rp1 ceph storage bottlenecked on wireguard interface at IU. Much older equipment (R720?), CPU might not be fast enough to handle the encryption overhead. 2 solutions implemented: 

• increasing k8s MTU from 1280 to 8780 increased iperf throughput from 1Gbps to 4Gbps. 
• adding non-wireguard backhaul network for Ceph increased performance to 10Gbps (line rate)

testing feasibility of unprivileged wireguard on VM at UChicago: podman seems to let us create tunnel interfaces in containers without rootly privileges in current (EL9+) kernels. might have interesting implications for jobs.

ongoing re-testing of ServiceY on FAB. Fengping will present at KNIT10 conference in March.

Flocking tests from UChicago AF -> MWT2 ongoing, to be tested at large scale with upcoming MWT2 storage downtime.