=== STEP_033C2 CANARY PLAN MINI === timestamp=20260708-110804 mode=read-only canary source candidate: VM100 10.200.0.1 canary mark target: 0x203 -> table 203 -> vpn3 remote_changes=none === VM101 checks === Wed Jul 8 11:08:04 UTC 2026 === ip rule === 0: from all lookup local 10013: from all fwmark 0x203 lookup 203 10014: from all fwmark 0x204 lookup 204 10015: from all fwmark 0x205 lookup 205 10019: from all iif eth1 lookup 200 10020: from 10.200.0.0/24 lookup 200 32766: from all lookup main 32767: from all lookup default === table 200 === default dev vpn1 scope link 10.200.0.0/24 dev eth1 scope link src 10.200.0.2 10.201.0.0/24 dev eth3 scope link src 10.201.0.2 === table 203 === default dev vpn3 scope link === route unmarked 10.200.0.1 === 1.1.1.1 from 10.200.0.1 dev vpn1 table 200 cache iif eth1 === route marked 10.200.0.1 mark 0x203 === 1.1.1.1 from 10.200.0.1 dev vpn3 table 203 mark 0x203 cache iif eth1 === nft === /usr/sbin/nft table inet fw4 === tunnel pings === PING 1.1.1.1 (1.1.1.1): 56 data bytes 64 bytes from 1.1.1.1: seq=0 ttl=57 time=53.327 ms 64 bytes from 1.1.1.1: seq=1 ttl=57 time=53.567 ms --- 1.1.1.1 ping statistics --- 2 packets transmitted, 2 packets received, 0% packet loss round-trip min/avg/max = 53.327/53.447/53.567 ms PING_VM101_vpn1_RC=0 PING 1.1.1.1 (1.1.1.1): 56 data bytes 64 bytes from 1.1.1.1: seq=0 ttl=55 time=51.962 ms 64 bytes from 1.1.1.1: seq=1 ttl=55 time=52.285 ms --- 1.1.1.1 ping statistics --- 2 packets transmitted, 2 packets received, 0% packet loss round-trip min/avg/max = 51.962/52.123/52.285 ms PING_VM101_vpn3_RC=0 PING 1.1.1.1 (1.1.1.1): 56 data bytes 64 bytes from 1.1.1.1: seq=0 ttl=57 time=50.367 ms 64 bytes from 1.1.1.1: seq=1 ttl=57 time=50.067 ms --- 1.1.1.1 ping statistics --- 2 packets transmitted, 2 packets received, 0% packet loss round-trip min/avg/max = 50.067/50.217/50.367 ms PING_VM101_vpn4_RC=0 PING 1.1.1.1 (1.1.1.1): 56 data bytes 64 bytes from 1.1.1.1: seq=0 ttl=61 time=58.655 ms 64 bytes from 1.1.1.1: seq=1 ttl=61 time=58.848 ms --- 1.1.1.1 ping statistics --- 2 packets transmitted, 2 packets received, 0% packet loss round-trip min/avg/max = 58.655/58.751/58.848 ms PING_VM101_vpn5_RC=0 === uci pending === === VM100 checks === Wed Jul 8 11:08:09 UTC 2026 === ip -br addr === lo UNKNOWN 127.0.0.1/8 ::1/128 eth0 UP 10.201.0.1/24 fe80::be24:11ff:fe94:bbfb/64 eth1 UP eth2 UP 10.200.0.1/24 fe80::be24:11ff:fee4:6cfb/64 br-lan UP 10.71.100.1/24 fe80::be24:11ff:feee:7d14/64 wg_paid UNKNOWN 10.253.1.1/16 wg_remote UNKNOWN 10.250.100.1/24 === route from 10.200.0.1 === 1.1.1.1 from 10.200.0.1 via 10.201.0.2 dev eth0 uid 0 cache === baseline ping from 10.200.0.1 === PING 1.1.1.1 (1.1.1.1) from 10.200.0.1: 56 data bytes 64 bytes from 1.1.1.1: seq=0 ttl=50 time=25.363 ms 64 bytes from 1.1.1.1: seq=1 ttl=50 time=25.422 ms 64 bytes from 1.1.1.1: seq=2 ttl=50 time=25.255 ms --- 1.1.1.1 ping statistics --- 3 packets transmitted, 3 packets received, 0% packet loss round-trip min/avg/max = 25.255/25.346/25.422 ms PING_VM100_SRC_10_200_0_1_RC=0 === STEP_033C2 RESULT === ping_vm100_src_10_200_0_1_rc=0 ping_vm101_vpn1_rc=0 ping_vm101_vpn3_rc=0 ping_vm101_vpn4_rc=0 ping_vm101_vpn5_rc=0 fwmark_rule203_lines=1 unmarked_canary_vpn1_lines=1 marked_canary_vpn3_lines=1 nft_present_lines=1 uci_pending_lines=22 package=/opt/router-ops/apply-packages/20260708-110804_step033c2_canary_plan_mini decision=BLOCK_UCI_PENDING