status_run_rc=0
fwmark_0x202_rule_rc=0
table202_vpn2_route_rc=0
legacy_table200_vpn1_rc=0
mapper_0x202_set_rule_count=1
mapper_0x202_clear_rule_count=1
---BEGIN_CS5_RULES---
		iifname { "vpn1", "vpn2", "vpn3", "vpn4", "vpn5" } jump input_vpn_out comment "!fw4: Handle vpn_out IPv4/IPv6 input traffic" # handle 16773
		iifname { "vpn1", "vpn2", "vpn3", "vpn4", "vpn5" } jump forward_vpn_out comment "!fw4: Handle vpn_out IPv4/IPv6 forward traffic" # handle 16782
		oifname { "vpn1", "vpn2", "vpn3", "vpn4", "vpn5" } jump output_vpn_out comment "!fw4: Handle vpn_out IPv4/IPv6 output traffic" # handle 16792
		meta nfproto ipv4 oifname { "vpn1", "vpn2", "vpn3", "vpn4", "vpn5" } ct state invalid counter packets 0 bytes 0 drop comment "!fw4: Prevent NAT leakage" # handle 16851
		oifname { "vpn1", "vpn2", "vpn3", "vpn4", "vpn5" } counter packets 8 bytes 672 accept comment "!fw4: accept vpn_out IPv4/IPv6 traffic" # handle 16853
		iifname { "vpn1", "vpn2", "vpn3", "vpn4", "vpn5" } counter packets 0 bytes 0 jump handle_reject comment "!fw4: reject vpn_out IPv4/IPv6 traffic" # handle 16855
		oifname { "vpn1", "vpn2", "vpn3", "vpn4", "vpn5" } counter packets 0 bytes 0 jump handle_reject comment "!fw4: reject vpn_out IPv4/IPv6 traffic" # handle 16857
		oifname { "vpn1", "vpn2", "vpn3", "vpn4", "vpn5" } jump srcnat_vpn_out comment "!fw4: Handle vpn_out IPv4/IPv6 srcnat traffic" # handle 16863
		oifname { "vpn1", "vpn2", "vpn3", "vpn4", "vpn5" } tcp flags & (fin | syn | rst) == syn tcp option maxseg size set rt mtu comment "!fw4: Zone vpn_out IPv4/IPv6 egress MTU fixing" # handle 16880
		iifname { "vpn1", "vpn2", "vpn3", "vpn4", "vpn5" } tcp flags & (fin | syn | rst) == syn tcp option maxseg size set rt mtu comment "!fw4: Zone vpn_out IPv4/IPv6 ingress MTU fixing" # handle 16883
		iifname "eth1" ip saddr 10.200.0.1 ip dscp cs5 meta mark set 0x00000202 counter packets 0 bytes 0 comment "STEP_036I_DSCP_CS5_TO_FW_MARK_0x202" # handle 7
		meta mark 0x00000202 ip dscp cs5 ip dscp set cs0 counter packets 0 bytes 0 comment "STEP_036I_CLEAR_DSCP_CS5_MARK_0x202" # handle 12
---END_CS5_RULES---
---BEGIN_STATUS_JSON---
{
  "schema": "router-egress-slots-status-v1",
  "generated_at_utc": "2026-07-09T08:30:07Z",
  "source_registry": "/etc/router-egress-slots/slots.conf",
  "active_probe": false,
  "manager_invoked": false,
  "slots": [
    {
      "slot_code": "vpn1",
      "selector_class": "cs4",
      "fwmark": "0x201",
      "table_id": 201,
      "interface_name": "vpn1",
      "provider_type": "hmn_amneziawg",
      "manager_id": "hmn_pool",
      "enabled": 1,
      "allocation_weight": 100,
      "label": "canary_vpn1",
      "status": "healthy",
      "reason": "ok",
      "checks": {
        "iface_exists_rc": 0,
        "iface_up_rc": 0,
        "fwmark_rule_rc": 0,
        "table_route_rc": 0,
        "mapper_rule_rc": 0,
        "clear_rule_rc": 0
      }
    }
    ,
    {
      "slot_code": "vpn2",
      "selector_class": "cs5",
      "fwmark": "0x202",
      "table_id": 202,
      "interface_name": "vpn2",
      "provider_type": "hmn_amneziawg",
      "manager_id": "hmn_pool",
      "enabled": 1,
      "allocation_weight": 100,
      "label": "canary_vpn2",
      "status": "healthy",
      "reason": "ok",
      "checks": {
        "iface_exists_rc": 0,
        "iface_up_rc": 0,
        "fwmark_rule_rc": 0,
        "table_route_rc": 0,
        "mapper_rule_rc": 0,
        "clear_rule_rc": 0
      }
    }
    ,
    {
      "slot_code": "vpn3",
      "selector_class": "cs1",
      "fwmark": "0x203",
      "table_id": 203,
      "interface_name": "vpn3",
      "provider_type": "hmn_amneziawg",
      "manager_id": "hmn_pool",
      "enabled": 1,
      "allocation_weight": 100,
      "label": "canary_vpn3",
      "status": "healthy",
      "reason": "ok",
      "checks": {
        "iface_exists_rc": 0,
        "iface_up_rc": 0,
        "fwmark_rule_rc": 0,
        "table_route_rc": 0,
        "mapper_rule_rc": 0,
        "clear_rule_rc": 0
      }
    }
    ,
    {
      "slot_code": "vpn4",
      "selector_class": "cs2",
      "fwmark": "0x204",
      "table_id": 204,
      "interface_name": "vpn4",
      "provider_type": "hmn_amneziawg",
      "manager_id": "hmn_pool",
      "enabled": 1,
      "allocation_weight": 100,
      "label": "canary_vpn4",
      "status": "healthy",
      "reason": "ok",
      "checks": {
        "iface_exists_rc": 0,
        "iface_up_rc": 0,
        "fwmark_rule_rc": 0,
        "table_route_rc": 0,
        "mapper_rule_rc": 0,
        "clear_rule_rc": 0
      }
    }
    ,
    {
      "slot_code": "vpn5",
      "selector_class": "cs3",
      "fwmark": "0x205",
      "table_id": 205,
      "interface_name": "vpn5",
      "provider_type": "hmn_amneziawg",
      "manager_id": "hmn_pool",
      "enabled": 1,
      "allocation_weight": 100,
      "label": "canary_vpn5",
      "status": "healthy",
      "reason": "ok",
      "checks": {
        "iface_exists_rc": 0,
        "iface_up_rc": 0,
        "fwmark_rule_rc": 0,
        "table_route_rc": 0,
        "mapper_rule_rc": 0,
        "clear_rule_rc": 0
      }
    }
  ]
}
---END_STATUS_JSON---