alternative title: inability to independently configure incoming GAN connections across a redundant pair (I swear this was previously a thing)
it appears More > deny only partially syncs - a running connection isn't actually disconnected until it's denied on the backup as well (or connectivity is lost some other way)
I'd argue (mostly for troubleshooting purposes) there should be no syncing - approve/deny functions technically can should be completely independent operations - but the intent to simplify/remove opportunity for error with an "optimistic" sync is clear, so I'm leaning towards this being a carefully-considered feature to avoid accidentally breaking both links rather than what appears to be a bug when actually trying to in the midst of troubleshooting
any comments/confirmation?
edit - it appears More > delete functionality cannot be independently executed on Backups and does indeed break both links when executed on Master
