These are short terms steps that may or may not address the issue completely.
- Move salt master off the puppet master on a host running jessie
- Set up a syndic in codfw, eqiad, on separate hardware, and in the other dcs on he bastion hosts (won't need more than that) repoting to the master, all on jessie
- Check dependencies for salt 2014.7 supplied by jessie and do backporting as needed for libzmq
Note that if the master-syndic model works out, we'll want to go multimaster (second master in codfw probably) with a fallback syndic in each dc for redundancy.