# ep0 iperf3 install, 2026-10-24 ~06:12Z (CC, attended release run; operator ruling 07:26)
Sat Oct 24 06:25:34 AM UTC 2026
ii  iperf3         3.18-2+deb13u2 amd64        Internet Protocol bandwidth measuring tool
disabled
enabled
active
RuntimeMaxUSec=1d
CPUQuotaPerSecUSec=500ms
MemoryMax=134217728
TasksMax=16
User=felhom-iperf3
LISTEN 0      4096       10.77.0.1:5201      0.0.0.0:*    users:(("iperf3",pid=3011910,fd=3))                                              
table inet filter {
	chain input { # handle 1
		type filter hook input priority filter; policy drop;
		ct state established,related accept # handle 3
		iif "lo" accept # handle 4
		tcp dport 22 accept # handle 5
		udp dport 443 accept # handle 6
		tcp dport 8007 iifname "wg0" accept # handle 7
		tcp dport 5201 iifname "wg0" ip saddr 10.77.0.0/24 accept # handle 13
		ip protocol icmp accept # handle 8
		meta l4proto ipv6-icmp accept # handle 9
	}
}
10a11
>         tcp dport 5201 iifname "wg0" ip saddr 10.77.0.0/24 accept   # R-1247: felhom-iperf3 line test, tunnel only

# Reachability, 2026-10-24 ~06:20Z (bash /dev/tcp connect, 5-8 s timeout)
From DooPlex over the internet (its public address 37.191.56.x) to 167.233.158.164:
  22 open      (positive control: the method sees an open port)
  5201 no answer
  8007 no answer
From demo-hp's host (10.77.0.3) through wg-felhom to 10.77.0.1:
  5201 open
  8007 open    (PBS, the existing tunnel service)
  route: 10.77.0.1 dev wg-felhom src 10.77.0.3

# Protocol proof, 2026-10-24 ~06:31Z: a throwaway probe built from felhom-agent internal/linetest (Client, 4 streams,
# 10 s), copied to demo-hp's host /tmp, run against 10.77.0.1:5201 through wg-felhom, then deleted.
took 10.4s err=<nil> mbps=90.7 server_bytes=114032640 client_bytes=116046000 server_s=10.05
# Two at once (the second started 2 s later):
took 0.1s err=iperf3 server busy mbps=0.0 server_bytes=0 client_bytes=0 server_s=0.00
took 10.4s err=<nil> mbps=90.6 server_bytes=113901568 client_bytes=116629300 server_s=10.06
# After: 0 ltprobe processes; /tmp/ltprobe removed.
