# STEP_033C2 canary plan mini

No remote changes were applied.

Planned canary:
- on VM101 prerouting
- iifname eth1
- ip saddr 10.200.0.1
- meta mark set 0x203
- existing fwmark rule sends 0x203 to table 203 / vpn3

Rollback for future apply:
- delete runtime nft table inet router_egress_canary
