okay friendos, we are now using the new switch!
turns out it doesn't actually support LACP, which is annoying, but I've managed to jank it together using a static LAG
also dropped openvswitch because I could squeeze more routing performance out of native linux bridges with my setup

also, setting up a bridge for LXC containers to use a specific VLAN on a trunk interface the host has is kind of really fucking stupid
bond -> bridge -> vlan -> bridge