infra: harden xlab and skydick networking