A recursive resolver over TLS stays healthy and validation still fails
Connectivity is fine, but certificate pinning still compares against a key that the upstream no longer uses on the active chain.
NetworkAdvanced
A DoH migration works for browsers and breaks one service mesh
Pods can resolve at runtime, but the bootstrap resolver for sidecar startup still points at the old split-horizon path.
NetworkAdvanced
A SaaS export endpoint fails only from one campus
Community-field network problem inspired by Cloudflare and CDN community patterns where SNI classification missed a newly introduced SaaS export hostname.
NetworkAdvanced
A new SaaS subdomain is onboarded to a shared CDN and only one campus fails
Community-field network problem inspired by CDN and Cloudflare discussions where SNI mapping sent a new hostname through a stale trust bundle.