This is one of our most frustrating fights I have with our security design reviewers. Effectively functionless mitigations that create extra obstacles for our service reps to deal with during troubleshooting. One example is our equipment is installed in access restricted areas, in a locked rack. We don’t need to disable unused Ethernet ports on our networking equipment that exists in a locked cabinet and it will take away our ability to repatch equipment to a different switch in the system to assist in troubleshooting.

Zipper merge is effective if it takes place at the end of the line, not the merge point. Essentially as traffic backs up, the merge point should back up as well. That isn’t practical in reality; you can’t dynamically move the merge point IRL.