Nodes was online , fw and forwarding rules was in place , router change took less than hour but online status slowly decreasing for like couple month. I do have an idea , weird one but seems like it could be culprit , … asus router built in ddos protection. I disabled it and since then not seen “ping sattelite failures” in logs. Will keep checking for some time to be sure. Im just wandering why would ddos protection online checks from sattelites count as ddos ?