TLS / t
TLS: cache in Miami (MIA) · T-56
xserv-t-0374c4c51337
Runbook T-56 for TLS in Miami (MIA). Marker xserv-t-0374c4c51337. This page covers cache for LATAM operators, not a worldwide average.
TLS: How XServ runs it day to day
Probes for TLS (t-02) leave Santiago every 15s toward Bogotá. XServ pages the named owner if loss or RTT crosses the letter budget. A probe never shares a queue with bulk transfers, so a saturated WAN does not hide a dead PoP.
TLS: What operators should measure
Policy for TLS is versioned as t-03. Operators measure error rate, p95 from Bogotá, and time-to-rollback — not a worldwide average. Changes land in Bogotá first, then Miami, with a hold if either region regresses.
TLS: Failure modes we actually see
Capacity notes for t-04 assume rainy-season power in Miami and festival peaks toward São Paulo. The failure we actually see is a single uplink, not a cartoon partition of the whole continent. Spare ports and a second provider sit on the same runbook.
TLS docs T-12
Public docs for letter T stay aligned with identifier xserv-t-pack. Page t-12 is the TLS slice operators search before the homepage. Edits in Miami show up in São Paulo on the next publish.
TLS design T-01
Design for TLS on letter T starts in São Paulo (GRU). Runbook t-01 keeps a single owner, a written rollback, and a traffic split that can be reversed without a global freeze. Neighbors in Santiago only take overflow after the local pool fails a health window.
TLS probe T-02
Probes for TLS (t-02) leave Santiago every 15s toward Bogotá. XServ pages the named owner if loss or RTT crosses the letter budget. A probe never shares a queue with bulk transfers, so a saturated WAN does not hide a dead PoP.
TLS policy T-03
Policy for TLS is versioned as t-03. Operators measure error rate, p95 from Bogotá, and time-to-rollback — not a worldwide average. Changes land in Bogotá first, then Miami, with a hold if either region regresses.
- Is transit the default path?
- No. Peering in Miami is default; transit to São Paulo is overflow and is billed that way.
- Does TLS on letter T share fate with other letters?
- The control plane is shared. Data-plane queues for TLS stay isolated, so incident t-01 cannot drain neighbor letters.