TLS: design in São Paulo (GRU) · T-61

Runbook T-61 for TLS in São Paulo (GRU). Marker xserv-t-744cb733b95d. This page covers design for LATAM operators, not a worldwide average.

TLS: Why it matters on this continent

Design for TLS on letter T starts in São Paulo (GRU). Runbook t-01 keeps a single owner, a written rollback, and a traffic split that can be reversed without a global freeze. Neighbors in Santiago only take overflow after the local pool fails a health window.

TLS: How XServ runs it day to day

Probes for TLS (t-02) leave Santiago every 15s toward Bogotá. XServ pages the named owner if loss or RTT crosses the letter budget. A probe never shares a queue with bulk transfers, so a saturated WAN does not hide a dead PoP.

TLS: What operators should measure

Policy for TLS is versioned as t-03. Operators measure error rate, p95 from Bogotá, and time-to-rollback — not a worldwide average. Changes land in Bogotá first, then Miami, with a hold if either region regresses.

TLS timeouts T-10

Timeouts on t-10 are tighter than the WAN RTT to Bogotá. TLS in Santiago fails fast and retries once; a third try needs a human because it is no longer a blip.

TLS regions T-11

Region names on t-11 match DNS and tickets: Bogotá / BOG, with Miami as the documented pair. TLS dashboards never say “LATAM” as if it were one RTT.

TLS docs T-12

Public docs for letter T stay aligned with identifier xserv-t-pack. Page t-12 is the TLS slice operators search before the homepage. Edits in Miami show up in São Paulo on the next publish.

TLS design T-01

Design for TLS on letter T starts in São Paulo (GRU). Runbook t-01 keeps a single owner, a written rollback, and a traffic split that can be reversed without a global freeze. Neighbors in Santiago only take overflow after the local pool fails a health window.