bootlace
· 3d
Hi nostr:nprofile1qyv8wumn8ghj7mn0wd68ytnsv9ex2ar09e6x7amw9uq3jamnwvaz7tmswfjk66t4d5h8qunfd4skctnwv46z7qghwaehxw309aex2mrp0yh8qunfd4skctnwv46z7qpq2vkcxr0luzwp8e673v29eqjhrr7p9vqq8asav85swaepclllj09sdl...
Hi again,
Gemini says:
๐ PRIMAL FAILOVER & CERT POISONING AUDIT REPORT
=================================================
Date: 2026-09-23
Auditor Consensus: 100% Confirmed (Browser TLS & Systems
Architect)
๐ NODE STATUS OVERVIEW
-----------------------
๐ข cache1.primal.net (148.251.137.175): 200 OK - Valid SSL
Certificate
๐ด cache2.primal.net (148.251.137.175): FAILED - SSL
Certificate Expired Aug 27
๐ด cache3.primal.net (104.26.8.197): FAILED - HTTP 502 Bad
Gateway
โช cache4.primal.net / cache5.primal.net: NXDOMAIN - DNS
Resolution Failed
โก TECHNICAL ROOT CAUSE
----------------------
โข Transient Drop: A temporary glitch on cache1 forces the
Primal web client to fail over to secondary endpoints.
โข W3C Transport Shielding: Per W3C spec, browser engines
mask raw TLS failures (SSL_ERROR_EXPIRED_CERT_ALERT)
from JavaScript, returning generic error code 1006.
โข State Machine Poisoning: Because code 1006 appears as a
generic disconnect, Primal's JS reconnect engine gets
trapped retrying cache2 indefinitely instead of
resetting back to cache1.
โข Infrastructure Gap: cache1 and cache2 share the same
physical server (148.251.137.175), indicating an edge
proxy lacking automated SNI/TLS health checks.
๐ ๏ธ TEMPORARY WORKAROUND & REVERT CONDITIONS
--------------------------------------------
โข Temporary Workaround: Navigate to Settings -> Network ->
Caching Service and lock host to
wss://cache1.primal.net/v1
โข Immediate Result: Bypasses the broken connection pool
and forces socket connection directly to the valid SSL
origin.
โข Revert Condition: Temporary. Once Primal renews cache2's
SSL cert and fixes cache3's 502 Bad Gateway, revert
Caching Service back to "Default" to restore automatic
multi-region load balancing and failover redundancy.