=== STEP_033F ROLLBACK CANARY RUNTIME === timestamp=20260708-111733 intent: delete runtime nft canary table only keep: fwmark ip rules 0x203/0x204/0x205 === before nft canary === table inet router_egress_canary { chain prerouting { type filter hook prerouting priority mangle; policy accept; iifname "eth1" ip saddr 10.200.0.1 meta mark set 0x00000203 counter packets 10 bytes 840 comment "STEP_033D_VM100_ETH2_TO_VPN3" } } === action === Rollback runtime canary rollback_rc=0 table inet fw4 ROLLBACK_SCRIPT_RC=0 === after nft canary === router_egress_canary_absent_after === ip rule after === 0: from all lookup local 10013: from all fwmark 0x203 lookup 203 10014: from all fwmark 0x204 lookup 204 10015: from all fwmark 0x205 lookup 205 10019: from all iif eth1 lookup 200 10020: from 10.200.0.0/24 lookup 200 32766: from all lookup main 32767: from all lookup default === table 200 === default dev vpn1 scope link 10.200.0.0/24 dev eth1 scope link src 10.200.0.2 10.201.0.0/24 dev eth3 scope link src 10.201.0.2 === tables 203-205 === TABLE 203 default dev vpn3 scope link TABLE 204 default dev vpn4 scope link TABLE 205 default dev vpn5 scope link === route unmarked after === 1.1.1.1 from 10.200.0.1 dev vpn1 table 200 cache iif eth1 === route marked after === 1.1.1.1 from 10.200.0.1 dev vpn3 table 203 mark 0x203 cache iif eth1 === pings === PING 1.1.1.1 (1.1.1.1): 56 data bytes 64 bytes from 1.1.1.1: seq=0 ttl=57 time=53.276 ms 64 bytes from 1.1.1.1: seq=1 ttl=57 time=53.506 ms --- 1.1.1.1 ping statistics --- 2 packets transmitted, 2 packets received, 0% packet loss round-trip min/avg/max = 53.276/53.391/53.506 ms PING_vpn1_RC=0 PING 1.1.1.1 (1.1.1.1): 56 data bytes 64 bytes from 1.1.1.1: seq=0 ttl=55 time=52.045 ms 64 bytes from 1.1.1.1: seq=1 ttl=55 time=51.973 ms --- 1.1.1.1 ping statistics --- 2 packets transmitted, 2 packets received, 0% packet loss round-trip min/avg/max = 51.973/52.009/52.045 ms PING_vpn3_RC=0 PING 1.1.1.1 (1.1.1.1): 56 data bytes 64 bytes from 1.1.1.1: seq=0 ttl=57 time=50.735 ms 64 bytes from 1.1.1.1: seq=1 ttl=57 time=50.196 ms --- 1.1.1.1 ping statistics --- 2 packets transmitted, 2 packets received, 0% packet loss round-trip min/avg/max = 50.196/50.465/50.735 ms PING_vpn4_RC=0 PING 1.1.1.1 (1.1.1.1): 56 data bytes 64 bytes from 1.1.1.1: seq=0 ttl=61 time=58.950 ms 64 bytes from 1.1.1.1: seq=1 ttl=61 time=58.930 ms --- 1.1.1.1 ping statistics --- 2 packets transmitted, 2 packets received, 0% packet loss round-trip min/avg/max = 58.930/58.940/58.950 ms PING_vpn5_RC=0 === uci pending === === STEP_033F RESULT === canary_absent_after_lines=1 fwmark_rule203_lines=1 table200_default_vpn1_lines=1 unmarked_route_vpn1_lines=1 marked_route_vpn3_lines=1 uci_pending_lines=0 decision=PASS_CANARY_RUNTIME_ROLLED_BACK