=== STEP_035C OBSERVE SELECTOR FILE CANARY ===
timestamp=20260708-123955
mode=temporary WG client + selector-file counter observe
tunnel_ip=10.253.1.10
forbidden: peer changes, server wg reload, firewall reload, network reload, publishing secrets
=== selector state before ===
=== selector file ===
# router WGPay selector file
# format: tunnel_ip dscp_class comment
# STEP_035B: one proven canary only, no production-wide switch
10.253.1.10 cs1 canary_vpn3
vm100_selector_entry_visible_rc=0
vm100_selector_rule_visible_rc=0
vm100_selector_service_enabled_rc=0
=== counters before ===
vm100_before_packets=0
vm100_before_bytes=0
vm100_before_done=1
vm101_mark_before_packets=4
vm101_mark_before_bytes=336
vm101_clear_before_packets=4
vm101_clear_before_bytes=336
vm101_mark_route_vpn3_before_rc=0
vm101_before_done=1

=== run temporary canary client on VM121 ===
work_dir=/root/router-ops-backups/canary-selector-traffic-test-20260708-123958
source_private_backup=/root/router-ops-backups/canary-test-subscription-real-20260708-121218
private_json_exists_rc=0
extract_rc=0
client_endpoint=wg-studio.secret-studio.ru:51830
client_address=10.253.1.10/32
extract_script_rc=0
endpoint_host=wg-studio.secret-studio.ru
endpoint_port=51830
endpoint_resolved_ip=95.165.105.4

=== setup temp WG client ===
netns_add_rc=0
wg_link_add_rc=0
wg_setconf_rc=0
wg_move_netns_rc=0
wg_addr_add_rc=0
wg_link_up_rc=0
wg_default_route_rc=0

=== canary ping ===
PING 1.1.1.1 (1.1.1.1) 56(84) bytes of data.
64 bytes from 1.1.1.1: icmp_seq=1 ttl=53 time=86.1 ms
64 bytes from 1.1.1.1: icmp_seq=2 ttl=53 time=185 ms
64 bytes from 1.1.1.1: icmp_seq=3 ttl=53 time=125 ms
64 bytes from 1.1.1.1: icmp_seq=4 ttl=53 time=68.9 ms

--- 1.1.1.1 ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 3002ms
rtt min/avg/max/mdev = 68.935/116.101/184.829/44.497 ms
canary_ping_rc=0

=== WG transfer, no secrets ===
FD1J+KVZ965pCjgtO0YWxJsKANY9uz6v1P54JLkiZzY=	1783514398
FD1J+KVZ965pCjgtO0YWxJsKANY9uz6v1P54JLkiZzY=	604	692

=== cleanup ===
netns_cleanup_rc=0
temp_iface_still_exists_rc=1
no_secret_publish=1
no_remote_peer_change=1
no_wg_server_reload=1
canary_client_done=1

=== counters after ===
vm100_after_packets=4
vm100_after_bytes=336
vm100_after_done=1
vm101_mark_after_packets=8
vm101_mark_after_bytes=672
vm101_clear_after_packets=8
vm101_clear_after_bytes=672
vm101_mark_route_vpn3_after_rc=0
vm101_after_done=1

=== STEP_035C RESULT ===
vm100_selector_entry_visible_rc=0
vm100_selector_rule_visible_rc=0
vm100_selector_service_enabled_rc=0
extract_script_rc=0
wg_link_add_rc=0
wg_setconf_rc=0
wg_link_up_rc=0
wg_default_route_rc=0
canary_ping_rc=0
netns_cleanup_rc=0
temp_iface_still_exists_rc=1
vm100_before_packets=0
vm100_after_packets=4
vm100_selector_delta_packets=4
vm101_mark_before_packets=4
vm101_mark_after_packets=8
vm101_mark_delta_packets=4
vm101_clear_before_packets=4
vm101_clear_after_packets=8
vm101_clear_delta_packets=4
vm101_mark_route_vpn3_rc=0
decision=PASS_SELECTOR_FILE_CANARY_TRAFFIC_CONFIRMED