=== STEP_035H CHECKPOINT MULTICLASS MAPPER === timestamp=20260708-124857 mode=snapshot VM100/VM101 + VM121 DB/API checkpoint snapshot_name=S035H_WGPAY_MULTICLASS_MAPPER_OK canary_ip=10.253.1.10 forbidden: policy switch, peer disable, wg reload, network/firewall reload === snapshots VM100/VM101 === --- create snapshot VM100 S035H_WGPAY_MULTICLASS_MAPPER_OK --- snapshotting 'drive-sata1' (local-lvm:vm-100-disk-0) Logical volume "snap_vm-100-disk-0_S035H_WGPAY_MULTICLASS_MAPPER_OK" created. snapshot_vm100_rc=0 snapshot_vm100_visible_rc=0 --- create snapshot VM101 S035H_WGPAY_MULTICLASS_MAPPER_OK --- snapshotting 'drive-sata1' (local-lvm:vm-101-disk-0) Logical volume "snap_vm-101-disk-0_S035H_WGPAY_MULTICLASS_MAPPER_OK" created. snapshot_vm101_rc=0 snapshot_vm101_visible_rc=0 pve_snapshot_done=1 === VM100 selector checkpoint === vm100_selector_entry_rc=0 vm100_selector_active_entry_count=1 vm100_selector_service_enabled_rc=0 vm100_selector_rule_visible_rc=0 vm100_selector_packets=8 vm100_selector_bytes=672 vm100_wg_paid_peer_count=1 vm100_canary_ip_in_wg_paid_rc=0 vm100_uci_changes_rc=0 no_wg_reload_vm100=1 no_network_reload_vm100=1 no_firewall_reload_vm100=1 no_peer_change_vm100=1 vm100_verify_done=1 === VM101 multiclass mapper checkpoint === vm101_mapper_service_enabled_rc=0 vm101_prerouting_mapper_rule_count=3 vm101_postrouting_clear_rule_count=3 vm101_cs1_rule_visible_rc=0 vm101_cs2_rule_visible_rc=0 vm101_cs3_rule_visible_rc=0 vm101_clear_cs1_visible_rc=0 vm101_clear_cs2_visible_rc=0 vm101_clear_cs3_visible_rc=0 vm101_mark203_route_vpn3_rc=0 vm101_mark204_route_vpn4_rc=0 vm101_mark205_route_vpn5_rc=0 vm101_cs1_packets=4 vm101_cs2_packets=0 vm101_cs3_packets=0 vm101_clear_cs1_packets=4 vm101_clear_cs2_packets=0 vm101_clear_cs3_packets=0 vm101_uci_changes_rc=0 no_wg_reload_vm101=1 no_network_reload_vm101=1 no_firewall_reload_vm101=1 no_peer_change_vm101=1 vm101_verify_done=1 === VM121 DB/API checkpoint === remote_backup_dir=/root/router-ops-backups/checkpoint-multiclass-mapper-20260708-124903 backend_container=wgaccess-backend postgres_container=wgaccess-postgres {"status":"ok","service":"wg-access-backend","environment":"dev"} {"status":"ok","db":1} peers_curl_rc=0 jobs_curl_rc=0 peer_count 21 enabled_peer_count 1 job_count 37 pending_job_count 0 canary_peer_found=True canary_peer_enabled=True canary_peer_tunnel_ip=10.253.1.10 canary_tunnel_ip_matches=True canary_job_found=True canary_job_status=completed canary_job_attempts=1 pg_dump_rc=0 -rw-r--r-- 1 root root 24K Jul 8 12:49 /root/router-ops-backups/checkpoint-multiclass-mapper-20260708-124903/wg-access-db-after-multiclass-mapper.dump WG_CLIENT_ENDPOINT=wg-studio.secret-studio.ru:51830 no_peer_disable=1 no_wg_reload_vm121=1 no_backend_restart=1 vm121_checkpoint_done=1 === STEP_035H RESULT === snapshot_name=S035H_WGPAY_MULTICLASS_MAPPER_OK snapshot_vm100_rc=0 snapshot_vm100_visible_rc=0 snapshot_vm101_rc=0 snapshot_vm101_visible_rc=0 vm100_selector_entry_rc=0 vm100_selector_active_entry_count=1 vm100_selector_service_enabled_rc=0 vm100_selector_rule_visible_rc=0 vm100_selector_packets=8 vm100_wg_paid_peer_count=1 vm100_canary_ip_in_wg_paid_rc=0 vm101_mapper_service_enabled_rc=0 vm101_prerouting_mapper_rule_count=3 vm101_postrouting_clear_rule_count=3 vm101_cs1_rule_visible_rc=0 vm101_cs2_rule_visible_rc=0 vm101_cs3_rule_visible_rc=0 vm101_clear_cs1_visible_rc=0 vm101_clear_cs2_visible_rc=0 vm101_clear_cs3_visible_rc=0 vm101_mark203_route_vpn3_rc=0 vm101_mark204_route_vpn4_rc=0 vm101_mark205_route_vpn5_rc=0 vm101_cs1_packets=4 vm101_cs2_packets=0 vm101_cs3_packets=0 vm101_clear_cs1_packets=4 peer_count=21 enabled_peer_count=1 job_count=37 pending_job_count=0 canary_peer_enabled=True canary_tunnel_ip_matches=True canary_job_status=completed pg_dump_rc=0 endpoint_final_lines=1 backend_health_ok_lines=2 decision=PASS_MULTICLASS_MAPPER_CHECKPOINT