=== STEP_033E CANARY OBSERVE ===
timestamp=20260708-111551
mode=read-only observation plus test traffic
remote_changes=none
=== VM101 canary before ===
Wed Jul  8 11:15:52 UTC 2026

=== nft canary before ===
table inet router_egress_canary {
	chain prerouting {
		type filter hook prerouting priority mangle; policy accept;
		iifname "eth1" ip saddr 10.200.0.1 meta mark set 0x00000203 counter packets 5 bytes 420 comment "STEP_033D_VM100_ETH2_TO_VPN3"
	}
}

=== route marked ===
1.1.1.1 from 10.200.0.1 dev vpn3 table 203 mark 0x203 
    cache iif eth1 

=== vpn3 before ===
  latest handshake: 1 minute, 3 seconds ago
  transfer: 6.33 KiB received, 16.10 KiB sent

=== VM100 canary traffic via eth2 ===
Wed Jul  8 11:15:52 UTC 2026

=== ping -I eth2 ===
PING 1.1.1.1 (1.1.1.1): 56 data bytes
64 bytes from 1.1.1.1: seq=0 ttl=54 time=52.527 ms
64 bytes from 1.1.1.1: seq=1 ttl=54 time=52.125 ms
64 bytes from 1.1.1.1: seq=2 ttl=54 time=52.570 ms
64 bytes from 1.1.1.1: seq=3 ttl=54 time=52.605 ms
64 bytes from 1.1.1.1: seq=4 ttl=54 time=52.368 ms

--- 1.1.1.1 ping statistics ---
5 packets transmitted, 5 packets received, 0% packet loss
round-trip min/avg/max = 52.125/52.439/52.605 ms
PING_ETH2_RC=0

=== HTTP IP probes via eth2/source ===
95.165.105.4
WGET_IPIFY_RC=0

=== VM101 canary after ===
Wed Jul  8 11:15:57 UTC 2026

=== nft canary after ===
table inet router_egress_canary {
	chain prerouting {
		type filter hook prerouting priority mangle; policy accept;
		iifname "eth1" ip saddr 10.200.0.1 meta mark set 0x00000203 counter packets 10 bytes 840 comment "STEP_033D_VM100_ETH2_TO_VPN3"
	}
}

=== ip rule ===
0:	from all lookup local
10013:	from all fwmark 0x203 lookup 203
10014:	from all fwmark 0x204 lookup 204
10015:	from all fwmark 0x205 lookup 205
10019:	from all iif eth1 lookup 200
10020:	from 10.200.0.0/24 lookup 200
32766:	from all lookup main
32767:	from all lookup default

=== table 200 ===
default dev vpn1 scope link 
10.200.0.0/24 dev eth1 scope link src 10.200.0.2 
10.201.0.0/24 dev eth3 scope link src 10.201.0.2 

=== table 203 ===
default dev vpn3 scope link 

=== routes after ===
1.1.1.1 from 10.200.0.1 dev vpn1 table 200 
    cache iif eth1 
1.1.1.1 from 10.200.0.1 dev vpn3 table 203 mark 0x203 
    cache iif eth1 

=== vpn3 after ===
  latest handshake: 1 minute, 8 seconds ago
  transfer: 6.96 KiB received, 16.73 KiB sent

=== uci pending ===

=== STEP_033E RESULT ===
ping_eth2_rc=0
nft_rule_lines=2
nft_counter_after_lines=1
marked_route_vpn3_lines=2
unmarked_route_vpn1_lines=1
table200_default_vpn1_lines=1
table203_default_vpn3_lines=1
uci_pending_lines=0
decision=PASS_CANARY_OBSERVE