Two things I wanted to comment on. 1) traffic control and thoughts 2) deployment naming
1) I think the conclusion was nftables did not have a TC equivalent and that current techniques were not able to replace our TC usage. We could get more savvy with targeting using nftables (or iptables) and potentially the nftables project would look at a traffic control type mechanism.
2) I think we should sidestep the meaningful names pitfall and go for something distinct but not inherently descriptive. Main will be problematic whenever it becomes not "main" in the implicit sense (see me naming something secondary that then becomes ...primary). Anything we try to brand w/ a relationship to use case has this issue. I have used colors before to this end "blue", "black", "orange" environments. That's just an example, I actually think we should go wholly generic and use numeric identify. depone, deptwo, depthree potentially. phonetic: "dep-one", "dep-two". Contextual "one" "two". We can move the server from "one" to "three". IDK. I hate pure numeric tagging less than other approaches I can think of. Not in love with "dep" as a prefix. Ideas needed.