ROUTER CAPTURE REPORT timestamp: 20260708-103449 label: step031c_load_vpn3_uci_only_20260708-103447 base: /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447 Secrets policy: - private keys redacted - access codes redacted - passwords/tokens redacted ################################################################ ### local_date ################################################################ ===== local_date ===== CMD: date Wed Jul 8 10:34:49 UTC 2026 rc=0 ################################################################ ### local_access_map ################################################################ ===== local_access_map ===== CMD: sh -c command -v access-map >/dev/null 2>&1 && access-map || true # Access Map — router-ops / WG Paid This file is the human-readable source of truth for access paths. No private keys. No public keys. No WireGuard client configs. No passwords or tokens. Allowed here: - machine names - roles - IP addresses - SSH aliases - key file paths - non-secret operational notes Rules: - Do not create new SSH/WG keys unless explicitly requested. - Before suggesting access commands, read /opt/router-ops/inventory/access-map.yml. - Prefer existing SSH aliases and existing key files. - Do not print private keys or WireGuard configs. - Use ssh -n for nested SSH from Proxmox to OpenWRT inside heredocs. ============================================================ MAIN ACCESS PATH TO PVE-WG-PAID ============================================================ router-ops WG router-ops-mgts 10.250.100.4/32 -> VM100 wg_remote 10.250.100.1/24 -> Proxmox pve-wg-paid 10.71.100.222 Command from router-ops: ssh pve-mgts Expected SSH path: source: 10.250.100.4 target: 10.71.100.222 ============================================================ MACHINES ============================================================ router-ops ---------- Role: operations VM User: ops Known address: 192.168.30.84 WG interface: router-ops-mgts WG address: 10.250.100.4/32 Systemd service: wg-quick@router-ops-mgts Expected service state: enabled active ------------------------------------------------------------ pve-wg-paid ----------- Role: Proxmox host for WG Paid / MGTS deployment SSH alias from router-ops: pve-mgts SSH user: root Management IP: 10.71.100.222 SSH key path on router-ops: ~/.ssh/router_ops_pve_mgts_ed25519 Network: vmbr0: WAN bridge, no IPv4 on Proxmox host vmbr1: 10.71.100.222/24 internal LAN vmbr2: 192.168.99.1/24 emergency vmbr3: transit VPN bridge, no host IP vmbr4: transit direct bridge, no host IP Route back to WG admin net: 10.250.100.0/24 via 10.71.100.1 dev vmbr1 Old temporary DDN IP: 192.168.30.249 Old temporary DDN IP status: deprecated do not rely on it ------------------------------------------------------------ MGTS VM100 core --------------- VMID: 100 Hostname: VM100-OpenWRT-core Role: OpenWRT core router for pve-wg-paid SSH from Proxmox: ssh -n -i /root/.ssh/pve_to_openwrt_mgts_ed25519 root@10.71.100.1 Addresses: br-lan: 10.71.100.1/24 wg_remote: 10.250.100.1/24 direct transit: 10.201.0.1/24 vpn transit: 10.200.0.1/24 wg_remote: listen UDP: 51820 wg_remote peers: support-mgts: 10.250.100.2/32 owner-mgts: 10.250.100.3/32 router-ops-mgts: 10.250.100.4/32 Snapshots: MGTS_RESTORED_BEFORE_FIRST_BOOT MGTS_INTERNAL_LAN_RENUMBERED_OK MGTS_VM100_WG_REMOTE_ROTATED_OK MGTS_VM100_ROUTER_OPS_WG_PEER_OK ------------------------------------------------------------ MGTS VM101 edge --------------- VMID: 101 Hostname: VM101-OpenWRT-edge Role: OpenWRT edge / WAN / VPN egress for pve-wg-paid SSH from Proxmox: ssh -n -i /root/.ssh/pve_to_openwrt_mgts_ed25519 root@10.71.100.2 Addresses: WAN eth0: DHCP behind vmbr0 mgmt eth2: 10.71.100.2/24 vpn_in eth1: 10.200.0.2/24 direct_in eth3: 10.201.0.2/24 Route back to admin WG: 10.250.100.0/24 via 10.71.100.1 dev eth2 Snapshots: MGTS_RESTORED_BEFORE_FIRST_BOOT MGTS_INTERNAL_LAN_RENUMBERED_OK MGTS_VM101_CURRENT_20260702_OK ============================================================ TEMPORARY NOTES ============================================================ router-ops-mgts currently uses temporary DDN test endpoint: 192.168.30.218:51820 On MGTS site, update endpoint to real public IP/DNS or MGTS router forward/DMZ address. HideMyName/AWG keys still need future replacement before production use. --- ## VM121 direct MGTS admin access Status: confirmed. Recorded: 2026-07-06T15:42:33 Purpose: VM121 wg-access-dev has its own direct administrative WireGuard access to MGTS 10.71.100.0/24. VM130/router-ops is only an operator/control node. VM130 is not a transit router for VM121. Direct admin WireGuard: VM121 interface: wg-mgts VM121 WG address: 10.250.100.121/32 MGTS server side: VM100 wg_remote MGTS WG server addr: 10.250.100.1/24 MGTS LAN reachable: 10.71.100.0/24 Confirmed reachable targets from VM121: 10.71.100.1 MGTS VM100 OpenWRT core 10.71.100.2 MGTS VM101 OpenWRT edge 10.71.100.222 MGTS Proxmox pve-wg-paid SSH access paths: router-ops -> pve-mgts: command: ssh pve-mgts target: 10.71.100.222 key path: ~/.ssh/router_ops_pve_mgts_ed25519 router-ops -> VM121: command: ssh vm121 target: 192.168.30.83 key path: ~/.ssh/router_ops_ed25519 pve-mgts -> MGTS VM100: command: ssh -i /root/.ssh/pve_to_openwrt_mgts_ed25519 root@10.71.100.1 pve-mgts -> MGTS VM101: command: ssh -i /root/.ssh/pve_to_openwrt_mgts_ed25519 root@10.71.100.2 Confirmed smoke tests: VM121 -> 10.71.100.1 OK VM121 -> 10.71.100.2 OK VM121 -> 10.71.100.222 OK wg_paid live temp client smoke: temp client: 10.253.254.121/32 target: 10.253.1.1 handshake: OK server ping: OK internet: OK external IP during smoke: 94.45.208.160 cleanup: temp peer/client removed Secrets policy: Private keys are not recorded here. Only key paths, public keys and fingerprints may be recorded. rc=0 ################################################################ ### local_router_ops_tree ################################################################ ===== local_router_ops_tree ===== CMD: sh -c find /opt/router-ops -maxdepth 3 -type f 2>/dev/null | sort | sed -n "1,500p" /opt/router-ops/apply-packages/20260708-101946_step030g_hmn_preserve_existing_apply_package/APPLY_PREVIEW.md /opt/router-ops/apply-packages/20260708-101946_step030g_hmn_preserve_existing_apply_package/CONFIG_FILE_AVAILABILITY.txt /opt/router-ops/apply-packages/20260708-101946_step030g_hmn_preserve_existing_apply_package/MANIFEST.txt /opt/router-ops/apply-packages/20260708-101946_step030g_hmn_preserve_existing_apply_package/PLAN_TABLE.txt /opt/router-ops/apply-packages/20260708-101946_step030g_hmn_preserve_existing_apply_package/STEP_030F_PREFLIGHT.txt /opt/router-ops/apply-packages/20260708-101946_step030g_hmn_preserve_existing_apply_package/VM101_APPLY_TEMPLATE_DO_NOT_RUN.sh /opt/router-ops/backups/Caddyfile.before-router-reports-20260708-093926 /opt/router-ops/bin/access-map /opt/router-ops/bin/access-map.before-confirmed-access-20260706_132240 /opt/router-ops/bin/access-map.before-extend-all-20260706_131715 /opt/router-ops/bin/router-capture-mgts /opt/router-ops/bin/router-context-pack /opt/router-ops/bin/router-egress-plan /opt/router-ops/bin/router-egress-status /opt/router-ops/bin/router-hmn-adapter-plan /opt/router-ops/bin/router-hmn-adapter-plan.before-step030e2-20260708-100328 /opt/router-ops/bin/router-hmn-apply-preflight /opt/router-ops/bin/router-hmn-candidates /opt/router-ops/bin/router-hmn-loader-inspect /opt/router-ops/bin/router-hmn-slot-loader-inspect /opt/router-ops/bin/router-instance-show /opt/router-ops/bin/router-last /opt/router-ops/bin/router-public-reindex /opt/router-ops/bin/router-public-start /opt/router-ops/bin/router-public-url /opt/router-ops/bin/router-publish-file /opt/router-ops/bin/router-publish-report /opt/router-ops/bin/router-run /opt/router-ops/bin/router-step /opt/router-ops/bin/router-targets /opt/router-ops/bin/wg-paid-e2e-smoke.sh /opt/router-ops/captures/20260708-082154_step029a3.tar.gz /opt/router-ops/captures/20260708-082154_step029a3/REPORT.txt /opt/router-ops/captures/20260708-082403_step029a3_after_safety_20260708-082358.tar.gz /opt/router-ops/captures/20260708-082403_step029a3_after_safety_20260708-082358/REPORT.txt /opt/router-ops/captures/20260708-082542_step029a4_safe_capture_test.safe.tar.gz /opt/router-ops/captures/20260708-082542_step029a4_safe_capture_test/REPORT.txt /opt/router-ops/captures/20260708-082809_step029b_repair_verify_context.safe.tar.gz /opt/router-ops/captures/20260708-083042_step029c1_after_freeze.safe.tar.gz /opt/router-ops/captures/20260708-083042_step029c1_after_freeze/REPORT.txt /opt/router-ops/captures/20260708-083344_step029c2_after_disable_hotplug.safe.tar.gz /opt/router-ops/captures/20260708-083344_step029c2_after_disable_hotplug/REPORT.txt /opt/router-ops/captures/20260708-083629_step029c_legacy_automation_frozen.safe.tar.gz /opt/router-ops/captures/20260708-083629_step029c_legacy_automation_frozen/REPORT.txt /opt/router-ops/captures/20260708-102634_step031a_pre_apply_safety_20260708-102627.safe.tar.gz /opt/router-ops/captures/20260708-102634_step031a_pre_apply_safety_20260708-102627/REPORT.txt /opt/router-ops/captures/20260708-102813_step031b_loader_deploy_dryrun_20260708-102811.safe.tar.gz /opt/router-ops/captures/20260708-102813_step031b_loader_deploy_dryrun_20260708-102811/REPORT.txt /opt/router-ops/captures/20260708-103329_step031b4_loader_sshstream_dryrun_20260708-103325.safe.tar.gz /opt/router-ops/captures/20260708-103329_step031b4_loader_sshstream_dryrun_20260708-103325/REPORT.txt /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/REPORT.txt /opt/router-ops/captures/router-egress-plan-step030a-v3.txt /opt/router-ops/instances/mgts-main/README.md /opt/router-ops/instances/mgts-main/egress.yml /opt/router-ops/instances/mgts-main/egress.yml.before-step030c-20260708-095652 /opt/router-ops/instances/mgts-main/egress.yml.before-step030c-v2-20260708-095800 /opt/router-ops/instances/mgts-main/egress.yml.before-step030c-v3-20260708-095932 /opt/router-ops/instances/mgts-main/hosts.yml /opt/router-ops/instances/mgts-main/instance.yml /opt/router-ops/instances/mgts-main/networks.yml /opt/router-ops/instances/mgts-main/secrets.env.example /opt/router-ops/inventory.tsv /opt/router-ops/inventory/README.md /opt/router-ops/inventory/STATUS-ACCESS-MAP-OK.txt /opt/router-ops/inventory/STATUS-MGTS-VM101-VPN-EGRESS-OLD-AWG-PARTIAL.txt /opt/router-ops/inventory/STATUS-WG-PAID-LIVE-PEER-NO-RESTART-OK.txt /opt/router-ops/inventory/access-map-wg-paid-mgts.md /opt/router-ops/inventory/access-map.md /opt/router-ops/inventory/access-map.yml /opt/router-ops/inventory/access-map.yml.bak-20260706-134252 /opt/router-ops/inventory/access-map.yml.bak-20260706-134742 /opt/router-ops/inventory/access-map.yml.before-extend-all-20260706_131706 /opt/router-ops/inventory/ssh-access-audit-20260706_131850.txt /opt/router-ops/inventory/ssh-access-audit.sh /opt/router-ops/inventory/ssh-access-audit.sh.before-key-filter-20260706_132249 /opt/router-ops/product/egress/README.md /opt/router-ops/public/.http.pid /opt/router-ops/public/.router-public-token /opt/router-ops/public/cloudflared-quick.log /opt/router-ops/public/cloudflared-quick.pid /opt/router-ops/public/http.log /opt/router-ops/runs/20260705_092105_local/command.sh /opt/router-ops/runs/20260705_092105_local/command.sh.sanitize.5674 /opt/router-ops/runs/20260705_092105_local/report.md /opt/router-ops/runs/20260705_092105_local/report.md.sanitize.5674 /opt/router-ops/runs/20260705_092105_local/stderr.log /opt/router-ops/runs/20260705_092105_local/stderr.log.sanitize.5674 /opt/router-ops/runs/20260705_092105_local/stderr.raw.log /opt/router-ops/runs/20260705_092105_local/stderr.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_092105_local/stdout.log /opt/router-ops/runs/20260705_092105_local/stdout.log.sanitize.5674 /opt/router-ops/runs/20260705_092105_local/stdout.raw.log /opt/router-ops/runs/20260705_092105_local/stdout.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_092540_vm120/command.sh /opt/router-ops/runs/20260705_092540_vm120/command.sh.sanitize.5674 /opt/router-ops/runs/20260705_092540_vm120/report.md /opt/router-ops/runs/20260705_092540_vm120/report.md.sanitize.5674 /opt/router-ops/runs/20260705_092540_vm120/stderr.log /opt/router-ops/runs/20260705_092540_vm120/stderr.log.sanitize.5674 /opt/router-ops/runs/20260705_092540_vm120/stderr.raw.log /opt/router-ops/runs/20260705_092540_vm120/stderr.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_092540_vm120/stdout.log /opt/router-ops/runs/20260705_092540_vm120/stdout.log.sanitize.5674 /opt/router-ops/runs/20260705_092540_vm120/stdout.raw.log /opt/router-ops/runs/20260705_092540_vm120/stdout.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_092733_pve-ai/command.sh /opt/router-ops/runs/20260705_092733_pve-ai/command.sh.sanitize.5674 /opt/router-ops/runs/20260705_092733_pve-ai/report.md /opt/router-ops/runs/20260705_092733_pve-ai/report.md.sanitize.5674 /opt/router-ops/runs/20260705_092733_pve-ai/stderr.log /opt/router-ops/runs/20260705_092733_pve-ai/stderr.log.sanitize.5674 /opt/router-ops/runs/20260705_092733_pve-ai/stderr.raw.log /opt/router-ops/runs/20260705_092733_pve-ai/stderr.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_092733_pve-ai/stdout.log /opt/router-ops/runs/20260705_092733_pve-ai/stdout.log.sanitize.5674 /opt/router-ops/runs/20260705_092733_pve-ai/stdout.raw.log /opt/router-ops/runs/20260705_092733_pve-ai/stdout.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_092746_pve-ai/command.sh /opt/router-ops/runs/20260705_092746_pve-ai/command.sh.sanitize.5674 /opt/router-ops/runs/20260705_092746_pve-ai/report.md /opt/router-ops/runs/20260705_092746_pve-ai/report.md.sanitize.5674 /opt/router-ops/runs/20260705_092746_pve-ai/stderr.log /opt/router-ops/runs/20260705_092746_pve-ai/stderr.log.sanitize.5674 /opt/router-ops/runs/20260705_092746_pve-ai/stderr.raw.log /opt/router-ops/runs/20260705_092746_pve-ai/stderr.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_092746_pve-ai/stdout.log /opt/router-ops/runs/20260705_092746_pve-ai/stdout.log.sanitize.5674 /opt/router-ops/runs/20260705_092746_pve-ai/stdout.raw.log /opt/router-ops/runs/20260705_092746_pve-ai/stdout.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_092927_pve-ai/command.sh /opt/router-ops/runs/20260705_092927_pve-ai/command.sh.sanitize.5674 /opt/router-ops/runs/20260705_092927_pve-ai/report.md /opt/router-ops/runs/20260705_092927_pve-ai/report.md.sanitize.5674 /opt/router-ops/runs/20260705_092927_pve-ai/stderr.log /opt/router-ops/runs/20260705_092927_pve-ai/stderr.log.sanitize.5674 /opt/router-ops/runs/20260705_092927_pve-ai/stderr.raw.log /opt/router-ops/runs/20260705_092927_pve-ai/stderr.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_092927_pve-ai/stdout.log /opt/router-ops/runs/20260705_092927_pve-ai/stdout.log.sanitize.5674 /opt/router-ops/runs/20260705_092927_pve-ai/stdout.raw.log /opt/router-ops/runs/20260705_092927_pve-ai/stdout.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_092938_pve-ai/command.sh /opt/router-ops/runs/20260705_092938_pve-ai/command.sh.sanitize.5674 /opt/router-ops/runs/20260705_092938_pve-ai/report.md /opt/router-ops/runs/20260705_092938_pve-ai/report.md.sanitize.5674 /opt/router-ops/runs/20260705_092938_pve-ai/stderr.log /opt/router-ops/runs/20260705_092938_pve-ai/stderr.log.sanitize.5674 /opt/router-ops/runs/20260705_092938_pve-ai/stderr.raw.log /opt/router-ops/runs/20260705_092938_pve-ai/stderr.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_092938_pve-ai/stdout.log /opt/router-ops/runs/20260705_092938_pve-ai/stdout.log.sanitize.5674 /opt/router-ops/runs/20260705_092938_pve-ai/stdout.raw.log /opt/router-ops/runs/20260705_092938_pve-ai/stdout.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_093005_pve-ai/command.sh /opt/router-ops/runs/20260705_093005_pve-ai/command.sh.sanitize.5674 /opt/router-ops/runs/20260705_093005_pve-ai/report.md /opt/router-ops/runs/20260705_093005_pve-ai/report.md.sanitize.5674 /opt/router-ops/runs/20260705_093005_pve-ai/stderr.log /opt/router-ops/runs/20260705_093005_pve-ai/stderr.log.sanitize.5674 /opt/router-ops/runs/20260705_093005_pve-ai/stderr.raw.log /opt/router-ops/runs/20260705_093005_pve-ai/stderr.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_093005_pve-ai/stdout.log /opt/router-ops/runs/20260705_093005_pve-ai/stdout.log.sanitize.5674 /opt/router-ops/runs/20260705_093005_pve-ai/stdout.raw.log /opt/router-ops/runs/20260705_093005_pve-ai/stdout.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_093010_vm120/command.sh /opt/router-ops/runs/20260705_093010_vm120/command.sh.sanitize.5674 /opt/router-ops/runs/20260705_093010_vm120/report.md /opt/router-ops/runs/20260705_093010_vm120/report.md.sanitize.5674 /opt/router-ops/runs/20260705_093010_vm120/stderr.log /opt/router-ops/runs/20260705_093010_vm120/stderr.log.sanitize.5674 /opt/router-ops/runs/20260705_093010_vm120/stderr.raw.log /opt/router-ops/runs/20260705_093010_vm120/stderr.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_093010_vm120/stdout.log /opt/router-ops/runs/20260705_093010_vm120/stdout.log.sanitize.5674 /opt/router-ops/runs/20260705_093010_vm120/stdout.raw.log /opt/router-ops/runs/20260705_093010_vm120/stdout.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_093215_pve-ai/command.sh /opt/router-ops/runs/20260705_093215_pve-ai/command.sh.sanitize.5674 /opt/router-ops/runs/20260705_093215_pve-ai/report.md /opt/router-ops/runs/20260705_093215_pve-ai/report.md.sanitize.5674 /opt/router-ops/runs/20260705_093215_pve-ai/stderr.log /opt/router-ops/runs/20260705_093215_pve-ai/stderr.log.sanitize.5674 /opt/router-ops/runs/20260705_093215_pve-ai/stderr.raw.log /opt/router-ops/runs/20260705_093215_pve-ai/stderr.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_093215_pve-ai/stdout.log /opt/router-ops/runs/20260705_093215_pve-ai/stdout.log.sanitize.5674 /opt/router-ops/runs/20260705_093215_pve-ai/stdout.raw.log /opt/router-ops/runs/20260705_093215_pve-ai/stdout.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_093308_pve-ai/command.sh /opt/router-ops/runs/20260705_093308_pve-ai/command.sh.sanitize.5674 /opt/router-ops/runs/20260705_093308_pve-ai/report.md /opt/router-ops/runs/20260705_093308_pve-ai/report.md.sanitize.5674 /opt/router-ops/runs/20260705_093308_pve-ai/stderr.log /opt/router-ops/runs/20260705_093308_pve-ai/stderr.log.sanitize.5674 /opt/router-ops/runs/20260705_093308_pve-ai/stderr.raw.log /opt/router-ops/runs/20260705_093308_pve-ai/stderr.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_093308_pve-ai/stdout.log /opt/router-ops/runs/20260705_093308_pve-ai/stdout.log.sanitize.5674 /opt/router-ops/runs/20260705_093308_pve-ai/stdout.raw.log /opt/router-ops/runs/20260705_093308_pve-ai/stdout.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_093404_vm121/command.sh /opt/router-ops/runs/20260705_093404_vm121/command.sh.sanitize.5674 /opt/router-ops/runs/20260705_093404_vm121/report.md /opt/router-ops/runs/20260705_093404_vm121/report.md.sanitize.5674 /opt/router-ops/runs/20260705_093404_vm121/stderr.log /opt/router-ops/runs/20260705_093404_vm121/stderr.log.sanitize.5674 /opt/router-ops/runs/20260705_093404_vm121/stderr.raw.log /opt/router-ops/runs/20260705_093404_vm121/stderr.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_093404_vm121/stdout.log /opt/router-ops/runs/20260705_093404_vm121/stdout.log.sanitize.5674 /opt/router-ops/runs/20260705_093404_vm121/stdout.raw.log /opt/router-ops/runs/20260705_093404_vm121/stdout.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_093513_pve-ai/command.sh /opt/router-ops/runs/20260705_093513_pve-ai/command.sh.sanitize.5674 /opt/router-ops/runs/20260705_093513_pve-ai/report.md /opt/router-ops/runs/20260705_093513_pve-ai/report.md.sanitize.5674 /opt/router-ops/runs/20260705_093513_pve-ai/stderr.log /opt/router-ops/runs/20260705_093513_pve-ai/stderr.log.sanitize.5674 /opt/router-ops/runs/20260705_093513_pve-ai/stderr.raw.log /opt/router-ops/runs/20260705_093513_pve-ai/stderr.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_093513_pve-ai/stdout.log /opt/router-ops/runs/20260705_093513_pve-ai/stdout.log.sanitize.5674 /opt/router-ops/runs/20260705_093513_pve-ai/stdout.raw.log /opt/router-ops/runs/20260705_093513_pve-ai/stdout.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_093545_vm121/command.sh /opt/router-ops/runs/20260705_093545_vm121/command.sh.sanitize.5674 /opt/router-ops/runs/20260705_093545_vm121/report.md /opt/router-ops/runs/20260705_093545_vm121/report.md.sanitize.5674 /opt/router-ops/runs/20260705_093545_vm121/stderr.log /opt/router-ops/runs/20260705_093545_vm121/stderr.log.sanitize.5674 /opt/router-ops/runs/20260705_093545_vm121/stderr.raw.log /opt/router-ops/runs/20260705_093545_vm121/stderr.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_093545_vm121/stdout.log /opt/router-ops/runs/20260705_093545_vm121/stdout.log.sanitize.5674 /opt/router-ops/runs/20260705_093545_vm121/stdout.raw.log /opt/router-ops/runs/20260705_093545_vm121/stdout.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_093546_vm121/command.sh /opt/router-ops/runs/20260705_093546_vm121/command.sh.sanitize.5674 /opt/router-ops/runs/20260705_093546_vm121/report.md /opt/router-ops/runs/20260705_093546_vm121/report.md.sanitize.5674 /opt/router-ops/runs/20260705_093546_vm121/stderr.log /opt/router-ops/runs/20260705_093546_vm121/stderr.log.sanitize.5674 /opt/router-ops/runs/20260705_093546_vm121/stderr.raw.log /opt/router-ops/runs/20260705_093546_vm121/stderr.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_093546_vm121/stdout.log /opt/router-ops/runs/20260705_093546_vm121/stdout.log.sanitize.5674 /opt/router-ops/runs/20260705_093546_vm121/stdout.raw.log /opt/router-ops/runs/20260705_093546_vm121/stdout.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_093558_pve-ai/command.sh /opt/router-ops/runs/20260705_093558_pve-ai/command.sh.sanitize.5674 /opt/router-ops/runs/20260705_093558_pve-ai/report.md /opt/router-ops/runs/20260705_093558_pve-ai/report.md.sanitize.5674 /opt/router-ops/runs/20260705_093558_pve-ai/stderr.log /opt/router-ops/runs/20260705_093558_pve-ai/stderr.log.sanitize.5674 /opt/router-ops/runs/20260705_093558_pve-ai/stderr.raw.log /opt/router-ops/runs/20260705_093558_pve-ai/stderr.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_093558_pve-ai/stdout.log /opt/router-ops/runs/20260705_093558_pve-ai/stdout.log.sanitize.5674 /opt/router-ops/runs/20260705_093558_pve-ai/stdout.raw.log /opt/router-ops/runs/20260705_093558_pve-ai/stdout.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_093559_vm121/command.sh /opt/router-ops/runs/20260705_093559_vm121/command.sh.sanitize.5674 /opt/router-ops/runs/20260705_093559_vm121/report.md /opt/router-ops/runs/20260705_093559_vm121/report.md.sanitize.5674 /opt/router-ops/runs/20260705_093559_vm121/stderr.log /opt/router-ops/runs/20260705_093559_vm121/stderr.log.sanitize.5674 /opt/router-ops/runs/20260705_093559_vm121/stderr.raw.log /opt/router-ops/runs/20260705_093559_vm121/stderr.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_093559_vm121/stdout.log /opt/router-ops/runs/20260705_093559_vm121/stdout.log.sanitize.5674 /opt/router-ops/runs/20260705_093559_vm121/stdout.raw.log /opt/router-ops/runs/20260705_093559_vm121/stdout.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_093731_vm121/command.sh /opt/router-ops/runs/20260705_093731_vm121/command.sh.sanitize.5674 /opt/router-ops/runs/20260705_093731_vm121/report.md /opt/router-ops/runs/20260705_093731_vm121/report.md.sanitize.5674 /opt/router-ops/runs/20260705_093731_vm121/stderr.log /opt/router-ops/runs/20260705_093731_vm121/stderr.log.sanitize.5674 /opt/router-ops/runs/20260705_093731_vm121/stderr.raw.log /opt/router-ops/runs/20260705_093731_vm121/stderr.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_093731_vm121/stdout.log /opt/router-ops/runs/20260705_093731_vm121/stdout.log.sanitize.5674 /opt/router-ops/runs/20260705_093731_vm121/stdout.raw.log /opt/router-ops/runs/20260705_093731_vm121/stdout.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_093838_vm121/command.sh /opt/router-ops/runs/20260705_093838_vm121/command.sh.sanitize.5674 /opt/router-ops/runs/20260705_093838_vm121/report.md /opt/router-ops/runs/20260705_093838_vm121/report.md.sanitize.5674 /opt/router-ops/runs/20260705_093838_vm121/stderr.log /opt/router-ops/runs/20260705_093838_vm121/stderr.log.sanitize.5674 /opt/router-ops/runs/20260705_093838_vm121/stderr.raw.log /opt/router-ops/runs/20260705_093838_vm121/stderr.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_093838_vm121/stdout.log /opt/router-ops/runs/20260705_093838_vm121/stdout.log.sanitize.5674 /opt/router-ops/runs/20260705_093838_vm121/stdout.raw.log /opt/router-ops/runs/20260705_093838_vm121/stdout.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_093922_pve-ai/command.sh /opt/router-ops/runs/20260705_093922_pve-ai/command.sh.sanitize.5674 /opt/router-ops/runs/20260705_093922_pve-ai/report.md /opt/router-ops/runs/20260705_093922_pve-ai/report.md.sanitize.5674 /opt/router-ops/runs/20260705_093922_pve-ai/stderr.log /opt/router-ops/runs/20260705_093922_pve-ai/stderr.log.sanitize.5674 /opt/router-ops/runs/20260705_093922_pve-ai/stderr.raw.log /opt/router-ops/runs/20260705_093922_pve-ai/stderr.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_093922_pve-ai/stdout.log /opt/router-ops/runs/20260705_093922_pve-ai/stdout.log.sanitize.5674 /opt/router-ops/runs/20260705_093922_pve-ai/stdout.raw.log /opt/router-ops/runs/20260705_093922_pve-ai/stdout.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_093953_pve-ai/command.sh /opt/router-ops/runs/20260705_093953_pve-ai/command.sh.sanitize.5674 /opt/router-ops/runs/20260705_093953_pve-ai/report.md /opt/router-ops/runs/20260705_093953_pve-ai/report.md.sanitize.5674 /opt/router-ops/runs/20260705_093953_pve-ai/stderr.log /opt/router-ops/runs/20260705_093953_pve-ai/stderr.log.sanitize.5674 /opt/router-ops/runs/20260705_093953_pve-ai/stderr.raw.log /opt/router-ops/runs/20260705_093953_pve-ai/stderr.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_093953_pve-ai/stdout.log /opt/router-ops/runs/20260705_093953_pve-ai/stdout.log.sanitize.5674 /opt/router-ops/runs/20260705_093953_pve-ai/stdout.raw.log /opt/router-ops/runs/20260705_093953_pve-ai/stdout.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_094058_pve-ai/command.sh /opt/router-ops/runs/20260705_094058_pve-ai/command.sh.sanitize.5674 /opt/router-ops/runs/20260705_094058_pve-ai/report.md /opt/router-ops/runs/20260705_094058_pve-ai/report.md.sanitize.5674 /opt/router-ops/runs/20260705_094058_pve-ai/stderr.log /opt/router-ops/runs/20260705_094058_pve-ai/stderr.log.sanitize.5674 /opt/router-ops/runs/20260705_094058_pve-ai/stderr.raw.log /opt/router-ops/runs/20260705_094058_pve-ai/stderr.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_094058_pve-ai/stdout.log /opt/router-ops/runs/20260705_094058_pve-ai/stdout.log.sanitize.5674 /opt/router-ops/runs/20260705_094058_pve-ai/stdout.raw.log /opt/router-ops/runs/20260705_094058_pve-ai/stdout.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_094100_pve-ai/command.sh /opt/router-ops/runs/20260705_094100_pve-ai/command.sh.sanitize.5674 /opt/router-ops/runs/20260705_094100_pve-ai/report.md /opt/router-ops/runs/20260705_094100_pve-ai/report.md.sanitize.5674 /opt/router-ops/runs/20260705_094100_pve-ai/stderr.log /opt/router-ops/runs/20260705_094100_pve-ai/stderr.log.sanitize.5674 /opt/router-ops/runs/20260705_094100_pve-ai/stderr.raw.log /opt/router-ops/runs/20260705_094100_pve-ai/stderr.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_094100_pve-ai/stdout.log /opt/router-ops/runs/20260705_094100_pve-ai/stdout.log.sanitize.5674 /opt/router-ops/runs/20260705_094100_pve-ai/stdout.raw.log /opt/router-ops/runs/20260705_094100_pve-ai/stdout.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_094101_vm121/command.sh /opt/router-ops/runs/20260705_094101_vm121/command.sh.sanitize.5674 /opt/router-ops/runs/20260705_094101_vm121/report.md /opt/router-ops/runs/20260705_094101_vm121/report.md.sanitize.5674 /opt/router-ops/runs/20260705_094101_vm121/stderr.log /opt/router-ops/runs/20260705_094101_vm121/stderr.log.sanitize.5674 /opt/router-ops/runs/20260705_094101_vm121/stderr.raw.log /opt/router-ops/runs/20260705_094101_vm121/stderr.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_094101_vm121/stdout.log /opt/router-ops/runs/20260705_094101_vm121/stdout.log.sanitize.5674 /opt/router-ops/runs/20260705_094101_vm121/stdout.raw.log /opt/router-ops/runs/20260705_094101_vm121/stdout.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_094107_pve-ai/command.sh /opt/router-ops/runs/20260705_094107_pve-ai/command.sh.sanitize.5674 /opt/router-ops/runs/20260705_094107_pve-ai/report.md /opt/router-ops/runs/20260705_094107_pve-ai/report.md.sanitize.5674 /opt/router-ops/runs/20260705_094107_pve-ai/stderr.log /opt/router-ops/runs/20260705_094107_pve-ai/stderr.log.sanitize.5674 /opt/router-ops/runs/20260705_094107_pve-ai/stderr.raw.log /opt/router-ops/runs/20260705_094107_pve-ai/stderr.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_094107_pve-ai/stdout.log /opt/router-ops/runs/20260705_094107_pve-ai/stdout.log.sanitize.5674 /opt/router-ops/runs/20260705_094107_pve-ai/stdout.raw.log /opt/router-ops/runs/20260705_094107_pve-ai/stdout.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_094114_pve-ai/command.sh /opt/router-ops/runs/20260705_094114_pve-ai/command.sh.sanitize.5674 /opt/router-ops/runs/20260705_094114_pve-ai/report.md /opt/router-ops/runs/20260705_094114_pve-ai/report.md.sanitize.5674 /opt/router-ops/runs/20260705_094114_pve-ai/stderr.log /opt/router-ops/runs/20260705_094114_pve-ai/stderr.log.sanitize.5674 /opt/router-ops/runs/20260705_094114_pve-ai/stderr.raw.log /opt/router-ops/runs/20260705_094114_pve-ai/stderr.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_094114_pve-ai/stdout.log /opt/router-ops/runs/20260705_094114_pve-ai/stdout.log.sanitize.5674 /opt/router-ops/runs/20260705_094114_pve-ai/stdout.raw.log /opt/router-ops/runs/20260705_094114_pve-ai/stdout.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_094218_pve-ai/command.sh /opt/router-ops/runs/20260705_094218_pve-ai/command.sh.sanitize.5674 /opt/router-ops/runs/20260705_094218_pve-ai/report.md /opt/router-ops/runs/20260705_094218_pve-ai/report.md.sanitize.5674 /opt/router-ops/runs/20260705_094218_pve-ai/stderr.log /opt/router-ops/runs/20260705_094218_pve-ai/stderr.log.sanitize.5674 /opt/router-ops/runs/20260705_094218_pve-ai/stderr.raw.log /opt/router-ops/runs/20260705_094218_pve-ai/stderr.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_094218_pve-ai/stdout.log /opt/router-ops/runs/20260705_094218_pve-ai/stdout.log.sanitize.5674 /opt/router-ops/runs/20260705_094218_pve-ai/stdout.raw.log /opt/router-ops/runs/20260705_094218_pve-ai/stdout.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_094220_vm121/command.sh /opt/router-ops/runs/20260705_094220_vm121/command.sh.sanitize.5674 /opt/router-ops/runs/20260705_094220_vm121/report.md /opt/router-ops/runs/20260705_094220_vm121/report.md.sanitize.5674 /opt/router-ops/runs/20260705_094220_vm121/stderr.log /opt/router-ops/runs/20260705_094220_vm121/stderr.log.sanitize.5674 /opt/router-ops/runs/20260705_094220_vm121/stderr.raw.log /opt/router-ops/runs/20260705_094220_vm121/stderr.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_094220_vm121/stdout.log /opt/router-ops/runs/20260705_094220_vm121/stdout.log.sanitize.5674 /opt/router-ops/runs/20260705_094220_vm121/stdout.raw.log /opt/router-ops/runs/20260705_094220_vm121/stdout.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_094221_pve-ai/command.sh /opt/router-ops/runs/20260705_094221_pve-ai/command.sh.sanitize.5674 /opt/router-ops/runs/20260705_094221_pve-ai/report.md /opt/router-ops/runs/20260705_094221_pve-ai/report.md.sanitize.5674 /opt/router-ops/runs/20260705_094221_pve-ai/stderr.log /opt/router-ops/runs/20260705_094221_pve-ai/stderr.log.sanitize.5674 /opt/router-ops/runs/20260705_094221_pve-ai/stderr.raw.log /opt/router-ops/runs/20260705_094221_pve-ai/stderr.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_094221_pve-ai/stdout.log /opt/router-ops/runs/20260705_094221_pve-ai/stdout.log.sanitize.5674 /opt/router-ops/runs/20260705_094221_pve-ai/stdout.raw.log /opt/router-ops/runs/20260705_094221_pve-ai/stdout.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_094335_pve-ai/command.sh /opt/router-ops/runs/20260705_094335_pve-ai/command.sh.sanitize.5674 /opt/router-ops/runs/20260705_094335_pve-ai/report.md /opt/router-ops/runs/20260705_094335_pve-ai/report.md.sanitize.5674 /opt/router-ops/runs/20260705_094335_pve-ai/stderr.log /opt/router-ops/runs/20260705_094335_pve-ai/stderr.log.sanitize.5674 /opt/router-ops/runs/20260705_094335_pve-ai/stderr.raw.log /opt/router-ops/runs/20260705_094335_pve-ai/stderr.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_094335_pve-ai/stdout.log /opt/router-ops/runs/20260705_094335_pve-ai/stdout.log.sanitize.5674 /opt/router-ops/runs/20260705_094335_pve-ai/stdout.raw.log /opt/router-ops/runs/20260705_094335_pve-ai/stdout.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_094337_vm121/command.sh /opt/router-ops/runs/20260705_094337_vm121/command.sh.sanitize.5674 /opt/router-ops/runs/20260705_094337_vm121/report.md /opt/router-ops/runs/20260705_094337_vm121/report.md.sanitize.5674 /opt/router-ops/runs/20260705_094337_vm121/stderr.log /opt/router-ops/runs/20260705_094337_vm121/stderr.log.sanitize.5674 /opt/router-ops/runs/20260705_094337_vm121/stderr.raw.log /opt/router-ops/runs/20260705_094337_vm121/stderr.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_094337_vm121/stdout.log /opt/router-ops/runs/20260705_094337_vm121/stdout.log.sanitize.5674 /opt/router-ops/runs/20260705_094337_vm121/stdout.raw.log /opt/router-ops/runs/20260705_094337_vm121/stdout.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_094338_vm121/command.sh /opt/router-ops/runs/20260705_094338_vm121/command.sh.sanitize.5674 /opt/router-ops/runs/20260705_094338_vm121/report.md /opt/router-ops/runs/20260705_094338_vm121/report.md.sanitize.5674 /opt/router-ops/runs/20260705_094338_vm121/stderr.log /opt/router-ops/runs/20260705_094338_vm121/stderr.log.sanitize.5674 /opt/router-ops/runs/20260705_094338_vm121/stderr.raw.log /opt/router-ops/runs/20260705_094338_vm121/stderr.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_094338_vm121/stdout.log /opt/router-ops/runs/20260705_094338_vm121/stdout.log.sanitize.5674 /opt/router-ops/runs/20260705_094338_vm121/stdout.raw.log /opt/router-ops/runs/20260705_094338_vm121/stdout.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_094339_pve-ai/command.sh /opt/router-ops/runs/20260705_094339_pve-ai/command.sh.sanitize.5674 /opt/router-ops/runs/20260705_094339_pve-ai/report.md /opt/router-ops/runs/20260705_094339_pve-ai/report.md.sanitize.5674 /opt/router-ops/runs/20260705_094339_pve-ai/stderr.log /opt/router-ops/runs/20260705_094339_pve-ai/stderr.log.sanitize.5674 /opt/router-ops/runs/20260705_094339_pve-ai/stderr.raw.log /opt/router-ops/runs/20260705_094339_pve-ai/stderr.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_094339_pve-ai/stdout.log /opt/router-ops/runs/20260705_094339_pve-ai/stdout.log.sanitize.5674 /opt/router-ops/runs/20260705_094339_pve-ai/stdout.raw.log /opt/router-ops/runs/20260705_094339_pve-ai/stdout.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_094605_vm100/command.sh /opt/router-ops/runs/20260705_094605_vm100/command.sh.sanitize.5674 /opt/router-ops/runs/20260705_094605_vm100/report.md /opt/router-ops/runs/20260705_094605_vm100/report.md.sanitize.5674 /opt/router-ops/runs/20260705_094605_vm100/stderr.log /opt/router-ops/runs/20260705_094605_vm100/stderr.log.sanitize.5674 /opt/router-ops/runs/20260705_094605_vm100/stderr.raw.log /opt/router-ops/runs/20260705_094605_vm100/stderr.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_094605_vm100/stdout.log /opt/router-ops/runs/20260705_094605_vm100/stdout.log.sanitize.5674 /opt/router-ops/runs/20260705_094605_vm100/stdout.raw.log /opt/router-ops/runs/20260705_094605_vm100/stdout.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_094617_vm121/command.sh /opt/router-ops/runs/20260705_094617_vm121/command.sh.sanitize.5674 /opt/router-ops/runs/20260705_094617_vm121/report.md /opt/router-ops/runs/20260705_094617_vm121/report.md.sanitize.5674 /opt/router-ops/runs/20260705_094617_vm121/stderr.log /opt/router-ops/runs/20260705_094617_vm121/stderr.log.sanitize.5674 /opt/router-ops/runs/20260705_094617_vm121/stderr.raw.log /opt/router-ops/runs/20260705_094617_vm121/stderr.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_094617_vm121/stdout.log /opt/router-ops/runs/20260705_094617_vm121/stdout.log.sanitize.5674 /opt/router-ops/runs/20260705_094617_vm121/stdout.raw.log /opt/router-ops/runs/20260705_094617_vm121/stdout.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_094756_vm121/command.sh /opt/router-ops/runs/20260705_094756_vm121/command.sh.sanitize.5674 /opt/router-ops/runs/20260705_094756_vm121/report.md /opt/router-ops/runs/20260705_094756_vm121/report.md.sanitize.5674 /opt/router-ops/runs/20260705_094756_vm121/stderr.log /opt/router-ops/runs/20260705_094756_vm121/stderr.log.sanitize.5674 /opt/router-ops/runs/20260705_094756_vm121/stderr.raw.log /opt/router-ops/runs/20260705_094756_vm121/stderr.raw.log.sanitize.5674 /opt/router-ops/runs/20260705_094756_vm121/stdout.log /opt/router-ops/runs/20260705_094756_vm121/stdout.log.sanitize.5674 /opt/router-ops/runs/20260705_094756_vm121/stdout.raw.log rc=0 ################################################################ ### pve_qm_list ################################################################ ===== pve_qm_list ===== CMD: remote_pve qm list VMID NAME STATUS MEM(MB) BOOTDISK(GB) PID 100 VM100-OpenWRT-core running 384 0.12 989 101 VM101-OpenWRT-edge running 512 0.12 1160 105 VM105-control-panel running 1024 8.00 1442 rc=0 ################################################################ ### pve_bridges ################################################################ ===== pve_bridges ===== CMD: remote_pve ip -br addr; echo; ip route; echo; bridge link lo UNKNOWN 127.0.0.1/8 ::1/128 enp1s0 UP vmbr0 UP fe80::9e6b:ff:fe9f:5174/64 vmbr1 UP 10.71.100.222/24 fe80::ecb3:4eff:fec9:55d8/64 vmbr2 UNKNOWN 192.168.99.1/24 fe80::34e2:e0ff:fe3c:cc72/64 vmbr3 UP fe80::b042:d7ff:fec8:42f2/64 vmbr4 UP fe80::9c89:39ff:fe64:e310/64 tap100i0 UNKNOWN tap100i1 UNKNOWN tap100i2 UNKNOWN tap101i0 UNKNOWN tap101i1 UNKNOWN tap101i2 UNKNOWN tap101i3 UNKNOWN tap105i0 UNKNOWN 10.71.100.0/24 dev vmbr1 proto kernel scope link src 10.71.100.222 10.250.100.0/24 via 10.71.100.1 dev vmbr1 192.168.99.0/24 dev vmbr2 proto kernel scope link src 192.168.99.1 2: enp1s0: mtu 1500 master vmbr0 state forwarding priority 32 cost 5 8: tap100i0: mtu 1500 master vmbr4 state forwarding priority 32 cost 2 9: tap100i1: mtu 1500 master vmbr1 state forwarding priority 32 cost 2 10: tap100i2: mtu 1500 master vmbr3 state forwarding priority 32 cost 2 11: tap101i0: mtu 1500 master vmbr0 state forwarding priority 32 cost 2 12: tap101i1: mtu 1500 master vmbr3 state forwarding priority 32 cost 2 13: tap101i2: mtu 1500 master vmbr1 state forwarding priority 32 cost 2 14: tap101i3: mtu 1500 master vmbr4 state forwarding priority 32 cost 2 15: tap105i0: mtu 1500 master vmbr1 state forwarding priority 32 cost 2 rc=0 ################################################################ ### pve_vm100_config ################################################################ ===== pve_vm100_config ===== CMD: remote_pve qm config 100 balloon: 0 boot: order=sata1;ide2 cores: 1 cpu: host ide2: none,media=cdrom memory: 384 meta: creation-qemu=9.2.0,ctime=1776512477 name: VM100-OpenWRT-core net0: virtio=BC:24:11:94:BB:FB,bridge=vmbr4 net1: virtio=BC:24:11:EE:7D:14,bridge=vmbr1 net2: virtio=BC:24:11:E4:6C:FB,bridge=vmbr3 numa: 0 onboot: 1 ostype: l26 parent: STEP_028A_MGTS_WG_PAID_E2E_OK sata1: local-lvm:vm-100-disk-0,size=124M scsihw: virtio-scsi-single serial0: socket smbios1: uuid=6fe17b3c-a483-4b78-95a3-c81dcd294b0d sockets: 1 startup: order=10,up=30,down=30 vga: std vmgenid: 36d8edab-613d-4d5e-98f8-7056648fedac rc=0 ################################################################ ### pve_vm101_config ################################################################ ===== pve_vm101_config ===== CMD: remote_pve qm config 101 balloon: 0 boot: order=sata1;ide2;net0 cores: 1 cpu: host ide2: none,media=cdrom memory: 512 meta: creation-qemu=9.2.0,ctime=1776512477 name: VM101-OpenWRT-edge net0: virtio=BC:24:11:42:83:CF,bridge=vmbr0 net1: virtio=BC:24:11:09:4E:2C,bridge=vmbr3 net2: virtio=BC:24:11:4D:7A:71,bridge=vmbr1 net3: virtio=BC:24:11:C8:2E:E1,bridge=vmbr4 numa: 0 onboot: 1 ostype: l26 parent: S031A_PRE_APPLY_20260708-102627 sata1: local-lvm:vm-101-disk-0,size=124M scsihw: virtio-scsi-single serial0: socket smbios1: uuid=c9945a37-f6e0-4c5e-b891-6ea7359a6a1c sockets: 1 startup: order=20,up=60,down=30 vga: std vmgenid: 729bc06e-d108-421f-b565-7c61d17aaefa rc=0 ################################################################ ### pve_snapshots_100 ################################################################ ===== pve_snapshots_100 ===== CMD: remote_pve qm listsnapshot 100 || true `-> MGTS_RESTORED_BEFORE_FIRST_BOOT 2026-07-06 12:28:36 pve-wg-paid: VM100 restored from golden, before first boot `-> MGTS_INTERNAL_LAN_RENUMBERED_OK 2026-07-06 12:52:29 pve-wg-paid: VM100 LAN renumbered to 10.71.100.1, wg_remote 10.250.100.1 `-> MGTS_VM100_WG_REMOTE_ROTATED_OK 2026-07-06 13:04:15 pve-wg-paid: VM100 wg_remote keys rotated for 10.250.100.0/24; client configs stored on VM100 `-> MGTS_VM100_ROUTER_OPS_WG_PEER_OK 2026-07-06 14:08:27 pve-wg-paid: VM100 wg_remote has router-ops-mgts peer 10.250.100.4/32; management path via WG `-> MGTS_VM100_BEFORE_WG_PAID_CREATE 2026-07-06 17:37:41 Before creating wg_paid on MGTS VM100 for WG Paid migration `-> MGTS_VM100_WG_PAID_BASE_OK 2026-07-06 17:47:21 MGTS VM100: wg_paid created; 10.253.1.1/16; UDP 51830; firewall wg_paid; live wg set dummy peer add/remove OK `-> STEP_004B_WG_PAID_CLIENT_PATH_OK 2026-07-06 18:33:19 MGTS VM100: wg_paid live client smoke OK; client can reach 10.253.1.1 and internet via VM101 `-> STEP_004C_ACCESS_MAP_VM121_DIRECT_OK 2026-07-06 18:43:30 MGTS VM100: VM121 direct wg-mgts admin access documented in access-map `-> STEP_005_MGTS_EGRESS_PANEL_OK 2026-07-06 20:52:45 MGTS/WG Paid: VM100 PBR fixed; VM101 egress OK; vpn_user manual mode smoke OK; VM105 control panel identified; deferred UI/cleanup tasks recorded `-> STEP_028A_MGTS_WG_PAID_E2E_OK 2026-07-06 22:01:22 MGTS VM100: wg_paid target E2E smoke OK; peer lifecycle via agent OK; PBR direct/vpn route decision OK; final test peer removed `-> current You are here! rc=0 ################################################################ ### pve_snapshots_101 ################################################################ ===== pve_snapshots_101 ===== CMD: remote_pve qm listsnapshot 101 || true `-> MGTS_RESTORED_BEFORE_FIRST_BOOT 2026-07-06 12:28:37 pve-wg-paid: VM101 restored from patched 91101, WAN link_down, before first boot `-> MGTS_INTERNAL_LAN_RENUMBERED_OK 2026-07-06 12:52:30 pve-wg-paid: VM101 mgmt renumbered to 10.71.100.2, route to 10.250.100.0 via VM100, WAN link_down `-> MGTS_VM101_CURRENT_20260702_OK 2026-07-06 13:01:44 pve-wg-paid: VM101 current backend 20260702 applied: vpn_user base, override backend, revive script; WAN still link_down `-> MGTS_BEFORE_WG_REMOTE_DNAT 2026-07-06 13:15:47 pve-wg-paid: before VM101 DNAT UDP 51820 to VM100 wg_remote `-> MGTS_VM101_WAN_DHCP_WG_REMOTE_DNAT_OK 2026-07-06 13:31:39 pve-wg-paid: VM101 WAN DHCP enabled, UDP 51820 DNAT to VM100 wg_remote; WG remote tested `-> MGTS_VM101_BEFORE_WG_PAID_DNAT_51830 2026-07-06 17:37:42 Before adding UDP 51830 DNAT to MGTS VM100 wg_paid `-> MGTS_VM101_WG_PAID_DNAT_51830_OK 2026-07-06 17:47:22 MGTS VM101: DNAT UDP 51830 to MGTS VM100 10.71.100.1:51830 `-> STEP_004B_WG_PAID_CLIENT_PATH_OK 2026-07-06 18:33:20 MGTS VM101: current direct egress OK for wg_paid smoke; before installing paid HideMyName key `-> STEP_004C_ACCESS_MAP_VM121_DIRECT_OK 2026-07-06 18:43:31 MGTS VM101: VM121 direct wg-mgts admin access documented in access-map `-> STEP_005_MGTS_EGRESS_PANEL_OK 2026-07-06 20:52:47 MGTS/WG Paid: VM100 PBR fixed; VM101 egress OK; vpn_user manual mode smoke OK; VM105 control panel identified; deferred UI/cleanup tasks recorded `-> STEP_028A_MGTS_WG_PAID_E2E_OK 2026-07-06 22:01:24 MGTS VM101: edge/DNAT side preserved after wg_paid MGTS E2E smoke; UDP 51830 DNAT path configured `-> S029A_EGRESS_PRE_20260708-082358 2026-07-08 11:23:58 VM101 before in-place egress rework; keep WAN/DNAT untouched `-> S031A_PRE_APPLY_20260708-102627 2026-07-08 13:26:30 VM101 before first egress apply/deploy; preserve WAN/DNAT/VM100 `-> current You are here! rc=0 ################################################################ ### vm100_basic ################################################################ ===== vm100_basic ===== CMD: remote_vm100 date; uptime; ip -br addr; echo; ip route; echo; ip rule Wed Jul 8 10:34:56 UTC 2026 10:34:56 up 17:57, load average: 0.00, 0.00, 0.00 lo UNKNOWN 127.0.0.1/8 ::1/128 eth0 UP 10.201.0.1/24 fe80::be24:11ff:fe94:bbfb/64 eth1 UP eth2 UP 10.200.0.1/24 fe80::be24:11ff:fee4:6cfb/64 br-lan UP 10.71.100.1/24 fe80::be24:11ff:feee:7d14/64 wg_paid UNKNOWN 10.253.1.1/16 wg_remote UNKNOWN 10.250.100.1/24 default via 10.201.0.2 dev eth0 proto static metric 10 default via 10.200.0.2 dev eth2 proto static metric 20 10.71.100.0/24 dev br-lan proto kernel scope link src 10.71.100.1 10.200.0.0/24 dev eth2 proto static scope link metric 20 10.201.0.0/24 dev eth0 proto static scope link metric 10 10.250.100.0/24 dev wg_remote proto kernel scope link src 10.250.100.1 10.250.100.2 dev wg_remote proto static scope link 10.250.100.3 dev wg_remote proto static scope link 10.250.100.4 dev wg_remote proto static scope link 10.250.100.121 dev wg_remote proto static scope link 10.253.0.0/16 dev wg_paid proto kernel scope link src 10.253.1.1 0: from all lookup local 29996: from all lookup main suppress_prefixlength 1 29997: from all sport 51830 lookup pbr_transit_direct 29998: from all sport 51820 lookup pbr_transit_direct 29999: from all fwmark 0x20000/0xff0000 lookup pbr_transit_vpn 30000: from all fwmark 0x10000/0xff0000 lookup pbr_transit_direct 32766: from all lookup main 32767: from all lookup default rc=0 ################################################################ ### vm100_uci_network ################################################################ ===== vm100_uci_network ===== CMD: remote_vm100 uci show network network.loopback=interface network.loopback.device='lo' network.loopback.proto='static' network.loopback.ipaddr='127.0.0.1' network.loopback.netmask='255.0.0.0' network.globals=globals network.globals.packet_steering='1' network.@device[0]=device network.@device[0].name='br-lan' network.@device[0].type='bridge' network.@device[0].ports='eth1' network.lan=interface network.lan.device='br-lan' network.lan.proto='static' network.lan.ipaddr='10.71.100.1' network.lan.netmask='255.255.255.0' network.device=eth2 network.proto=static network.ipaddr=10.200.0.1 network.transit_direct=interface network.transit_direct.proto='static' network.transit_direct.device='eth0' network.transit_direct.ipaddr='10.201.0.1/24' network.transit_direct.gateway='10.201.0.2' network.transit_direct.dns='10.201.0.2' network.transit_direct.metric='10' network.transit_vpn=interface network.transit_vpn.proto='static' network.transit_vpn.device='eth2' network.transit_vpn.ipaddr='10.200.0.1' network.transit_vpn.netmask='255.255.255.0' network.transit_vpn.gateway='10.200.0.2' network.transit_vpn.metric='20' network.wg_remote=interface network.wg_remote.proto='wireguard' network.wg_remote.private_key= network.wg_remote.listen_port='51820' network.wg_remote.addresses='10.250.100.1/24' network.@wireguard_wg_remote[0]=wireguard_wg_remote network.@wireguard_wg_remote[0].description='support-mgts' network.@wireguard_wg_remote[0].public_key='b4BGigyYOJB9LKd6uhCbW6LZldKs712SAI2Z0Qlat1A=' network.@wireguard_wg_remote[0].private_key= network.@wireguard_wg_remote[0].allowed_ips='10.250.100.2/32' network.@wireguard_wg_remote[0].route_allowed_ips='1' network.@wireguard_wg_remote[1]=wireguard_wg_remote network.@wireguard_wg_remote[1].description='owner-mgts' network.@wireguard_wg_remote[1].public_key='WqYFbdEvf4h4pMbtOswWyBt78Dp3NkGbjVhQiTPypGk=' network.@wireguard_wg_remote[1].private_key= network.@wireguard_wg_remote[1].allowed_ips='10.250.100.3/32' network.@wireguard_wg_remote[1].route_allowed_ips='1' network.@wireguard_wg_remote[2]=wireguard_wg_remote network.@wireguard_wg_remote[2].description='router-ops-mgts' network.@wireguard_wg_remote[2].public_key='d/j8WzjSJW6MpFPCIUthmsj8M3SzxEfwLrLP+fJ9qnI=' network.@wireguard_wg_remote[2].allowed_ips='10.250.100.4/32' network.@wireguard_wg_remote[2].route_allowed_ips='1' network.wg_paid=interface network.wg_paid.proto='wireguard' network.wg_paid.private_key= network.wg_paid.listen_port='51830' network.wg_paid.addresses='10.253.1.1/16' network.@wireguard_wg_remote[3]=wireguard_wg_remote network.@wireguard_wg_remote[3].description='VM121 wg-access-dev direct admin' network.@wireguard_wg_remote[3].public_key='DH9S3NewxZZjIhlshl9saO+5EdXafebWjxSkzNBkZEU=' network.@wireguard_wg_remote[3].allowed_ips='10.250.100.121/32' network.@wireguard_wg_remote[3].route_allowed_ips='1' rc=0 ################################################################ ### vm100_uci_firewall ################################################################ ===== vm100_uci_firewall ===== CMD: remote_vm100 uci show firewall firewall.@defaults[0]=defaults firewall.@defaults[0].input='REJECT' firewall.@defaults[0].output='ACCEPT' firewall.@defaults[0].forward='REJECT' firewall.@defaults[0].synflood_protect='1' firewall.@zone[0]=zone firewall.@zone[0].name='lan' firewall.@zone[0].input='ACCEPT' firewall.@zone[0].output='ACCEPT' firewall.@zone[0].forward='ACCEPT' firewall.@zone[0].network='lan' firewall.@zone[1]=zone firewall.@zone[1].name='transit_direct' firewall.@zone[1].input='ACCEPT' firewall.@zone[1].output='ACCEPT' firewall.@zone[1].forward='REJECT' firewall.@zone[1].network='transit_direct' firewall.@zone[1].masq='1' firewall.@zone[1].mtu_fix='1' firewall.@forwarding[0]=forwarding firewall.@forwarding[0].src='lan' firewall.@forwarding[0].dest='transit_direct' firewall.@zone[2]=zone firewall.@zone[2].name='transit_vpn' firewall.@zone[2].input='ACCEPT' firewall.@zone[2].output='ACCEPT' firewall.@zone[2].forward='REJECT' firewall.@zone[2].masq='1' firewall.@zone[2].mtu_fix='1' firewall.@zone[2].network='transit_vpn' firewall.@forwarding[1]=forwarding firewall.@forwarding[1].src='lan' firewall.@forwarding[1].dest='transit_vpn' firewall.@zone[3]=zone firewall.@zone[3].name='remote_in' firewall.@zone[3].input='ACCEPT' firewall.@zone[3].output='ACCEPT' firewall.@zone[3].forward='ACCEPT' firewall.@zone[3].network='wg_remote' firewall.@forwarding[2]=forwarding firewall.@forwarding[2].src='remote_in' firewall.@forwarding[2].dest='lan' firewall.@forwarding[3]=forwarding firewall.@forwarding[3].src='remote_in' firewall.@forwarding[3].dest='transit_direct' firewall.@forwarding[4]=forwarding firewall.@forwarding[4].src='remote_in' firewall.@forwarding[4].dest='transit_vpn' firewall.@rule[0]=rule firewall.@rule[0].src='transit_direct' firewall.@rule[0].name='Allow-WG-Remote-In' firewall.@rule[0].proto='udp' firewall.@rule[0].dest_ip='10.201.0.1' firewall.@rule[0].dest_port='51820' firewall.@rule[0].target='ACCEPT' firewall.@rule[1]=rule firewall.@rule[1].name='ALLOW_OWNER_DNS_VM100' firewall.@rule[1].family='ipv4' firewall.@rule[1].src='remote_in' firewall.@rule[1].src_ip='10.250.1.3' firewall.@rule[1].proto='tcp udp' firewall.@rule[1].dest_port='53' firewall.@rule[1].target='ACCEPT' firewall.@rule[2]=rule firewall.@rule[2].name='ALLOW_OWNER_WGEASY_UI' firewall.@rule[2].family='ipv4' firewall.@rule[2].src='remote_in' firewall.@rule[2].dest='lan' firewall.@rule[2].src_ip='10.250.1.3' firewall.@rule[2].dest_ip='10.71.1.189' firewall.@rule[2].proto='tcp' firewall.@rule[2].dest_port='51822' firewall.@rule[2].target='ACCEPT' firewall.@rule[3]=rule firewall.@rule[3].name='BLOCK_OWNER_VM100_ROUTER' firewall.@rule[3].family='ipv4' firewall.@rule[3].src='remote_in' firewall.@rule[3].src_ip='10.250.1.3' firewall.@rule[3].proto='all' firewall.@rule[3].target='REJECT' firewall.@rule[4]=rule firewall.@rule[4].name='BLOCK_OWNER_VM101' firewall.@rule[4].family='ipv4' firewall.@rule[4].src='remote_in' firewall.@rule[4].dest='lan' firewall.@rule[4].src_ip='10.250.1.3' firewall.@rule[4].dest_ip='10.71.1.2' firewall.@rule[4].proto='all' firewall.@rule[4].target='REJECT' firewall.@rule[5]=rule firewall.@rule[5].name='BLOCK_OWNER_PROXMOX' firewall.@rule[5].family='ipv4' firewall.@rule[5].src='remote_in' firewall.@rule[5].dest='lan' firewall.@rule[5].src_ip='10.250.1.3' firewall.@rule[5].dest_ip='10.71.1.222' firewall.@rule[5].proto='all' firewall.@rule[5].target='REJECT' firewall.@rule[6]=rule firewall.@rule[6].name='BLOCK_OWNER_VM103_EXCEPT_UI' firewall.@rule[6].family='ipv4' firewall.@rule[6].src='remote_in' firewall.@rule[6].dest='lan' firewall.@rule[6].src_ip='10.250.1.3' firewall.@rule[6].dest_ip='10.71.1.189' firewall.@rule[6].proto='all' firewall.@rule[6].target='REJECT' firewall.wg_paid=zone firewall.wg_paid.name='wg_paid' firewall.wg_paid.input='ACCEPT' firewall.wg_paid.output='ACCEPT' firewall.wg_paid.forward='REJECT' firewall.wg_paid.network='wg_paid' firewall.wg_paid_to_transit_direct=forwarding firewall.wg_paid_to_transit_direct.src='wg_paid' firewall.wg_paid_to_transit_direct.dest='transit_direct' firewall.wg_paid_to_transit_vpn=forwarding firewall.wg_paid_to_transit_vpn.src='wg_paid' firewall.wg_paid_to_transit_vpn.dest='transit_vpn' firewall.allow_wg_paid_51830=rule firewall.allow_wg_paid_51830.name='Allow-WG-Paid-51830' firewall.allow_wg_paid_51830.proto='udp' firewall.allow_wg_paid_51830.dest_port='51830' firewall.allow_wg_paid_51830.target='ACCEPT' rc=0 ################################################################ ### vm100_wg_show ################################################################ ===== vm100_wg_show ===== CMD: remote_vm100 wg show interface: wg_paid public key: FD1J+KVZ965pCjgtO0YWxJsKANY9uz6v1P54JLkiZzY= private key: (hidden) listening port: 51830 interface: wg_remote public key: uTNh8zWnLbORIY2DZeKJMV+ygB+ii69hmDckI/T3h3Y= private key: (hidden) listening port: 51820 peer: d/j8WzjSJW6MpFPCIUthmsj8M3SzxEfwLrLP+fJ9qnI= endpoint: 10.71.100.2:54671 allowed ips: 10.250.100.4/32 latest handshake: 38 seconds ago transfer: 1.90 MiB received, 3.16 MiB sent peer: DH9S3NewxZZjIhlshl9saO+5EdXafebWjxSkzNBkZEU= endpoint: 10.71.100.2:39845 allowed ips: 10.250.100.121/32 latest handshake: 2 minutes, 2 seconds ago transfer: 151.46 KiB received, 41.06 KiB sent peer: WqYFbdEvf4h4pMbtOswWyBt78Dp3NkGbjVhQiTPypGk= allowed ips: 10.250.100.3/32 peer: b4BGigyYOJB9LKd6uhCbW6LZldKs712SAI2Z0Qlat1A= allowed ips: 10.250.100.2/32 rc=0 ################################################################ ### vm100_relevant_files ################################################################ ===== vm100_relevant_files ===== CMD: remote_vm100 find /root /etc /usr/local /opt -maxdepth 4 -type f 2>/dev/null | grep -Ei "wg|paid|vpn|hmn|route|pbr|nft|firewall|status|readme" | sort | sed -n "1,600p" /etc/config/firewall /etc/config/openvpn /etc/config/openvpn_recipes /etc/config/pbr /etc/dropbear/authorized_keys.BEFORE_WG_ACCESS_AGENT_20260706-182517 /etc/hotplug.d/iface/20-firewall /etc/hotplug.d/iface/99-pbr-delayed-restart /etc/hotplug.d/openvpn/01-user /etc/init.d/firewall /etc/init.d/openvpn /etc/init.d/pbr /etc/iproute2/ematch_map /etc/iproute2/rt_protos /etc/iproute2/rt_tables /etc/modules.d/nft-core /etc/modules.d/nft-fib /etc/modules.d/nft-nat /etc/modules.d/nft-offload /etc/nftables.d/10-custom-filter-chains.nft /etc/nftables.d/90-wg-remote-snat-to-pc.nft /etc/nftables.d/README /etc/openvpn.user /etc/pbr.d/default_lan_to_vpn.sh /etc/pbr.d/ru_to_direct.sh /etc/wireguard/wg_paid.key /root/.ssh/authorized_keys.BEFORE_WG_ACCESS_AGENT_20260706-182517 /root/clientize-backup-20260530-180916/firewall /root/clientize-backup-20260530-180916/pbr /root/clientize-backup-20260530-180916/pbr.d/default_lan_to_vpn.sh /root/clientize-backup-20260530-180916/pbr.d/ru_to_direct.sh /root/firewall.before-owner-limits-20260531-112826 /root/fix-vm100-backup-20260530-181204/pbr /root/hmn/backups/dhcp-before-vm105-reservation-20260706-142035 /root/hmn/backups/dhcp-before-vm105-reservation-20260706-142432 /root/mgts-pre-renumber-backup/firewall.20260706_093755 /root/mgts-wg-remote-backup-20260706_100349/network.before-wg-remote-rotate /root/mgts-wg-remote-backup/network.before-router-ops-peer-20260706_104252 /root/mgts-wg-remote-keys/owner-mgts-wg-remote-ddn-test.conf /root/mgts-wg-remote-keys/owner-mgts-wg-remote.conf /root/mgts-wg-remote-keys/owner.key /root/mgts-wg-remote-keys/owner.pub /root/mgts-wg-remote-keys/server.key /root/mgts-wg-remote-keys/server.pub /root/mgts-wg-remote-keys/support-mgts-wg-remote-ddn-test.conf /root/mgts-wg-remote-keys/support-mgts-wg-remote.conf /root/mgts-wg-remote-keys/support.key /root/mgts-wg-remote-keys/support.pub /root/pbr-backups/default_lan_to_vpn.sh.bak /root/pbr-backups/default_lan_to_vpn.sh.before-mgts-sources.20260706-164633 /root/pbr-backups/pbr.before-mgts-sources.20260706-164633 /root/pbr-backups/ru_to_direct.sh.pre-cn.20260503-092854 /root/pbr-backups/ru_to_direct.sh.working-ru-only.20260503-101341 /root/pbr-disabled/default_lan_to_vpn.sh.new-broken /root/pbr-disabled/geo_to_direct.sh.new-custom /root/pbr-disabled/pbr.d.backup.20260425-151600/ru_to_wan.sh /root/pbr-disabled/ru_to_wan.sh /root/pbr.backup.20260425-151559 /root/ruleset-before-manual-pbr-apply.20260503-104332.nft /root/vpn-direct-off.sh /root/vpn-direct-on.sh /root/vpn-direct-persistent-off.sh /root/vpn-direct-persistent-on.sh rc=0 ################################################################ ### vm101_basic ################################################################ ===== vm101_basic ===== CMD: remote_vm101 date; uptime; ip -br addr; echo; ip route; echo; ip rule Wed Jul 8 10:34:59 UTC 2026 10:34:59 up 17:57, load average: 0.00, 0.00, 0.00 lo UNKNOWN 127.0.0.1/8 ::1/128 eth0 UP 95.165.105.4/20 fe80::be24:11ff:fe42:83cf/64 eth1 UP 10.200.0.2/24 fe80::be24:11ff:fe09:4e2c/64 eth2 UP 10.71.100.2/24 fe80::be24:11ff:fe4d:7a71/64 eth3 UP 10.201.0.2/24 fe80::be24:11ff:fec8:2ee1/64 vpn1 UNKNOWN 10.91.233.132/32 default via 95.165.96.1 dev eth0 proto static src 95.165.105.4 10.71.100.0/24 dev eth2 proto kernel scope link src 10.71.100.2 10.200.0.0/24 dev eth1 proto kernel scope link src 10.200.0.2 10.201.0.0/24 dev eth3 proto kernel scope link src 10.201.0.2 10.250.100.0/24 via 10.71.100.1 dev eth2 proto static 95.165.96.0/20 dev eth0 proto kernel scope link src 95.165.105.4 95.211.68.119 via 95.165.96.1 dev eth0 proto static 178.215.227.13 via 95.165.96.1 dev eth0 proto static 192.71.27.64 via 95.165.96.1 dev eth0 proto static 192.121.163.235 via 95.165.96.1 dev eth0 proto static 0: from all lookup local 10019: from all iif eth1 lookup 200 10020: from 10.200.0.0/24 lookup 200 32766: from all lookup main 32767: from all lookup default rc=0 ################################################################ ### vm101_uci_network ################################################################ ===== vm101_uci_network ===== CMD: remote_vm101 uci show network network.loopback=interface network.loopback.device='lo' network.loopback.proto='static' network.loopback.ipaddr='127.0.0.1' network.loopback.netmask='255.0.0.0' network.globals=globals network.globals.packet_steering='1' network.wan=interface network.wan.device='eth0' network.wan.proto='dhcp' network.wan.peerdns='0' network.wan.dns='1.1.1.1' '8.8.8.8' network.mgmt=interface network.mgmt.proto='static' network.mgmt.device='eth2' network.mgmt.ipaddr='10.71.100.2' network.mgmt.netmask='255.255.255.0' network.direct_in=interface network.direct_in.proto='static' network.direct_in.device='eth3' network.direct_in.ipaddr='10.201.0.2' network.direct_in.netmask='255.255.255.0' network.vpn_in=interface network.vpn_in.proto='static' network.vpn_in.device='eth1' network.vpn_in.ipaddr='10.200.0.2/24' network.@route[0]=route network.@route[0].interface='mgmt' network.@route[0].target='10.250.100.0/24' network.@route[0].gateway='10.71.100.1' network.vpn1=interface network.vpn1.proto='amneziawg' network.vpn1.private_key= network.vpn1.awg_jc='3' network.vpn1.awg_jmin='50' network.vpn1.awg_jmax='100' network.vpn1.awg_s1='92' network.vpn1.awg_s2='90' network.vpn1.awg_h1='1128827374' network.vpn1.awg_h2='1959569870' network.vpn1.awg_h3='96441901' network.vpn1.awg_h4='2091878015' network.vpn1.auto='0' network.vpn1.disabled='0' network.vpn1.delegate='0' network.vpn1.peerdns='0' network.vpn1.defaultroute='0' network.vpn1.addresses='10.91.233.132/32' network.vpn1.dns='1.1.1.1' network.vpn1.hmn_role='active_spare_slot' network.vpn1.hmn_source_config='/root/hmn/configs/awg1/latest/150-NL-Netherlands-Amsterdam-R5-178.215.227.13-awg1.conf' network.vpn1.hmn_loaded_at='2026-07-06T17:07:53+00:00' network.vpn1.hmn_endpoint='178.215.227.13:44408' network.@amneziawg_vpn1[0]=amneziawg_vpn1 network.@amneziawg_vpn1[0].description='150-NL-Netherlands-Amsterdam-R5-178.215.227.13-awg1.conf' network.@amneziawg_vpn1[0].public_key='CAZ2FgESKM67A3XofKNoftcFcy9mtaVga8t/3qcCABI=' network.@amneziawg_vpn1[0].allowed_ips='0.0.0.0/0' network.@amneziawg_vpn1[0].route_allowed_ips='0' network.@amneziawg_vpn1[0].persistent_keepalive='23' network.@amneziawg_vpn1[0].endpoint_host='178.215.227.13' network.@amneziawg_vpn1[0].endpoint_port='44408' network.vpn_user=interface network.vpn_user.proto='amneziawg' network.vpn_user.private_key= network.vpn_user.awg_jc='3' network.vpn_user.awg_jmin='50' network.vpn_user.awg_jmax='100' network.vpn_user.awg_s1='20' network.vpn_user.awg_s2='87' network.vpn_user.awg_h1='217767672' network.vpn_user.awg_h2='1805649910' network.vpn_user.awg_h3='665837737' network.vpn_user.awg_h4='1257888244' network.vpn_user.auto='0' network.vpn_user.disabled='0' network.vpn_user.delegate='0' network.vpn_user.peerdns='0' network.vpn_user.defaultroute='0' network.vpn_user.addresses='10.90.235.244/32' network.vpn_user.dns='1.1.1.1' network.vpn_user.hmn_role='user_select_slot' network.vpn_user.hmn_source_config='/root/hmn/configs/awg1/latest/146-GB-United-Kingdom-London-S1-37.235.54.96-awg1.conf' network.vpn_user.hmn_loaded_at='2026-07-06T17:41:02+00:00' network.vpn_user.hmn_endpoint='37.235.54.96:38971' network.@amneziawg_vpn_user[0]=amneziawg_vpn_user network.@amneziawg_vpn_user[0].description='146-GB-United-Kingdom-London-S1-37.235.54.96-awg1.conf' network.@amneziawg_vpn_user[0].public_key='ILyQUTe0z0GL95HGy3HmcZC9gBkJByWp3aliZYBfiHg=' network.@amneziawg_vpn_user[0].allowed_ips='0.0.0.0/0' network.@amneziawg_vpn_user[0].route_allowed_ips='0' network.@amneziawg_vpn_user[0].persistent_keepalive='28' network.@amneziawg_vpn_user[0].endpoint_host='37.235.54.96' network.@amneziawg_vpn_user[0].endpoint_port='38971' network.vpn_test=interface network.vpn_test.proto='amneziawg' network.vpn_test.private_key= network.vpn_test.awg_jc='3' network.vpn_test.awg_jmin='50' network.vpn_test.awg_jmax='100' network.vpn_test.awg_s1='18' network.vpn_test.awg_s2='76' network.vpn_test.awg_h1='1955462561' network.vpn_test.awg_h2='1627595855' network.vpn_test.awg_h3='1760056293' network.vpn_test.awg_h4='1765367965' network.vpn_test.auto='0' network.vpn_test.disabled='0' network.vpn_test.delegate='0' network.vpn_test.peerdns='0' network.vpn_test.defaultroute='0' network.vpn_test.addresses='10.67.234.5/32' network.vpn_test.dns='1.1.1.1' network.vpn_test.hmn_role='test_slot' network.vpn_test.hmn_source_config='/root/hmn/configs/awg1/latest/225-IL-Israel-Tel-Aviv-S5-192.71.27.64-awg1.conf' network.vpn_test.hmn_loaded_at='2026-07-08T04:31:40+00:00' network.vpn_test.hmn_endpoint='192.71.27.64:40044' network.@amneziawg_vpn_test[0]=amneziawg_vpn_test network.@amneziawg_vpn_test[0].description='225-IL-Israel-Tel-Aviv-S5-192.71.27.64-awg1.conf' network.@amneziawg_vpn_test[0].public_key='VSkDdrCH2bk98Gnse0nESMnmTSffa6jUmuuJKJN28HY=' network.@amneziawg_vpn_test[0].allowed_ips='0.0.0.0/0' network.@amneziawg_vpn_test[0].route_allowed_ips='0' network.@amneziawg_vpn_test[0].persistent_keepalive='22' network.@amneziawg_vpn_test[0].endpoint_host='192.71.27.64' network.@amneziawg_vpn_test[0].endpoint_port='40044' network.vpn2=interface network.vpn2.proto='amneziawg' network.vpn2.private_key= network.vpn2.awg_jc='3' network.vpn2.awg_jmin='50' network.vpn2.awg_jmax='100' network.vpn2.awg_s1='107' network.vpn2.awg_s2='122' network.vpn2.awg_h1='711662706' network.vpn2.awg_h2='1180552356' network.vpn2.awg_h3='1975038815' network.vpn2.awg_h4='1815189548' network.vpn2.auto='0' network.vpn2.disabled='0' network.vpn2.delegate='0' network.vpn2.peerdns='0' network.vpn2.defaultroute='0' network.vpn2.addresses='10.86.108.200/32' network.vpn2.dns='1.1.1.1' network.vpn2.hmn_role='active_spare_slot' network.vpn2.hmn_source_config='/root/hmn/configs/awg1/latest/128-LV-Latvia-Riga-S1-192.121.163.235-awg1.conf' network.vpn2.hmn_loaded_at='2026-07-08T06:15:47+00:00' network.vpn2.hmn_endpoint='192.121.163.235:42530' network.@amneziawg_vpn2[0]=amneziawg_vpn2 network.@amneziawg_vpn2[0].description='128-LV-Latvia-Riga-S1-192.121.163.235-awg1.conf' network.@amneziawg_vpn2[0].public_key='4c5teOPebMxBd3Cn80pG3uRPvJWtfxv2jv9DTMOZaH0=' network.@amneziawg_vpn2[0].allowed_ips='0.0.0.0/0' network.@amneziawg_vpn2[0].route_allowed_ips='0' network.@amneziawg_vpn2[0].persistent_keepalive='24' network.@amneziawg_vpn2[0].endpoint_host='192.121.163.235' network.@amneziawg_vpn2[0].endpoint_port='42530' network.vpn3=interface network.vpn3.proto='amneziawg' network.vpn3.private_key= network.vpn3.awg_jc='3' network.vpn3.awg_jmin='50' network.vpn3.awg_jmax='100' network.vpn3.awg_s1='55' network.vpn3.awg_s2='43' network.vpn3.awg_h1='424258794' network.vpn3.awg_h2='1552734037' network.vpn3.awg_h3='136716108' network.vpn3.awg_h4='329527368' network.vpn3.auto='0' network.vpn3.disabled='0' network.vpn3.delegate='0' network.vpn3.peerdns='0' network.vpn3.defaultroute='0' network.vpn3.addresses='10.104.58.24/32' network.vpn3.dns='1.1.1.1' network.vpn3.hmn_role='egress_pool_slot' network.vpn3.hmn_source_config='/root/hmn/configs/awg1/20260601-100614/075-NL-Netherlands-Amsterdam-H13-95.211.68.119-awg1.conf' network.vpn3.hmn_loaded_at='2026-07-08T10:34:48+00:00' network.vpn3.hmn_endpoint='95.211.68.119:45176' network.@amneziawg_vpn3[0]=amneziawg_vpn3 network.@amneziawg_vpn3[0].description='075-NL-Netherlands-Amsterdam-H13-95.211.68.119-awg1.conf' network.@amneziawg_vpn3[0].public_key='+QikXdZgJpfsgBVA0hIlE3ar0f2TBOweA8moEdo9DRU=' network.@amneziawg_vpn3[0].allowed_ips='0.0.0.0/0' network.@amneziawg_vpn3[0].route_allowed_ips='0' network.@amneziawg_vpn3[0].persistent_keepalive='25' network.@amneziawg_vpn3[0].endpoint_host='95.211.68.119' network.@amneziawg_vpn3[0].endpoint_port='45176' rc=0 ################################################################ ### vm101_uci_firewall ################################################################ ===== vm101_uci_firewall ===== CMD: remote_vm101 uci show firewall firewall.@defaults[0]=defaults firewall.@defaults[0].input='REJECT' firewall.@defaults[0].output='ACCEPT' firewall.@defaults[0].forward='REJECT' firewall.@defaults[0].synflood_protect='1' firewall.@zone[0]=zone firewall.@zone[0].name='wan' firewall.@zone[0].input='REJECT' firewall.@zone[0].output='ACCEPT' firewall.@zone[0].forward='REJECT' firewall.@zone[0].masq='1' firewall.@zone[0].mtu_fix='1' firewall.@zone[0].network='wan' firewall.@rule[0]=rule firewall.@rule[0].name='Allow-DHCP-Renew' firewall.@rule[0].src='wan' firewall.@rule[0].proto='udp' firewall.@rule[0].dest_port='68' firewall.@rule[0].target='ACCEPT' firewall.@rule[0].family='ipv4' firewall.@rule[1]=rule firewall.@rule[1].name='Allow-Ping' firewall.@rule[1].src='wan' firewall.@rule[1].proto='icmp' firewall.@rule[1].icmp_type='echo-request' firewall.@rule[1].family='ipv4' firewall.@rule[1].target='ACCEPT' firewall.@rule[2]=rule firewall.@rule[2].name='Allow-IGMP' firewall.@rule[2].src='wan' firewall.@rule[2].proto='igmp' firewall.@rule[2].family='ipv4' firewall.@rule[2].target='ACCEPT' firewall.@rule[3]=rule firewall.@rule[3].name='Allow-DHCPv6' firewall.@rule[3].src='wan' firewall.@rule[3].proto='udp' firewall.@rule[3].dest_port='546' firewall.@rule[3].family='ipv6' firewall.@rule[3].target='ACCEPT' firewall.@rule[4]=rule firewall.@rule[4].name='Allow-MLD' firewall.@rule[4].src='wan' firewall.@rule[4].proto='icmp' firewall.@rule[4].src_ip='fe80::/10' firewall.@rule[4].icmp_type='130/0' '131/0' '132/0' '143/0' firewall.@rule[4].family='ipv6' firewall.@rule[4].target='ACCEPT' firewall.@rule[5]=rule firewall.@rule[5].name='Allow-ICMPv6-Input' firewall.@rule[5].src='wan' firewall.@rule[5].proto='icmp' firewall.@rule[5].icmp_type='echo-request' 'echo-reply' 'destination-unreachable' 'packet-too-big' 'time-exceeded' 'bad-header' 'unknown-header-type' 'router-solicitation' 'neighbour-solicitation' 'router-advertisement' 'neighbour-advertisement' firewall.@rule[5].limit='1000/sec' firewall.@rule[5].family='ipv6' firewall.@rule[5].target='ACCEPT' firewall.@rule[6]=rule firewall.@rule[6].name='Allow-ICMPv6-Forward' firewall.@rule[6].src='wan' firewall.@rule[6].dest='*' firewall.@rule[6].proto='icmp' firewall.@rule[6].icmp_type='echo-request' 'echo-reply' 'destination-unreachable' 'packet-too-big' 'time-exceeded' 'bad-header' 'unknown-header-type' firewall.@rule[6].limit='1000/sec' firewall.@rule[6].family='ipv6' firewall.@rule[6].target='ACCEPT' firewall.@zone[1]=zone firewall.@zone[1].name='Management' firewall.@zone[1].input='ACCEPT' firewall.@zone[1].output='ACCEPT' firewall.@zone[1].forward='REJECT' firewall.@zone[1].masq='1' firewall.@zone[1].network='mgmt' firewall.@zone[2]=zone firewall.@zone[2].name='direct_in' firewall.@zone[2].input='ACCEPT' firewall.@zone[2].output='ACCEPT' firewall.@zone[2].forward='REJECT' firewall.@zone[2].network='direct_in' firewall.@zone[3]=zone firewall.@zone[3].name='vpn_in' firewall.@zone[3].input='ACCEPT' firewall.@zone[3].output='ACCEPT' firewall.@zone[3].forward='REJECT' firewall.@zone[3].network='vpn_in' firewall.@zone[4]=zone firewall.@zone[4].name='vpn_out' firewall.@zone[4].input='REJECT' firewall.@zone[4].output='ACCEPT' firewall.@zone[4].forward='REJECT' firewall.@zone[4].masq='1' firewall.@zone[4].mtu_fix='1' firewall.@zone[4].network='vpn1' 'vpn2' 'vpn_user' firewall.@nat[0]=nat firewall.@nat[0].name='OMR_SERVER_SNAT_TO_MGMT' firewall.@nat[0].family='ipv4' firewall.@nat[0].src='Management' firewall.@nat[0].proto='tcp udp' firewall.@nat[0].dest_ip='192.168.30.186' firewall.@nat[0].dest_port='65000-65535' firewall.@nat[0].target='MASQUERADE' firewall.@rule[7]=rule firewall.@rule[7].name='Allow-ICMP-from-vpn_in-to-router' firewall.@rule[7].src='vpn_in' firewall.@rule[7].proto='icmp' firewall.@rule[7].icmp_type='echo-request' firewall.@rule[7].family='ipv4' firewall.@rule[7].target='ACCEPT' firewall.@forwarding[0]=forwarding firewall.@forwarding[0].src='direct_in' firewall.@forwarding[0].dest='wan' firewall.@forwarding[1]=forwarding firewall.@forwarding[1].src='vpn_in' firewall.@forwarding[1].dest='vpn_out' firewall.@forwarding[2]=forwarding firewall.@forwarding[2].src='vpn_in' firewall.@forwarding[2].dest='wan' firewall.@redirect[0]=redirect firewall.@redirect[0].name='WG_easy_51821_to_VM103' firewall.@redirect[0].family='ipv4' firewall.@redirect[0].src='wan' firewall.@redirect[0].src_dport='51821' firewall.@redirect[0].proto='udp' firewall.@redirect[0].dest='Management' firewall.@redirect[0].dest_ip='10.71.1.189' firewall.@redirect[0].dest_port='51821' firewall.@redirect[0].target='DNAT' firewall.@redirect[1]=redirect firewall.@redirect[1].name='wg_remote_to_vm100' firewall.@redirect[1].src='wan' firewall.@redirect[1].dest='Management' firewall.@redirect[1].src_dport='51820' firewall.@redirect[1].dest_ip='10.71.100.1' firewall.@redirect[1].dest_port='51820' firewall.@redirect[1].proto='udp' firewall.@redirect[1].target='DNAT' firewall.dnat_wg_paid_51830=redirect firewall.dnat_wg_paid_51830.name='DNAT-WG-Paid-51830-to-VM100' firewall.dnat_wg_paid_51830.src='wan' firewall.dnat_wg_paid_51830.src_dport='51830' firewall.dnat_wg_paid_51830.dest_ip='10.71.100.1' firewall.dnat_wg_paid_51830.dest_port='51830' firewall.dnat_wg_paid_51830.proto='udp' firewall.dnat_wg_paid_51830.target='DNAT' firewall.dnat_wg_paid_51830.dest='Management' rc=0 ################################################################ ### vm101_wg_show ################################################################ ===== vm101_wg_show ===== CMD: remote_vm101 wg show || true rc=0 ################################################################ ### vm101_rt_nft ################################################################ ===== vm101_rt_nft ===== CMD: remote_vm101 cat /etc/iproute2/rt_tables 2>/dev/null; echo; nft list ruleset 2>/dev/null | sed -n "1,360p" # # reserved values # 128 prelocal 255 local 254 main 253 default 0 unspec # # local # #1 inr.ruhep table inet fw4 { chain wg_guest_snat { type nat hook postrouting priority srcnat - 1; policy accept; iifname "eth0" oifname "eth2" ip daddr 192.168.30.189 udp dport 51821 counter packets 0 bytes 0 snat ip to 192.168.30.2 comment "WG_GUEST_51821_SNAT" } chain input { type filter hook input priority filter; policy drop; iif "lo" accept comment "!fw4: Accept traffic from loopback" ct state vmap { established : accept, related : accept } comment "!fw4: Handle inbound flows" tcp flags & (fin | syn | rst | ack) == syn jump syn_flood comment "!fw4: Rate limit TCP syn packets" iifname "eth0" jump input_wan comment "!fw4: Handle wan IPv4/IPv6 input traffic" iifname "eth2" jump input_Management comment "!fw4: Handle Management IPv4/IPv6 input traffic" iifname "eth3" jump input_direct_in comment "!fw4: Handle direct_in IPv4/IPv6 input traffic" iifname "eth1" jump input_vpn_in comment "!fw4: Handle vpn_in IPv4/IPv6 input traffic" iifname { "vpn1", "vpn2" } jump input_vpn_out comment "!fw4: Handle vpn_out IPv4/IPv6 input traffic" jump handle_reject } chain forward { type filter hook forward priority filter; policy drop; ct state vmap { established : accept, related : accept } comment "!fw4: Handle forwarded flows" iifname "eth0" jump forward_wan comment "!fw4: Handle wan IPv4/IPv6 forward traffic" iifname "eth2" jump forward_Management comment "!fw4: Handle Management IPv4/IPv6 forward traffic" iifname "eth3" jump forward_direct_in comment "!fw4: Handle direct_in IPv4/IPv6 forward traffic" iifname "eth1" jump forward_vpn_in comment "!fw4: Handle vpn_in IPv4/IPv6 forward traffic" iifname { "vpn1", "vpn2" } jump forward_vpn_out comment "!fw4: Handle vpn_out IPv4/IPv6 forward traffic" jump handle_reject } chain output { type filter hook output priority filter; policy accept; oif "lo" accept comment "!fw4: Accept traffic towards loopback" ct state vmap { established : accept, related : accept } comment "!fw4: Handle outbound flows" oifname "eth0" jump output_wan comment "!fw4: Handle wan IPv4/IPv6 output traffic" oifname "eth2" jump output_Management comment "!fw4: Handle Management IPv4/IPv6 output traffic" oifname "eth3" jump output_direct_in comment "!fw4: Handle direct_in IPv4/IPv6 output traffic" oifname "eth1" jump output_vpn_in comment "!fw4: Handle vpn_in IPv4/IPv6 output traffic" oifname { "vpn1", "vpn2" } jump output_vpn_out comment "!fw4: Handle vpn_out IPv4/IPv6 output traffic" } chain prerouting { type filter hook prerouting priority filter; policy accept; iifname "eth3" jump helper_direct_in comment "!fw4: Handle direct_in IPv4/IPv6 helper assignment" iifname "eth1" jump helper_vpn_in comment "!fw4: Handle vpn_in IPv4/IPv6 helper assignment" } chain handle_reject { meta l4proto tcp reject with tcp reset comment "!fw4: Reject TCP traffic" reject comment "!fw4: Reject any other traffic" } chain syn_flood { limit rate 25/second burst 50 packets return comment "!fw4: Accept SYN packets below rate-limit" drop comment "!fw4: Drop excess packets" } chain input_wan { meta nfproto ipv4 udp dport 68 counter packets 0 bytes 0 accept comment "!fw4: Allow-DHCP-Renew" icmp type echo-request counter packets 27 bytes 1022 accept comment "!fw4: Allow-Ping" meta nfproto ipv4 meta l4proto igmp counter packets 0 bytes 0 accept comment "!fw4: Allow-IGMP" meta nfproto ipv6 udp dport 546 counter packets 0 bytes 0 accept comment "!fw4: Allow-DHCPv6" ip6 saddr fe80::/10 icmpv6 type . icmpv6 code { mld-listener-query . 0, mld-listener-report . 0, mld-listener-done . 0, mld2-listener-report . 0 } counter packets 0 bytes 0 accept comment "!fw4: Allow-MLD" icmpv6 type { destination-unreachable, time-exceeded, echo-request, echo-reply, nd-router-solicit, nd-router-advert } limit rate 1000/second burst 5 packets counter packets 4 bytes 224 accept comment "!fw4: Allow-ICMPv6-Input" icmpv6 type . icmpv6 code { packet-too-big . 0, parameter-problem . 0, nd-neighbor-solicit . 0, nd-neighbor-advert . 0, parameter-problem . 1 } limit rate 1000/second burst 5 packets counter packets 0 bytes 0 accept comment "!fw4: Allow-ICMPv6-Input" ct status dnat accept comment "!fw4: Accept port redirections" jump reject_from_wan } chain output_wan { jump accept_to_wan } chain forward_wan { icmpv6 type { destination-unreachable, time-exceeded, echo-request, echo-reply } limit rate 1000/second burst 5 packets counter packets 0 bytes 0 accept comment "!fw4: Allow-ICMPv6-Forward" icmpv6 type . icmpv6 code { packet-too-big . 0, parameter-problem . 0, parameter-problem . 1 } limit rate 1000/second burst 5 packets counter packets 0 bytes 0 accept comment "!fw4: Allow-ICMPv6-Forward" ct status dnat accept comment "!fw4: Accept port forwards" jump reject_to_wan } chain accept_to_wan { meta nfproto ipv4 oifname "eth0" ct state invalid counter packets 17 bytes 680 drop comment "!fw4: Prevent NAT leakage" oifname "eth0" counter packets 155 bytes 37744 accept comment "!fw4: accept wan IPv4/IPv6 traffic" } chain reject_from_wan { iifname "eth0" counter packets 7052 bytes 349086 jump handle_reject comment "!fw4: reject wan IPv4/IPv6 traffic" } chain reject_to_wan { oifname "eth0" counter packets 0 bytes 0 jump handle_reject comment "!fw4: reject wan IPv4/IPv6 traffic" } chain input_Management { ct status dnat accept comment "!fw4: Accept port redirections" jump accept_from_Management } chain output_Management { jump accept_to_Management } chain forward_Management { ct status dnat accept comment "!fw4: Accept port forwards" jump reject_to_Management } chain accept_from_Management { iifname "eth2" counter packets 152 bytes 9104 accept comment "!fw4: accept Management IPv4/IPv6 traffic" } chain accept_to_Management { meta nfproto ipv4 oifname "eth2" ct state invalid counter packets 0 bytes 0 drop comment "!fw4: Prevent NAT leakage" oifname "eth2" counter packets 0 bytes 0 accept comment "!fw4: accept Management IPv4/IPv6 traffic" } chain reject_to_Management { oifname "eth2" counter packets 0 bytes 0 jump handle_reject comment "!fw4: reject Management IPv4/IPv6 traffic" } chain input_direct_in { jump accept_from_direct_in } chain output_direct_in { jump accept_to_direct_in } chain forward_direct_in { jump accept_to_wan comment "!fw4: Accept direct_in to wan forwarding" jump reject_to_direct_in } chain helper_direct_in { } chain accept_from_direct_in { iifname "eth3" counter packets 4 bytes 224 accept comment "!fw4: accept direct_in IPv4/IPv6 traffic" } chain accept_to_direct_in { oifname "eth3" counter packets 0 bytes 0 accept comment "!fw4: accept direct_in IPv4/IPv6 traffic" } chain reject_to_direct_in { oifname "eth3" counter packets 0 bytes 0 jump handle_reject comment "!fw4: reject direct_in IPv4/IPv6 traffic" } chain input_vpn_in { icmp type echo-request counter packets 0 bytes 0 accept comment "!fw4: Allow-ICMP-from-vpn_in-to-router" jump accept_from_vpn_in } chain output_vpn_in { jump accept_to_vpn_in } chain forward_vpn_in { jump accept_to_vpn_out comment "!fw4: Accept vpn_in to vpn_out forwarding" jump accept_to_wan comment "!fw4: Accept vpn_in to wan forwarding" jump reject_to_vpn_in } chain helper_vpn_in { } chain accept_from_vpn_in { iifname "eth1" counter packets 5 bytes 280 accept comment "!fw4: accept vpn_in IPv4/IPv6 traffic" } chain accept_to_vpn_in { oifname "eth1" counter packets 0 bytes 0 accept comment "!fw4: accept vpn_in IPv4/IPv6 traffic" } chain reject_to_vpn_in { oifname "eth1" counter packets 0 bytes 0 jump handle_reject comment "!fw4: reject vpn_in IPv4/IPv6 traffic" } chain input_vpn_out { jump reject_from_vpn_out } chain output_vpn_out { jump accept_to_vpn_out } chain forward_vpn_out { jump reject_to_vpn_out } chain accept_to_vpn_out { meta nfproto ipv4 oifname { "vpn1", "vpn2" } ct state invalid counter packets 0 bytes 0 drop comment "!fw4: Prevent NAT leakage" oifname { "vpn1", "vpn2" } counter packets 274 bytes 23016 accept comment "!fw4: accept vpn_out IPv4/IPv6 traffic" } chain reject_from_vpn_out { iifname { "vpn1", "vpn2" } counter packets 0 bytes 0 jump handle_reject comment "!fw4: reject vpn_out IPv4/IPv6 traffic" } chain reject_to_vpn_out { oifname { "vpn1", "vpn2" } counter packets 0 bytes 0 jump handle_reject comment "!fw4: reject vpn_out IPv4/IPv6 traffic" } chain dstnat { type nat hook prerouting priority dstnat; policy accept; iifname "eth0" jump dstnat_wan comment "!fw4: Handle wan IPv4/IPv6 dstnat traffic" iifname "eth2" jump dstnat_Management comment "!fw4: Handle Management IPv4/IPv6 dstnat traffic" } chain srcnat { type nat hook postrouting priority srcnat; policy accept; oifname "eth0" jump srcnat_wan comment "!fw4: Handle wan IPv4/IPv6 srcnat traffic" oifname "eth2" jump srcnat_Management comment "!fw4: Handle Management IPv4/IPv6 srcnat traffic" oifname { "vpn1", "vpn2" } jump srcnat_vpn_out comment "!fw4: Handle vpn_out IPv4/IPv6 srcnat traffic" } chain dstnat_wan { meta nfproto ipv4 udp dport 51821 counter packets 0 bytes 0 dnat ip to 10.71.1.189:51821 comment "!fw4: WG_easy_51821_to_VM103" meta nfproto ipv4 udp dport 51820 counter packets 0 bytes 0 dnat ip to 10.71.100.1:51820 comment "!fw4: wg_remote_to_vm100" meta nfproto ipv4 udp dport 51830 counter packets 0 bytes 0 dnat ip to 10.71.100.1:51830 comment "!fw4: DNAT-WG-Paid-51830-to-VM100" } chain srcnat_wan { meta nfproto ipv4 masquerade comment "!fw4: Masquerade IPv4 wan traffic" } chain dstnat_Management { ip saddr 10.71.100.0/24 ip daddr 95.165.105.4 udp dport 51821 dnat ip to 10.71.1.189:51821 comment "!fw4: WG_easy_51821_to_VM103 (reflection)" ip saddr 10.71.100.0/24 ip daddr 95.165.105.4 udp dport 51820 dnat ip to 10.71.100.1:51820 comment "!fw4: wg_remote_to_vm100 (reflection)" ip saddr 10.71.100.0/24 ip daddr 95.165.105.4 udp dport 51830 dnat ip to 10.71.100.1:51830 comment "!fw4: DNAT-WG-Paid-51830-to-VM100 (reflection)" } chain srcnat_Management { ip saddr 10.71.100.0/24 ip daddr 10.71.1.189 udp dport 51821 snat ip to 10.71.100.2 comment "!fw4: WG_easy_51821_to_VM103 (reflection)" ip saddr 10.71.100.0/24 ip daddr 10.71.100.1 udp dport 51820 snat ip to 10.71.100.2 comment "!fw4: wg_remote_to_vm100 (reflection)" ip saddr 10.71.100.0/24 ip daddr 10.71.100.1 udp dport 51830 snat ip to 10.71.100.2 comment "!fw4: DNAT-WG-Paid-51830-to-VM100 (reflection)" ip daddr 192.168.30.186 tcp dport 65000-65535 counter packets 0 bytes 0 masquerade comment "!fw4: OMR_SERVER_SNAT_TO_MGMT" ip daddr 192.168.30.186 udp dport 65000-65535 counter packets 0 bytes 0 masquerade comment "!fw4: OMR_SERVER_SNAT_TO_MGMT" meta nfproto ipv4 masquerade comment "!fw4: Masquerade IPv4 Management traffic" } chain srcnat_vpn_out { meta nfproto ipv4 masquerade comment "!fw4: Masquerade IPv4 vpn_out traffic" } chain raw_prerouting { type filter hook prerouting priority raw; policy accept; } chain raw_output { type filter hook output priority raw; policy accept; } chain mangle_prerouting { type filter hook prerouting priority mangle; policy accept; } chain mangle_postrouting { type filter hook postrouting priority mangle; policy accept; oifname "eth0" tcp flags & (fin | syn | rst) == syn tcp option maxseg size set rt mtu comment "!fw4: Zone wan IPv4/IPv6 egress MTU fixing" oifname { "vpn1", "vpn2" } tcp flags & (fin | syn | rst) == syn tcp option maxseg size set rt mtu comment "!fw4: Zone vpn_out IPv4/IPv6 egress MTU fixing" } chain mangle_input { type filter hook input priority mangle; policy accept; } chain mangle_output { type route hook output priority mangle; policy accept; } chain mangle_forward { type filter hook forward priority mangle; policy accept; iifname "eth0" tcp flags & (fin | syn | rst) == syn tcp option maxseg size set rt mtu comment "!fw4: Zone wan IPv4/IPv6 ingress MTU fixing" iifname { "vpn1", "vpn2" } tcp flags & (fin | syn | rst) == syn tcp option maxseg size set rt mtu comment "!fw4: Zone vpn_out IPv4/IPv6 ingress MTU fixing" } } rc=0 ################################################################ ### vm101_services_cron ################################################################ ===== vm101_services_cron ===== CMD: remote_vm101 ls /etc/init.d; echo; service 2>/dev/null | sed -n "1,260p"; echo; crontab -l 2>/dev/null || true; echo; cat /etc/crontabs/root 2>/dev/null || true boot cron dnsmasq done dropbear firewall gpio_switch led log network odhcpd openvpn packet_steering pbr rpcd sysctl sysfixtime sysntpd system ucitrack uhttpd umount urandom_seed urngd Usage: service [command] /etc/init.d/boot enabled stopped /etc/init.d/cron enabled running /etc/init.d/dnsmasq enabled running /etc/init.d/done enabled stopped /etc/init.d/dropbear enabled running /etc/init.d/firewall enabled stopped /etc/init.d/gpio_switch enabled stopped /etc/init.d/led enabled stopped /etc/init.d/log enabled running /etc/init.d/network enabled running /etc/init.d/odhcpd enabled running /etc/init.d/openvpn enabled stopped /etc/init.d/packet_steering enabled stopped /etc/init.d/pbr disabled stopped /etc/init.d/rpcd enabled running /etc/init.d/sysctl enabled stopped /etc/init.d/sysfixtime enabled stopped /etc/init.d/sysntpd enabled running /etc/init.d/system enabled stopped /etc/init.d/ucitrack enabled stopped /etc/init.d/uhttpd enabled running /etc/init.d/umount enabled stopped /etc/init.d/urandom_seed enabled stopped /etc/init.d/urngd enabled running # STEP_029C1_DISABLED * * * * * /usr/bin/vpn-egress-manager.sh >/dev/null 2>&1 # STEP_029C1_DISABLED 20 4 * * * /root/hmn/hmn-refresh-pool-cron.sh # STEP_029C1_DISABLED 7,22,37,52 * * * * /root/hmn/hmn-pool-low-watermark-check.sh run >/dev/null 2>&1 # STEP_029C1_DISABLED 5,35 * * * * /root/hmn/hmn-refresh-retry-cron.sh # STEP_029C1_DISABLED 10 3 * * * /root/hmn/hmn-clean-old-files.sh >/dev/null 2>&1 # STEP_029C1_DISABLED * * * * * /root/hmn/hmn-vpn-user-override.sh tick >/dev/null 2>&1 # STEP_029C1_DISABLED * * * * * /usr/bin/vpn-egress-manager.sh >/dev/null 2>&1 # STEP_029C1_DISABLED 20 4 * * * /root/hmn/hmn-refresh-pool-cron.sh # STEP_029C1_DISABLED 7,22,37,52 * * * * /root/hmn/hmn-pool-low-watermark-check.sh run >/dev/null 2>&1 # STEP_029C1_DISABLED 5,35 * * * * /root/hmn/hmn-refresh-retry-cron.sh # STEP_029C1_DISABLED 10 3 * * * /root/hmn/hmn-clean-old-files.sh >/dev/null 2>&1 # STEP_029C1_DISABLED * * * * * /root/hmn/hmn-vpn-user-override.sh tick >/dev/null 2>&1 rc=0 ################################################################ ### vm101_hmn_tree ################################################################ ===== vm101_hmn_tree ===== CMD: remote_vm101 ls -la /root 2>/dev/null; echo; find /root /etc /usr/local /opt -maxdepth 4 -type f 2>/dev/null | grep -Ei "hmn|hide|amnezia|awg|vpn|egress|wireguard|wg|status|readme|route|pbr" | sort | sed -n "1,900p" drwxr-x--- 13 root root 4096 Jul 8 08:35 . drwxr-xr-x 18 root root 4096 Apr 18 12:00 .. drwx------ 2 root root 4096 Jul 6 14:20 .ssh -rw-r--r-- 1 root root 0 May 31 08:08 10.200.0.2: -rwxr-xr-x 1 root root 3588 Jun 3 16:08 client-hmn-audit-before-import.sh drwxr-xr-x 2 root root 4096 May 31 07:46 clientize-vm101-backup-20260531-074653 drwxr-xr-x 2 root root 4096 May 31 08:15 clientize-vm101-backup-20260531-081542 -rwxr-xr-x 1 root root 6236 May 31 07:46 clientize-vm101.sh -rw-r--r-- 1 root root 0 Apr 25 20:31 direct_in -rwxr-xr-x 1 root root 1768 May 31 08:41 disable-cloned-vpn-egress.sh -rw-r--r-- 1 root root 3134 May 24 16:47 firewall.backup.20260524-164724 -rw-r--r-- 1 root root 3357 May 25 05:05 firewall.before-hmn-update.20260525-050529 drwxr-xr-x 2 root root 4096 May 31 08:02 fix-vm101-remove-orphan-brlan-20260531-080216 -rwxr-xr-x 1 root root 804 May 31 08:02 fix-vm101-remove-orphan-brlan.sh -rwxr-xr-x 1 root root 5439 Jun 3 16:20 h42a-import-hmn-script-layer-client001.sh -rwxr-xr-x 1 root root 2759 Jun 3 16:22 h42b-validate-client-pool-after-import.sh -rwxr-xr-x 1 root root 2778 Jun 3 16:36 h42c-load-strict-top-slots-client001.sh -rwxr-xr-x 1 root root 3971 Jun 3 16:38 h42d-fix-selected-cache-and-final-audit-client001.sh -rwxr-xr-x 1 root root 3526 Jun 3 16:54 h42e-reboot-forensics-vm101.sh drwx------ 12 root root 4096 Jul 8 10:33 hmn drwxr-xr-x 3 root root 4096 Jun 1 10:00 hmn-test drwxr-xr-x 2 root root 4096 Jul 6 09:49 mgts-pre-renumber-backup drwxr-xr-x 2 root root 4096 Jul 6 10:18 mgts-wg-remote-dnat-backup -rw------- 1 root root 3569 May 25 05:05 network.before-hmn-update.20260525-050529 drwx------ 5 root root 4096 Jul 8 10:26 router-ops-backups drwxr-xr-x 3 root root 4096 Jul 8 08:35 router-ops-disabled-hotplug -rw-r--r-- 1 root root 134162 Apr 20 14:13 ru.zone -rwxr-xr-x 1 root root 3657 May 25 08:07 vpn-egress-manager.backup.20260525-080707 -rwxr-xr-x 1 root root 3657 May 25 05:05 vpn-egress-manager.before-hmn-update.20260525-050530 -rwxr-xr-x 1 root root 3657 May 25 08:11 vpn-egress-manager.before-replace.20260525-081145 -rwxr-xr-x 1 root root 4324 May 31 08:18 vpn-egress-manager.sh.backup-local-routes-20260531-081821 -rwxr-xr-x 1 root root 4324 May 31 08:11 vpn-egress-manager.sh.backup-table200-local-20260531-081128 -rwxr-xr-x 1 root root 2570 May 3 07:50 vpn-egress-manager.sh.bak -rwxr-xr-x 1 root root 4424 May 31 08:18 vpn-egress-manager.sh.before-disable-20260531-084111 -rw-r--r-- 1 root root 35552 Jul 8 06:15 vpn-egress-switches.log -rwxr-xr-x 1 root root 230 May 25 08:13 vpn-force-wan-off.sh -rwxr-xr-x 1 root root 228 May 25 08:13 vpn-force-wan-on.sh -rwxr-xr-x 1 root root 253 May 25 08:13 vpn-force-wan-persistent-off.sh -rwxr-xr-x 1 root root 251 May 25 08:13 vpn-force-wan-persistent-on.sh drwxr-xr-x 2 root root 4096 Jun 1 07:43 vpn-rename-backup-20260601-074311 /etc/config/openvpn /etc/config/openvpn_recipes /etc/config/pbr /etc/hotplug.d/openvpn/01-user /etc/init.d/openvpn /etc/init.d/pbr /etc/iproute2/ematch_map /etc/iproute2/rt_protos /etc/iproute2/rt_tables /etc/modules.d/wireguard /etc/nftables.d/90-wg-guest-snat.nft /etc/nftables.d/README /etc/openvpn.user /etc/pbr.d/ru_to_wan.sh /root/client-hmn-audit-before-import.sh /root/clientize-vm101-backup-20260531-074653/vpn-egress-manager.sh /root/clientize-vm101-backup-20260531-074653/vpn-egress-switches.log /root/clientize-vm101-backup-20260531-081542/vpn-egress-manager.sh /root/clientize-vm101-backup-20260531-081542/vpn-egress-switches.log /root/disable-cloned-vpn-egress.sh /root/firewall.before-hmn-update.20260525-050529 /root/h42a-import-hmn-script-layer-client001.sh /root/hmn-test/candidates-20260601-094527.tsv /root/hmn-test/configs-working/Georgia-Tbilisi-45.136.124.112-awg1-20260601-094527.conf /root/hmn-test/configs-working/Hong-Kong-Central-District-S2-112.120.98.53-awg1-20260601-094527.conf /root/hmn-test/configs-working/Netherlands-Amsterdam-R5-178.215.227.13-awg1-20260601-094527.conf /root/hmn-test/configs-working/Russia-Moscow-S5-141.98.189.83-awg1-20260601-094527.conf /root/hmn-test/configs-working/USA-Ashburn-142.202.49.112-awg1-20260601-094527.conf /root/hmn-test/configs-working/USA-Utah-192.154.104.162-awg1-20260601-094527.conf /root/hmn-test/fail-awg1-20260601-094527.tsv /root/hmn-test/first-tunnel-awg1-20260601-093912.conf /root/hmn-test/h13-record.txt /root/hmn-test/hmn-extract-wg-candidates.sh /root/hmn-test/hmn-first-test.sh /root/hmn-test/hmn-first-test.sh.v1 /root/hmn-test/hmn-known-ip-test.sh /root/hmn-test/hmn-scan-awg.sh /root/hmn-test/hmn-scan-awg.sh.with-jq /root/hmn-test/known-ip-awg1-20260601-094048.conf /root/hmn-test/known-ip-awg1-20260601-095335.conf /root/hmn-test/known-ip-awg1-20260601-095423.conf /root/hmn-test/known-ip-awg1-20260601-100023.conf /root/hmn-test/serverlist-20260601-093912.json /root/hmn-test/serverlist-20260601-094527.json /root/hmn-test/wg-candidates-from-services.tsv /root/hmn-test/working-awg1-20260601-094527.tsv /root/hmn/backups/99-vpn-egress-manager.before-hotplug-lock-fix-20260601-123834 /root/hmn/backups/99-vpnin-policy-route.disabled-20260601-123640 /root/hmn/backups/client001-before-h42a-import-20260603-162047/client-script-files-before.tgz /root/hmn/backups/client001-before-h42a-import-20260603-162047/crontab.before /root/hmn/backups/client001-before-h42a-import-20260603-162047/firewall.uci.before /root/hmn/backups/client001-before-h42a-import-20260603-162047/iprule.before /root/hmn/backups/client001-before-h42a-import-20260603-162047/network.uci.before /root/hmn/backups/client001-before-h42a-import-20260603-162047/table200.before /root/hmn/backups/client001-before-h42c-load-slots-20260603-163645/network.uci.before /root/hmn/backups/client001-before-h42c-load-slots-20260603-163645/selected-awg1-latest.tsv.before /root/hmn/backups/client001-before-h42c-load-slots-20260603-163645/table200.before /root/hmn/backups/client001-before-h42d-selected-cache-20260603-163829/selected-awg1-latest.tsv.before /root/hmn/backups/failover-manager-before-fix-20260601-132034/99-vpn-egress-manager /root/hmn/backups/failover-manager-before-fix-20260601-132034/99-vpnin-policy-route /root/hmn/backups/failover-manager-before-fix-20260601-132034/active-slot /root/hmn/backups/failover-manager-before-fix-20260601-132034/network /root/hmn/backups/failover-manager-before-fix-20260601-132034/vpn-egress-manager.sh /root/hmn/backups/hmn-download-all-awg.before-quarantine-reset-20260601-135846.sh /root/hmn/backups/hmn-load-egress-slot.sh.before-step031b3-20260708-103114 /root/hmn/backups/hmn-load-egress-slot.sh.before-step031b4-20260708-103325 /root/hmn/backups/hmn-rank-awg.before-quarantine-20260601-135559.sh /root/hmn/backups/hmn.env.20260706-161014 /root/hmn/backups/network-before-egress-load-vpn3-20260708-103448 /root/hmn/backups/network-before-load-vpn1-20260601-111640 /root/hmn/backups/network-before-load-vpn1-20260601-130301 /root/hmn/backups/network-before-load-vpn1-20260601-143639 /root/hmn/backups/network-before-load-vpn1-20260601-143803 /root/hmn/backups/network-before-load-vpn1-20260601-145208 /root/hmn/backups/network-before-load-vpn1-20260603-163645 /root/hmn/backups/network-before-load-vpn1-20260603-164822 /root/hmn/backups/network-before-load-vpn1-20260603-171347 /root/hmn/backups/network-before-load-vpn1-20260603-203331 /root/hmn/backups/network-before-load-vpn1-20260605-054125 /root/hmn/backups/network-before-load-vpn1-20260605-150225 /root/hmn/backups/network-before-load-vpn1-20260606-054330 /root/hmn/backups/network-before-load-vpn1-20260606-091029 /root/hmn/backups/network-before-load-vpn1-20260606-161926 /root/hmn/backups/network-before-load-vpn1-20260606-185025 /root/hmn/backups/network-before-load-vpn1-20260606-204232 /root/hmn/backups/network-before-load-vpn1-20260607-102826 /root/hmn/backups/network-before-load-vpn1-20260607-112926 /root/hmn/backups/network-before-load-vpn1-20260607-114826 /root/hmn/backups/network-before-load-vpn1-20260607-115730 /root/hmn/backups/network-before-load-vpn1-20260607-140125 /root/hmn/backups/network-before-load-vpn1-20260607-143729 /root/hmn/backups/network-before-load-vpn1-20260607-161629 /root/hmn/backups/network-before-load-vpn1-20260607-180625 /root/hmn/backups/network-before-load-vpn1-20260608-104429 /root/hmn/backups/network-before-load-vpn1-20260706-160850 /root/hmn/backups/network-before-load-vpn1-20260706-170753 /root/hmn/backups/network-before-load-vpn2-20260601-110946 /root/hmn/backups/network-before-load-vpn2-20260603-163701 /root/hmn/backups/network-before-load-vpn2-20260603-170129 /root/hmn/backups/network-before-load-vpn2-20260603-191530 /root/hmn/backups/network-before-load-vpn2-20260604-063626 /root/hmn/backups/network-before-load-vpn2-20260605-143129 /root/hmn/backups/network-before-load-vpn2-20260605-161429 /root/hmn/backups/network-before-load-vpn2-20260606-082739 /root/hmn/backups/network-before-load-vpn2-20260606-160726 /root/hmn/backups/network-before-load-vpn2-20260606-175725 /root/hmn/backups/network-before-load-vpn2-20260606-191529 /root/hmn/backups/network-before-load-vpn2-20260606-215625 /root/hmn/backups/network-before-load-vpn2-20260607-112726 /root/hmn/backups/network-before-load-vpn2-20260607-114426 /root/hmn/backups/network-before-load-vpn2-20260607-115330 /root/hmn/backups/network-before-load-vpn2-20260607-135925 /root/hmn/backups/network-before-load-vpn2-20260607-142029 /root/hmn/backups/network-before-load-vpn2-20260607-144825 /root/hmn/backups/network-before-load-vpn2-20260607-175629 /root/hmn/backups/network-before-load-vpn2-20260607-205930 /root/hmn/backups/network-before-load-vpn2-20260706-101643 /root/hmn/backups/network-before-load-vpn2-20260706-165654 /root/hmn/backups/network-before-load-vpn2-20260708-061547 /root/hmn/backups/network-before-vpn_test-20260706-161434 /root/hmn/backups/network-before-vpn_test-20260706-161456 /root/hmn/backups/network-before-vpn_test-20260706-161529 /root/hmn/backups/network-before-vpn_test-20260706-161547 /root/hmn/backups/network-before-vpn_test-20260706-161606 /root/hmn/backups/network-before-vpn_test-20260706-161625 /root/hmn/backups/network-before-vpn_test-20260706-161644 /root/hmn/backups/network-before-vpn_test-20260706-161703 /root/hmn/backups/network-before-vpn_test-20260706-161722 /root/hmn/backups/network-before-vpn_test-20260706-161745 /root/hmn/backups/network-before-vpn_test-20260706-161803 /root/hmn/backups/network-before-vpn_test-20260706-161825 /root/hmn/backups/network-before-vpn_test-20260706-161847 /root/hmn/backups/network-before-vpn_test-20260706-161906 /root/hmn/backups/network-before-vpn_test-20260706-161925 /root/hmn/backups/network-before-vpn_test-20260706-161943 /root/hmn/backups/network-before-vpn_test-20260706-162005 /root/hmn/backups/network-before-vpn_test-20260706-162025 /root/hmn/backups/network-before-vpn_test-20260706-162047 /root/hmn/backups/network-before-vpn_test-20260706-162105 /root/hmn/backups/network-before-vpn_test-20260706-162124 /root/hmn/backups/network-before-vpn_test-20260706-162142 /root/hmn/backups/network-before-vpn_test-20260706-162200 /root/hmn/backups/network-before-vpn_test-20260706-162219 /root/hmn/backups/network-before-vpn_test-20260706-162237 /root/hmn/backups/network-before-vpn_test-20260706-162255 /root/hmn/backups/network-before-vpn_test-20260706-162314 /root/hmn/backups/network-before-vpn_test-20260706-162336 /root/hmn/backups/network-before-vpn_test-20260706-162355 /root/hmn/backups/network-before-vpn_test-20260707-042048 /root/hmn/backups/network-before-vpn_test-20260707-042110 /root/hmn/backups/network-before-vpn_test-20260707-042132 /root/hmn/backups/network-before-vpn_test-20260707-042151 /root/hmn/backups/network-before-vpn_test-20260707-042209 /root/hmn/backups/network-before-vpn_test-20260707-042228 /root/hmn/backups/network-before-vpn_test-20260707-042247 /root/hmn/backups/network-before-vpn_test-20260707-042307 /root/hmn/backups/network-before-vpn_test-20260707-042325 /root/hmn/backups/network-before-vpn_test-20260707-042353 /root/hmn/backups/network-before-vpn_test-20260707-042413 /root/hmn/backups/network-before-vpn_test-20260707-042432 /root/hmn/backups/network-before-vpn_test-20260707-042451 /root/hmn/backups/network-before-vpn_test-20260707-042513 /root/hmn/backups/network-before-vpn_test-20260707-042532 /root/hmn/backups/network-before-vpn_test-20260707-042554 /root/hmn/backups/network-before-vpn_test-20260707-042616 /root/hmn/backups/network-before-vpn_test-20260707-042634 /root/hmn/backups/network-before-vpn_test-20260707-042653 /root/hmn/backups/network-before-vpn_test-20260707-042711 /root/hmn/backups/network-before-vpn_test-20260707-042733 /root/hmn/backups/network-before-vpn_test-20260707-042752 /root/hmn/backups/network-before-vpn_test-20260707-042814 /root/hmn/backups/network-before-vpn_test-20260707-042833 /root/hmn/backups/network-before-vpn_test-20260707-042851 /root/hmn/backups/network-before-vpn_test-20260707-042909 /root/hmn/backups/network-before-vpn_test-20260707-042928 /root/hmn/backups/network-before-vpn_test-20260707-042946 /root/hmn/backups/network-before-vpn_test-20260707-043004 /root/hmn/backups/network-before-vpn_test-20260707-043023 /root/hmn/backups/network-before-vpn_test-20260707-043041 /root/hmn/backups/network-before-vpn_test-20260707-043103 /root/hmn/backups/network-before-vpn_test-20260707-043122 /root/hmn/backups/network-before-vpn_test-20260708-042045 /root/hmn/backups/network-before-vpn_test-20260708-042107 /root/hmn/backups/network-before-vpn_test-20260708-042129 /root/hmn/backups/network-before-vpn_test-20260708-042147 /root/hmn/backups/network-before-vpn_test-20260708-042209 /root/hmn/backups/network-before-vpn_test-20260708-042228 /root/hmn/backups/network-before-vpn_test-20260708-042246 /root/hmn/backups/network-before-vpn_test-20260708-042306 /root/hmn/backups/network-before-vpn_test-20260708-042325 /root/hmn/backups/network-before-vpn_test-20260708-042343 /root/hmn/backups/network-before-vpn_test-20260708-042412 /root/hmn/backups/network-before-vpn_test-20260708-042431 /root/hmn/backups/network-before-vpn_test-20260708-042450 /root/hmn/backups/network-before-vpn_test-20260708-042510 /root/hmn/backups/network-before-vpn_test-20260708-042532 /root/hmn/backups/network-before-vpn_test-20260708-042550 /root/hmn/backups/network-before-vpn_test-20260708-042612 /root/hmn/backups/network-before-vpn_test-20260708-042634 /root/hmn/backups/network-before-vpn_test-20260708-042653 /root/hmn/backups/network-before-vpn_test-20260708-042711 /root/hmn/backups/network-before-vpn_test-20260708-042729 /root/hmn/backups/network-before-vpn_test-20260708-042751 /root/hmn/backups/network-before-vpn_test-20260708-042811 /root/hmn/backups/network-before-vpn_test-20260708-042833 /root/hmn/backups/network-before-vpn_test-20260708-042851 /root/hmn/backups/network-before-vpn_test-20260708-042909 /root/hmn/backups/network-before-vpn_test-20260708-042928 /root/hmn/backups/network-before-vpn_test-20260708-042946 /root/hmn/backups/network-before-vpn_test-20260708-043004 /root/hmn/backups/network-before-vpn_test-20260708-043023 /root/hmn/backups/network-before-vpn_test-20260708-043041 /root/hmn/backups/network-before-vpn_test-20260708-043100 /root/hmn/backups/network-before-vpn_test-20260708-043122 /root/hmn/backups/network-before-vpn_test-20260708-043140 /root/hmn/backups/network-before-vpn_user-20260706-172818 /root/hmn/backups/network-before-vpn_user-20260706-173208 /root/hmn/backups/network-before-vpn_user-20260706-173803 /root/hmn/backups/network-before-vpn_user-20260706-173915 /root/hmn/backups/network-before-vpn_user-20260706-174102 /root/hmn/backups/quarantine-awg1-latest.malformed-20260601-135456.tsv /root/hmn/backups/refresh-safe-before-20260604-042000-21898/configs-latest-readlink.txt /root/hmn/backups/refresh-safe-before-20260604-042000-21898/configs-latest-realpath.txt /root/hmn/backups/refresh-safe-before-20260604-042000-21898/ok-awg1-strict-all-latest.tsv /root/hmn/backups/refresh-safe-before-20260604-042000-21898/ok-awg1-strict-foreign-latest.tsv /root/hmn/backups/refresh-safe-before-20260604-042000-21898/selected-awg1-latest.tsv /root/hmn/backups/refresh-safe-before-20260605-042000-15413/configs-latest-readlink.txt /root/hmn/backups/refresh-safe-before-20260605-042000-15413/configs-latest-realpath.txt /root/hmn/backups/refresh-safe-before-20260605-042000-15413/ok-awg1-strict-all-latest.tsv /root/hmn/backups/refresh-safe-before-20260605-042000-15413/ok-awg1-strict-foreign-latest.tsv /root/hmn/backups/refresh-safe-before-20260605-042000-15413/selected-awg1-latest.tsv /root/hmn/backups/refresh-safe-before-20260606-042000-12109/configs-latest-readlink.txt /root/hmn/backups/refresh-safe-before-20260606-042000-12109/configs-latest-realpath.txt /root/hmn/backups/refresh-safe-before-20260606-042000-12109/ok-awg1-strict-all-latest.tsv /root/hmn/backups/refresh-safe-before-20260606-042000-12109/ok-awg1-strict-foreign-latest.tsv /root/hmn/backups/refresh-safe-before-20260606-042000-12109/selected-awg1-latest.tsv /root/hmn/backups/refresh-safe-before-20260606-180709-17601/configs-latest-readlink.txt /root/hmn/backups/refresh-safe-before-20260606-180709-17601/configs-latest-realpath.txt /root/hmn/backups/refresh-safe-before-20260606-180709-17601/ok-awg1-strict-all-latest.tsv /root/hmn/backups/refresh-safe-before-20260606-180709-17601/ok-awg1-strict-foreign-latest.tsv /root/hmn/backups/refresh-safe-before-20260606-180709-17601/selected-awg1-latest.tsv /root/hmn/backups/refresh-safe-before-20260607-042000-18519/configs-latest-readlink.txt /root/hmn/backups/refresh-safe-before-20260607-042000-18519/configs-latest-realpath.txt /root/hmn/backups/refresh-safe-before-20260607-042000-18519/ok-awg1-strict-all-latest.tsv /root/hmn/backups/refresh-safe-before-20260607-042000-18519/ok-awg1-strict-foreign-latest.tsv /root/hmn/backups/refresh-safe-before-20260607-042000-18519/selected-awg1-latest.tsv /root/hmn/backups/refresh-safe-before-20260607-120709-11931/configs-latest-readlink.txt /root/hmn/backups/refresh-safe-before-20260607-120709-11931/configs-latest-realpath.txt /root/hmn/backups/refresh-safe-before-20260607-120709-11931/ok-awg1-strict-all-latest.tsv /root/hmn/backups/refresh-safe-before-20260607-120709-11931/ok-awg1-strict-foreign-latest.tsv /root/hmn/backups/refresh-safe-before-20260607-120709-11931/selected-awg1-latest.tsv /root/hmn/backups/refresh-safe-before-20260607-122209-3961/configs-latest-readlink.txt /root/hmn/backups/refresh-safe-before-20260607-122209-3961/configs-latest-realpath.txt /root/hmn/backups/refresh-safe-before-20260607-122209-3961/ok-awg1-strict-all-latest.tsv /root/hmn/backups/refresh-safe-before-20260607-122209-3961/ok-awg1-strict-foreign-latest.tsv /root/hmn/backups/refresh-safe-before-20260607-122209-3961/selected-awg1-latest.tsv /root/hmn/backups/refresh-safe-before-20260607-180718-22253/configs-latest-readlink.txt /root/hmn/backups/refresh-safe-before-20260607-180718-22253/configs-latest-realpath.txt /root/hmn/backups/refresh-safe-before-20260607-180718-22253/ok-awg1-strict-all-latest.tsv /root/hmn/backups/refresh-safe-before-20260607-180718-22253/ok-awg1-strict-foreign-latest.tsv /root/hmn/backups/refresh-safe-before-20260607-180718-22253/selected-awg1-latest.tsv /root/hmn/backups/refresh-safe-before-20260608-042000-18279/configs-latest-readlink.txt /root/hmn/backups/refresh-safe-before-20260608-042000-18279/configs-latest-realpath.txt /root/hmn/backups/refresh-safe-before-20260608-042000-18279/ok-awg1-strict-all-latest.tsv /root/hmn/backups/refresh-safe-before-20260608-042000-18279/ok-awg1-strict-foreign-latest.tsv /root/hmn/backups/refresh-safe-before-20260608-042000-18279/selected-awg1-latest.tsv /root/hmn/backups/refresh-safe-before-20260706-161226-12417/configs-latest-readlink.txt /root/hmn/backups/refresh-safe-before-20260706-161226-12417/configs-latest-realpath.txt /root/hmn/backups/refresh-safe-before-20260706-161226-12417/ok-awg1-strict-all-latest.tsv /root/hmn/backups/refresh-safe-before-20260706-161226-12417/ok-awg1-strict-foreign-latest.tsv /root/hmn/backups/refresh-safe-before-20260706-161226-12417/selected-awg1-latest.tsv /root/hmn/backups/refresh-safe-before-20260707-042000-9733/configs-latest-readlink.txt /root/hmn/backups/refresh-safe-before-20260707-042000-9733/configs-latest-realpath.txt /root/hmn/backups/refresh-safe-before-20260707-042000-9733/ok-awg1-strict-all-latest.tsv /root/hmn/backups/refresh-safe-before-20260707-042000-9733/ok-awg1-strict-foreign-latest.tsv /root/hmn/backups/refresh-safe-before-20260707-042000-9733/selected-awg1-latest.tsv /root/hmn/backups/refresh-safe-before-20260708-042000-24122/configs-latest-readlink.txt /root/hmn/backups/refresh-safe-before-20260708-042000-24122/configs-latest-realpath.txt /root/hmn/backups/refresh-safe-before-20260708-042000-24122/ok-awg1-strict-all-latest.tsv /root/hmn/backups/refresh-safe-before-20260708-042000-24122/ok-awg1-strict-foreign-latest.tsv /root/hmn/backups/refresh-safe-before-20260708-042000-24122/selected-awg1-latest.tsv /root/hmn/backups/stage1-before-active-spare-20260601-110029/crontab-root /root/hmn/backups/stage1-before-active-spare-20260601-110029/firewall /root/hmn/backups/stage1-before-active-spare-20260601-110029/network /root/hmn/backups/stage1-before-active-spare-20260601-110029/vpn-egress-manager.sh /root/hmn/backups/stage1-before-active-spare-20260601-110029/vpn-egress-manager.sh.real /root/hmn/backups/vpn-egress-manager-before-lock-fix-20260601-122802.sh /root/hmn/cache/fail-awg1-latest.tsv /root/hmn/cache/ok-awg1-strict-all-latest.tsv /root/hmn/cache/ok-awg1-strict-all-latest.tsv.before-validate-20260707-042048 /root/hmn/cache/ok-awg1-strict-all-latest.tsv.before-validate-20260708-042044 /root/hmn/cache/ok-awg1-strict-foreign-latest.tsv /root/hmn/cache/ok-awg1-strict-foreign-latest.tsv.before-validate-20260707-042048 /root/hmn/cache/ok-awg1-strict-foreign-latest.tsv.before-validate-20260708-042044 /root/hmn/cache/ok-awg1-strict-latest.tsv /root/hmn/cache/ok-awg1-strict-latest.tsv.before-validate-20260707-042048 /root/hmn/cache/ok-awg1-strict-latest.tsv.before-validate-20260708-042044 /root/hmn/cache/quarantine-awg1-latest.tsv /root/hmn/cache/quarantine-awg1-latest.tsv.before-validate-20260706-161434 /root/hmn/cache/quarantine-awg1-latest.tsv.before-validate-20260707-042048 /root/hmn/cache/quarantine-awg1-latest.tsv.before-validate-20260708-042044 /root/hmn/cache/ranked-awg1-20260601-110304.tsv /root/hmn/cache/ranked-awg1-20260601-110707.tsv /root/hmn/cache/ranked-awg1-20260601-135559.tsv /root/hmn/cache/ranked-awg1-20260601-145208.tsv /root/hmn/cache/ranked-awg1-20260601-152436.tsv /root/hmn/cache/ranked-awg1-latest.tsv /root/hmn/cache/selected-awg1-20260601-110707.tsv /root/hmn/cache/selected-awg1-20260601-135559.tsv /root/hmn/cache/selected-awg1-20260601-145208.tsv /root/hmn/cache/selected-awg1-20260601-152436.tsv /root/hmn/cache/selected-awg1-latest.tsv /root/hmn/cache/selected-awg1-latest.tsv.before-refill-20260706-165740 /root/hmn/cache/selected-awg1-latest.tsv.before-refill-20260706-170839 /root/hmn/cache/selected-awg1-latest.tsv.before-refill-20260708-061633 /root/hmn/cache/selected-awg1-loadpath-check.tsv /root/hmn/cache/serverlist-latest.json /root/hmn/cache/wg-candidates-latest.tsv /root/hmn/cache/working-awg1-latest.tsv /root/hmn/checkpoints/stable-apply-selected-standby-only-20260601-143908.tar.gz /root/hmn/checkpoints/stable-apply-selected-standby-only-20260601-143908/99-vpn-egress-manager /root/hmn/checkpoints/stable-apply-selected-standby-only-20260601-143908/99-vpnin-policy-route /root/hmn/checkpoints/stable-apply-selected-standby-only-20260601-143908/STATUS.txt /root/hmn/checkpoints/stable-apply-selected-standby-only-20260601-143908/active-slot /root/hmn/checkpoints/stable-apply-selected-standby-only-20260601-143908/hmn-apply-selected.sh /root/hmn/checkpoints/stable-apply-selected-standby-only-20260601-143908/hmn-download-all-awg.sh /root/hmn/checkpoints/stable-apply-selected-standby-only-20260601-143908/hmn-load-vpn-slot.sh /root/hmn/checkpoints/stable-apply-selected-standby-only-20260601-143908/hmn-plan-selected.sh /root/hmn/checkpoints/stable-apply-selected-standby-only-20260601-143908/hmn-rank-awg.sh /root/hmn/checkpoints/stable-apply-selected-standby-only-20260601-143908/quarantine-awg1-latest.tsv /root/hmn/checkpoints/stable-apply-selected-standby-only-20260601-143908/ranked-awg1-latest.tsv /root/hmn/checkpoints/stable-apply-selected-standby-only-20260601-143908/selected-awg1-latest.tsv /root/hmn/checkpoints/stable-apply-selected-standby-only-20260601-143908/vpn-egress-manager.sh /root/hmn/checkpoints/stable-apply-selected-standby-only-20260601-143908/vpn-table200-local-routes.sh /root/hmn/checkpoints/stable-nightly-refresh-cron-20260601-152930.tar.gz /root/hmn/checkpoints/stable-nightly-refresh-cron-20260601-152930/99-vpn-egress-manager /root/hmn/checkpoints/stable-nightly-refresh-cron-20260601-152930/99-vpnin-policy-route /root/hmn/checkpoints/stable-nightly-refresh-cron-20260601-152930/STATUS.txt /root/hmn/checkpoints/stable-nightly-refresh-cron-20260601-152930/active-slot /root/hmn/checkpoints/stable-nightly-refresh-cron-20260601-152930/hmn-apply-selected.sh /root/hmn/checkpoints/stable-nightly-refresh-cron-20260601-152930/hmn-download-all-awg.sh /root/hmn/checkpoints/stable-nightly-refresh-cron-20260601-152930/hmn-load-vpn-slot.sh /root/hmn/checkpoints/stable-nightly-refresh-cron-20260601-152930/hmn-plan-selected.sh /root/hmn/checkpoints/stable-nightly-refresh-cron-20260601-152930/hmn-rank-awg.sh /root/hmn/checkpoints/stable-nightly-refresh-cron-20260601-152930/hmn-refresh-awg.sh /root/hmn/checkpoints/stable-nightly-refresh-cron-20260601-152930/hmn-test-all-awg.sh /root/hmn/checkpoints/stable-nightly-refresh-cron-20260601-152930/quarantine-awg1-latest.tsv /root/hmn/checkpoints/stable-nightly-refresh-cron-20260601-152930/ranked-awg1-latest.tsv /root/hmn/checkpoints/stable-nightly-refresh-cron-20260601-152930/selected-awg1-latest.tsv /root/hmn/checkpoints/stable-nightly-refresh-cron-20260601-152930/vpn-egress-manager.sh /root/hmn/checkpoints/stable-nightly-refresh-cron-20260601-152930/vpn-table200-local-routes.sh /root/hmn/checkpoints/stable-nightly-refresh-cron-20260601-152930/working-awg1-latest.tsv /root/hmn/checkpoints/stable-refresh-wrapper-standby-only-20260601-151334.tar.gz /root/hmn/checkpoints/stable-refresh-wrapper-standby-only-20260601-151334/99-vpn-egress-manager /root/hmn/checkpoints/stable-refresh-wrapper-standby-only-20260601-151334/99-vpnin-policy-route /root/hmn/checkpoints/stable-refresh-wrapper-standby-only-20260601-151334/STATUS.txt /root/hmn/checkpoints/stable-refresh-wrapper-standby-only-20260601-151334/active-slot /root/hmn/checkpoints/stable-refresh-wrapper-standby-only-20260601-151334/hmn-apply-selected.sh /root/hmn/checkpoints/stable-refresh-wrapper-standby-only-20260601-151334/hmn-download-all-awg.sh /root/hmn/checkpoints/stable-refresh-wrapper-standby-only-20260601-151334/hmn-load-vpn-slot.sh /root/hmn/checkpoints/stable-refresh-wrapper-standby-only-20260601-151334/hmn-plan-selected.sh /root/hmn/checkpoints/stable-refresh-wrapper-standby-only-20260601-151334/hmn-rank-awg.sh /root/hmn/checkpoints/stable-refresh-wrapper-standby-only-20260601-151334/hmn-refresh-awg.sh /root/hmn/checkpoints/stable-refresh-wrapper-standby-only-20260601-151334/hmn-test-all-awg.sh /root/hmn/checkpoints/stable-refresh-wrapper-standby-only-20260601-151334/quarantine-awg1-latest.tsv /root/hmn/checkpoints/stable-refresh-wrapper-standby-only-20260601-151334/ranked-awg1-latest.tsv /root/hmn/checkpoints/stable-refresh-wrapper-standby-only-20260601-151334/selected-awg1-latest.tsv /root/hmn/checkpoints/stable-refresh-wrapper-standby-only-20260601-151334/vpn-egress-manager.sh /root/hmn/checkpoints/stable-refresh-wrapper-standby-only-20260601-151334/vpn-table200-local-routes.sh /root/hmn/checkpoints/stable-refresh-wrapper-standby-only-20260601-151334/working-awg1-latest.tsv /root/hmn/checkpoints/stable-safe-failover-vpn1-amsterdam-20260601-134555.tar.gz /root/hmn/checkpoints/stable-safe-failover-vpn1-amsterdam-20260601-134555/99-vpn-egress-manager /root/hmn/checkpoints/stable-safe-failover-vpn1-amsterdam-20260601-134555/99-vpnin-policy-route /root/hmn/checkpoints/stable-safe-failover-vpn1-amsterdam-20260601-134555/STATUS.txt /root/hmn/checkpoints/stable-safe-failover-vpn1-amsterdam-20260601-134555/active-slot /root/hmn/checkpoints/stable-safe-failover-vpn1-amsterdam-20260601-134555/firewall /root/hmn/checkpoints/stable-safe-failover-vpn1-amsterdam-20260601-134555/network /root/hmn/checkpoints/stable-safe-failover-vpn1-amsterdam-20260601-134555/vpn-egress-manager.sh /root/hmn/checkpoints/stable-safe-failover-vpn1-amsterdam-20260601-134555/vpn-egress-manager.sh.before-safe-active-fallback /root/hmn/checkpoints/stable-safe-failover-vpn2-tallinn-20260601-142114.tar.gz /root/hmn/checkpoints/stable-safe-failover-vpn2-tallinn-20260601-142114/99-vpn-egress-manager /root/hmn/checkpoints/stable-safe-failover-vpn2-tallinn-20260601-142114/99-vpnin-policy-route /root/hmn/checkpoints/stable-safe-failover-vpn2-tallinn-20260601-142114/STATUS.txt /root/hmn/checkpoints/stable-safe-failover-vpn2-tallinn-20260601-142114/active-slot /root/hmn/checkpoints/stable-safe-failover-vpn2-tallinn-20260601-142114/hmn-download-all-awg.sh /root/hmn/checkpoints/stable-safe-failover-vpn2-tallinn-20260601-142114/hmn-plan-selected.sh /root/hmn/checkpoints/stable-safe-failover-vpn2-tallinn-20260601-142114/hmn-rank-awg.sh /root/hmn/checkpoints/stable-safe-failover-vpn2-tallinn-20260601-142114/quarantine-awg1-latest.tsv /root/hmn/checkpoints/stable-safe-failover-vpn2-tallinn-20260601-142114/ranked-awg1-latest.tsv /root/hmn/checkpoints/stable-safe-failover-vpn2-tallinn-20260601-142114/selected-awg1-latest.tsv /root/hmn/checkpoints/stable-safe-failover-vpn2-tallinn-20260601-142114/vpn-egress-manager.sh /root/hmn/checkpoints/stable-safe-failover-vpn2-tallinn-20260601-142114/vpn-table200-local-routes.sh /root/hmn/checkpoints/stable-vpn1-amsterdam-20260601-131612.tar.gz /root/hmn/checkpoints/stable-vpn1-amsterdam-20260601-131612/99-vpn-egress-manager /root/hmn/checkpoints/stable-vpn1-amsterdam-20260601-131612/99-vpnin-policy-route /root/hmn/checkpoints/stable-vpn1-amsterdam-20260601-131612/STATUS.txt /root/hmn/checkpoints/stable-vpn1-amsterdam-20260601-131612/active-slot /root/hmn/checkpoints/stable-vpn1-amsterdam-20260601-131612/firewall /root/hmn/checkpoints/stable-vpn1-amsterdam-20260601-131612/network /root/hmn/checkpoints/stable-vpn1-amsterdam-20260601-131612/vpn-egress-manager.sh /root/hmn/hmn-apply-selected.sh /root/hmn/hmn-clean-old-files.sh /root/hmn/hmn-code-test.sh /root/hmn/hmn-download-all-awg.sh /root/hmn/hmn-load-egress-slot.sh /root/hmn/hmn-load-vpn-slot.sh /root/hmn/hmn-load-vpn-test.sh /root/hmn/hmn-load-vpn-user.sh /root/hmn/hmn-plan-selected.sh /root/hmn/hmn-plan-selected.sh.before-active-not-top2-fix-20260601-151230 /root/hmn/hmn-pool-low-watermark-check.sh /root/hmn/hmn-rank-awg.sh /root/hmn/hmn-refill-slot.sh /root/hmn/hmn-refresh-awg.sh /root/hmn/hmn-refresh-awg.sh.before-awk-lock-20260601-152842 /root/hmn/hmn-refresh-awg.sh.before-lock-20260601-152728 /root/hmn/hmn-refresh-pool-cron.sh /root/hmn/hmn-refresh-pool-safe.sh /root/hmn/hmn-refresh-retry-cron.sh /root/hmn/hmn-set-code.sh /root/hmn/hmn-test-all-awg.sh /root/hmn/hmn-validate-current-pool.sh /root/hmn/hmn-vpn-egress-revive.sh /root/hmn/hmn-vpn-user-override.sh /root/hmn/hmn.env /root/hmn/logs/cron-refresh-pool-safe-last.log /root/hmn/logs/cron-refresh-retry-last.log /root/hmn/logs/h42e-reboot-forensics-vm101-20260603-165459.txt /root/hmn/logs/low-watermark-last.log /root/hmn/logs/refresh-pool-safe-20260706-161226-12417.log /root/hmn/logs/refresh-pool-safe-20260707-042000-9733.log /root/hmn/logs/refresh-pool-safe-20260708-042000-24122.log /root/hmn/logs/validate-current-pool-20260706-161434.log /root/hmn/logs/validate-current-pool-20260707-042048.log /root/hmn/logs/validate-current-pool-20260708-042044.log /root/hmn/logs/vpn-egress-revive-last.log /root/hmn/logs/vpn-user-override.log /root/hmn/patch-backups/20260701-vpn-egress-active-restart-20260701-082248/crontab-root /root/hmn/patch-backups/20260701-vpn-egress-active-restart-20260701-082248/system /root/hmn/patch-backups/20260701-vpn-egress-active-restart-20260701-082248/vpn-egress-manager.sh /root/hmn/patch-backups/20260702-vpn-user-base-20260706-100031/crontab.before /root/hmn/patch-backups/20260702-vpn-user-base-20260706-100031/firewall.before /root/hmn/patch-backups/20260702-vpn-user-base-20260706-100031/network.before /root/hmn/patch-backups/20260702-vpn-user-base-20260706-100031/uci-firewall.before /root/hmn/patch-backups/20260702-vpn-user-base-20260706-100031/uci-network.before /root/hmn/patch-backups/20260702-vpn-user-loader-output-sanitize-20260706-100032/hmn-load-vpn-user.sh.before /root/hmn/patch-backups/20260702-vpn-user-loader-output-sanitize-20260706-142437/hmn-load-vpn-user.sh.before /root/hmn/patch-backups/20260703-vm101-vpn-egress-revive-script-20260706-142437/hmn-vpn-egress-revive.sh.before /root/hmn/patch-backups/20260703-vpn-user-override-backend-20260706-100032/crontab.before /root/hmn/patch-backups/20260703-vpn-user-override-backend-20260706-100032/vpn-egress-manager.sh.before /root/hmn/refill.log /root/hmn/reports/ok-awg1-strict-all-20260603-162225.tsv /root/hmn/reports/ok-awg1-strict-all-20260604-042130.tsv /root/hmn/reports/ok-awg1-strict-all-20260605-042129.tsv /root/hmn/reports/ok-awg1-strict-all-20260606-042128.tsv /root/hmn/reports/ok-awg1-strict-all-20260606-180839.tsv /root/hmn/reports/ok-awg1-strict-all-20260607-042129.tsv /root/hmn/reports/ok-awg1-strict-all-20260607-122354.tsv /root/hmn/reports/ok-awg1-strict-all-20260607-181002.tsv /root/hmn/reports/ok-awg1-strict-all-20260608-042050.tsv /root/hmn/reports/ok-awg1-strict-all-20260706-161434.tsv /root/hmn/reports/ok-awg1-strict-all-20260707-042048.tsv /root/hmn/reports/ok-awg1-strict-all-20260708-042044.tsv /root/hmn/reports/ok-awg1-strict-foreign-20260603-162225.tsv /root/hmn/reports/ok-awg1-strict-foreign-20260604-042130.tsv /root/hmn/reports/ok-awg1-strict-foreign-20260605-042129.tsv /root/hmn/reports/ok-awg1-strict-foreign-20260606-042128.tsv /root/hmn/reports/ok-awg1-strict-foreign-20260606-180839.tsv /root/hmn/reports/ok-awg1-strict-foreign-20260607-042129.tsv /root/hmn/reports/ok-awg1-strict-foreign-20260607-122354.tsv /root/hmn/reports/ok-awg1-strict-foreign-20260607-181002.tsv /root/hmn/reports/ok-awg1-strict-foreign-20260608-042050.tsv /root/hmn/reports/ok-awg1-strict-foreign-20260706-161434.tsv /root/hmn/reports/ok-awg1-strict-foreign-20260707-042048.tsv /root/hmn/reports/ok-awg1-strict-foreign-20260708-042044.tsv /root/hmn/runs/20260601-100614/fail-awg1.tsv /root/hmn/runs/20260601-100614/serverlist.json /root/hmn/runs/20260601-100614/summary.txt /root/hmn/runs/20260601-100614/wg-candidates.tsv /root/hmn/runs/20260601-100614/working-awg1.tsv /root/hmn/runs/20260601-144311/fail-awg1.tsv /root/hmn/runs/20260601-144311/quarantine-before-reset-awg1.tsv /root/hmn/runs/20260601-144311/serverlist.json /root/hmn/runs/20260601-144311/summary.txt /root/hmn/runs/20260601-144311/wg-candidates.tsv /root/hmn/runs/20260601-144311/working-awg1.tsv /root/hmn/runs/20260601-151531/fail-awg1.tsv /root/hmn/runs/20260601-151531/quarantine-before-reset-awg1.tsv /root/hmn/runs/20260601-151531/serverlist.json /root/hmn/runs/20260601-151531/summary.txt /root/hmn/runs/20260601-151531/wg-candidates.tsv /root/hmn/runs/20260601-151531/working-awg1.tsv /root/hmn/runs/20260604-042000/fail-awg1.tsv /root/hmn/runs/20260604-042000/quarantine-before-reset-awg1.tsv /root/hmn/runs/20260604-042000/serverlist.json /root/hmn/runs/20260604-042000/summary.txt /root/hmn/runs/20260604-042000/wg-candidates.tsv /root/hmn/runs/20260604-042000/working-awg1.tsv /root/hmn/runs/20260605-042000/fail-awg1.tsv /root/hmn/runs/20260605-042000/quarantine-before-reset-awg1.tsv /root/hmn/runs/20260605-042000/serverlist.json /root/hmn/runs/20260605-042000/summary.txt /root/hmn/runs/20260605-042000/wg-candidates.tsv /root/hmn/runs/20260605-042000/working-awg1.tsv /root/hmn/runs/20260606-042000/fail-awg1.tsv /root/hmn/runs/20260606-042000/quarantine-before-reset-awg1.tsv /root/hmn/runs/20260606-042000/serverlist.json /root/hmn/runs/20260606-042000/summary.txt /root/hmn/runs/20260606-042000/wg-candidates.tsv /root/hmn/runs/20260606-042000/working-awg1.tsv /root/hmn/runs/20260606-180709/fail-awg1.tsv /root/hmn/runs/20260606-180709/quarantine-before-reset-awg1.tsv /root/hmn/runs/20260606-180709/serverlist.json /root/hmn/runs/20260606-180709/summary.txt /root/hmn/runs/20260606-180709/wg-candidates.tsv /root/hmn/runs/20260606-180709/working-awg1.tsv /root/hmn/runs/20260607-042000/fail-awg1.tsv /root/hmn/runs/20260607-042000/quarantine-before-reset-awg1.tsv /root/hmn/runs/20260607-042000/serverlist.json /root/hmn/runs/20260607-042000/summary.txt /root/hmn/runs/20260607-042000/wg-candidates.tsv /root/hmn/runs/20260607-042000/working-awg1.tsv /root/hmn/runs/20260607-120709/fail-awg1.tsv /root/hmn/runs/20260607-120709/quarantine-before-reset-awg1.tsv /root/hmn/runs/20260607-120709/serverlist.json /root/hmn/runs/20260607-120709/summary.txt /root/hmn/runs/20260607-120709/wg-candidates.tsv /root/hmn/runs/20260607-120709/working-awg1.tsv /root/hmn/runs/20260607-122209/fail-awg1.tsv /root/hmn/runs/20260607-122209/quarantine-before-reset-awg1.tsv /root/hmn/runs/20260607-122209/serverlist.json /root/hmn/runs/20260607-122209/summary.txt /root/hmn/runs/20260607-122209/wg-candidates.tsv /root/hmn/runs/20260607-122209/working-awg1.tsv /root/hmn/runs/20260607-180718/fail-awg1.tsv /root/hmn/runs/20260607-180718/quarantine-before-reset-awg1.tsv /root/hmn/runs/20260607-180718/serverlist.json /root/hmn/runs/20260607-180718/summary.txt /root/hmn/runs/20260607-180718/wg-candidates.tsv /root/hmn/runs/20260607-180718/working-awg1.tsv /root/hmn/runs/20260608-042000/fail-awg1.tsv /root/hmn/runs/20260608-042000/quarantine-before-reset-awg1.tsv /root/hmn/runs/20260608-042000/serverlist.json /root/hmn/runs/20260608-042000/summary.txt /root/hmn/runs/20260608-042000/wg-candidates.tsv /root/hmn/runs/20260608-042000/working-awg1.tsv /root/hmn/runs/20260706-161226/fail-awg1.tsv /root/hmn/runs/20260706-161226/quarantine-before-reset-awg1.tsv /root/hmn/runs/20260706-161226/serverlist.json /root/hmn/runs/20260706-161226/summary.txt /root/hmn/runs/20260706-161226/wg-candidates.tsv /root/hmn/runs/20260706-161226/working-awg1.tsv /root/hmn/runs/20260707-042000/fail-awg1.tsv /root/hmn/runs/20260707-042000/quarantine-before-reset-awg1.tsv /root/hmn/runs/20260707-042000/serverlist.json /root/hmn/runs/20260707-042000/summary.txt /root/hmn/runs/20260707-042000/wg-candidates.tsv /root/hmn/runs/20260707-042000/working-awg1.tsv /root/hmn/runs/20260708-042000/fail-awg1.tsv /root/hmn/runs/20260708-042000/quarantine-before-reset-awg1.tsv /root/hmn/runs/20260708-042000/serverlist.json /root/hmn/runs/20260708-042000/summary.txt /root/hmn/runs/20260708-042000/wg-candidates.tsv /root/hmn/runs/20260708-042000/working-awg1.tsv /root/hmn/state/active-slot /root/hmn/state/bad-endpoints-20260603.txt /root/hmn/state/bad-endpoints-20260604.txt /root/hmn/state/bad-endpoints-20260605.txt /root/hmn/state/bad-endpoints-20260606.txt /root/hmn/state/bad-endpoints-20260607.txt /root/hmn/state/bad-endpoints-20260608.txt /root/hmn/state/bad-endpoints-20260706.txt /root/hmn/state/bad-endpoints-20260706.txt.before-validate-20260706-161434 /root/hmn/state/bad-endpoints-20260707.txt /root/hmn/state/bad-endpoints-20260708.txt /root/hmn/state/last-cron-refresh-finished-at /root/hmn/state/last-cron-refresh-rc /root/hmn/state/last-fresh-download-at /root/hmn/state/last-fresh-download-rc /root/hmn/state/last-low-watermark-check /root/hmn/state/last-low-watermark-decision /root/hmn/state/last-low-watermark-refresh-finished-at /root/hmn/state/last-low-watermark-refresh-rc /root/hmn/state/last-low-watermark-refresh-started-at /root/hmn/state/last-refresh-pool-source /root/hmn/state/last-refresh-retry-checked-at /root/hmn/state/last-refresh-retry-decision /root/hmn/state/last-refresh-status-at /root/hmn/state/last-vpn-egress-revive /root/hmn/state/patch-20260701-vpn-egress-active-restart.applied /root/hmn/state/patch-20260702-vpn-user-base.applied /root/hmn/state/patch-20260702-vpn-user-loader-output-sanitize.applied /root/hmn/state/patch-20260703-vm101-vpn-egress-revive-script.applied /root/hmn/state/patch-20260703-vpn-user-override-backend.applied /root/hmn/state/refresh-status /root/hmn/test-runs/20260601-102626/results.tsv /root/hmn/test-runs/20260601-102735/012-DK-Denmark-Copenhagen-S4-91.132.92.254-awg1.conf.ifup.log /root/hmn/test-runs/20260601-102735/012-DK-Denmark-Copenhagen-S4-91.132.92.254-awg1.conf.load.log /root/hmn/test-runs/20260601-102735/012-DK-Denmark-Copenhagen-S4-91.132.92.254-awg1.conf.ping.txt /root/hmn/test-runs/20260601-102735/012-DK-Denmark-Copenhagen-S4-91.132.92.254-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-102735/012-DK-Denmark-Copenhagen-S4-91.132.92.254-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-102735/029-UA-Ukraine-Kyiv-S3-38.244.192.244-awg1.conf.ifup.log /root/hmn/test-runs/20260601-102735/029-UA-Ukraine-Kyiv-S3-38.244.192.244-awg1.conf.load.log /root/hmn/test-runs/20260601-102735/029-UA-Ukraine-Kyiv-S3-38.244.192.244-awg1.conf.ping.txt /root/hmn/test-runs/20260601-102735/029-UA-Ukraine-Kyiv-S3-38.244.192.244-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-102735/029-UA-Ukraine-Kyiv-S3-38.244.192.244-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-102735/049-DE-Germany-Berlin-S7-157.173.27.69-awg1.conf.ifup.log /root/hmn/test-runs/20260601-102735/049-DE-Germany-Berlin-S7-157.173.27.69-awg1.conf.load.log /root/hmn/test-runs/20260601-102735/049-DE-Germany-Berlin-S7-157.173.27.69-awg1.conf.ping.txt /root/hmn/test-runs/20260601-102735/049-DE-Germany-Berlin-S7-157.173.27.69-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-102735/049-DE-Germany-Berlin-S7-157.173.27.69-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-102735/053-FI-Finland-Helsinki-S4-83.172.150.55-awg1.conf.ifup.log /root/hmn/test-runs/20260601-102735/053-FI-Finland-Helsinki-S4-83.172.150.55-awg1.conf.load.log /root/hmn/test-runs/20260601-102735/053-FI-Finland-Helsinki-S4-83.172.150.55-awg1.conf.ping.txt /root/hmn/test-runs/20260601-102735/053-FI-Finland-Helsinki-S4-83.172.150.55-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-102735/053-FI-Finland-Helsinki-S4-83.172.150.55-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-102735/062-BE-Belgium-Oostkamp-S7-194.71.227.212-awg1.conf.ifup.log /root/hmn/test-runs/20260601-102735/062-BE-Belgium-Oostkamp-S7-194.71.227.212-awg1.conf.load.log /root/hmn/test-runs/20260601-102735/062-BE-Belgium-Oostkamp-S7-194.71.227.212-awg1.conf.ping.txt /root/hmn/test-runs/20260601-102735/062-BE-Belgium-Oostkamp-S7-194.71.227.212-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-102735/062-BE-Belgium-Oostkamp-S7-194.71.227.212-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-102735/063-CL-Chile-Santiago-38.7.197.83-awg1.conf.ifup.log /root/hmn/test-runs/20260601-102735/063-CL-Chile-Santiago-38.7.197.83-awg1.conf.load.log /root/hmn/test-runs/20260601-102735/063-CL-Chile-Santiago-38.7.197.83-awg1.conf.ping.txt /root/hmn/test-runs/20260601-102735/063-CL-Chile-Santiago-38.7.197.83-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-102735/063-CL-Chile-Santiago-38.7.197.83-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-102735/070-CZ-Czech-Republic-Prague-S1-193.235.207.122-awg1.conf.ifup.log /root/hmn/test-runs/20260601-102735/070-CZ-Czech-Republic-Prague-S1-193.235.207.122-awg1.conf.load.log /root/hmn/test-runs/20260601-102735/070-CZ-Czech-Republic-Prague-S1-193.235.207.122-awg1.conf.ping.txt /root/hmn/test-runs/20260601-102735/070-CZ-Czech-Republic-Prague-S1-193.235.207.122-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-102735/070-CZ-Czech-Republic-Prague-S1-193.235.207.122-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-102735/071-US-USA-Los-Angeles-S2-107.172.187.98-awg1.conf.ifup.log /root/hmn/test-runs/20260601-102735/071-US-USA-Los-Angeles-S2-107.172.187.98-awg1.conf.load.log /root/hmn/test-runs/20260601-102735/071-US-USA-Los-Angeles-S2-107.172.187.98-awg1.conf.ping.txt /root/hmn/test-runs/20260601-102735/071-US-USA-Los-Angeles-S2-107.172.187.98-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-102735/071-US-USA-Los-Angeles-S2-107.172.187.98-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-102735/073-TR-Turkey-Istanbul-S3-84.32.230.159-awg1.conf.ifup.log /root/hmn/test-runs/20260601-102735/073-TR-Turkey-Istanbul-S3-84.32.230.159-awg1.conf.load.log /root/hmn/test-runs/20260601-102735/073-TR-Turkey-Istanbul-S3-84.32.230.159-awg1.conf.ping.txt /root/hmn/test-runs/20260601-102735/073-TR-Turkey-Istanbul-S3-84.32.230.159-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-102735/073-TR-Turkey-Istanbul-S3-84.32.230.159-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-102735/075-NL-Netherlands-Amsterdam-H13-95.211.68.119-awg1.conf.ifup.log /root/hmn/test-runs/20260601-102735/075-NL-Netherlands-Amsterdam-H13-95.211.68.119-awg1.conf.load.log /root/hmn/test-runs/20260601-102735/075-NL-Netherlands-Amsterdam-H13-95.211.68.119-awg1.conf.ping.txt /root/hmn/test-runs/20260601-102735/075-NL-Netherlands-Amsterdam-H13-95.211.68.119-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-102735/075-NL-Netherlands-Amsterdam-H13-95.211.68.119-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-102735/076-IT-Italy-Milan-S3-149.154.157.204-awg1.conf.ifup.log /root/hmn/test-runs/20260601-102735/076-IT-Italy-Milan-S3-149.154.157.204-awg1.conf.load.log /root/hmn/test-runs/20260601-102735/076-IT-Italy-Milan-S3-149.154.157.204-awg1.conf.ping.txt /root/hmn/test-runs/20260601-102735/076-IT-Italy-Milan-S3-149.154.157.204-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-102735/076-IT-Italy-Milan-S3-149.154.157.204-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-102735/087-US-USA-New-York-S1-192.3.9.146-awg1.conf.ifup.log /root/hmn/test-runs/20260601-102735/087-US-USA-New-York-S1-192.3.9.146-awg1.conf.load.log /root/hmn/test-runs/20260601-102735/087-US-USA-New-York-S1-192.3.9.146-awg1.conf.ping.txt /root/hmn/test-runs/20260601-102735/087-US-USA-New-York-S1-192.3.9.146-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-102735/087-US-USA-New-York-S1-192.3.9.146-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-102735/088-US-USA-Dallas-75.127.5.178-awg1.conf.ifup.log /root/hmn/test-runs/20260601-102735/088-US-USA-Dallas-75.127.5.178-awg1.conf.load.log /root/hmn/test-runs/20260601-102735/088-US-USA-Dallas-75.127.5.178-awg1.conf.ping.txt /root/hmn/test-runs/20260601-102735/088-US-USA-Dallas-75.127.5.178-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-102735/088-US-USA-Dallas-75.127.5.178-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-102735/094-JP-Japan-Tokyo-192.121.162.75-awg1.conf.ifup.log /root/hmn/test-runs/20260601-102735/094-JP-Japan-Tokyo-192.121.162.75-awg1.conf.load.log /root/hmn/test-runs/20260601-102735/094-JP-Japan-Tokyo-192.121.162.75-awg1.conf.ping.txt /root/hmn/test-runs/20260601-102735/094-JP-Japan-Tokyo-192.121.162.75-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-102735/094-JP-Japan-Tokyo-192.121.162.75-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-102735/108-HU-Hungary-Budapest-S6-89.46.237.14-awg1.conf.ifup.log /root/hmn/test-runs/20260601-102735/108-HU-Hungary-Budapest-S6-89.46.237.14-awg1.conf.load.log /root/hmn/test-runs/20260601-102735/108-HU-Hungary-Budapest-S6-89.46.237.14-awg1.conf.ping.txt /root/hmn/test-runs/20260601-102735/108-HU-Hungary-Budapest-S6-89.46.237.14-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-102735/108-HU-Hungary-Budapest-S6-89.46.237.14-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-102735/114-PS-UAE-Dubai-103.57.251.39-awg1.conf.ifup.log /root/hmn/test-runs/20260601-102735/114-PS-UAE-Dubai-103.57.251.39-awg1.conf.load.log /root/hmn/test-runs/20260601-102735/114-PS-UAE-Dubai-103.57.251.39-awg1.conf.ping.txt /root/hmn/test-runs/20260601-102735/114-PS-UAE-Dubai-103.57.251.39-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-102735/114-PS-UAE-Dubai-103.57.251.39-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-102735/115-NO-Norway-Sandefjord-S15-185.14.97.151-awg1.conf.ifup.log /root/hmn/test-runs/20260601-102735/115-NO-Norway-Sandefjord-S15-185.14.97.151-awg1.conf.load.log /root/hmn/test-runs/20260601-102735/115-NO-Norway-Sandefjord-S15-185.14.97.151-awg1.conf.ping.txt /root/hmn/test-runs/20260601-102735/115-NO-Norway-Sandefjord-S15-185.14.97.151-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-102735/115-NO-Norway-Sandefjord-S15-185.14.97.151-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-102735/117-US-USA-New-York-City-S3-64.253.89.235-awg1.conf.ifup.log /root/hmn/test-runs/20260601-102735/117-US-USA-New-York-City-S3-64.253.89.235-awg1.conf.load.log /root/hmn/test-runs/20260601-102735/117-US-USA-New-York-City-S3-64.253.89.235-awg1.conf.ping.txt /root/hmn/test-runs/20260601-102735/117-US-USA-New-York-City-S3-64.253.89.235-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-102735/117-US-USA-New-York-City-S3-64.253.89.235-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-102735/118-RU-Russia-Moscow-S5-141.98.189.83-awg1.conf.ifup.log /root/hmn/test-runs/20260601-102735/118-RU-Russia-Moscow-S5-141.98.189.83-awg1.conf.load.log /root/hmn/test-runs/20260601-102735/118-RU-Russia-Moscow-S5-141.98.189.83-awg1.conf.ping.txt /root/hmn/test-runs/20260601-102735/118-RU-Russia-Moscow-S5-141.98.189.83-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-102735/118-RU-Russia-Moscow-S5-141.98.189.83-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-102735/128-LV-Latvia-Riga-S1-192.121.163.235-awg1.conf.ifup.log /root/hmn/test-runs/20260601-102735/128-LV-Latvia-Riga-S1-192.121.163.235-awg1.conf.load.log /root/hmn/test-runs/20260601-102735/128-LV-Latvia-Riga-S1-192.121.163.235-awg1.conf.ping.txt /root/hmn/test-runs/20260601-102735/128-LV-Latvia-Riga-S1-192.121.163.235-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-102735/128-LV-Latvia-Riga-S1-192.121.163.235-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-102735/129-CH-Switzerland-Zurich-S2-188.190.4.220-awg1.conf.ifup.log /root/hmn/test-runs/20260601-102735/129-CH-Switzerland-Zurich-S2-188.190.4.220-awg1.conf.load.log /root/hmn/test-runs/20260601-102735/129-CH-Switzerland-Zurich-S2-188.190.4.220-awg1.conf.ping.txt /root/hmn/test-runs/20260601-102735/129-CH-Switzerland-Zurich-S2-188.190.4.220-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-102735/129-CH-Switzerland-Zurich-S2-188.190.4.220-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-102735/133-SE-Sweden-Stockholm-S2-46.246.127.84-awg1.conf.ifup.log /root/hmn/test-runs/20260601-102735/133-SE-Sweden-Stockholm-S2-46.246.127.84-awg1.conf.load.log /root/hmn/test-runs/20260601-102735/133-SE-Sweden-Stockholm-S2-46.246.127.84-awg1.conf.ping.txt /root/hmn/test-runs/20260601-102735/133-SE-Sweden-Stockholm-S2-46.246.127.84-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-102735/133-SE-Sweden-Stockholm-S2-46.246.127.84-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-102735/141-RS-Serbia-Belgrade-S2-89.31.121.82-awg1.conf.ifup.log /root/hmn/test-runs/20260601-102735/141-RS-Serbia-Belgrade-S2-89.31.121.82-awg1.conf.load.log /root/hmn/test-runs/20260601-102735/141-RS-Serbia-Belgrade-S2-89.31.121.82-awg1.conf.ping.txt /root/hmn/test-runs/20260601-102735/141-RS-Serbia-Belgrade-S2-89.31.121.82-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-102735/141-RS-Serbia-Belgrade-S2-89.31.121.82-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-102735/146-GB-United-Kingdom-London-S1-37.235.54.96-awg1.conf.ifup.log /root/hmn/test-runs/20260601-102735/146-GB-United-Kingdom-London-S1-37.235.54.96-awg1.conf.load.log /root/hmn/test-runs/20260601-102735/146-GB-United-Kingdom-London-S1-37.235.54.96-awg1.conf.ping.txt /root/hmn/test-runs/20260601-102735/146-GB-United-Kingdom-London-S1-37.235.54.96-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-102735/146-GB-United-Kingdom-London-S1-37.235.54.96-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-102735/149-AT-Austria-Vienna-S3-157.173.25.198-awg1.conf.ifup.log /root/hmn/test-runs/20260601-102735/149-AT-Austria-Vienna-S3-157.173.25.198-awg1.conf.load.log /root/hmn/test-runs/20260601-102735/149-AT-Austria-Vienna-S3-157.173.25.198-awg1.conf.ping.txt /root/hmn/test-runs/20260601-102735/149-AT-Austria-Vienna-S3-157.173.25.198-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-102735/149-AT-Austria-Vienna-S3-157.173.25.198-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-102735/150-NL-Netherlands-Amsterdam-R5-178.215.227.13-awg1.conf.ifup.log /root/hmn/test-runs/20260601-102735/150-NL-Netherlands-Amsterdam-R5-178.215.227.13-awg1.conf.load.log /root/hmn/test-runs/20260601-102735/150-NL-Netherlands-Amsterdam-R5-178.215.227.13-awg1.conf.ping.txt /root/hmn/test-runs/20260601-102735/150-NL-Netherlands-Amsterdam-R5-178.215.227.13-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-102735/150-NL-Netherlands-Amsterdam-R5-178.215.227.13-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-102735/153-SI-Slovenia-Ljubljana-S3-192.71.244.202-awg1.conf.ifup.log /root/hmn/test-runs/20260601-102735/153-SI-Slovenia-Ljubljana-S3-192.71.244.202-awg1.conf.load.log /root/hmn/test-runs/20260601-102735/153-SI-Slovenia-Ljubljana-S3-192.71.244.202-awg1.conf.ping.txt /root/hmn/test-runs/20260601-102735/153-SI-Slovenia-Ljubljana-S3-192.71.244.202-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-102735/153-SI-Slovenia-Ljubljana-S3-192.71.244.202-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-102735/171-FR-France-Paris-S1-158.255.215.31-awg1.conf.ifup.log /root/hmn/test-runs/20260601-102735/171-FR-France-Paris-S1-158.255.215.31-awg1.conf.load.log /root/hmn/test-runs/20260601-102735/171-FR-France-Paris-S1-158.255.215.31-awg1.conf.ping.txt /root/hmn/test-runs/20260601-102735/171-FR-France-Paris-S1-158.255.215.31-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-102735/171-FR-France-Paris-S1-158.255.215.31-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-102735/180-AT-Austria-Graz-S1-151.236.30.139-awg1.conf.ifup.log /root/hmn/test-runs/20260601-102735/180-AT-Austria-Graz-S1-151.236.30.139-awg1.conf.load.log /root/hmn/test-runs/20260601-102735/180-AT-Austria-Graz-S1-151.236.30.139-awg1.conf.ping.txt /root/hmn/test-runs/20260601-102735/180-AT-Austria-Graz-S1-151.236.30.139-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-102735/180-AT-Austria-Graz-S1-151.236.30.139-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-102735/201-GE-Georgia-Tbilisi-45.136.124.112-awg1.conf.ifup.log /root/hmn/test-runs/20260601-102735/201-GE-Georgia-Tbilisi-45.136.124.112-awg1.conf.load.log /root/hmn/test-runs/20260601-102735/201-GE-Georgia-Tbilisi-45.136.124.112-awg1.conf.ping.txt /root/hmn/test-runs/20260601-102735/201-GE-Georgia-Tbilisi-45.136.124.112-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-102735/201-GE-Georgia-Tbilisi-45.136.124.112-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-102735/206-HK-Hong-Kong-Central-District-S2-112.120.98.53-awg1.conf.ifup.log /root/hmn/test-runs/20260601-102735/206-HK-Hong-Kong-Central-District-S2-112.120.98.53-awg1.conf.load.log /root/hmn/test-runs/20260601-102735/206-HK-Hong-Kong-Central-District-S2-112.120.98.53-awg1.conf.ping.txt /root/hmn/test-runs/20260601-102735/206-HK-Hong-Kong-Central-District-S2-112.120.98.53-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-102735/206-HK-Hong-Kong-Central-District-S2-112.120.98.53-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-102735/214-EE-Estonia-Tallinn-S2-95.156.206.18-awg1.conf.ifup.log /root/hmn/test-runs/20260601-102735/214-EE-Estonia-Tallinn-S2-95.156.206.18-awg1.conf.load.log /root/hmn/test-runs/20260601-102735/214-EE-Estonia-Tallinn-S2-95.156.206.18-awg1.conf.ping.txt /root/hmn/test-runs/20260601-102735/214-EE-Estonia-Tallinn-S2-95.156.206.18-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-102735/214-EE-Estonia-Tallinn-S2-95.156.206.18-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-102735/225-IL-Israel-Tel-Aviv-S5-192.71.27.64-awg1.conf.ifup.log /root/hmn/test-runs/20260601-102735/225-IL-Israel-Tel-Aviv-S5-192.71.27.64-awg1.conf.load.log /root/hmn/test-runs/20260601-102735/225-IL-Israel-Tel-Aviv-S5-192.71.27.64-awg1.conf.ping.txt /root/hmn/test-runs/20260601-102735/225-IL-Israel-Tel-Aviv-S5-192.71.27.64-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-102735/225-IL-Israel-Tel-Aviv-S5-192.71.27.64-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-102735/227-US-USA-Ashburn-142.202.49.112-awg1.conf.ifup.log /root/hmn/test-runs/20260601-102735/227-US-USA-Ashburn-142.202.49.112-awg1.conf.load.log /root/hmn/test-runs/20260601-102735/227-US-USA-Ashburn-142.202.49.112-awg1.conf.ping.txt /root/hmn/test-runs/20260601-102735/227-US-USA-Ashburn-142.202.49.112-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-102735/227-US-USA-Ashburn-142.202.49.112-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-102735/228-US-USA-Utah-192.154.104.162-awg1.conf.ifup.log /root/hmn/test-runs/20260601-102735/228-US-USA-Utah-192.154.104.162-awg1.conf.load.log /root/hmn/test-runs/20260601-102735/228-US-USA-Utah-192.154.104.162-awg1.conf.ping.txt /root/hmn/test-runs/20260601-102735/228-US-USA-Utah-192.154.104.162-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-102735/228-US-USA-Utah-192.154.104.162-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-102735/results.tsv /root/hmn/test-runs/20260601-144432/012-DK-Denmark-Copenhagen-S4-91.132.92.254-awg1.conf.ifup.log /root/hmn/test-runs/20260601-144432/012-DK-Denmark-Copenhagen-S4-91.132.92.254-awg1.conf.load.log /root/hmn/test-runs/20260601-144432/012-DK-Denmark-Copenhagen-S4-91.132.92.254-awg1.conf.ping.txt /root/hmn/test-runs/20260601-144432/012-DK-Denmark-Copenhagen-S4-91.132.92.254-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-144432/012-DK-Denmark-Copenhagen-S4-91.132.92.254-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-144432/029-UA-Ukraine-Kyiv-S3-38.244.192.244-awg1.conf.ifup.log /root/hmn/test-runs/20260601-144432/029-UA-Ukraine-Kyiv-S3-38.244.192.244-awg1.conf.load.log /root/hmn/test-runs/20260601-144432/029-UA-Ukraine-Kyiv-S3-38.244.192.244-awg1.conf.ping.txt /root/hmn/test-runs/20260601-144432/029-UA-Ukraine-Kyiv-S3-38.244.192.244-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-144432/029-UA-Ukraine-Kyiv-S3-38.244.192.244-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-144432/049-DE-Germany-Berlin-S7-157.173.27.69-awg1.conf.ifup.log /root/hmn/test-runs/20260601-144432/049-DE-Germany-Berlin-S7-157.173.27.69-awg1.conf.load.log /root/hmn/test-runs/20260601-144432/049-DE-Germany-Berlin-S7-157.173.27.69-awg1.conf.ping.txt /root/hmn/test-runs/20260601-144432/049-DE-Germany-Berlin-S7-157.173.27.69-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-144432/049-DE-Germany-Berlin-S7-157.173.27.69-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-144432/053-FI-Finland-Helsinki-S4-83.172.150.55-awg1.conf.ifup.log /root/hmn/test-runs/20260601-144432/053-FI-Finland-Helsinki-S4-83.172.150.55-awg1.conf.load.log /root/hmn/test-runs/20260601-144432/053-FI-Finland-Helsinki-S4-83.172.150.55-awg1.conf.ping.txt /root/hmn/test-runs/20260601-144432/053-FI-Finland-Helsinki-S4-83.172.150.55-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-144432/053-FI-Finland-Helsinki-S4-83.172.150.55-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-144432/062-BE-Belgium-Oostkamp-S7-194.71.227.212-awg1.conf.ifup.log /root/hmn/test-runs/20260601-144432/062-BE-Belgium-Oostkamp-S7-194.71.227.212-awg1.conf.load.log /root/hmn/test-runs/20260601-144432/062-BE-Belgium-Oostkamp-S7-194.71.227.212-awg1.conf.ping.txt /root/hmn/test-runs/20260601-144432/062-BE-Belgium-Oostkamp-S7-194.71.227.212-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-144432/062-BE-Belgium-Oostkamp-S7-194.71.227.212-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-144432/063-CL-Chile-Santiago-38.7.197.83-awg1.conf.ifup.log /root/hmn/test-runs/20260601-144432/063-CL-Chile-Santiago-38.7.197.83-awg1.conf.load.log /root/hmn/test-runs/20260601-144432/063-CL-Chile-Santiago-38.7.197.83-awg1.conf.ping.txt /root/hmn/test-runs/20260601-144432/063-CL-Chile-Santiago-38.7.197.83-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-144432/063-CL-Chile-Santiago-38.7.197.83-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-144432/070-CZ-Czech-Republic-Prague-S1-193.235.207.122-awg1.conf.ifup.log /root/hmn/test-runs/20260601-144432/070-CZ-Czech-Republic-Prague-S1-193.235.207.122-awg1.conf.load.log /root/hmn/test-runs/20260601-144432/070-CZ-Czech-Republic-Prague-S1-193.235.207.122-awg1.conf.ping.txt /root/hmn/test-runs/20260601-144432/070-CZ-Czech-Republic-Prague-S1-193.235.207.122-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-144432/070-CZ-Czech-Republic-Prague-S1-193.235.207.122-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-144432/071-US-USA-Los-Angeles-S2-107.172.187.98-awg1.conf.ifup.log /root/hmn/test-runs/20260601-144432/071-US-USA-Los-Angeles-S2-107.172.187.98-awg1.conf.load.log /root/hmn/test-runs/20260601-144432/071-US-USA-Los-Angeles-S2-107.172.187.98-awg1.conf.ping.txt /root/hmn/test-runs/20260601-144432/071-US-USA-Los-Angeles-S2-107.172.187.98-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-144432/071-US-USA-Los-Angeles-S2-107.172.187.98-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-144432/073-TR-Turkey-Istanbul-S3-84.32.230.159-awg1.conf.ifup.log /root/hmn/test-runs/20260601-144432/073-TR-Turkey-Istanbul-S3-84.32.230.159-awg1.conf.load.log /root/hmn/test-runs/20260601-144432/073-TR-Turkey-Istanbul-S3-84.32.230.159-awg1.conf.ping.txt /root/hmn/test-runs/20260601-144432/073-TR-Turkey-Istanbul-S3-84.32.230.159-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-144432/073-TR-Turkey-Istanbul-S3-84.32.230.159-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-144432/075-NL-Netherlands-Amsterdam-H13-95.211.68.119-awg1.conf.ifup.log /root/hmn/test-runs/20260601-144432/075-NL-Netherlands-Amsterdam-H13-95.211.68.119-awg1.conf.load.log /root/hmn/test-runs/20260601-144432/075-NL-Netherlands-Amsterdam-H13-95.211.68.119-awg1.conf.ping.txt /root/hmn/test-runs/20260601-144432/075-NL-Netherlands-Amsterdam-H13-95.211.68.119-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-144432/075-NL-Netherlands-Amsterdam-H13-95.211.68.119-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-144432/076-IT-Italy-Milan-S3-149.154.157.204-awg1.conf.ifup.log /root/hmn/test-runs/20260601-144432/076-IT-Italy-Milan-S3-149.154.157.204-awg1.conf.load.log /root/hmn/test-runs/20260601-144432/076-IT-Italy-Milan-S3-149.154.157.204-awg1.conf.ping.txt /root/hmn/test-runs/20260601-144432/076-IT-Italy-Milan-S3-149.154.157.204-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-144432/076-IT-Italy-Milan-S3-149.154.157.204-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-144432/087-US-USA-New-York-S1-192.3.9.146-awg1.conf.ifup.log /root/hmn/test-runs/20260601-144432/087-US-USA-New-York-S1-192.3.9.146-awg1.conf.load.log /root/hmn/test-runs/20260601-144432/087-US-USA-New-York-S1-192.3.9.146-awg1.conf.ping.txt /root/hmn/test-runs/20260601-144432/087-US-USA-New-York-S1-192.3.9.146-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-144432/087-US-USA-New-York-S1-192.3.9.146-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-144432/088-US-USA-Dallas-75.127.5.178-awg1.conf.ifup.log /root/hmn/test-runs/20260601-144432/088-US-USA-Dallas-75.127.5.178-awg1.conf.load.log /root/hmn/test-runs/20260601-144432/088-US-USA-Dallas-75.127.5.178-awg1.conf.ping.txt /root/hmn/test-runs/20260601-144432/088-US-USA-Dallas-75.127.5.178-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-144432/088-US-USA-Dallas-75.127.5.178-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-144432/094-JP-Japan-Tokyo-192.121.162.75-awg1.conf.ifup.log /root/hmn/test-runs/20260601-144432/094-JP-Japan-Tokyo-192.121.162.75-awg1.conf.load.log /root/hmn/test-runs/20260601-144432/094-JP-Japan-Tokyo-192.121.162.75-awg1.conf.ping.txt /root/hmn/test-runs/20260601-144432/094-JP-Japan-Tokyo-192.121.162.75-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-144432/094-JP-Japan-Tokyo-192.121.162.75-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-144432/108-HU-Hungary-Budapest-S6-89.46.237.14-awg1.conf.ifup.log /root/hmn/test-runs/20260601-144432/108-HU-Hungary-Budapest-S6-89.46.237.14-awg1.conf.load.log /root/hmn/test-runs/20260601-144432/108-HU-Hungary-Budapest-S6-89.46.237.14-awg1.conf.ping.txt /root/hmn/test-runs/20260601-144432/108-HU-Hungary-Budapest-S6-89.46.237.14-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-144432/108-HU-Hungary-Budapest-S6-89.46.237.14-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-144432/114-PS-UAE-Dubai-103.57.251.39-awg1.conf.ifup.log /root/hmn/test-runs/20260601-144432/114-PS-UAE-Dubai-103.57.251.39-awg1.conf.load.log /root/hmn/test-runs/20260601-144432/114-PS-UAE-Dubai-103.57.251.39-awg1.conf.ping.txt /root/hmn/test-runs/20260601-144432/114-PS-UAE-Dubai-103.57.251.39-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-144432/114-PS-UAE-Dubai-103.57.251.39-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-144432/115-NO-Norway-Sandefjord-S15-185.14.97.151-awg1.conf.ifup.log /root/hmn/test-runs/20260601-144432/115-NO-Norway-Sandefjord-S15-185.14.97.151-awg1.conf.load.log /root/hmn/test-runs/20260601-144432/115-NO-Norway-Sandefjord-S15-185.14.97.151-awg1.conf.ping.txt /root/hmn/test-runs/20260601-144432/115-NO-Norway-Sandefjord-S15-185.14.97.151-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-144432/115-NO-Norway-Sandefjord-S15-185.14.97.151-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-144432/117-US-USA-New-York-City-S3-64.253.89.235-awg1.conf.ifup.log /root/hmn/test-runs/20260601-144432/117-US-USA-New-York-City-S3-64.253.89.235-awg1.conf.load.log /root/hmn/test-runs/20260601-144432/117-US-USA-New-York-City-S3-64.253.89.235-awg1.conf.ping.txt /root/hmn/test-runs/20260601-144432/117-US-USA-New-York-City-S3-64.253.89.235-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-144432/117-US-USA-New-York-City-S3-64.253.89.235-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-144432/118-RU-Russia-Moscow-S5-141.98.189.83-awg1.conf.ifup.log /root/hmn/test-runs/20260601-144432/118-RU-Russia-Moscow-S5-141.98.189.83-awg1.conf.load.log /root/hmn/test-runs/20260601-144432/118-RU-Russia-Moscow-S5-141.98.189.83-awg1.conf.ping.txt /root/hmn/test-runs/20260601-144432/118-RU-Russia-Moscow-S5-141.98.189.83-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-144432/118-RU-Russia-Moscow-S5-141.98.189.83-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-144432/128-LV-Latvia-Riga-S1-192.121.163.235-awg1.conf.ifup.log /root/hmn/test-runs/20260601-144432/128-LV-Latvia-Riga-S1-192.121.163.235-awg1.conf.load.log /root/hmn/test-runs/20260601-144432/128-LV-Latvia-Riga-S1-192.121.163.235-awg1.conf.ping.txt /root/hmn/test-runs/20260601-144432/128-LV-Latvia-Riga-S1-192.121.163.235-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-144432/128-LV-Latvia-Riga-S1-192.121.163.235-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-144432/129-CH-Switzerland-Zurich-S2-188.190.4.220-awg1.conf.ifup.log /root/hmn/test-runs/20260601-144432/129-CH-Switzerland-Zurich-S2-188.190.4.220-awg1.conf.load.log /root/hmn/test-runs/20260601-144432/129-CH-Switzerland-Zurich-S2-188.190.4.220-awg1.conf.ping.txt /root/hmn/test-runs/20260601-144432/129-CH-Switzerland-Zurich-S2-188.190.4.220-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-144432/129-CH-Switzerland-Zurich-S2-188.190.4.220-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-144432/133-SE-Sweden-Stockholm-S2-46.246.127.84-awg1.conf.ifup.log /root/hmn/test-runs/20260601-144432/133-SE-Sweden-Stockholm-S2-46.246.127.84-awg1.conf.load.log /root/hmn/test-runs/20260601-144432/133-SE-Sweden-Stockholm-S2-46.246.127.84-awg1.conf.ping.txt /root/hmn/test-runs/20260601-144432/133-SE-Sweden-Stockholm-S2-46.246.127.84-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-144432/133-SE-Sweden-Stockholm-S2-46.246.127.84-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-144432/141-RS-Serbia-Belgrade-S2-89.31.121.82-awg1.conf.ifup.log /root/hmn/test-runs/20260601-144432/141-RS-Serbia-Belgrade-S2-89.31.121.82-awg1.conf.load.log /root/hmn/test-runs/20260601-144432/141-RS-Serbia-Belgrade-S2-89.31.121.82-awg1.conf.ping.txt /root/hmn/test-runs/20260601-144432/141-RS-Serbia-Belgrade-S2-89.31.121.82-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-144432/141-RS-Serbia-Belgrade-S2-89.31.121.82-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-144432/146-GB-United-Kingdom-London-S1-37.235.54.96-awg1.conf.ifup.log /root/hmn/test-runs/20260601-144432/146-GB-United-Kingdom-London-S1-37.235.54.96-awg1.conf.load.log /root/hmn/test-runs/20260601-144432/146-GB-United-Kingdom-London-S1-37.235.54.96-awg1.conf.ping.txt /root/hmn/test-runs/20260601-144432/146-GB-United-Kingdom-London-S1-37.235.54.96-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-144432/146-GB-United-Kingdom-London-S1-37.235.54.96-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-144432/149-AT-Austria-Vienna-S3-157.173.25.198-awg1.conf.ifup.log /root/hmn/test-runs/20260601-144432/149-AT-Austria-Vienna-S3-157.173.25.198-awg1.conf.load.log /root/hmn/test-runs/20260601-144432/149-AT-Austria-Vienna-S3-157.173.25.198-awg1.conf.ping.txt /root/hmn/test-runs/20260601-144432/149-AT-Austria-Vienna-S3-157.173.25.198-awg1.conf.show-after-ping.txt /root/hmn/test-runs/20260601-144432/149-AT-Austria-Vienna-S3-157.173.25.198-awg1.conf.show-before-ping.txt /root/hmn/test-runs/20260601-144432/150-NL-Netherlands-Amsterdam-R5-178.215.227.13-awg1.conf.ifup.log /root/hmn/test-runs/20260601-144432/150-NL-Netherlands-Amsterdam-R5-178.215.227.13-awg1.conf.load.log /root/hmn/test-runs/20260601-144432/150-NL-Netherlands-Amsterdam-R5-178.215.227.13-awg1.conf.ping.txt rc=0 ################################################################ ### vm121_state ################################################################ ===== vm121_state ===== CMD: remote_vm121 date; ip -br addr; echo; ip route; echo; ls -la /opt/wg-access 2>/dev/null; echo; find /opt/wg-access -maxdepth 3 -type f 2>/dev/null | sort | sed -n "1,700p"; echo; docker ps 2>/dev/null; echo; systemctl list-units --type=service --type=timer 2>/dev/null | grep -Ei "wg|access|expire|router|docker" || true Wed Jul 8 10:35:04 UTC 2026 lo UNKNOWN 127.0.0.1/8 ::1/128 eth0 UP 192.168.30.83/24 fe80::be24:11ff:fef2:726c/64 docker0 DOWN 172.17.0.1/16 fe80::40ed:39ff:fe1e:b82b/64 br-0dd299da43cc UP 172.18.0.1/16 fe80::f880:d8ff:fe29:4fce/64 wg-mgts UNKNOWN 10.250.100.121/32 vethc12e993@if2 UP fe80::2055:55ff:fe3c:e9f9/64 veth4015e30@if2 UP fe80::9c84:feff:fef4:9069/64 default via 192.168.30.1 dev eth0 proto static 10.71.100.0/24 dev wg-mgts scope link 10.250.100.1 dev wg-mgts scope link 172.17.0.0/16 dev docker0 proto kernel scope link src 172.17.0.1 linkdown 172.18.0.0/16 dev br-0dd299da43cc proto kernel scope link src 172.18.0.1 192.168.30.0/24 dev eth0 proto kernel scope link src 192.168.30.83 total 164 drwxr-xr-x 9 root root 4096 Jul 6 18:56 . drwxr-xr-x 4 root root 4096 Jul 4 10:11 .. -rw------- 1 root root 541 Jul 6 18:51 .env -rw------- 1 root root 341 Jul 4 15:16 .env.BEFORE_CLIENT_CONFIG_RESPONSE.20260704-151636 -rw------- 1 root root 546 Jul 4 15:54 .env.BEFORE_MGTS_CLIENTCFG_20260706-185027 -rw------- 1 root root 541 Jul 6 18:50 .env.BEFORE_MGTS_CLIENTCFG_20260706-185140 -rw-r--r-- 1 root root 0 Jul 6 18:55 26.1.2 -rw-r--r-- 1 root root 899 Jul 6 18:56 DEFERRED_TASKS.md -rw-r--r-- 1 root root 444 Jul 4 10:14 STATUS-STEP-002-BACKEND-DB-OK.txt -rw-r--r-- 1 root root 669 Jul 4 10:29 STATUS-STEP-005_API_DB_OK.txt -rw-r--r-- 1 root root 743 Jul 4 10:34 STATUS-STEP-006_AGENT_PULL_API_OK.txt -rw-r--r-- 1 root root 875 Jul 4 10:38 STATUS-STEP-007_AGENT_DRY_RUN_OK.txt -rw-r--r-- 1 root root 813 Jul 4 10:43 STATUS-STEP-008_AGENT_TIMER_OK.txt -rw-r--r-- 1 root root 664 Jul 4 13:11 STATUS-STEP-010_AGENT_SSH_TO_VM100_OK.txt -rw-r--r-- 1 root root 757 Jul 4 13:17 STATUS-STEP-011_MANUAL_WG_SET_VM100_OK.txt -rw-r--r-- 1 root root 1268 Jul 4 13:29 STATUS-STEP-012_REAL_AGENT_PROVISION_VM100_OK.txt -rw-r--r-- 1 root root 1296 Jul 4 13:35 STATUS-STEP-013_WG_HANDSHAKE_VM121_TO_VM100_OK.txt -rw-r--r-- 1 root root 1548 Jul 4 13:48 STATUS-STEP-014_AGENT_RECONCILE_SYNC_OK.txt -rw-r--r-- 1 root root 1391 Jul 4 15:14 STATUS-STEP-015_DISABLE_DEPROVISION_OK.txt -rw-r--r-- 1 root root 1235 Jul 4 15:20 STATUS-STEP-016_CLIENT_CONFIG_RESPONSE_OK.txt -rw-r--r-- 1 root root 1544 Jul 4 15:27 STATUS-STEP-017_GENERATED_CLIENT_CONFIG_HANDSHAKE_OK.txt -rw-r--r-- 1 root root 1958 Jul 4 15:57 STATUS-STEP-018_POOL_16_AND_REUSE_ALLOCATOR_OK.txt -rw-r--r-- 1 root root 928 Jul 4 16:00 STATUS-STEP-019A_TEST_PEERS_CLEANED_OK.txt -rw-r--r-- 1 root root 1690 Jul 4 16:03 STATUS-STEP-019B_CLEAN_POOL_SMOKE_OK.txt -rw-r--r-- 1 root root 1214 Jul 4 16:07 STATUS-STEP-020C_AGENT_TIMER_REAL_PERIODIC_OK.txt -rw-r--r-- 1 root root 1962 Jul 4 16:24 STATUS-STEP-020D_TIMER_AUTO_PROVISION_DEPROVISION_OK.txt -rw-r--r-- 1 root root 2029 Jul 4 16:34 STATUS-STEP-021C_ADMIN_SUBSCRIPTION_FLOW_OK.txt -rw-r--r-- 1 root root 1977 Jul 4 17:25 STATUS-STEP-022B_DEV_ENDPOINT_USES_SHARED_WG_SERVICE_OK.txt -rw-r--r-- 1 root root 1743 Jul 4 17:38 STATUS-STEP-023A_DEV_ENDPOINT_GUARD_OK.txt -rw-r--r-- 1 root root 1883 Jul 4 17:56 STATUS-STEP-024A_ADMIN_USER_VIEW_OK.txt -rw-r--r-- 1 root root 2780 Jul 4 18:14 STATUS-STEP-025A_CANCEL_SUBSCRIPTION_OK.txt -rw-r--r-- 1 root root 2833 Jul 4 18:24 STATUS-STEP-026A_EXPIRE_SUBSCRIPTIONS_OK.txt -rw-r--r-- 1 root root 2533 Jul 6 19:00 STATUS-STEP-028A_MGTS_WG_PAID_E2E_OK.txt -rw-r--r-- 1 root root 0 Jul 4 10:16 STEP_002_BACKEND_DB_OK drwxr-xr-x 6 root root 4096 Jul 6 18:33 agent drwxr-xr-x 4 root root 4096 Jul 4 10:18 backend drwxr-xr-x 11 root root 4096 Jul 4 18:20 backups -rw-r--r-- 1 root root 0 Jul 4 10:16 current drwxr-xr-x 2 root root 4096 Jul 4 10:11 deploy -rw-r--r-- 1 root root 964 Jul 4 13:25 docker-compose.yml -rw-r--r-- 1 root root 951 Jul 4 13:25 docker-compose.yml.BEFORE_REAL_WG_KEYS.20260704-132545 drwxr-xr-x 2 root root 4096 Jul 8 00:02 maintenance-logs drwxr-xr-x 2 root root 4096 Jul 4 13:14 manual-tests drwxr-xr-x 4 root root 4096 Jul 6 18:41 tmp /opt/wg-access/.env /opt/wg-access/.env.BEFORE_CLIENT_CONFIG_RESPONSE.20260704-151636 /opt/wg-access/.env.BEFORE_MGTS_CLIENTCFG_20260706-185027 /opt/wg-access/.env.BEFORE_MGTS_CLIENTCFG_20260706-185140 /opt/wg-access/26.1.2 /opt/wg-access/DEFERRED_TASKS.md /opt/wg-access/STATUS-STEP-002-BACKEND-DB-OK.txt /opt/wg-access/STATUS-STEP-005_API_DB_OK.txt /opt/wg-access/STATUS-STEP-006_AGENT_PULL_API_OK.txt /opt/wg-access/STATUS-STEP-007_AGENT_DRY_RUN_OK.txt /opt/wg-access/STATUS-STEP-008_AGENT_TIMER_OK.txt /opt/wg-access/STATUS-STEP-010_AGENT_SSH_TO_VM100_OK.txt /opt/wg-access/STATUS-STEP-011_MANUAL_WG_SET_VM100_OK.txt /opt/wg-access/STATUS-STEP-012_REAL_AGENT_PROVISION_VM100_OK.txt /opt/wg-access/STATUS-STEP-013_WG_HANDSHAKE_VM121_TO_VM100_OK.txt /opt/wg-access/STATUS-STEP-014_AGENT_RECONCILE_SYNC_OK.txt /opt/wg-access/STATUS-STEP-015_DISABLE_DEPROVISION_OK.txt /opt/wg-access/STATUS-STEP-016_CLIENT_CONFIG_RESPONSE_OK.txt /opt/wg-access/STATUS-STEP-017_GENERATED_CLIENT_CONFIG_HANDSHAKE_OK.txt /opt/wg-access/STATUS-STEP-018_POOL_16_AND_REUSE_ALLOCATOR_OK.txt /opt/wg-access/STATUS-STEP-019A_TEST_PEERS_CLEANED_OK.txt /opt/wg-access/STATUS-STEP-019B_CLEAN_POOL_SMOKE_OK.txt /opt/wg-access/STATUS-STEP-020C_AGENT_TIMER_REAL_PERIODIC_OK.txt /opt/wg-access/STATUS-STEP-020D_TIMER_AUTO_PROVISION_DEPROVISION_OK.txt /opt/wg-access/STATUS-STEP-021C_ADMIN_SUBSCRIPTION_FLOW_OK.txt /opt/wg-access/STATUS-STEP-022B_DEV_ENDPOINT_USES_SHARED_WG_SERVICE_OK.txt /opt/wg-access/STATUS-STEP-023A_DEV_ENDPOINT_GUARD_OK.txt /opt/wg-access/STATUS-STEP-024A_ADMIN_USER_VIEW_OK.txt /opt/wg-access/STATUS-STEP-025A_CANCEL_SUBSCRIPTION_OK.txt /opt/wg-access/STATUS-STEP-026A_EXPIRE_SUBSCRIPTIONS_OK.txt /opt/wg-access/STATUS-STEP-028A_MGTS_WG_PAID_E2E_OK.txt /opt/wg-access/STEP_002_BACKEND_DB_OK /opt/wg-access/agent/__pycache__/wg_access_agent.cpython-311.pyc /opt/wg-access/agent/agent.env /opt/wg-access/agent/agent.env.BEFORE_MGTS_REMOTE_HOST_20260706-183324 /opt/wg-access/agent/agent.env.BEFORE_REAL_SSH_WG_SET.20260704-132120 /opt/wg-access/agent/logs/agent.log /opt/wg-access/agent/ssh/wg_access_agent_ed25519 /opt/wg-access/agent/ssh/wg_access_agent_ed25519.pub /opt/wg-access/agent/state/active-peers.json /opt/wg-access/agent/wg_access_agent.py /opt/wg-access/agent/wg_access_agent.py.BEFORE_REAL_SSH_WG_SET.20260704-132120 /opt/wg-access/agent/wg_access_agent.py.BEFORE_RECONCILE_SYNC.20260704-134532 /opt/wg-access/backend/alembic.ini /opt/wg-access/backend/alembic/env.py /opt/wg-access/backend/app/config.py /opt/wg-access/backend/app/main.py /opt/wg-access/backups/step018b/core.py.20260704-155437.bak /opt/wg-access/backups/step018b/dev.py.20260704-155255.bak /opt/wg-access/backups/step018b/peers.20260704-155255.sql /opt/wg-access/backups/step020b/wg-access-agent.service.20260704-160536.bak /opt/wg-access/backups/step020b/wg-access-agent.timer.20260704-160536.bak /opt/wg-access/backups/step020c/wg-access-agent.timer.20260704-160647.bak /opt/wg-access/backups/step021b/admin.py.20260704-162930.bak /opt/wg-access/backups/step021b/dev.py.20260704-162930.bak /opt/wg-access/backups/step022a/dev.py.20260704-163658.bak /opt/wg-access/backups/step022a/wireguard.py.20260704-163658.bak /opt/wg-access/backups/step023a/config.py.20260704-172733.bak /opt/wg-access/backups/step023a/dev.py.20260704-172733.bak /opt/wg-access/backups/step024a/admin.py.20260704-174718.bak /opt/wg-access/backups/step025a/admin.py.20260704-180655.bak /opt/wg-access/backups/step026a/admin.py.20260704-182045.bak /opt/wg-access/current /opt/wg-access/docker-compose.yml /opt/wg-access/docker-compose.yml.BEFORE_REAL_WG_KEYS.20260704-132545 /opt/wg-access/maintenance-logs/expire-subscriptions.20260705.log /opt/wg-access/maintenance-logs/expire-subscriptions.20260706.log /opt/wg-access/maintenance-logs/expire-subscriptions.20260707.log /opt/wg-access/maintenance-logs/expire-subscriptions.20260708.log /opt/wg-access/manual-tests/client_test_001.key /opt/wg-access/manual-tests/client_test_001.psk /opt/wg-access/manual-tests/client_test_001.pub /opt/wg-access/tmp/mgts-smoke-20260706-183921/create.json /opt/wg-access/tmp/mgts-smoke-20260706-183921/peers-before.json /opt/wg-access/tmp/mgts-smoke-20260706-184120/allowed-ips-after-cancel.txt /opt/wg-access/tmp/mgts-smoke-20260706-184120/allowed-ips-after-enable.txt /opt/wg-access/tmp/mgts-smoke-20260706-184120/client.conf /opt/wg-access/tmp/mgts-smoke-20260706-184120/client.mgts.conf /opt/wg-access/tmp/mgts-smoke-20260706-184120/create.json /opt/wg-access/tmp/mgts-smoke-20260706-184120/smoke.env CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 547f5e43daea python:3.12-slim "sh -c ' pip install…" 40 hours ago Up 40 hours 0.0.0.0:18080->8000/tcp wgaccess-backend 91c0111d2bca postgres:16-alpine "docker-entrypoint.s…" 40 hours ago Up 40 hours (healthy) 127.0.0.1:15432->5432/tcp wgaccess-postgres docker.service loaded active running Docker Application Container Engine wg-quick@wg-mgts.service loaded active exited WireGuard via wg-quick(8) for wg/mgts wg-access-expire-subscriptions.timer loaded active waiting Run WG Access expire subscriptions maintenance periodically rc=0 ################################################################ ### RC SUMMARY ################################################################ /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/local_access_map.txt:rc=0 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/local_date.txt:rc=0 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/local_router_ops_tree.txt:rc=0 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/pve_bridges.txt:rc=0 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/pve_qm_list.txt:rc=0 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/pve_snapshots_100.txt:rc=0 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/pve_snapshots_101.txt:rc=0 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/pve_vm100_config.txt:rc=0 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/pve_vm101_config.txt:rc=0 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/vm100_basic.txt:rc=0 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/vm100_relevant_files.txt:rc=0 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/vm100_uci_firewall.txt:rc=0 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/vm100_uci_network.txt:rc=0 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/vm100_wg_show.txt:rc=0 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/vm101_basic.txt:rc=0 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/vm101_hmn_tree.txt:rc=0 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/vm101_rt_nft.txt:rc=0 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/vm101_services_cron.txt:rc=0 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/vm101_uci_firewall.txt:rc=0 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/vm101_uci_network.txt:rc=0 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/vm101_wg_show.txt:rc=0 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/vm121_state.txt:rc=0