VPS router HA automation foundation completed
VPS address allocation and firewall reconciliation now target the dedicated SCComp router pair with mirrored API changes.
SCComp’s VPS networking control plane now targets the dedicated VPSRTR01 and VPSRTR02 OPNsense pair. Separate least-privilege API identities allow the platform to mirror deterministic customer firewall and NAT rules to both routers without relying on broad administrator credentials or automatic XMLRPC configuration synchronization.
The provisioning pool now uses `198.44.26.196–254`. Existing customer gateway networks on VLANs 50–53 remain unchanged on `vmbr20`. The automation test mapping was moved to the new public range and verified on both router rule sets. A previously existing VM915 mapping was detected and explicitly reserved so automation cannot allocate the same address.
The reconciliation daemon remains intentionally stopped until a rebuilt guest completes the full provisioning acceptance test, including login, outbound-address, inbound-connectivity, and SMTP-policy checks.