush
+// is true, VPP's flow table for the backend is cleared so existing
+// sessions are dropped; when false, only the new-buckets mapping is
+// updated and existing flows keep draining to the backend.
+export async function setBackendWeight(
+  maglevd: string,
+  frontend: string,
+  pool: string,
+  backend: string,
+  weight: number,
+  flush: boolean,
+): Promise<FrontendSnapshot> {
+  const url =
+    `/admin/api/${encodeURIComponent(maglevd)}` +
+    `/frontend/${encodeURIComponent(frontend)}` +
+    `/pool/${encodeURIComponent(pool)}` +
+    `/backend/${encodeURIComponent(backend)}/weight`;
+  const r = await fetch(url, {
+    method: "POST",
+    credentials: "same-origin",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({ weight, flush }),
+  });
+  if (!r.ok) {
+    const body = (await r.text()).trim();
+    throw new Error(body || `${r.status} ${r.statusText}`);
+  }
+  return (await r.json()) as FrontendSnapshot;
+}
diff --git a/cmd/frontend/web/src/api/sse.ts b/cmd/frontend/web/src/api/sse.ts
index 1ff70be..0952d28 100644
--- a/cmd/frontend/web/src/api/sse.ts
+++ b/cmd/frontend/web/src/api/sse.ts
@@ -2,13 +2,11 @@ import type {
   BackendEventPayload,
   BrowserEvent,
   FrontendEventPayload,
-  LogEventPayload,
   MaglevdStatusPayload,
   VPPStatusPayload,
 } from "../types";
 import { fetchAllState } from "./rest";
 import {
-  applyBackendEffectiveWeight,
   applyBackendTransition,
   applyFrontendTransition,
   applyMaglevdStatus,
@@ -56,6 +54,9 @@ function dispatch(ev: BrowserEvent) {
   pushEvent(ev);
   switch (ev.type) {
     case "backend":
+      // The reducer also recomputes effective weights across every
+      // frontend so pool-failover transitions (primary ⇌ fallback)
+      // reflect instantly, without waiting for the 30s refresh.
       applyBackendTransition(ev.maglevd, ev.payload as BackendEventPayload);
       break;
     case "frontend":
@@ -68,30 +69,17 @@ function dispatch(ev: BrowserEvent) {
       applyVPPStatus(ev.maglevd, (ev.payload as VPPStatusPayload).state);
       break;
     case "log":
-      applyLogEvent(ev.maglevd, ev.payload as LogEventPayload);
-      break;
-  }
-}
-
-// applyLogEvent surfaces the few log messages that carry data we want to
-// reflect in the store. Probe-start/probe-done drive the heartbeat and are
-// handled by BackendRow watching the events signal directly; here we only
-// react to VPP LB sync mutations so the effective weight column updates
-// live when a backend is disabled, enabled, or reweighted.
-function applyLogEvent(maglevd: string, p: LogEventPayload) {
-  if (!p.msg.startsWith("vpp-lb-sync-as-")) return;
-  const attrs = p.attrs ?? {};
-  const address = attrs.address;
-  if (!address) return;
-  switch (p.msg) {
-    case "vpp-lb-sync-as-added":
-      applyBackendEffectiveWeight(maglevd, address, Number(attrs.weight ?? 0));
-      break;
-    case "vpp-lb-sync-as-removed":
-      applyBackendEffectiveWeight(maglevd, address, 0);
-      break;
-    case "vpp-lb-sync-as-weight-updated":
-      applyBackendEffectiveWeight(maglevd, address, Number(attrs.to ?? 0));
+      // Log events are displayed in the DebugPanel but no longer
+      // mutate the state tree. The previous vpp-lb-sync-as-*
+      // routing was removed because a VIP-scoped event was being
+      // naively written into every frontend that shared the
+      // backend, corrupting effective_weight for frontends with
+      // different per-pool configured weights. Backend state
+      // changes (arriving via "backend" events above) are a
+      // sufficient trigger for recomputing effective weights
+      // locally, and the set-weight kebab action updates the
+      // store directly via applyConfiguredWeight on its POST
+      // success path.
       break;
   }
 }
diff --git a/cmd/frontend/web/src/components/BackendActionsMenu.tsx b/cmd/frontend/web/src/components/BackendActionsMenu.tsx
index 37dc641..d1cd7c5 100644
--- a/cmd/frontend/web/src/components/BackendActionsMenu.tsx
+++ b/cmd/frontend/web/src/components/BackendActionsMenu.tsx
@@ -1,54 +1,96 @@
 import { For, Show, createEffect, createSignal, onCleanup, type Component } from "solid-js";
-import { runBackendAction, type BackendAction } from "../api/admin";
+import { runBackendAction, setBackendWeight, type BackendAction } from "../api/admin";
+import Modal from "./Modal";
+import { applyConfiguredWeight } from "../stores/state";
 
 type Props = {
   maglevd: string;
+  frontend: string;
+  pool: string;
   backend: string;
   state: string;
+  // Current configured weight. Used to seed the weight dialog's
+  // number input so the operator sees the existing value and only
+  // has to change the digits that matter.
+  configuredWeight: number;
 };
 
+// MenuAction is what the user clicks. It maps 1:1 onto BackendAction
+// plus a virtual "weight" entry that opens the weight form rather
+// than firing an immediate lifecycle RPC.
+type MenuAction = BackendAction | "weight";
+
 type MenuItem = {
   label: string;
-  action: BackendAction;
+  action: MenuAction;
 };
 
-// Action set available per current backend state. Only the actions
-// that make sense for the current state are shown — e.g. "resume" is
-// meaningless on a running backend, and "enable" is meaningless on
-// anything except a disabled one. A backend in the "removed" state
-// has no actionable operations, so the whole kebab is suppressed.
+// Available items per state. "weight" is always present (operators
+// can adjust the configured weight in any state including paused
+// and disabled — the effective weight won't change until the state
+// lets it, but the config value is still meaningful). A removed
+// backend has no actionable operations, so the kebab is suppressed
+// entirely by returning an empty list.
 function itemsForState(state: string): MenuItem[] {
+  const weightItem: MenuItem = { label: "set weight…", action: "weight" };
   switch (state) {
     case "up":
     case "down":
     case "unknown":
       return [
+        weightItem,
         { label: "pause", action: "pause" },
         { label: "disable", action: "disable" },
       ];
     case "paused":
       return [
+        weightItem,
         { label: "resume", action: "resume" },
         { label: "disable", action: "disable" },
       ];
     case "disabled":
-      return [{ label: "enable", action: "enable" }];
+      return [weightItem, { label: "enable", action: "enable" }];
     default:
       return [];
   }
 }
 
+// consequenceText returns the "this will…" description shown in the
+// confirmation dialog for each lifecycle action. Spelling it out in
+// plain English makes the live-traffic impact unmistakable before
+// the operator commits.
+function consequenceText(action: BackendAction): string {
+  switch (action) {
+    case "pause":
+      return "This will stop health checks and set the weight to 0, but existing flows to this backend are kept. New traffic will be rerouted to other backends.";
+    case "resume":
+      return "This will restart health checks. The backend re-enters the 'unknown' state and will start receiving traffic once it probes up.";
+    case "disable":
+      return "This will stop health checks, set the weight to 0, AND flush VPP's flow table for this backend. Active sessions will be dropped immediately.";
+    case "enable":
+      return "This will restart health checks on a previously disabled backend. It re-enters the 'unknown' state and will start receiving traffic once it probes up.";
+  }
+}
+
 const BackendActionsMenu: Component<Props> = (props) => {
   const [open, setOpen] = createSignal(false);
-  const [busy, setBusy] = createSignal<BackendAction | undefined>();
+  const [dialog, setDialog] = createSignal<MenuAction | undefined>();
+  const [busy, setBusy] = createSignal(false);
   const [error, setError] = createSignal<string | undefined>();
+
+  // Weight-dialog form state. Seeded from the current configured
+  // weight each time the dialog opens so re-opening after a change
+  // shows the new value.
+  const [weightInput, setWeightInput] = createSignal(props.configuredWeight);
+  const [flushInput, setFlushInput] = createSignal(false);
+
   let wrapRef: HTMLDivElement | undefined;
 
   const items = () => itemsForState(props.state);
 
-  // Close on outside-click or Escape. The effect only installs its
-  // document listeners while the menu is open, so there's no cost on
-  // the typical closed-at-rest state.
+  // Close the popover on outside click or Escape while it's open.
+  // The dialog has its own Escape handler; this effect only runs
+  // when the kebab popover (not the dialog) is visible.
   createEffect(() => {
     if (!open()) return;
     const onMouseDown = (e: MouseEvent) => {
@@ -66,22 +108,59 @@ const BackendActionsMenu: Component<Props> = (props) => {
     });
   });
 
-  const run = async (action: BackendAction) => {
-    setBusy(action);
+  const openDialog = (action: MenuAction) => {
+    setOpen(false);
+    setError(undefined);
+    if (action === "weight") {
+      // Seed form from current value on each open.
+      setWeightInput(props.configuredWeight);
+      setFlushInput(false);
+    }
+    setDialog(action);
+  };
+
+  const closeDialog = () => {
+    if (busy()) return; // don't yank the modal out from under an in-flight call
+    setDialog(undefined);
+    setError(undefined);
+  };
+
+  const commit = async () => {
+    const action = dialog();
+    if (!action) return;
+    setBusy(true);
     setError(undefined);
     try {
-      await runBackendAction(props.maglevd, props.backend, action);
-      setOpen(false);
+      if (action === "weight") {
+        const w = weightInput();
+        if (!Number.isFinite(w) || w < 0 || w > 100) {
+          throw new Error("weight must be an integer in [0, 100]");
+        }
+        const newWeight = Math.floor(w);
+        await setBackendWeight(
+          props.maglevd,
+          props.frontend,
+          props.pool,
+          props.backend,
+          newWeight,
+          flushInput(),
+        );
+        // Mirror the server-side mutation into our local store so
+        // the new weight (and any resulting effective-weight
+        // recompute) is visible instantly, without waiting for
+        // the next 30s refresh tick.
+        applyConfiguredWeight(props.maglevd, props.frontend, props.pool, props.backend, newWeight);
+      } else {
+        await runBackendAction(props.maglevd, props.backend, action);
+      }
+      setDialog(undefined);
     } catch (err) {
       setError(`${err}`);
     } finally {
-      setBusy(undefined);
+      setBusy(false);
     }
   };
 
-  // If there are no valid actions for the current state, render
-  // nothing — the surrounding <td> stays an empty cell, no "dead"
-  // kebab tempting clicks.
   return (
     <Show when={items().length > 0}>
       <div class="kebab-wrap" ref={wrapRef}>
@@ -106,21 +185,110 @@ const BackendActionsMenu: Component<Props> = (props) => {
                   type="button"
                   class="kebab-item"
                   role="menuitem"
-                  disabled={busy() !== undefined}
-                  onClick={() => run(item.action)}
+                  onClick={() => openDialog(item.action)}
                 >
-                  {busy() === item.action ? `${item.label}…` : item.label}
+                  {item.label}
                 </button>
               )}
             </For>
-            <Show when={error()}>
-              <p class="kebab-error">{error()}</p>
-            </Show>
           </div>
         </Show>
+
+        <Show when={dialog()}>
+          {(action) => (
+            <Modal title={dialogTitle(action(), props.backend)} onClose={closeDialog}>
+              {action() === "weight" ? (
+                <div class="dialog-body">
+                  <p class="dialog-target">
+                    <code>{props.backend}</code> in pool <code>{props.pool}</code> of frontend{" "}
+                    <code>{props.frontend}</code>
+                  </p>
+                  <label class="dialog-field">
+                    <span class="weight-slider-label">
+                      weight
+                      <output class="weight-slider-value">{weightInput()}</output>
+                    </span>
+                    <input
+                      type="range"
+                      class="weight-slider"
+                      min="0"
+                      max="100"
+                      step="1"
+                      value={weightInput()}
+                      onInput={(e) => setWeightInput(Number(e.currentTarget.value))}
+                    />
+                    <small>0–100; 0 keeps the backend in the pool but assigns it no traffic</small>
+                  </label>
+                  <label class="dialog-field checkbox">
+                    <input
+                      type="checkbox"
+                      checked={flushInput()}
+                      onChange={(e) => setFlushInput(e.currentTarget.checked)}
+                    />
+                    <span>flush existing flows</span>
+                  </label>
+                  <Show
+                    when={flushInput()}
+                    fallback={
+                      <p class="dialog-note">
+                        VPP's flow table is left alone. Existing sessions keep reaching this backend
+                        until they finish.
+                      </p>
+                    }
+                  >
+                    <p class="dialog-warn">
+                      VPP's flow table will be cleared for this backend. Active sessions will be
+                      dropped immediately.
+                    </p>
+                  </Show>
+                </div>
+              ) : (
+                <div class="dialog-body">
+                  <p class="dialog-consequence">{consequenceText(action() as BackendAction)}</p>
+                </div>
+              )}
+
+              <Show when={error()}>
+                <p class="dialog-error">{error()}</p>
+              </Show>
+
+              <footer class="dialog-footer">
+                <button type="button" class="btn-secondary" onClick={closeDialog} disabled={busy()}>
+                  cancel
+                </button>
+                <button
+                  type="button"
+                  classList={{
+                    "btn-primary": true,
+                    "btn-danger": action() === "disable" || (action() === "weight" && flushInput()),
+                  }}
+                  onClick={commit}
+                  disabled={busy()}
+                >
+                  {busy() ? "committing…" : "commit"}
+                </button>
+              </footer>
+            </Modal>
+          )}
+        </Show>
       </div>
     </Show>
   );
 };
 
+function dialogTitle(action: MenuAction, backend: string): string {
+  switch (action) {
+    case "weight":
+      return `Set weight — ${backend}`;
+    case "pause":
+      return `Pause ${backend}?`;
+    case "resume":
+      return `Resume ${backend}?`;
+    case "disable":
+      return `Disable ${backend}?`;
+    case "enable":
+      return `Enable ${backend}?`;
+  }
+}
+
 export default BackendActionsMenu;
diff --git a/cmd/frontend/web/src/components/Modal.tsx b/cmd/frontend/web/src/components/Modal.tsx
new file mode 100644
index 0000000..f1e9b6e
--- /dev/null
+++ b/cmd/frontend/web/src/components/Modal.tsx
@@ -0,0 +1,48 @@
+import { createEffect, onCleanup, type Component, type JSX } from "solid-js";
+import { Portal } from "solid-js/web";
+
+type Props = {
+  title: string;
+  onClose: () => void;
+  children: JSX.Element;
+};
+
+// Modal is a simple overlay primitive: a dark backdrop + a centered
+// card, portaled into document.body so it can't be clipped by a
+// table cell's overflow or trapped behind a z-index stack. Closes
+// on Escape, on explicit close-button click, or on backdrop click.
+// The backdrop listens on mousedown to decide whether the click
+// landed outside the card; that makes it robust against drags that
+// start inside and release outside (a user trying to select text).
+const Modal: Component<Props> = (props) => {
+  createEffect(() => {
+    const onKey = (e: KeyboardEvent) => {
+      if (e.key === "Escape") props.onClose();
+    };
+    document.addEventListener("keydown", onKey);
+    onCleanup(() => document.removeEventListener("keydown", onKey));
+  });
+
+  return (
+    <Portal mount={document.body}>
+      <div
+        class="modal-backdrop"
+        onMouseDown={(e) => {
+          if (e.target === e.currentTarget) props.onClose();
+        }}
+      >
+        <div class="modal-card" role="dialog" aria-modal="true" aria-label={props.title}>
+          <header class="modal-header">
+            <h3>{props.title}</h3>
+            <button type="button" class="modal-close" aria-label="close" onClick={props.onClose}>
+              {"\u00D7"}
+            </button>
+          </header>
+          <div class="modal-body">{props.children}</div>
+        </div>
+      </div>
+    </Portal>
+  );
+};
+
+export default Modal;
diff --git a/cmd/frontend/web/src/components/ProbeHeartbeat.tsx b/cmd/frontend/web/src/components/ProbeHeartbeat.tsx
index 0664731..a97baa6 100644
--- a/cmd/frontend/web/src/components/ProbeHeartbeat.tsx
+++ b/cmd/frontend/web/src/components/ProbeHeartbeat.tsx
@@ -1,15 +1,51 @@
-import { createEffect, createSignal, type Component } from "solid-js";
+import { createEffect, createSignal, onCleanup, type Component } from "solid-js";
 import { events } from "../stores/events";
 import type { LogEventPayload } from "../types";
 
-type Props = { maglevd: string; backend: string };
+type Props = {
+  maglevd: string;
+  backend: string;
+  state: string;
+};
+
+// Glyphs shown in the first column of every backend row. The at-rest
+// glyph reflects the backend's lifecycle state so the column does
+// double duty as a quick visual cue:
+//
+//   ▶  active — will pop to a heart at each probe-start
+//   ⏸  paused — health checks stopped via PauseBackend
+//   ⏹  disabled / removed — no probes will run
+//   ❤️  probe fired — shown for POP_DURATION_MS after each probe-start
+//
+// We only listen to probe-start, not probe-done: fast probes can
+// complete in <10 ms on local health checks, which means start and
+// done arrive in the same render tick and the heart never visibly
+// paints. Instead a single probe-start kicks off a fixed-length pop
+// sequence (heart visible + scale animation) driven by a timer.
+// Re-entering probe-start during the sequence cancels and restarts
+// the timer, so fast cadences produce a continuous pulse.
+const GLYPH_IDLE = "\u25B6"; // ▶
+const GLYPH_PAUSED = "\u23F8"; // ⏸
+const GLYPH_STOP = "\u23F9"; // ⏹
+const GLYPH_HEART = "\u2764\uFE0F"; // ❤️
+const POP_DURATION_MS = 400;
+
+function idleGlyph(state: string): string {
+  switch (state) {
+    case "paused":
+      return GLYPH_PAUSED;
+    case "disabled":
+    case "removed":
+      return GLYPH_STOP;
+    default:
+      return GLYPH_IDLE;
+  }
+}
 
-// ProbeHeartbeat watches the event stream for probe-start/probe-done log
-// records targeted at this backend. It shows a heart while a probe is in
-// flight and a dot at rest. Success/failure is reflected by the backend's
-// state column, so this component is purely an activity indicator.
 const ProbeHeartbeat: Component<Props> = (props) => {
-  const [inFlight, setInFlight] = createSignal(false);
+  const [popping, setPopping] = createSignal(false);
+  let el: HTMLSpanElement | undefined;
+  let popTimer: number | undefined;
 
   createEffect(() => {
     const list = events();
@@ -18,13 +54,39 @@ const ProbeHeartbeat: Component<Props> = (props) => {
     if (ev.type !== "log" || ev.maglevd !== props.maglevd) return;
     const payload = ev.payload as LogEventPayload;
     if (payload.attrs?.backend !== props.backend) return;
-    if (payload.msg === "probe-start") setInFlight(true);
-    else if (payload.msg === "probe-done") setInFlight(false);
+    if (payload.msg !== "probe-start") return;
+
+    setPopping(true);
+    // Scale-pop on appearance so the heart visually lands even for
+    // <10 ms probes. The Web Animations API supersedes any still-
+    // running anim on the next call, so fast back-to-back probes
+    // re-trigger cleanly.
+    el?.animate(
+      [
+        { transform: "scale(1)" },
+        { transform: "scale(1.6)", offset: 0.25 },
+        { transform: "scale(1)" },
+      ],
+      { duration: POP_DURATION_MS, easing: "ease-out" },
+    );
+    // Each new probe-start resets the off-timer so the heart stays
+    // visible for the full pop duration. Fast cadences keep the
+    // heart continuously on; slow ones get a clean heart-then-idle
+    // transition when the timer expires.
+    if (popTimer !== undefined) clearTimeout(popTimer);
+    popTimer = window.setTimeout(() => {
+      setPopping(false);
+      popTimer = undefined;
+    }, POP_DURATION_MS);
+  });
+
+  onCleanup(() => {
+    if (popTimer !== undefined) clearTimeout(popTimer);
   });
 
   return (
-    <span class="probe-heartbeat" classList={{ "in-flight": inFlight() }}>
-      {inFlight() ? "\u2764\uFE0F" : "\u00B7"}
+    <span ref={el} class="probe-heartbeat" classList={{ "in-flight": popping() }}>
+      {popping() ? GLYPH_HEART : idleGlyph(props.state)}
     </span>
   );
 };
diff --git a/cmd/frontend/web/src/stores/state.ts b/cmd/frontend/web/src/stores/state.ts
index e064b09..2fd81c9 100644
--- a/cmd/frontend/web/src/stores/state.ts
+++ b/cmd/frontend/web/src/stores/state.ts
@@ -8,6 +8,48 @@ import type {
 } from "../types";
 import { tick } from "./tick";
 
+// recomputeEffectiveWeights mirrors the server-side
+// health.EffectiveWeights / ActivePoolIndex logic so the SPA can keep
+// pool.effective_weight correct the moment a backend transitions,
+// without waiting for the 30s refresh. Walking every frontend is cheap
+// — O(frontends × pools × backends-per-pool) with tiny constants —
+// and it's strictly a function of the backend state map, so there's no
+// risk of drift vs. the server as long as the rule stays the same.
+//
+// Rule: a backend gets its configured pool weight iff it is up AND
+// belongs to the currently-active pool; everything else is 0. The
+// active pool is the first pool containing a backend that is both
+// up AND has a non-zero configured weight — a pool whose up backends
+// are all weight=0 contributes no serving capacity and gets skipped
+// over in priority failover. Kept in lock-step with
+// internal/health/weights.go.
+function recomputeEffectiveWeights(snap: StateSnapshot) {
+  const stateOf: Record<string, string> = {};
+  for (const b of snap.backends) stateOf[b.name] = b.state;
+  for (const fe of snap.frontends) {
+    let activePool = 0;
+    for (let i = 0; i < fe.pools.length; i++) {
+      let anyServing = false;
+      for (const pb of fe.pools[i].backends) {
+        if (stateOf[pb.name] === "up" && pb.weight > 0) {
+          anyServing = true;
+          break;
+        }
+      }
+      if (anyServing) {
+        activePool = i;
+        break;
+      }
+    }
+    for (let i = 0; i < fe.pools.length; i++) {
+      for (const pb of fe.pools[i].backends) {
+        const st = stateOf[pb.name];
+        pb.effective_weight = st === "up" && i === activePool ? pb.weight : 0;
+      }
+    }
+  }
+}
+
 // FrontendState keys snapshots by maglevd name. A single store drives the
 // whole UI; reducers produce() into the right branch.
 export type FrontendState = {
@@ -40,12 +82,25 @@ export function applyBackendTransition(maglevd: string, p: BackendEventPayload)
       const b = snap.backends.find((x) => x.name === p.backend);
       if (!b) return;
       b.state = p.transition.to;
+      // Derive enabled from state — see the matching comment in
+      // cmd/frontend/client.go applyBackendTransition. state="disabled"
+      // and enabled=false are two expressions of the same condition
+      // in maglevd, so keeping them in sync locally closes a drift
+      // window where the UI would show the wrong [disabled] tag.
+      b.enabled = p.transition.to !== "disabled";
       b.last_transition = p.transition;
       if (!b.transitions) b.transitions = [];
       b.transitions.push(p.transition);
       if (b.transitions.length > 20) {
         b.transitions = b.transitions.slice(b.transitions.length - 20);
       }
+      // A backend state change can shift which pool is active and
+      // therefore which pool-memberships get non-zero effective
+      // weights. Recompute for every frontend — not just the one
+      // pointed at by this backend — because pool-failover is a
+      // per-frontend computation and the same backend can appear in
+      // multiple frontends with different pool placements.
+      recomputeEffectiveWeights(snap);
     }),
   );
 }
@@ -83,32 +138,50 @@ export function applyMaglevdStatus(maglevd: string, p: MaglevdStatusPayload) {
   );
 }
 
-// applyBackendEffectiveWeight updates the effective_weight of every pool
-// row that references the backend with the given address. Driven by the
-// vpp-lb-sync-as-* log events so the UI reflects VPP LB changes without
-// waiting for the 30s refresh tick.
-export function applyBackendEffectiveWeight(maglevd: string, address: string, weight: number) {
+// applyConfiguredWeight updates the configured weight of a specific
+// backend's pool-membership within a named frontend/pool, then
+// recomputes effective weights so pool-failover semantics stay
+// consistent. Called from the BackendActionsMenu after a successful
+// admin "set weight" POST so the UI reflects the change instantly
+// without waiting for the 30s refresh tick. Unlike the previous
+// log-event-driven reducer, this one is scoped to exactly the
+// pool-membership the operator edited, so it can't leak weights
+// across frontends that share the backend.
+export function applyConfiguredWeight(
+  maglevd: string,
+  frontend: string,
+  pool: string,
+  backend: string,
+  weight: number,
+) {
   setState(
     produce((s) => {
       const snap = s.byName[maglevd];
       if (!snap) return;
-      const b = snap.backends.find((x) => x.address === address);
-      if (!b) return;
-      for (const fe of snap.frontends) {
-        for (const pool of fe.pools) {
-          for (const pb of pool.backends) {
-            if (pb.name === b.name) {
-              pb.effective_weight = weight;
-            }
-          }
-        }
-      }
+      const fe = snap.frontends.find((f) => f.name === frontend);
+      if (!fe) return;
+      const p = fe.pools.find((x) => x.name === pool);
+      if (!p) return;
+      const pb = p.backends.find((x) => x.name === backend);
+      if (!pb) return;
+      pb.weight = weight;
+      recomputeEffectiveWeights(snap);
     }),
   );
 }
 
 // Helpers used by views.
 
+// formatVIPAddress renders an address:port string with IPv6 addresses
+// wrapped in square brackets. This matches the URL-authority
+// convention (RFC 3986 §3.2.2) — without the brackets the colons in
+// an IPv6 literal are ambiguous against the port separator. IPv4 is
+// left bare.
+export function formatVIPAddress(address: string, port: number): string {
+  if (address.includes(":")) return `[${address}]:${port}`;
+  return `${address}:${port}`;
+}
+
 export function lastTransitionAge(t?: TransitionRecord): string {
   // Subscribe to the 1s ticker so the age string updates live as a
   // real-time countdown. No effect on layout — the age column is
diff --git a/cmd/frontend/web/src/styles/theme.css b/cmd/frontend/web/src/styles/theme.css
index 6417c1f..38b14e2 100644
--- a/cmd/frontend/web/src/styles/theme.css
+++ b/cmd/frontend/web/src/styles/theme.css
@@ -2,7 +2,7 @@
   --bg: #fafafa;
   --bg-soft: #f0f0f0;
   --bg-card: #ffffff;
-  --fg: #1f2937;
+  --fg: #0f172a;
   --fg-muted: #6b7280;
   --border: #e5e7eb;
   --accent: #2563eb;
@@ -51,6 +51,13 @@
 .brand strong {
   font-size: 18px;
 }
+.brand-name {
+  color: inherit;
+  text-decoration: none;
+}
+.brand-name:hover {
+  color: var(--accent);
+}
 .brand-logo {
   display: inline-flex;
   align-items: center;
@@ -149,51 +156,44 @@
   text-decoration: line-through;
 }
 
-/* ---- frontend grid ---- */
+/* ---- frontend list ---- */
 
-.frontend-grid {
-  display: grid;
-  gap: 16px;
-  grid-template-columns: 1fr;
-}
-@media (min-width: 640px) {
-  .frontend-grid {
-    grid-template-columns: 1fr 1fr;
-  }
-}
-@media (min-width: 1024px) {
-  .frontend-grid {
-    grid-template-columns: repeat(3, 1fr);
-  }
-}
-
-.frontend-card {
-  background: var(--bg-card);
-  border: 1px solid var(--border);
-  border-radius: 6px;
-  padding: 12px;
-}
-.frontend-header h2 {
-  font-size: 16px;
-  margin-bottom: 4px;
+.frontend-list {
   display: flex;
+  flex-direction: column;
+  gap: 4px;
+  margin-bottom: 12px;
+}
+
+/* Zippy summary row for a frontend. Flex so every piece sits on a
+ * single line with consistent spacing, and flex-wrap lets a narrow
+ * viewport wrap cleanly rather than overflow. */
+.frontend-title {
+  display: inline-flex;
   align-items: center;
-  gap: 8px;
+  gap: 10px;
+  flex-wrap: wrap;
 }
-.frontend-meta {
-  display: flex;
-  gap: 8px;
-  color: var(--fg-muted);
-  font-size: 12px;
-}
-.frontend-meta .proto {
-  text-transform: uppercase;
+.frontend-title-name {
+  font-size: 15px;
   font-weight: 600;
 }
-.frontend-desc {
+.frontend-title-addr {
+  font-family: "SF Mono", Menlo, Consolas, monospace;
   font-size: 12px;
   color: var(--fg-muted);
-  margin-top: 4px;
+}
+.frontend-title-proto {
+  font-size: 11px;
+  font-weight: 600;
+  color: var(--fg-muted);
+  text-transform: uppercase;
+}
+.frontend-title-desc {
+  font-size: 12px;
+  color: var(--fg-muted);
+  font-style: italic;
+  font-weight: 400;
 }
 .tag {
   display: inline-block;
@@ -205,15 +205,17 @@
   margin-left: 4px;
 }
 
-.pool-block {
-  margin-top: 12px;
+/* Fixed table layout with per-column widths so every backend table
+ * renders identical columns regardless of which pool/frontend it
+ * lives in. The name column is the only auto-sized one, so it
+ * absorbs the remaining space — and since all tables have the same
+ * width (100% of the same zippy body width) and the same fixed
+ * column sums, the auto column is identical in all of them, and
+ * every column aligns vertically across pools and frontends. */
+.backend-table {
+  table-layout: fixed;
+  width: 100%;
 }
-.pool-name {
-  font-size: 13px;
-  color: var(--fg-muted);
-  margin-bottom: 4px;
-}
-
 .backend-table th,
 .backend-table td {
   white-space: nowrap;
@@ -223,13 +225,83 @@
   color: var(--fg-muted);
   text-transform: uppercase;
   border-bottom: 1px solid var(--border);
+  padding: 2px 8px;
 }
 .backend-table .numeric {
   text-align: right;
 }
+/* Pool-name column. Rendered only on the first row of each pool
+ * group; subsequent rows within the same pool leave this cell
+ * blank, producing a classic grouped-table look where the pool
+ * label appears once above its members. Wide enough to fit
+ * realistic pool names like "primary"/"fallback"/"canary".
+ *
+ * The header (<th>) keeps its default bold + uppercase + muted
+ * styling from .backend-table th; we only style the data cells
+ * here so the column still reads like every other header. */
+.backend-table .col-pool {
+  width: 10ch;
+}
+.backend-row .col-pool {
+  color: var(--fg-muted);
+  font-weight: 500;
+}
+/* Standby rows: every backend in this row's pool has
+ * effective_weight=0, meaning the pool isn't currently carrying
+ * traffic (standby fallback or fully-drained primary). Dims
+ * every column EXCEPT the actions cell, leaving the kebab icon,
+ * its popover menu, and the modal dialogs it opens at full
+ * contrast — those are all still functional (an operator can
+ * pause/disable/set-weight on a standby backend just as easily
+ * as on an active one), and dimming them would misleadingly
+ * imply they're disabled. Opacity is also multiplicative
+ * through the DOM tree, so excluding the td boundary keeps the
+ * popover and modal fully opaque regardless of where their
+ * DOM ends up mounted.
+ *
+ * Combined with the darker --fg base colour on active rows,
+ * 0.35 gives a clear two-tier contrast. */
+.backend-row.pool-standby > td:not(.actions) {
+  opacity: 0.35;
+}
+/* Sized to comfortably fit the longest legitimate IPv6 form
+ * (e.g. 2001:0db8:85a3:0000:0000:8a2e:0370:7334, 39 chars) plus a
+ * little slack. Shorter IPv4 addresses just leave extra room
+ * before the state column, which is cheaper than clipping. */
+.backend-table .col-address {
+  width: 42ch;
+}
+.backend-table .col-state {
+  width: 90px;
+}
+.backend-table .col-weight {
+  width: 80px;
+}
+.backend-table .col-effective {
+  width: 95px;
+}
+.backend-table .col-age {
+  width: 110px;
+}
+/* The name column clips with an ellipsis on the inner span rather
+ * than the td itself so the Flash halo box-shadow (which uses
+ * overflow: visible on td) still escapes the cell on adjacent
+ * numeric/state cells. */
+.backend-row td.backend-name {
+  overflow: hidden;
+}
+.backend-name-text {
+  display: inline-block;
+  max-width: calc(100% - 22px); /* leave room for the heartbeat wrapper */
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+  vertical-align: middle;
+}
 .backend-row td {
   border-bottom: 1px solid var(--border);
   font-size: 13px;
+  padding: 2px 8px;
 }
 .backend-row .backend-name {
   font-weight: 500;
@@ -242,7 +314,7 @@
 }
 .backend-table th.actions,
 .backend-row td.actions {
-  width: 24px;
+  width: 28px;
   padding: 0 4px;
   text-align: center;
 }
@@ -310,14 +382,219 @@
   white-space: normal;
 }
 
+/* ---- modal ---- */
+
+.modal-backdrop {
+  position: fixed;
+  inset: 0;
+  background: rgba(15, 23, 42, 0.45);
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  z-index: 100;
+  padding: 16px;
+}
+.modal-card {
+  background: var(--bg-card);
+  border: 1px solid var(--border);
+  border-radius: 6px;
+  box-shadow: 0 20px 50px rgba(0, 0, 0, 0.25);
+  width: 100%;
+  max-width: 480px;
+  display: flex;
+  flex-direction: column;
+}
+.modal-header {
+  display: flex;
+  align-items: center;
+  padding: 12px 16px;
+  border-bottom: 1px solid var(--border);
+}
+.modal-header h3 {
+  margin: 0;
+  font-size: 15px;
+  flex: 1;
+}
+.modal-close {
+  width: 28px;
+  height: 28px;
+  padding: 0;
+  font-size: 20px;
+  line-height: 1;
+  border: none;
+  background: transparent;
+  color: var(--fg-muted);
+  cursor: pointer;
+  border-radius: 3px;
+}
+.modal-close:hover {
+  background: var(--bg-soft);
+  color: var(--fg);
+}
+.modal-body {
+  padding: 16px;
+}
+
+/* ---- backend-action dialog contents ---- */
+
+.dialog-body {
+  margin-bottom: 12px;
+}
+.dialog-target {
+  margin-bottom: 12px;
+  font-size: 13px;
+  color: var(--fg-muted);
+}
+.dialog-target code {
+  font-family: "SF Mono", Menlo, Consolas, monospace;
+  font-size: 13px;
+  background: var(--bg-soft);
+  padding: 1px 5px;
+  border-radius: 3px;
+  color: var(--fg);
+}
+.dialog-consequence {
+  font-size: 13px;
+  line-height: 1.5;
+  color: var(--fg);
+}
+.dialog-field {
+  display: flex;
+  flex-direction: column;
+  margin-bottom: 12px;
+  font-size: 13px;
+}
+.dialog-field > span {
+  font-weight: 500;
+  margin-bottom: 4px;
+}
+.dialog-field input[type="number"] {
+  font: inherit;
+  padding: 6px 8px;
+  border: 1px solid var(--border);
+  border-radius: 4px;
+  width: 100px;
+}
+.dialog-field .weight-slider-label {
+  display: flex;
+  align-items: baseline;
+  justify-content: space-between;
+}
+.dialog-field .weight-slider-value {
+  font-family: "SF Mono", Menlo, Consolas, monospace;
+  font-size: 18px;
+  font-weight: 600;
+  color: var(--accent);
+  min-width: 3ch;
+  text-align: right;
+}
+.dialog-field .weight-slider {
+  width: 100%;
+  margin: 4px 0;
+  accent-color: var(--accent);
+}
+.dialog-field small {
+  margin-top: 4px;
+  color: var(--fg-muted);
+  font-size: 11px;
+}
+.dialog-field.checkbox {
+  flex-direction: row;
+  align-items: center;
+  gap: 8px;
+}
+.dialog-field.checkbox > span {
+  margin-bottom: 0;
+  font-weight: 400;
+}
+.dialog-note {
+  font-size: 12px;
+  color: var(--fg-muted);
+  line-height: 1.5;
+  padding: 8px 10px;
+  background: var(--bg-soft);
+  border-radius: 4px;
+}
+.dialog-warn {
+  font-size: 12px;
+  color: #991b1b;
+  line-height: 1.5;
+  padding: 8px 10px;
+  background: #fee2e2;
+  border: 1px solid #fecaca;
+  border-radius: 4px;
+  font-weight: 500;
+}
+.dialog-error {
+  margin-top: 8px;
+  padding: 8px 10px;
+  background: #fee2e2;
+  color: #991b1b;
+  border-radius: 4px;
+  font-family: "SF Mono", Menlo, Consolas, monospace;
+  font-size: 12px;
+  white-space: pre-wrap;
+  word-break: break-word;
+}
+.dialog-footer {
+  display: flex;
+  justify-content: flex-end;
+  gap: 8px;
+  margin-top: 16px;
+  padding-top: 12px;
+  border-top: 1px solid var(--border);
+}
+.btn-primary,
+.btn-secondary {
+  font: inherit;
+  padding: 6px 14px;
+  border-radius: 4px;
+  cursor: pointer;
+  border: 1px solid var(--border);
+}
+.btn-primary {
+  background: var(--accent);
+  color: white;
+  border-color: var(--accent);
+}
+/* The background is set explicitly on :hover to override the generic
+ * button:hover rule in reset.css. Without this, .btn-primary:hover
+ * would only override `filter` and the generic rule's near-white
+ * var(--bg-soft) background would still apply, making a blue button
+ * turn white on hover. */
+.btn-primary:hover:not(:disabled) {
+  background: var(--accent);
+  filter: brightness(1.12);
+}
+.btn-primary.btn-danger {
+  background: var(--state-down);
+  border-color: var(--state-down);
+}
+.btn-primary.btn-danger:hover:not(:disabled) {
+  background: var(--state-down);
+  filter: brightness(1.12);
+}
+.btn-secondary {
+  background: transparent;
+  color: var(--fg);
+}
+.btn-secondary:hover:not(:disabled) {
+  background: var(--bg-soft);
+}
+.btn-primary:disabled,
+.btn-secondary:disabled {
+  opacity: 0.6;
+  cursor: wait;
+}
+
 /* ---- probe heartbeat ---- */
 
 /* Fixed-box wrapper so the row doesn't jiggle when the glyph swaps
- * between "·" (very narrow) and "❤️" (wide emoji with a different
- * font metric). Width is picked to comfortably contain the heart at
- * the declared font-size, line-height is locked so the emoji doesn't
- * push the row baseline, and overflow is hidden as a safety net in
- * case a platform renders the emoji even wider.
+ * between the text-style play/pause/stop glyphs (▶ ⏸ ⏹) and the
+ * wider heart emoji (❤️). The scale-pop animation uses
+ * transform-origin: center so the glyph expands in place. Overflow
+ * is hidden as a safety net in case a platform renders the emoji
+ * wider than the box.
  */
 .probe-heartbeat {
   display: inline-block;
@@ -326,13 +603,15 @@
   line-height: 14px;
   margin-right: 6px;
   text-align: center;
-  font-size: 10px;
+  font-size: 11px;
   color: var(--state-disabled);
   overflow: hidden;
   vertical-align: middle;
+  transform-origin: center center;
 }
 .probe-heartbeat.in-flight {
   color: inherit;
+  font-size: 10px;
 }
 
 /* ---- banners & loading ---- */
@@ -363,18 +642,17 @@
 /* ---- zippy ---- */
 
 .zippy {
-  margin-top: 16px;
   border: 1px solid var(--border);
   border-radius: 6px;
   background: var(--bg-card);
 }
 .zippy summary {
-  padding: 8px 12px;
+  padding: 4px 12px;
   cursor: pointer;
   font-weight: 500;
 }
 .zippy-body {
-  padding: 8px 12px;
+  padding: 4px 10px 6px;
   border-top: 1px solid var(--border);
 }
 .zippy-title {
diff --git a/cmd/frontend/web/src/views/BackendRow.tsx b/cmd/frontend/web/src/views/BackendRow.tsx
index f09815a..d03d9c2 100644
--- a/cmd/frontend/web/src/views/BackendRow.tsx
+++ b/cmd/frontend/web/src/views/BackendRow.tsx
@@ -9,6 +9,18 @@ import { isAdmin } from "../stores/mode";
 
 type Props = {
   maglevd: string;
+  frontend: string;
+  pool: string;
+  // showPool=true renders the pool name in the first column. Set
+  // only on the first backend row of each pool; subsequent rows in
+  // the same pool leave the cell blank, giving the "grouped table"
+  // look where the pool label appears once above its members.
+  showPool: boolean;
+  // poolActive=false means every backend in this row's pool has
+  // effective_weight=0 right now — a standby fallback or a fully
+  // drained primary. The row is rendered dimmer so the operator
+  // can scan which pool is actually carrying traffic.
+  poolActive: boolean;
   backend: BackendSnapshot;
   poolBackend: PoolBackendSnapshot;
 };
@@ -16,11 +28,15 @@ type Props = {
 const BackendRow: Component<Props> = (props) => {
   const b = () => props.backend;
   return (
-    <tr class="backend-row" data-state={b().state}>
+    <tr
+      class="backend-row"
+      classList={{ "pool-standby": !props.poolActive }}
+      data-state={b().state}
+    >
+      <td class="col-pool">{props.showPool ? props.pool : ""}</td>
       <td class="backend-name">
-        <ProbeHeartbeat maglevd={props.maglevd} backend={b().name} />
-        {b().name}
-        {!b().enabled && <span class="tag">[disabled]</span>}
+        <ProbeHeartbeat maglevd={props.maglevd} backend={b().name} state={b().state} />
+        <span class="backend-name-text">{b().name}</span>
       </td>
       <td class="backend-address">{b().address}</td>
       <td>
@@ -37,7 +53,14 @@ const BackendRow: Component<Props> = (props) => {
       <td class="age">{lastTransitionAge(b().last_transition)}</td>
       <Show when={isAdmin}>
         <td class="actions">
-          <BackendActionsMenu maglevd={props.maglevd} backend={b().name} state={b().state} />
+          <BackendActionsMenu
+            maglevd={props.maglevd}
+            frontend={props.frontend}
+            pool={props.pool}
+            backend={b().name}
+            state={b().state}
+            configuredWeight={props.poolBackend.weight}
+          />
         </td>
       </Show>
     </tr>
diff --git a/cmd/frontend/web/src/views/FrontendCard.tsx b/cmd/frontend/web/src/views/FrontendCard.tsx
index 061836d..b891bff 100644
--- a/cmd/frontend/web/src/views/FrontendCard.tsx
+++ b/cmd/frontend/web/src/views/FrontendCard.tsx
@@ -3,74 +3,93 @@ import type { FrontendSnapshot, StateSnapshot } from "../types";
 import BackendRow from "./BackendRow";
 import StatusBadge from "../components/StatusBadge";
 import Flash from "../components/Flash";
+import Zippy from "../components/Zippy";
 import { isAdmin } from "../stores/mode";
+import { formatVIPAddress } from "../stores/state";
 
 type Props = {
   snap: StateSnapshot;
   frontend: FrontendSnapshot;
 };
 
+// FrontendCard is rendered as a Zippy so a deployment with many VIPs
+// can collapse the frontends it doesn't care about. The title line
+// carries the frontend name, a live state badge, address:port, the
+// protocol, the sticky marker, and (when set) the description.
+//
+// The body renders a single consolidated backend table with one row
+// per (pool, backend). The first column holds the pool name, shown
+// only on the first row of each pool and blank on subsequent rows —
+// a classic grouped-table layout that keeps rows dense while still
+// making pool grouping instantly scannable.
 const FrontendCard: Component<Props> = (props) => {
   const backendByName = () => Object.fromEntries(props.snap.backends.map((b) => [b.name, b]));
   const fe = () => props.frontend;
 
-  return (
-    <section class="frontend-card">
-      <header class="frontend-header">
-        <h2>
-          {fe().name}
-          <Flash value={fe().state ?? "unknown"}>
-            <StatusBadge state={fe().state ?? "unknown"} />
-          </Flash>
-        </h2>
-        <div class="frontend-meta">
-          <span class="addr">
-            {fe().address}:{fe().port}
-          </span>
-          <span class="proto">{fe().protocol.toUpperCase()}</span>
-          {fe().src_ip_sticky && <span class="tag">sticky</span>}
-        </div>
-        {fe().description && <p class="frontend-desc">{fe().description}</p>}
-      </header>
+  const title = (
+    <span class="frontend-title">
+      <span class="frontend-title-name">{fe().name}</span>
+      <Flash value={fe().state ?? "unknown"}>
+        <StatusBadge state={fe().state ?? "unknown"} />
+      </Flash>
+      <span class="frontend-title-addr">{formatVIPAddress(fe().address, fe().port)}</span>
+      <span class="frontend-title-proto">{fe().protocol.toUpperCase()}</span>
+      {fe().src_ip_sticky && <span class="tag">sticky</span>}
+      {fe().description && <span class="frontend-title-desc">{fe().description}</span>}
+    </span>
+  );
 
-      <For each={fe().pools}>
-        {(pool) => (
-          <div class="pool-block">
-            <h3 class="pool-name">pool: {pool.name}</h3>
-            <table class="backend-table">
-              <thead>
-                <tr>
-                  <th>backend</th>
-                  <th>address</th>
-                  <th>state</th>
-                  <th class="numeric">weight</th>
-                  <th class="numeric">effective</th>
-                  <th>last transition</th>
-                  <Show when={isAdmin}>
-                    <th class="actions" />
-                  </Show>
-                </tr>
-              </thead>
-              <tbody>
+  return (
+    <Zippy title={title} open>
+      <table class="backend-table">
+        <thead>
+          <tr>
+            <th class="col-pool">pool</th>
+            <th class="col-name">backend</th>
+            <th class="col-address">address</th>
+            <th class="col-state">state</th>
+            <th class="col-weight numeric">weight</th>
+            <th class="col-effective numeric">effective</th>
+            <th class="col-age">last transition</th>
+            <Show when={isAdmin}>
+              <th class="col-actions actions" />
+            </Show>
+          </tr>
+        </thead>
+        <tbody>
+          <For each={fe().pools}>
+            {(pool) => {
+              // A pool is "active" when at least one of its backends
+              // is currently serving traffic (effective_weight > 0).
+              // Inactive pools — standby fallbacks, fully-drained
+              // primaries — have every row rendered dimmer so the
+              // operator can see at a glance which pool is actually
+              // carrying traffic right now.
+              const poolActive = () => pool.backends.some((pb) => pb.effective_weight > 0);
+              return (
                 <For each={pool.backends}>
-                  {(pb) => {
+                  {(pb, idx) => {
                     const backend = backendByName()[pb.name];
                     if (!backend) return null;
                     return (
                       <BackendRow
                         maglevd={props.snap.maglevd.name}
+                        frontend={fe().name}
+                        pool={pool.name}
+                        showPool={idx() === 0}
+                        poolActive={poolActive()}
                         backend={backend}
                         poolBackend={pb}
                       />
                     );
                   }}
                 </For>
-              </tbody>
-            </table>
-          </div>
-        )}
-      </For>
-    </section>
+              );
+            }}
+          </For>
+        </tbody>
+      </table>
+    </Zippy>
   );
 };
 
diff --git a/cmd/frontend/web/src/views/Overview.tsx b/cmd/frontend/web/src/views/Overview.tsx
index dbf7dcf..63d86a5 100644
--- a/cmd/frontend/web/src/views/Overview.tsx
+++ b/cmd/frontend/web/src/views/Overview.tsx
@@ -21,7 +21,7 @@ const Overview: Component = () => {
                 {s().maglevd.last_error && `: ${s().maglevd.last_error}`}
               </div>
             </Show>
-            <div class="frontend-grid">
+            <div class="frontend-list">
               <For each={s().frontends}>{(fe) => <FrontendCard snap={s()} frontend={fe} />}</For>
             </div>
             <VPPInfoPanel info={s().vpp_info} state={s().vpp_state} />
diff --git a/cmd/maglevc/commands.go b/cmd/maglevc/commands.go
index ee9d2a3..e776a99 100644
--- a/cmd/maglevc/commands.go
+++ b/cmd/maglevc/commands.go
@@ -110,12 +110,23 @@ func buildTree() *Node {
 		Help:     "modify a backend",
 		Children: []*Node{setBackendName},
 	}
-	// set frontend <name> pool <pool> backend <name> weight <0-100>
+	// set frontend <name> pool <pool> backend <name> weight <0-100> [flush]
+	//
+	// The tree walker only puts tokens from slot (Dynamic) nodes into
+	// args, so the literal "flush" keyword isn't visible in the arg
+	// list. We use two distinct Run functions to distinguish the two
+	// leaf paths instead — both share the same underlying helper.
+	setWeightFlush := &Node{
+		Word: "flush",
+		Help: "also drop VPP's flow table for this backend (otherwise only the new-buckets map is updated)",
+		Run:  runSetFrontendPoolBackendWeightFlush,
+	}
 	setWeightValue := &Node{
-		Word:    "<weight>",
-		Help:    "Set weight of a backend in a pool (0-100)",
-		Dynamic: dynNone, // accepts any integer; no tab-completion candidates
-		Run:     runSetFrontendPoolBackendWeight,
+		Word:     "<weight>",
+		Help:     "Set weight of a backend in a pool (0-100)",
+		Dynamic:  dynNone, // accepts any integer; no tab-completion candidates
+		Run:      runSetFrontendPoolBackendWeight,
+		Children: []*Node{setWeightFlush},
 	}
 	setFrontendPoolBackendWeight := &Node{Word: "weight", Help: "set backend weight in pool", Children: []*Node{setWeightValue}}
 	setFrontendPoolBackendName := &Node{
@@ -666,8 +677,16 @@ func runResumeBackend(ctx context.Context, client grpcapi.MaglevClient, args []s
 }
 
 func runSetFrontendPoolBackendWeight(ctx context.Context, client grpcapi.MaglevClient, args []string) error {
+	return setFrontendPoolBackendWeight(ctx, client, args, false)
+}
+
+func runSetFrontendPoolBackendWeightFlush(ctx context.Context, client grpcapi.MaglevClient, args []string) error {
+	return setFrontendPoolBackendWeight(ctx, client, args, true)
+}
+
+func setFrontendPoolBackendWeight(ctx context.Context, client grpcapi.MaglevClient, args []string, flush bool) error {
 	if len(args) != 4 {
-		return fmt.Errorf("usage: set frontend <name> pool <pool> backend <name> weight <0-100>")
+		return fmt.Errorf("usage: set frontend <name> pool <pool> backend <name> weight <0-100> [flush]")
 	}
 	frontendName, poolName, backendName, weightStr := args[0], args[1], args[2], args[3]
 	weight, err := strconv.Atoi(weightStr)
@@ -681,6 +700,7 @@ func runSetFrontendPoolBackendWeight(ctx context.Context, client grpcapi.MaglevC
 		Pool:     poolName,
 		Backend:  backendName,
 		Weight:   int32(weight),
+		Flush:    flush,
 	})
 	if err != nil {
 		return err
@@ -692,7 +712,12 @@ func runSetFrontendPoolBackendWeight(ctx context.Context, client grpcapi.MaglevC
 		}
 		for _, pb := range pool.Backends {
 			if pb.Name == backendName {
-				fmt.Printf("%s pool %s backend %s: weight set to %d\n", info.Name, pool.Name, pb.Name, pb.Weight)
+				flushNote := ""
+				if flush {
+					flushNote = " (flushed)"
+				}
+				fmt.Printf("%s pool %s backend %s: weight set to %d%s\n",
+					info.Name, pool.Name, pb.Name, pb.Weight, flushNote)
 				return nil
 			}
 		}
diff --git a/cmd/maglevc/tree_test.go b/cmd/maglevc/tree_test.go
index dad1cdd..6d532c3 100644
--- a/cmd/maglevc/tree_test.go
+++ b/cmd/maglevc/tree_test.go
@@ -25,6 +25,7 @@ func TestExpandPathsRoot(t *testing.T) {
 		"set backend <name> disable",
 		"set backend <name> enable",
 		"set frontend <name> pool <pool> backend <backend> weight <weight>",
+		"set frontend <name> pool <pool> backend <backend> weight <weight> flush",
 		"watch events",
 		"watch events <opt>",
 		"config check",
diff --git a/docs/user-guide.md b/docs/user-guide.md
index 23d3623..222e87c 100644
--- a/docs/user-guide.md
+++ b/docs/user-guide.md
@@ -172,10 +172,30 @@ set backend <name> disable       Stop probing entirely and remove the backend fr
 set backend <name> enable        Re-enable a disabled backend. A fresh probe goroutine is
                                  started and the backend re-enters unknown state.
 
-set frontend <name> pool <pool> backend <name> weight <0-100>
+set frontend <name> pool <pool> backend <name> weight <0-100> [flush]
                                  Set the weight of a backend within a pool. Weight 0 keeps
-                                 the backend in the pool but assigns it no traffic.
-                                 Takes effect immediately without reloading configuration.
+                                 the backend in the pool but assigns it no traffic. Takes
+                                 effect immediately: maglevd pushes the change into VPP
+                                 via a targeted single-VIP reconcile, so there's no need
+                                 to wait for the periodic sync tick.
+
+                                 Without `flush`, the new weight is installed in Maglev's
+                                 new-bucket mapping but VPP's flow table is left alone.
+                                 Existing sessions keep reaching this backend until they
+                                 naturally drain — useful for graceful draining where
+                                 you want new connections to land elsewhere but don't
+                                 want to reset any in-flight traffic.
+
+                                 With `flush`, the corresponding application-server row
+                                 is rewritten with `lb_as_set_weight(is_flush=true)`,
+                                 which clears VPP's flow table entries for this backend.
+                                 Existing sessions are dropped immediately — useful when
+                                 the backend is being taken out of service for emergency
+                                 reasons and you don't want to wait for flows to drain.
+
+                                 Examples:
+                                   set frontend web pool primary backend nginx0 weight 50
+                                   set frontend web pool primary backend nginx0 weight 0 flush
 
 watch events                     Stream all events (log, backend transitions, frontend)
   [num <n>]                      Stop after receiving n events.
diff --git a/internal/checker/checker.go b/internal/checker/checker.go
index 893f897..5da4b82 100644
--- a/internal/checker/checker.go
+++ b/internal/checker/checker.go
@@ -222,6 +222,7 @@ func (c *Checker) ListFrontends() []string {
 	for name := range c.cfg.Frontends {
 		names = append(names, name)
 	}
+	sort.Strings(names)
 	return names
 }
 
diff --git a/internal/config/config.go b/internal/config/config.go
index 5e55fdf..98fcfc3 100644
--- a/internal/config/config.go
+++ b/internal/config/config.go
@@ -7,6 +7,7 @@ import (
 	"net"
 	"os"
 	"regexp"
+	"sort"
 	"strconv"
 	"strings"
 	"time"
@@ -302,6 +303,21 @@ func convert(r *rawMaglev) (*Config, error) {
 		cfg.Frontends[name] = fe
 	}
 
+	// ---- cross-frontend: VIP-address family consistency -----------------------
+	//
+	// VPP's LB plugin requires every VIP sharing a given IP prefix to use
+	// the same encap type (GRE4 vs GRE6) — even when the VIPs sit on
+	// different ports. The encap is determined by the backend address
+	// family (see internal/vpp/lbsync.go desiredFromFrontend). So two
+	// frontends on the same VIP address with backends in different
+	// families (one IPv4 pool, one IPv6 pool) cannot both be programmed
+	// into VPP: the second one fails at lb_add_del_vip_v2 time with
+	// VNET_API_ERROR_INVALID_ARGUMENT (-73). Catching it here turns the
+	// silent runtime failure into a clear config-load error.
+	if err := validateVIPFamilyConsistency(cfg); err != nil {
+		return nil, err
+	}
+
 	// ---- vpp ------------------------------------------------------------------
 	// Runs last so structural errors in healthchecks/backends/frontends are
 	// reported first; operators fix those, then we tell them about the VPP
@@ -579,6 +595,69 @@ func convertFrontend(name string, r *rawFrontend, backends map[string]Backend) (
 	return fe, nil
 }
 
+// validateVIPFamilyConsistency walks cfg.Frontends, groups them by VIP
+// address, and rejects any group whose members disagree on the backend
+// address family used by their pools. See the call site in Parse for
+// why this matters (VPP LB plugin limitation).
+//
+// Each frontend already has its own within-frontend family invariant
+// (every backend in a frontend must share a family — enforced in
+// convertFrontend). This check adds the cross-frontend dimension:
+// frontends that happen to collide on the VIP address.
+func validateVIPFamilyConsistency(cfg *Config) error {
+	type seen struct {
+		family       int
+		frontendName string
+	}
+	byAddr := map[string]seen{}
+	// Sort frontend names so the "first frontend on this address"
+	// reported in errors is deterministic, independent of Go's
+	// randomized map iteration.
+	names := make([]string, 0, len(cfg.Frontends))
+	for name := range cfg.Frontends {
+		names = append(names, name)
+	}
+	sort.Strings(names)
+	for _, name := range names {
+		fe := cfg.Frontends[name]
+		fam := frontendBackendFamily(cfg, fe)
+		if fam == 0 {
+			continue // no valid backends; family is unknowable
+		}
+		addr := fe.Address.String()
+		if prev, ok := byAddr[addr]; ok {
+			if prev.family != fam {
+				return fmt.Errorf(
+					"frontend %q: VIP address %s is also used by frontend %q with IPv%d backends, "+
+						"but %q has IPv%d backends; VPP's LB plugin requires all VIPs sharing an "+
+						"address to use the same encap (backend family), so this config cannot be "+
+						"programmed — give the two frontends different VIP addresses",
+					name, addr, prev.frontendName, prev.family, name, fam)
+			}
+			continue
+		}
+		byAddr[addr] = seen{family: fam, frontendName: name}
+	}
+	return nil
+}
+
+// frontendBackendFamily returns the address family (4 or 6) of the
+// first valid backend in the frontend's first pool. Returns 0 when no
+// backend is resolvable — convertFrontend already enforces that all
+// backends in a frontend share a family, so the first one is
+// authoritative.
+func frontendBackendFamily(cfg *Config, fe Frontend) int {
+	if len(fe.Pools) == 0 {
+		return 0
+	}
+	for bName := range fe.Pools[0].Backends {
+		if b, ok := cfg.Backends[bName]; ok && b.Address != nil {
+			return ipFamily(b.Address)
+		}
+	}
+	return 0
+}
+
 // ---- helpers ---------------------------------------------------------------
 
 func parseOptionalIPFamily(s string, family int, field string) (net.IP, error) {
diff --git a/internal/config/config_test.go b/internal/config/config_test.go
index bdf878f..556a00d 100644
--- a/internal/config/config_test.go
+++ b/internal/config/config_test.go
@@ -558,6 +558,86 @@ maglev:
 `,
 			errSub: "name must not be empty",
 		},
+		{
+			// Regression: VPP's LB plugin requires every VIP sharing
+			// a prefix to use the same encap type. Two frontends on
+			// the same VIP address with mismatched backend families
+			// can't both be programmed; catch it at config load so
+			// the operator doesn't see a late vpp-reconciler-error.
+			name: "cross-frontend VIP family mismatch",
+			yaml: `
+maglev:
+  vpp:
+    lb:
+      ipv4-src-address: 10.0.0.1
+      ipv6-src-address: 2001:db8::10
+  healthchecks:
+    c:
+      type: icmp
+      interval: 1s
+      timeout: 2s
+  backends:
+    v4: {address: 10.0.0.2, healthcheck: c}
+    v6: {address: 2001:db8::2, healthcheck: c}
+  frontends:
+    web:
+      address: 2001:db8::1
+      protocol: tcp
+      port: 443
+      pools:
+        - name: primary
+          backends:
+            v4: {}
+    mail:
+      address: 2001:db8::1
+      protocol: tcp
+      port: 993
+      pools:
+        - name: primary
+          backends:
+            v6: {}
+`,
+			errSub: "VIP address 2001:db8::1",
+		},
+		{
+			// Sanity: two frontends sharing a VIP address with
+			// matching backend families is fine — VPP's constraint
+			// is about encap consistency, not about address reuse.
+			name: "cross-frontend VIP address share with same family is allowed",
+			yaml: `
+maglev:
+  vpp:
+    lb:
+      ipv4-src-address: 10.0.0.1
+      ipv6-src-address: 2001:db8::10
+  healthchecks:
+    c:
+      type: icmp
+      interval: 1s
+      timeout: 2s
+  backends:
+    v6a: {address: 2001:db8::2, healthcheck: c}
+    v6b: {address: 2001:db8::3, healthcheck: c}
+  frontends:
+    web:
+      address: 2001:db8::1
+      protocol: tcp
+      port: 443
+      pools:
+        - name: primary
+          backends:
+            v6a: {}
+    mail:
+      address: 2001:db8::1
+      protocol: tcp
+      port: 993
+      pools:
+        - name: primary
+          backends:
+            v6b: {}
+`,
+			errSub: "",
+		},
 	}
 
 	for _, tt := range tests {
diff --git a/internal/grpcapi/maglev.pb.go b/internal/grpcapi/maglev.pb.go
index fdb576c..4eb8ffe 100644
--- a/internal/grpcapi/maglev.pb.go
+++ b/internal/grpcapi/maglev.pb.go
@@ -1314,11 +1314,16 @@ func (x *VPPLBCounters) GetBackends() []*VPPLBBackendCounters {
 }
 
 type SetWeightRequest struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	Frontend      string                 `protobuf:"bytes,1,opt,name=frontend,proto3" json:"frontend,omitempty"`
-	Pool          string                 `protobuf:"bytes,2,opt,name=pool,proto3" json:"pool,omitempty"`
-	Backend       string                 `protobuf:"bytes,3,opt,name=backend,proto3" json:"backend,omitempty"`
-	Weight        int32                  `protobuf:"varint,4,opt,name=weight,proto3" json:"weight,omitempty"` // 0-100
+	state    protoimpl.MessageState `protogen:"open.v1"`
+	Frontend string                 `protobuf:"bytes,1,opt,name=frontend,proto3" json:"frontend,omitempty"`
+	Pool     string                 `protobuf:"bytes,2,opt,name=pool,proto3" json:"pool,omitempty"`
+	Backend  string                 `protobuf:"bytes,3,opt,name=backend,proto3" json:"backend,omitempty"`
+	Weight   int32                  `protobuf:"varint,4,opt,name=weight,proto3" json:"weight,omitempty"` // 0-100
+	// flush, when true, also clears VPP's flow table for this backend
+	// so existing sessions are torn down. When false (default), only
+	// Maglev's new-bucket mapping is updated and live flows keep
+	// draining to this backend.
+	Flush         bool `protobuf:"varint,5,opt,name=flush,proto3" json:"flush,omitempty"`
 	unknownFields protoimpl.UnknownFields
 	sizeCache     protoimpl.SizeCache
 }
@@ -1381,6 +1386,13 @@ func (x *SetWeightRequest) GetWeight() int32 {
 	return 0
 }
 
+func (x *SetWeightRequest) GetFlush() bool {
+	if x != nil {
+		return x.Flush
+	}
+	return false
+}
+
 // WatchRequest controls which event types are streamed. All fields default to
 // true (i.e. an empty request subscribes to everything at info level).
 type WatchRequest struct {
@@ -2638,12 +2650,13 @@ const file_proto_maglev_proto_rawDesc = "" +
 	"\x05bytes\x18\x04 \x01(\x04R\x05bytes\"w\n" +
 	"\rVPPLBCounters\x12,\n" +
 	"\x04vips\x18\x01 \x03(\v2\x18.maglev.VPPLBVIPCountersR\x04vips\x128\n" +
-	"\bbackends\x18\x02 \x03(\v2\x1c.maglev.VPPLBBackendCountersR\bbackends\"t\n" +
+	"\bbackends\x18\x02 \x03(\v2\x1c.maglev.VPPLBBackendCountersR\bbackends\"\x8a\x01\n" +
 	"\x10SetWeightRequest\x12\x1a\n" +
 	"\bfrontend\x18\x01 \x01(\tR\bfrontend\x12\x12\n" +
 	"\x04pool\x18\x02 \x01(\tR\x04pool\x12\x18\n" +
 	"\abackend\x18\x03 \x01(\tR\abackend\x12\x16\n" +
-	"\x06weight\x18\x04 \x01(\x05R\x06weight\"\xa3\x01\n" +
+	"\x06weight\x18\x04 \x01(\x05R\x06weight\x12\x14\n" +
+	"\x05flush\x18\x05 \x01(\bR\x05flush\"\xa3\x01\n" +
 	"\fWatchRequest\x12\x15\n" +
 	"\x03log\x18\x01 \x01(\bH\x00R\x03log\x88\x01\x01\x12\x1b\n" +
 	"\tlog_level\x18\x02 \x01(\tR\blogLevel\x12\x1d\n" +
diff --git a/internal/grpcapi/server.go b/internal/grpcapi/server.go
index fc55d03..1cee718 100644
--- a/internal/grpcapi/server.go
+++ b/internal/grpcapi/server.go
@@ -102,7 +102,13 @@ func (s *Server) DisableBackend(_ context.Context, req *BackendRequest) (*Backen
 	return backendToProto(b), nil
 }
 
-// SetFrontendPoolBackendWeight updates the weight of a backend in a pool.
+// SetFrontendPoolBackendWeight updates the weight of a backend in a pool
+// and immediately pushes the change into VPP via a targeted single-VIP
+// sync. When req.Flush is true the backend's AS row is rewritten with
+// lb_as_set_weight(is_flush=true), which tears down VPP's flow table for
+// that AS so existing sessions are dropped; when false the flow table is
+// left alone and only Maglev's new-bucket mapping is updated, so existing
+// sessions keep reaching this backend until they naturally drain.
 func (s *Server) SetFrontendPoolBackendWeight(_ context.Context, req *SetWeightRequest) (*FrontendInfo, error) {
 	if req.Weight < 0 || req.Weight > 100 {
 		return nil, status.Errorf(codes.InvalidArgument, "weight %d out of range [0, 100]", req.Weight)
@@ -111,6 +117,26 @@ func (s *Server) SetFrontendPoolBackendWeight(_ context.Context, req *SetWeightR
 	if err != nil {
 		return nil, status.Errorf(codes.NotFound, "%v", err)
 	}
+
+	// Push the change into VPP so the operator doesn't have to wait
+	// for the periodic 30s reconcile to pick it up. Silently skipped
+	// when VPP integration is disabled — the mutation still lands in
+	// config and any future sync will reconcile it.
+	if s.vppClient != nil && s.vppClient.IsConnected() {
+		cfg := s.checker.Config()
+		flushAddr := ""
+		if req.Flush {
+			if b, ok := cfg.Backends[req.Backend]; ok && b.Address != nil {
+				flushAddr = b.Address.String()
+			}
+		}
+		if err := s.vppClient.SyncLBStateVIP(cfg, req.Frontend, flushAddr); err != nil && !errors.Is(err, vpp.ErrFrontendNotFound) {
+			slog.Warn("set-weight-sync",
+				"frontend", req.Frontend, "backend", req.Backend,
+				"weight", req.Weight, "flush", req.Flush, "err", err)
+		}
+	}
+
 	return frontendToProto(req.Frontend, fe, s.checker), nil
 }
 
@@ -403,7 +429,7 @@ func (s *Server) SyncVPPLBState(_ context.Context, req *SyncVPPLBStateRequest) (
 	}
 	cfg := s.checker.Config()
 	if req.FrontendName != nil && *req.FrontendName != "" {
-		if err := s.vppClient.SyncLBStateVIP(cfg, *req.FrontendName); err != nil {
+		if err := s.vppClient.SyncLBStateVIP(cfg, *req.FrontendName, ""); err != nil {
 			if errors.Is(err, vpp.ErrFrontendNotFound) {
 				return nil, status.Errorf(codes.NotFound, "%v", err)
 			}
diff --git a/internal/health/weights.go b/internal/health/weights.go
index 1eeb3f3..e94fbf0 100644
--- a/internal/health/weights.go
+++ b/internal/health/weights.go
@@ -8,14 +8,17 @@ import (
 
 // ActivePoolIndex returns the priority-failover pool index for fe given
 // the current backend states. The active pool is the first pool that
-// contains at least one backend in StateUp — pool[0] is the primary,
-// pool[1] the first fallback, and so on. Returns 0 when no pool has
-// any up backend, in which case every backend maps to weight 0 and the
-// return value is unobservable.
+// contains at least one backend which is both in StateUp AND has a
+// non-zero configured weight: a pool whose up backends are all
+// weight=0 contributes no serving capacity, so failover falls through
+// to the next tier. Returns 0 when no pool can serve, in which case
+// every backend maps to weight 0 and the return value is unobservable.
+//
+// pool[0] is the primary, pool[1] the first fallback, and so on.
 func ActivePoolIndex(fe config.Frontend, states map[string]State) int {
 	for i, pool := range fe.Pools {
-		for bName := range pool.Backends {
-			if states[bName] == StateUp {
+		for bName, pb := range pool.Backends {
+			if states[bName] == StateUp && pb.Weight > 0 {
 				return i
 			}
 		}
diff --git a/internal/health/weights_test.go b/internal/health/weights_test.go
index 4c582b8..9936f79 100644
--- a/internal/health/weights_test.go
+++ b/internal/health/weights_test.go
@@ -139,6 +139,92 @@ func TestActivePoolIndex(t *testing.T) {
 	}
 }
 
+// TestActivePoolIndexWeightedFailover pins the rule that a pool is only
+// "active" when it has at least one backend that is both up AND has a
+// non-zero configured weight. A pool whose up backends are all
+// weight=0 contributes no serving capacity, so failover should fall
+// through to the next tier.
+//
+// This was a latent bug: ActivePoolIndex used to check state alone and
+// would return poolIdx=0 even when every primary backend had weight=0,
+// leaving the fallback pool unused even though it was the only pool
+// that could actually serve traffic.
+func TestActivePoolIndexWeightedFailover(t *testing.T) {
+	mkFE := func(pools ...map[string]int) config.Frontend {
+		out := make([]config.Pool, len(pools))
+		for i, p := range pools {
+			out[i] = config.Pool{Name: "p", Backends: map[string]config.PoolBackend{}}
+			for name, w := range p {
+				out[i].Backends[name] = config.PoolBackend{Weight: w}
+			}
+		}
+		return config.Frontend{Pools: out}
+	}
+
+	cases := []struct {
+		name   string
+		fe     config.Frontend
+		states map[string]State
+		want   int
+	}{
+		{
+			name: "primary has only weight-0 backends → failover to secondary",
+			fe: mkFE(
+				map[string]int{"a": 0, "b": 0},
+				map[string]int{"c": 100},
+			),
+			states: map[string]State{"a": StateUp, "b": StateUp, "c": StateUp},
+			want:   1,
+		},
+		{
+			name: "primary has a weight-0 AND a weight>0 backend → primary stays active",
+			fe: mkFE(
+				map[string]int{"a": 0, "b": 50},
+				map[string]int{"c": 100},
+			),
+			states: map[string]State{"a": StateUp, "b": StateUp, "c": StateUp},
+			want:   0,
+		},
+		{
+			name: "primary w>0 backend is down, w=0 sibling is up → failover",
+			fe: mkFE(
+				map[string]int{"a": 0, "b": 50},
+				map[string]int{"c": 100},
+			),
+			states: map[string]State{"a": StateUp, "b": StateDown, "c": StateUp},
+			want:   1,
+		},
+		{
+			name: "two tiers of weight-0 → fall through to third tier",
+			fe: mkFE(
+				map[string]int{"a": 0},
+				map[string]int{"b": 0},
+				map[string]int{"c": 100},
+			),
+			states: map[string]State{"a": StateUp, "b": StateUp, "c": StateUp},
+			want:   2,
+		},
+		{
+			name: "every tier weight-0 → default 0 (nothing can serve)",
+			fe: mkFE(
+				map[string]int{"a": 0},
+				map[string]int{"b": 0},
+			),
+			states: map[string]State{"a": StateUp, "b": StateUp},
+			want:   0,
+		},
+	}
+
+	for _, tc := range cases {
+		t.Run(tc.name, func(t *testing.T) {
+			got := ActivePoolIndex(tc.fe, tc.states)
+			if got != tc.want {
+				t.Errorf("got pool %d, want pool %d", got, tc.want)
+			}
+		})
+	}
+}
+
 // TestComputeFrontendState locks down the reduction rule: frontends are
 // up iff any backend has effective weight > 0, unknown iff all backends
 // are still in StateUnknown (or there are no backends), and down otherwise.
diff --git a/internal/vpp/lbsync.go b/internal/vpp/lbsync.go
index b5c3992..01b30c5 100644
--- a/internal/vpp/lbsync.go
+++ b/internal/vpp/lbsync.go
@@ -38,6 +38,7 @@ type desiredVIP struct {
 	Protocol    uint8 // 6=TCP, 17=UDP, 255=any
 	Port        uint16
 	SrcIPSticky bool                 // lb_add_del_vip_v2.src_ip_sticky
+	Encap       lb_types.LbEncapType // GRE4 / GRE6; matches the backend family, not the VIP's
 	ASes        map[string]desiredAS // keyed by AS IP string
 }
 
@@ -144,7 +145,7 @@ func (c *Client) SyncLBStateAll(cfg *config.Config) error {
 			curPtr = &cur
 			curSticky = cur.SrcIPSticky
 		}
-		if err := reconcileVIP(ch, d, curPtr, curSticky, &st); err != nil {
+		if err := reconcileVIP(ch, d, curPtr, curSticky, "", &st); err != nil {
 			return err
 		}
 	}
@@ -165,7 +166,14 @@ func (c *Client) SyncLBStateAll(cfg *config.Config) error {
 // frontend is missing from cfg, SyncLBStateVIP returns ErrFrontendNotFound.
 // This is the right tool for targeted updates on a busy load-balancer with
 // many VIPs — only one VIP is read from VPP and only its ASes are modified.
-func (c *Client) SyncLBStateVIP(cfg *config.Config, feName string) error {
+//
+// flushAddress, when non-empty, is the IP of an application server whose
+// weight change (if any) should be pushed with IsFlush=true regardless of
+// the usual "only flush on non-zero → zero" heuristic. This is how the
+// SetFrontendPoolBackendWeight RPC exposes an explicit "drop flows now"
+// knob: the server handler resolves the backend's config address and
+// passes it here. Callers that don't need forced flushing pass "".
+func (c *Client) SyncLBStateVIP(cfg *config.Config, feName, flushAddress string) error {
 	if !c.IsConnected() {
 		return errNotConnected
 	}
@@ -203,7 +211,7 @@ func (c *Client) SyncLBStateVIP(cfg *config.Config, feName string) error {
 	}
 
 	var st syncStats
-	if err := reconcileVIP(ch, d, cur, curSticky, &st); err != nil {
+	if err := reconcileVIP(ch, d, cur, curSticky, flushAddress, &st); err != nil {
 		return err
 	}
 	recordSyncStats("vip", &st)
@@ -227,7 +235,7 @@ func (c *Client) SyncLBStateVIP(cfg *config.Config, feName string) error {
 // matching entry is always present. When the flag differs from the desired
 // value, the VIP is torn down (ASes del+flushed, VIP deleted) and recreated
 // — VPP has no API to mutate src_ip_sticky on an existing VIP.
-func reconcileVIP(ch *loggedChannel, d desiredVIP, cur *LBVIP, curSticky bool, st *syncStats) error {
+func reconcileVIP(ch *loggedChannel, d desiredVIP, cur *LBVIP, curSticky bool, flushAddress string, st *syncStats) error {
 	if cur == nil {
 		if err := addVIP(ch, d); err != nil {
 			return err
@@ -299,6 +307,14 @@ func reconcileVIP(ch *loggedChannel, d desiredVIP, cur *LBVIP, curSticky bool, s
 			// (i.e. the backend was disabled, not merely drained). Steady-
 			// state syncs where weight doesn't change never re-flush.
 			flush := a.Flush && c.Weight > 0 && a.Weight == 0
+			// Caller-forced flush: used by SetFrontendPoolBackendWeight
+			// with flush=true to explicitly drop live sessions for a
+			// single backend. The address match is exact — no other
+			// AS's weight change is affected, even if several happen
+			// in the same reconcile pass.
+			if flushAddress != "" && addr == flushAddress {
+				flush = true
+			}
 			if err := setASWeight(ch, d.Prefix, d.Protocol, d.Port, a, c.Weight, flush); err != nil {
 				return err
 			}
@@ -349,13 +365,24 @@ func desiredFromFrontend(cfg *config.Config, fe config.Frontend, src StateSource
 	if fe.Address.To4() == nil {
 		bits = 128
 	}
+	// Start with an encap derived from the VIP's own family as a
+	// fallback. This only applies when the frontend has zero valid
+	// backends (e.g. every referenced backend is missing from
+	// cfg.Backends); any real backend below overrides it to the
+	// backend family, which is the correct choice because the GRE
+	// encap carries backend traffic, not VIP traffic. Config
+	// validation already guarantees every backend in a frontend
+	// shares the same family, so the first valid backend we see is
+	// authoritative.
 	d := desiredVIP{
 		Prefix:      &net.IPNet{IP: fe.Address, Mask: net.CIDRMask(bits, bits)},
 		Protocol:    protocolFromConfig(fe.Protocol),
 		Port:        fe.Port,
 		SrcIPSticky: fe.SrcIPSticky,
+		Encap:       encapForIP(fe.Address),
 		ASes:        make(map[string]desiredAS),
 	}
+	encapSet := false
 
 	states := snapshotStates(fe, src)
 	activePool := health.ActivePoolIndex(fe, states)
@@ -366,6 +393,10 @@ func desiredFromFrontend(cfg *config.Config, fe config.Frontend, src StateSource
 			if !ok || b.Address == nil {
 				continue
 			}
+			if !encapSet {
+				d.Encap = encapForIP(b.Address)
+				encapSet = true
+			}
 			// Disabled backends (either via operator action or config) are
 			// kept in the desired set so they stay installed in VPP with
 			// weight=0 — they must not be deleted, otherwise a subsequent
@@ -423,12 +454,11 @@ func snapshotStates(fe config.Frontend, src StateSource) map[string]health.State
 const defaultFlowsTableLength = 1024
 
 func addVIP(ch *loggedChannel, d desiredVIP) error {
-	encap := encapForIP(d.Prefix.IP)
 	req := &lb.LbAddDelVipV2{
 		Pfx:                 ip_types.NewAddressWithPrefix(*d.Prefix),
 		Protocol:            d.Protocol,
 		Port:                d.Port,
-		Encap:               encap,
+		Encap:               d.Encap,
 		Type:                lb_types.LB_API_SRV_TYPE_CLUSTERIP,
 		NewFlowsTableLength: defaultFlowsTableLength,
 		SrcIPSticky:         d.SrcIPSticky,
@@ -445,7 +475,7 @@ func addVIP(ch *loggedChannel, d desiredVIP) error {
 		"vip", d.Prefix.IP.String(),
 		"protocol", protocolName(d.Protocol),
 		"port", d.Port,
-		"encap", encapName(encap),
+		"encap", encapName(d.Encap),
 		"src-ip-sticky", d.SrcIPSticky)
 	return nil
 }
diff --git a/internal/vpp/lbsync_test.go b/internal/vpp/lbsync_test.go
index c0143b8..2d5b3a0 100644
--- a/internal/vpp/lbsync_test.go
+++ b/internal/vpp/lbsync_test.go
@@ -177,3 +177,264 @@ func TestDesiredFromFrontendFailover(t *testing.T) {
 		})
 	}
 }
+
+// TestDesiredFromFrontendSharedBackend exercises the exact shape of
+// maglev.yaml: two frontends that share three backends across primary
+// and fallback pools with different per-pool weights. The key
+// invariants being pinned:
+//
+//   - Each frontend's desiredFromFrontend must read its own
+//     per-pool-membership weights, never leaking weights from a sibling
+//     frontend's pool config.
+//   - When the primary pool has at least one backend up, the fallback
+//     pool's backends must all be weight=0 (standby).
+//   - When every primary-pool backend is non-up (down / paused /
+//     disabled), failover kicks in: the fallback pool's backends get
+//     their configured weights, and primary-pool backends stay at 0.
+//
+// Frontends modelled below:
+//
+//	nginx-ip4-http:
+//	  primary:  nginx0-frggh0 w=10,  nginx0-nlams0 w=100
+//	  fallback: nginx0-chlzn0 w=100
+//
+//	nginx-ip6-https:
+//	  primary:  nginx0-frggh0 w=100
+//	  fallback: nginx0-nlams0 w=100, nginx0-chlzn0 w=100
+//
+// Note that nginx0-frggh0 is configured with weight 10 in the ip4
+// primary but 100 in the ip6 primary — this is the exact crossed
+// configuration that the user reported as producing weight=10 in the
+// ip6 VIP (a regression).
+func TestDesiredFromFrontendSharedBackend(t *testing.T) {
+	ip := func(s string) net.IP { return net.ParseIP(s).To4() }
+	frggh := "198.19.6.76"
+	nlams := "198.19.4.118"
+	chlzn := "198.19.6.167"
+
+	cfg := &config.Config{
+		Backends: map[string]config.Backend{
+			"nginx0-frggh0": {Address: ip(frggh), Enabled: true},
+			"nginx0-nlams0": {Address: ip(nlams), Enabled: true},
+			"nginx0-chlzn0": {Address: ip(chlzn), Enabled: true},
+		},
+	}
+	feIP4 := config.Frontend{
+		Address:  ip("198.19.0.254"),
+		Protocol: "tcp",
+		Port:     80,
+		Pools: []config.Pool{
+			{Name: "primary", Backends: map[string]config.PoolBackend{
+				"nginx0-frggh0": {Weight: 10},
+				"nginx0-nlams0": {Weight: 100},
+			}},
+			{Name: "fallback", Backends: map[string]config.PoolBackend{
+				"nginx0-chlzn0": {Weight: 100},
+			}},
+		},
+	}
+	feIP6 := config.Frontend{
+		Address:  net.ParseIP("2001:db8::1"),
+		Protocol: "tcp",
+		Port:     443,
+		Pools: []config.Pool{
+			{Name: "primary", Backends: map[string]config.PoolBackend{
+				"nginx0-frggh0": {Weight: 100},
+			}},
+			{Name: "fallback", Backends: map[string]config.PoolBackend{
+				"nginx0-nlams0": {Weight: 100},
+				"nginx0-chlzn0": {Weight: 100},
+			}},
+		},
+	}
+
+	type want struct {
+		ip4 map[string]uint8
+		ip6 map[string]uint8
+	}
+
+	tests := []struct {
+		name   string
+		states map[string]health.State
+		want   want
+	}{
+		{
+			name: "all up — each primary serves with its own weights",
+			states: map[string]health.State{
+				"nginx0-frggh0": health.StateUp,
+				"nginx0-nlams0": health.StateUp,
+				"nginx0-chlzn0": health.StateUp,
+			},
+			want: want{
+				ip4: map[string]uint8{frggh: 10, nlams: 100, chlzn: 0},
+				ip6: map[string]uint8{frggh: 100, nlams: 0, chlzn: 0},
+			},
+		},
+		{
+			name: "frggh0 disabled — ip4 primary still served by nlams0, ip6 fails over to fallback",
+			states: map[string]health.State{
+				"nginx0-frggh0": health.StateDisabled,
+				"nginx0-nlams0": health.StateUp,
+				"nginx0-chlzn0": health.StateUp,
+			},
+			want: want{
+				// ip4 primary still has nlams0 up, so stays on primary;
+				// frggh0 is in primary but disabled → 0.
+				ip4: map[string]uint8{frggh: 0, nlams: 100, chlzn: 0},
+				// ip6 primary has only frggh0 (disabled) → fallback
+				// pool activates and both of its backends get their
+				// configured weights.
+				ip6: map[string]uint8{frggh: 0, nlams: 100, chlzn: 100},
+			},
+		},
+		{
+			name: "frggh0 paused — same failover shape as disabled for ip6",
+			states: map[string]health.State{
+				"nginx0-frggh0": health.StatePaused,
+				"nginx0-nlams0": health.StateUp,
+				"nginx0-chlzn0": health.StateUp,
+			},
+			want: want{
+				ip4: map[string]uint8{frggh: 0, nlams: 100, chlzn: 0},
+				ip6: map[string]uint8{frggh: 0, nlams: 100, chlzn: 100},
+			},
+		},
+		{
+			name: "frggh0 down — same failover shape as disabled for ip6",
+			states: map[string]health.State{
+				"nginx0-frggh0": health.StateDown,
+				"nginx0-nlams0": health.StateUp,
+				"nginx0-chlzn0": health.StateUp,
+			},
+			want: want{
+				ip4: map[string]uint8{frggh: 0, nlams: 100, chlzn: 0},
+				ip6: map[string]uint8{frggh: 0, nlams: 100, chlzn: 100},
+			},
+		},
+		{
+			name: "ip4 primary all down → failover to chlzn0; ip6 unaffected",
+			states: map[string]health.State{
+				"nginx0-frggh0": health.StateDown,
+				"nginx0-nlams0": health.StateDown,
+				"nginx0-chlzn0": health.StateUp,
+			},
+			want: want{
+				// ip4 primary has nothing up → fallback activates.
+				ip4: map[string]uint8{frggh: 0, nlams: 0, chlzn: 100},
+				// ip6 primary has frggh0 (down) → fallback activates
+				// too; nlams0 is in ip6 fallback but down, chlzn0 is
+				// up and carries traffic.
+				ip6: map[string]uint8{frggh: 0, nlams: 0, chlzn: 100},
+			},
+		},
+		{
+			name: "all backends down → everyone zero",
+			states: map[string]health.State{
+				"nginx0-frggh0": health.StateDown,
+				"nginx0-nlams0": health.StateDown,
+				"nginx0-chlzn0": health.StateDown,
+			},
+			want: want{
+				ip4: map[string]uint8{frggh: 0, nlams: 0, chlzn: 0},
+				ip6: map[string]uint8{frggh: 0, nlams: 0, chlzn: 0},
+			},
+		},
+		{
+			name: "all backends disabled → everyone zero (and flushed)",
+			states: map[string]health.State{
+				"nginx0-frggh0": health.StateDisabled,
+				"nginx0-nlams0": health.StateDisabled,
+				"nginx0-chlzn0": health.StateDisabled,
+			},
+			want: want{
+				ip4: map[string]uint8{frggh: 0, nlams: 0, chlzn: 0},
+				ip6: map[string]uint8{frggh: 0, nlams: 0, chlzn: 0},
+			},
+		},
+		{
+			name: "frggh0 re-enabled and up — each frontend returns to its own configured weight (regression)",
+			states: map[string]health.State{
+				"nginx0-frggh0": health.StateUp,
+				"nginx0-nlams0": health.StateUp,
+				"nginx0-chlzn0": health.StateUp,
+			},
+			want: want{
+				// This is the specific regression the user reported:
+				// after a disable/enable cycle, the ip6 VIP should
+				// return to weight=100 for frggh0 (its own pool's
+				// configured weight), not 10 (ip4's weight).
+				ip4: map[string]uint8{frggh: 10, nlams: 100, chlzn: 0},
+				ip6: map[string]uint8{frggh: 100, nlams: 0, chlzn: 0},
+			},
+		},
+	}
+
+	for _, tc := range tests {
+		t.Run(tc.name, func(t *testing.T) {
+			src := &fakeStateSource{cfg: cfg, states: tc.states}
+
+			d4 := desiredFromFrontend(cfg, feIP4, src)
+			for addr, w := range tc.want.ip4 {
+				got, ok := d4.ASes[addr]
+				if !ok {
+					t.Errorf("ip4: %s missing from desired set", addr)
+					continue
+				}
+				if got.Weight != w {
+					t.Errorf("ip4: %s weight got %d, want %d", addr, got.Weight, w)
+				}
+			}
+			if len(d4.ASes) != len(tc.want.ip4) {
+				t.Errorf("ip4: got %d ASes, want %d", len(d4.ASes), len(tc.want.ip4))
+			}
+
+			d6 := desiredFromFrontend(cfg, feIP6, src)
+			for addr, w := range tc.want.ip6 {
+				got, ok := d6.ASes[addr]
+				if !ok {
+					t.Errorf("ip6: %s missing from desired set", addr)
+					continue
+				}
+				if got.Weight != w {
+					t.Errorf("ip6: %s weight got %d, want %d", addr, got.Weight, w)
+				}
+			}
+			if len(d6.ASes) != len(tc.want.ip6) {
+				t.Errorf("ip6: got %d ASes, want %d", len(d6.ASes), len(tc.want.ip6))
+			}
+
+			// Also exercise desiredFromConfig (the batch version used
+			// by the 30-second periodic SyncLBStateAll): it iterates
+			// every frontend in cfg and must produce the same
+			// per-frontend weights as desiredFromFrontend called
+			// directly. A bug where one frontend's pool config leaks
+			// into another would show up here too.
+			cfgBatch := &config.Config{
+				Backends: cfg.Backends,
+				Frontends: map[string]config.Frontend{
+					"nginx-ip4-http":  feIP4,
+					"nginx-ip6-https": feIP6,
+				},
+			}
+			batch := desiredFromConfig(cfgBatch, src)
+			byAddr := map[string]desiredVIP{}
+			for _, d := range batch {
+				byAddr[d.Prefix.IP.String()] = d
+			}
+			if d := byAddr["198.19.0.254"]; true {
+				for addr, w := range tc.want.ip4 {
+					if got := d.ASes[addr].Weight; got != w {
+						t.Errorf("batch ip4: %s weight got %d, want %d", addr, got, w)
+					}
+				}
+			}
+			if d := byAddr["2001:db8::1"]; true {
+				for addr, w := range tc.want.ip6 {
+					if got := d.ASes[addr].Weight; got != w {
+						t.Errorf("batch ip6: %s weight got %d, want %d", addr, got, w)
+					}
+				}
+			}
+		})
+	}
+}
diff --git a/internal/vpp/reconciler.go b/internal/vpp/reconciler.go
index e5ef17d..9c522bc 100644
--- a/internal/vpp/reconciler.go
+++ b/internal/vpp/reconciler.go
@@ -87,7 +87,7 @@ func (r *Reconciler) handle(ev checker.Event) {
 		"from", ev.Transition.From.String(),
 		"to", ev.Transition.To.String())
 
-	if err := r.client.SyncLBStateVIP(cfg, ev.FrontendName); err != nil {
+	if err := r.client.SyncLBStateVIP(cfg, ev.FrontendName, ""); err != nil {
 		if errors.Is(err, ErrFrontendNotFound) {
 			// Frontend was removed between the event being emitted and
 			// us handling it; a periodic SyncLBStateAll will clean it up.
diff --git a/proto/maglev.proto b/proto/maglev.proto
index 32ccc57..2478eec 100644
--- a/proto/maglev.proto
+++ b/proto/maglev.proto
@@ -171,6 +171,11 @@ message SetWeightRequest {
   string pool = 2;
   string backend = 3;
   int32 weight = 4; // 0-100
+  // flush, when true, also clears VPP's flow table for this backend
+  // so existing sessions are torn down. When false (default), only
+  // Maglev's new-bucket mapping is updated and live flows keep
+  // draining to this backend.
+  bool flush = 5;
 }
 
 // WatchRequest controls which event types are streamed. All fields default to