=== STEP_036K CHECKPOINT 5CLASS MAPPER === timestamp=20260708-133001 mode=snapshot VM100/VM101 + read-only checkpoint + VM121 pg_dump snapshot_name=S036K_WGPAY_5CLASS_MAPPER_OK forbidden: policy switch, selector expansion, peer disable, wg reload, network/firewall reload, backend restart === snapshots VM100/VM101 === --- create snapshot VM100 S036K_WGPAY_5CLASS_MAPPER_OK --- snapshotting 'drive-sata1' (local-lvm:vm-100-disk-0) Logical volume "snap_vm-100-disk-0_S036K_WGPAY_5CLASS_MAPPER_OK" created. snapshot_vm100_rc=0 snapshot_vm100_visible_rc=0 --- create snapshot VM101 S036K_WGPAY_5CLASS_MAPPER_OK --- snapshotting 'drive-sata1' (local-lvm:vm-101-disk-0) Logical volume "snap_vm-101-disk-0_S036K_WGPAY_5CLASS_MAPPER_OK" created. snapshot_vm101_rc=0 snapshot_vm101_visible_rc=0 pve_snapshot_done=1 === VM101 5-slot policy + 5-class mapper verify === date=Wed Jul 8 13:30:05 UTC 2026 === egress slots service === egress_slots_service_enabled_rc=0 egress_slots_apply_exists_rc=0 === five policy slots === vpn1_link_rc=0 table201_vpn1_rc=0 rule_0x201_table201_rc=0 mark0x201_route_vpn1_rc=0 vpn2_link_rc=0 table202_vpn2_rc=0 rule_0x202_table202_rc=0 mark0x202_route_vpn2_rc=0 vpn3_link_rc=0 table203_vpn3_rc=0 rule_0x203_table203_rc=0 mark0x203_route_vpn3_rc=0 vpn4_link_rc=0 table204_vpn4_rc=0 rule_0x204_table204_rc=0 mark0x204_route_vpn4_rc=0 vpn5_link_rc=0 table205_vpn5_rc=0 rule_0x205_table205_rc=0 mark0x205_route_vpn5_rc=0 table200_default_vpn1_rc=0 === five-class mapper === mapper_service_enabled_rc=0 mapper_prerouting_rule_count=5 mapper_postrouting_clear_rule_count=5 visible_STEP_036I_DSCP_CS1_TO_FW_MARK_0x203_rc=0 visible_STEP_036I_DSCP_CS2_TO_FW_MARK_0x204_rc=0 visible_STEP_036I_DSCP_CS3_TO_FW_MARK_0x205_rc=0 visible_STEP_036I_DSCP_CS4_TO_FW_MARK_0x201_rc=0 visible_STEP_036I_DSCP_CS5_TO_FW_MARK_0x202_rc=0 visible_STEP_036I_CLEAR_DSCP_CS1_MARK_0x203_rc=0 visible_STEP_036I_CLEAR_DSCP_CS2_MARK_0x204_rc=0 visible_STEP_036I_CLEAR_DSCP_CS3_MARK_0x205_rc=0 visible_STEP_036I_CLEAR_DSCP_CS4_MARK_0x201_rc=0 visible_STEP_036I_CLEAR_DSCP_CS5_MARK_0x202_rc=0 vm101_cs1_packets=4 vm101_cs2_packets=0 vm101_cs3_packets=0 vm101_cs4_packets=0 vm101_cs5_packets=0 vm101_clear_cs1_packets=4 vm101_clear_cs2_packets=0 vm101_clear_cs3_packets=0 vm101_clear_cs4_packets=0 vm101_clear_cs5_packets=0 === concise route/policy state === 10011: from all fwmark 0x201 lookup 201 10012: from all fwmark 0x202 lookup 202 10013: from all fwmark 0x203 lookup 203 10014: from all fwmark 0x204 lookup 204 10015: from all fwmark 0x205 lookup 205 10019: from all iif eth1 lookup 200 10020: from 10.200.0.0/24 lookup 200 --- table 200 --- default dev vpn1 scope link 10.200.0.0/24 dev eth1 scope link src 10.200.0.2 10.201.0.0/24 dev eth3 scope link src 10.201.0.2 --- table 201 --- default dev vpn1 scope link --- table 202 --- default dev vpn2 scope link --- table 203 --- default dev vpn3 scope link --- table 204 --- default dev vpn4 scope link --- table 205 --- default dev vpn5 scope link === UCI changes === vm101_uci_changes_rc=0 no_policy_switch_vm101=1 no_selector_expansion_vm101=1 no_wg_reload_vm101=1 no_network_reload_vm101=1 no_firewall_reload_vm101=1 no_peer_change_vm101=1 vm101_verify_done=1 === VM100 selector verify unchanged === vm100_selector_entry_rc=0 vm100_selector_active_entry_count=1 vm100_selector_service_enabled_rc=0 vm100_selector_rule_visible_rc=0 vm100_selector_packets=12 vm100_selector_bytes=1008 vm100_wg_paid_peer_count=1 vm100_canary_ip_in_wg_paid_rc=0 vm100_uci_changes_rc=0 no_selector_change_vm100=1 no_wg_reload_vm100=1 no_network_reload_vm100=1 no_firewall_reload_vm100=1 no_peer_change_vm100=1 vm100_verify_done=1 === VM121 DB/API checkpoint === remote_backup_dir=/root/router-ops-backups/checkpoint-5class-mapper-20260708-133006 backend_container=wgaccess-backend postgres_container=wgaccess-postgres {"status":"ok","service":"wg-access-backend","environment":"dev"} {"status":"ok","db":1} peers_curl_rc=0 jobs_curl_rc=0 peer_count 21 enabled_peer_count 1 job_count 37 pending_job_count 0 canary_peer_found=True canary_peer_enabled=True canary_peer_tunnel_ip=10.253.1.10 canary_tunnel_ip_matches=True canary_job_found=True canary_job_status=completed canary_job_attempts=1 pg_dump_rc=0 -rw-r--r-- 1 root root 24K Jul 8 13:30 /root/router-ops-backups/checkpoint-5class-mapper-20260708-133006/wg-access-db-after-5class-mapper.dump WG_CLIENT_ENDPOINT=wg-studio.secret-studio.ru:51830 no_peer_disable=1 no_wg_reload_vm121=1 no_backend_restart=1 vm121_checkpoint_done=1 === STEP_036K RESULT === snapshot_name=S036K_WGPAY_5CLASS_MAPPER_OK snapshot_vm100_rc=0 snapshot_vm100_visible_rc=0 snapshot_vm101_rc=0 snapshot_vm101_visible_rc=0 egress_slots_service_enabled_rc=0 egress_slots_apply_exists_rc=0 table201_vpn1_rc=0 table202_vpn2_rc=0 table203_vpn3_rc=0 table204_vpn4_rc=0 table205_vpn5_rc=0 rule_0x201_table201_rc=0 rule_0x202_table202_rc=0 rule_0x203_table203_rc=0 rule_0x204_table204_rc=0 rule_0x205_table205_rc=0 mark0x201_route_vpn1_rc=0 mark0x202_route_vpn2_rc=0 mark0x203_route_vpn3_rc=0 mark0x204_route_vpn4_rc=0 mark0x205_route_vpn5_rc=0 table200_default_vpn1_rc=0 mapper_service_enabled_rc=0 mapper_prerouting_rule_count=5 mapper_postrouting_clear_rule_count=5 vm101_cs1_packets=4 vm101_cs2_packets=0 vm101_cs3_packets=0 vm101_cs4_packets=0 vm101_cs5_packets=0 vm101_clear_cs1_packets=4 vm101_clear_cs2_packets=0 vm101_clear_cs3_packets=0 vm101_clear_cs4_packets=0 vm101_clear_cs5_packets=0 vm100_selector_active_entry_count=1 vm100_selector_packets=12 vm100_wg_paid_peer_count=1 peer_count=21 enabled_peer_count=1 job_count=37 pending_job_count=0 canary_peer_enabled=True canary_tunnel_ip_matches=True canary_job_status=completed pg_dump_rc=0 endpoint_final_lines=1 backend_health_ok_lines=2 decision=PASS_5CLASS_MAPPER_CHECKPOINT