`-> MGTS_RESTORED_BEFORE_FIRST_BOOT 2026-07-06 12:28:36 pve-wg-paid: VM100 restored from golden, before first boot `-> MGTS_INTERNAL_LAN_RENUMBERED_OK 2026-07-06 12:52:29 pve-wg-paid: VM100 LAN renumbered to 10.71.100.1, wg_remote 10.250.100.1 `-> MGTS_VM100_WG_REMOTE_ROTATED_OK 2026-07-06 13:04:15 pve-wg-paid: VM100 wg_remote keys rotated for 10.250.100.0/24; client configs stored on VM100 `-> MGTS_VM100_ROUTER_OPS_WG_PEER_OK 2026-07-06 14:08:27 pve-wg-paid: VM100 wg_remote has router-ops-mgts peer 10.250.100.4/32; management path via WG `-> MGTS_VM100_BEFORE_WG_PAID_CREATE 2026-07-06 17:37:41 Before creating wg_paid on MGTS VM100 for WG Paid migration `-> MGTS_VM100_WG_PAID_BASE_OK 2026-07-06 17:47:21 MGTS VM100: wg_paid created; 10.253.1.1/16; UDP 51830; firewall wg_paid; live wg set dummy peer add/remove OK `-> STEP_004B_WG_PAID_CLIENT_PATH_OK 2026-07-06 18:33:19 MGTS VM100: wg_paid live client smoke OK; client can reach 10.253.1.1 and internet via VM101 `-> STEP_004C_ACCESS_MAP_VM121_DIRECT_OK 2026-07-06 18:43:30 MGTS VM100: VM121 direct wg-mgts admin access documented in access-map `-> STEP_005_MGTS_EGRESS_PANEL_OK 2026-07-06 20:52:45 MGTS/WG Paid: VM100 PBR fixed; VM101 egress OK; vpn_user manual mode smoke OK; VM105 control panel identified; deferred UI/cleanup tasks recorded `-> STEP_028A_MGTS_WG_PAID_E2E_OK 2026-07-06 22:01:22 MGTS VM100: wg_paid target E2E smoke OK; peer lifecycle via agent OK; PBR direct/vpn route decision OK; final test peer removed `-> S034K_WGPAY_DSCP_CANARY_PROVEN 2026-07-08 15:23:36 WGPay canary peer 10.253.1.10 DSCP/fwmark path proven to vpn3 after STEP_034J `-> S034O_WGPAY_PERSISTED_CANARY_OK 2026-07-08 15:31:52 WGPay persisted per-peer DSCP canary proven by real traffic after STEP_034N `-> S035D_WGPAY_SELECTOR_CANARY_OK 2026-07-08 15:41:26 WGPay selector-file canary proven by real traffic after STEP_035C `-> S035H_WGPAY_MULTICLASS_MAPPER_OK 2026-07-08 15:48:57 WGPay multiclass mapper proven by real canary traffic after STEP_035G `-> S036H_WGPAY_5SLOT_POLICY_PERSISTED 2026-07-08 16:02:14 WGPay VM101 persistent 5-slot policy routes/rules OK after STEP_036G `-> S036K_WGPAY_5CLASS_MAPPER_OK 2026-07-08 16:30:01 WGPay 5-class mapper proven by canary traffic after STEP_036J `-> S037D_WGPAY_CS2_PROVEN_OK 2026-07-08 17:00:09 WG Paid STEP_037D cs2 proven checkpoint: cs2 peer 10.253.1.11 -> fwmark 0x204 -> vpn4 `-> S038D_WGPAY_CS3_PROVEN_OK 2026-07-08 17:13:59 WG Paid STEP_038D cs3 proven checkpoint: 10.253.1.12 -> cs3 -> fwmark 0x205 -> table205/vpn5 `-> S039E_WGPAY_CS4_PROVEN_OK 2026-07-08 18:18:57 WG Paid checkpoint: cs1/cs2/cs3/cs4 proven; cs4 10.253.1.13 -> cs4 -> 0x201 -> vpn1 `-> current You are here! snapshotting 'drive-sata1' (local-lvm:vm-100-disk-0) Logical volume "snap_vm-100-disk-0_STEP_042F_BEFORE_VM100_REBOOT_TEST" created. snapshot_create_rc=0 `-> MGTS_RESTORED_BEFORE_FIRST_BOOT 2026-07-06 12:28:36 pve-wg-paid: VM100 restored from golden, before first boot `-> MGTS_INTERNAL_LAN_RENUMBERED_OK 2026-07-06 12:52:29 pve-wg-paid: VM100 LAN renumbered to 10.71.100.1, wg_remote 10.250.100.1 `-> MGTS_VM100_WG_REMOTE_ROTATED_OK 2026-07-06 13:04:15 pve-wg-paid: VM100 wg_remote keys rotated for 10.250.100.0/24; client configs stored on VM100 `-> MGTS_VM100_ROUTER_OPS_WG_PEER_OK 2026-07-06 14:08:27 pve-wg-paid: VM100 wg_remote has router-ops-mgts peer 10.250.100.4/32; management path via WG `-> MGTS_VM100_BEFORE_WG_PAID_CREATE 2026-07-06 17:37:41 Before creating wg_paid on MGTS VM100 for WG Paid migration `-> MGTS_VM100_WG_PAID_BASE_OK 2026-07-06 17:47:21 MGTS VM100: wg_paid created; 10.253.1.1/16; UDP 51830; firewall wg_paid; live wg set dummy peer add/remove OK `-> STEP_004B_WG_PAID_CLIENT_PATH_OK 2026-07-06 18:33:19 MGTS VM100: wg_paid live client smoke OK; client can reach 10.253.1.1 and internet via VM101 `-> STEP_004C_ACCESS_MAP_VM121_DIRECT_OK 2026-07-06 18:43:30 MGTS VM100: VM121 direct wg-mgts admin access documented in access-map `-> STEP_005_MGTS_EGRESS_PANEL_OK 2026-07-06 20:52:45 MGTS/WG Paid: VM100 PBR fixed; VM101 egress OK; vpn_user manual mode smoke OK; VM105 control panel identified; deferred UI/cleanup tasks recorded `-> STEP_028A_MGTS_WG_PAID_E2E_OK 2026-07-06 22:01:22 MGTS VM100: wg_paid target E2E smoke OK; peer lifecycle via agent OK; PBR direct/vpn route decision OK; final test peer removed `-> S034K_WGPAY_DSCP_CANARY_PROVEN 2026-07-08 15:23:36 WGPay canary peer 10.253.1.10 DSCP/fwmark path proven to vpn3 after STEP_034J `-> S034O_WGPAY_PERSISTED_CANARY_OK 2026-07-08 15:31:52 WGPay persisted per-peer DSCP canary proven by real traffic after STEP_034N `-> S035D_WGPAY_SELECTOR_CANARY_OK 2026-07-08 15:41:26 WGPay selector-file canary proven by real traffic after STEP_035C `-> S035H_WGPAY_MULTICLASS_MAPPER_OK 2026-07-08 15:48:57 WGPay multiclass mapper proven by real canary traffic after STEP_035G `-> S036H_WGPAY_5SLOT_POLICY_PERSISTED 2026-07-08 16:02:14 WGPay VM101 persistent 5-slot policy routes/rules OK after STEP_036G `-> S036K_WGPAY_5CLASS_MAPPER_OK 2026-07-08 16:30:01 WGPay 5-class mapper proven by canary traffic after STEP_036J `-> S037D_WGPAY_CS2_PROVEN_OK 2026-07-08 17:00:09 WG Paid STEP_037D cs2 proven checkpoint: cs2 peer 10.253.1.11 -> fwmark 0x204 -> vpn4 `-> S038D_WGPAY_CS3_PROVEN_OK 2026-07-08 17:13:59 WG Paid STEP_038D cs3 proven checkpoint: 10.253.1.12 -> cs3 -> fwmark 0x205 -> table205/vpn5 `-> S039E_WGPAY_CS4_PROVEN_OK 2026-07-08 18:18:57 WG Paid checkpoint: cs1/cs2/cs3/cs4 proven; cs4 10.253.1.13 -> cs4 -> 0x201 -> vpn1 `-> STEP_042F_BEFORE_VM100_REBOOT_TEST 2026-07-09 13:53:53 before STEP_042F VM100 reboot recovery test `-> current You are here!