POD_A(current gslb-pt target)=10.255.194.124  POD_B(flip target)=10.255.126.38
# D-2 passthrough in-flight + flip — 2026-07-09_143718

=== BEFORE @ 14:37:18 ===
-- dig gslb-pt --
10.255.194.124
-- endpoints (netshoot, gslb-pt cluster) --
ENDPOINT               STATUS      OUTLIER CHECK     CLUSTER
10.255.194.124:443     HEALTHY     OK                outbound|443||gslb-pt.lab.internal
-- cluster stats (gslb-pt, netshoot sidecar) --
cluster.outbound|443||gslb-pt.lab.internal;.membership_change: 11
cluster.outbound|443||gslb-pt.lab.internal;.upstream_cx_active: 0
cluster.outbound|443||gslb-pt.lab.internal;.upstream_cx_destroy: 2976
cluster.outbound|443||gslb-pt.lab.internal;.upstream_cx_destroy_local: 318
cluster.outbound|443||gslb-pt.lab.internal;.upstream_cx_destroy_local_with_active_rq: 289
cluster.outbound|443||gslb-pt.lab.internal;.upstream_cx_destroy_remote: 2658
cluster.outbound|443||gslb-pt.lab.internal;.upstream_cx_destroy_remote_with_active_rq: 2658
cluster.outbound|443||gslb-pt.lab.internal;.upstream_cx_destroy_with_active_rq: 2947
cluster.outbound|443||gslb-pt.lab.internal;.upstream_cx_total: 2976
tcp.outbound|443||gslb-pt.lab.internal.downstream_cx_total: 2986

CURL_LAUNCH=14:37:18 (T0=1783575438) -- https://gslb-pt.lab.internal/slow, -k (SNI passthrough, cert CN mismatch expected)
FLIP_ISSUED=14:37:23 (t=+5s) gslb-pt: 10.255.194.124 -> 10.255.126.38
FLIP_DONE=14:37:23 (t=+5s)

[t=+12s]
=== MID1 @ 14:37:30 ===
-- dig gslb-pt --
10.255.126.38
-- endpoints (netshoot, gslb-pt cluster) --
ENDPOINT              STATUS      OUTLIER CHECK     CLUSTER
10.255.126.38:443     HEALTHY     OK                outbound|443||gslb-pt.lab.internal
-- cluster stats (gslb-pt, netshoot sidecar) --
cluster.outbound|443||gslb-pt.lab.internal;.membership_change: 11
cluster.outbound|443||gslb-pt.lab.internal;.upstream_cx_active: 1
cluster.outbound|443||gslb-pt.lab.internal;.upstream_cx_destroy: 2976
cluster.outbound|443||gslb-pt.lab.internal;.upstream_cx_destroy_local: 318
cluster.outbound|443||gslb-pt.lab.internal;.upstream_cx_destroy_local_with_active_rq: 289
cluster.outbound|443||gslb-pt.lab.internal;.upstream_cx_destroy_remote: 2658
cluster.outbound|443||gslb-pt.lab.internal;.upstream_cx_destroy_remote_with_active_rq: 2658
cluster.outbound|443||gslb-pt.lab.internal;.upstream_cx_destroy_with_active_rq: 2947
cluster.outbound|443||gslb-pt.lab.internal;.upstream_cx_total: 2977
tcp.outbound|443||gslb-pt.lab.internal.downstream_cx_total: 2987

[t=+30s]
=== MID2 @ 14:37:48 ===
-- dig gslb-pt --
10.255.126.38
-- endpoints (netshoot, gslb-pt cluster) --
ENDPOINT              STATUS      OUTLIER CHECK     CLUSTER
10.255.126.38:443     HEALTHY     OK                outbound|443||gslb-pt.lab.internal
-- cluster stats (gslb-pt, netshoot sidecar) --
cluster.outbound|443||gslb-pt.lab.internal;.membership_change: 11
cluster.outbound|443||gslb-pt.lab.internal;.upstream_cx_active: 1
cluster.outbound|443||gslb-pt.lab.internal;.upstream_cx_destroy: 2976
cluster.outbound|443||gslb-pt.lab.internal;.upstream_cx_destroy_local: 318
cluster.outbound|443||gslb-pt.lab.internal;.upstream_cx_destroy_local_with_active_rq: 289
cluster.outbound|443||gslb-pt.lab.internal;.upstream_cx_destroy_remote: 2658
cluster.outbound|443||gslb-pt.lab.internal;.upstream_cx_destroy_remote_with_active_rq: 2658
cluster.outbound|443||gslb-pt.lab.internal;.upstream_cx_destroy_with_active_rq: 2947
cluster.outbound|443||gslb-pt.lab.internal;.upstream_cx_total: 2977
tcp.outbound|443||gslb-pt.lab.internal.downstream_cx_total: 2987

CURL_WAIT_DONE=14:37:58 (t=+40s)
-- curl result --
CURL_EXIT=0 SIZE=409610 TIME=40.047827 HTTPCODE=200
-- curl stderr --

[t=+43s]
=== AFTER @ 14:38:01 ===
-- dig gslb-pt --
10.255.126.38
-- endpoints (netshoot, gslb-pt cluster) --
ENDPOINT              STATUS      OUTLIER CHECK     CLUSTER
10.255.126.38:443     HEALTHY     OK                outbound|443||gslb-pt.lab.internal
-- cluster stats (gslb-pt, netshoot sidecar) --
cluster.outbound|443||gslb-pt.lab.internal;.membership_change: 11
cluster.outbound|443||gslb-pt.lab.internal;.upstream_cx_active: 0
cluster.outbound|443||gslb-pt.lab.internal;.upstream_cx_destroy: 2977
cluster.outbound|443||gslb-pt.lab.internal;.upstream_cx_destroy_local: 318
cluster.outbound|443||gslb-pt.lab.internal;.upstream_cx_destroy_local_with_active_rq: 289
cluster.outbound|443||gslb-pt.lab.internal;.upstream_cx_destroy_remote: 2659
cluster.outbound|443||gslb-pt.lab.internal;.upstream_cx_destroy_remote_with_active_rq: 2659
cluster.outbound|443||gslb-pt.lab.internal;.upstream_cx_destroy_with_active_rq: 2948
cluster.outbound|443||gslb-pt.lab.internal;.upstream_cx_total: 2977
tcp.outbound|443||gslb-pt.lab.internal.downstream_cx_total: 2987

-- received file check (netshoot) --
409610 /tmp/ptX.bin
backend-a
XXXXX

## 복구: gslb-pt -> backend-a 현재 pod IP로 재원복
10.255.194.124
backend-a
 [http_code=200]
>> D-2 raw log: /home/jinsoo/Documents/kakaopay/istio/tmp/dns-passthrough/d2/full_run.txt