FluxVM S3 live prhit / directional scrape 20260926
host=NLDW4-4-04-32
vm=da32c7b7-5a6b-4180-8149-c80233f970fb
fabric_mode=mode = "cilium"

=== network/status ===
{"mode":"cilium","required":false,"attached":true,"interface":"vhda32c7b7","identity":854146766,"pin_dir":"/sys/fs/bpf/fluxvm/vms/da32c7b75a6b41808149c80233f970fb","schema_version":11,"schema_compatible":true,"policy_synced":true,"policy":{"default_allow":true,"allow_cidrs":["10.0.0.0/8","172.16.0.0/12","192.168.0.0/16"],"allow_ports":["tcp/443","tcp/80","udp/53"],"max_egress_mbps":250,"max_egress_pps":100000,"sample_rate":100,"deny_cidrs":[],"allow_icmp":false,"groups":[],"labels":[],"allow_fqdns":[],"entities":[],"audit_mode":false,"deny_udp":false}}

=== pod-policy apply ===
{"ok":true}
HTTP=200

=== prhit pin ===
-rw------- 1 root root 0 Sep 26 16:57 /sys/fs/bpf/fluxvm/vms/da32c7b75a6b41808149c80233f970fb/maps/fluxvm_prhit

=== observer series ===
# HELP fluxvm_sentinel_dataplane_schema_version Recorded FluxVM eBPF dataplane schema version.
# TYPE fluxvm_sentinel_dataplane_schema_version gauge
fluxvm_sentinel_dataplane_schema_version{pod_id="1521024349",vm="da32c7b75a6b41808149c80233f970fb"} 11
# HELP fluxvm_sentinel_dataplane_schema_compatible 1 when the observer recognizes this dataplane schema.
# TYPE fluxvm_sentinel_dataplane_schema_compatible gauge
fluxvm_sentinel_dataplane_schema_compatible{pod_id="1521024349",vm="da32c7b75a6b41808149c80233f970fb"} 0
# HELP fluxvm_sentinel_policy_directional_counters 1 when Set 17 rule telemetry provides true per-direction Pod-policy counters; 0 means Set 15 shared-counter fallback.
# TYPE fluxvm_sentinel_policy_directional_counters gauge
fluxvm_sentinel_policy_directional_counters{pod_id="1521024349",vm="da32c7b75a6b41808149c80233f970fb"} 1
# HELP fluxvm_sentinel_policy_hook_attached 1 when the directional program is attached to the expected TC/TCX hook.
# TYPE fluxvm_sentinel_policy_hook_attached gauge
fluxvm_sentinel_policy_hook_attached{direction="egress",mode="tc",pod_id="1521024349",vm="da32c7b75a6b41808149c80233f970fb"} 1
# HELP fluxvm_sentinel_policy_packets_total Packets evaluated by the Pod policy dataplane, partitioned by direction and verdict.
# TYPE fluxvm_sentinel_policy_packets_total counter
fluxvm_sentinel_policy_packets_total{direction="egress",pod_id="1521024349",verdict="allow",vm="da32c7b75a6b41808149c80233f970fb"} 0
fluxvm_sentinel_policy_packets_total{direction="egress",pod_id="1521024349",verdict="drop",vm="da32c7b75a6b41808149c80233f970fb"} 0
fluxvm_sentinel_policy_packets_total{direction="egress",pod_id="1521024349",verdict="audit",vm="da32c7b75a6b41808149c80233f970fb"} 0
fluxvm_sentinel_policy_hook_attached{direction="ingress",mode="tc",pod_id="1521024349",vm="da32c7b75a6b41808149c80233f970fb"} 1
fluxvm_sentinel_policy_packets_total{direction="ingress",pod_id="1521024349",verdict="allow",vm="da32c7b75a6b41808149c80233f970fb"} 0
fluxvm_sentinel_policy_packets_total{direction="ingress",pod_id="1521024349",verdict="drop",vm="da32c7b75a6b41808149c80233f970fb"} 0
fluxvm_sentinel_policy_packets_total{direction="ingress",pod_id="1521024349",verdict="audit",vm="da32c7b75a6b41808149c80233f970fb"} 0
# HELP fluxvm_sentinel_policy_rule_entries Number of compiled policy-map entries by direction and representation kind.
# TYPE fluxvm_sentinel_policy_rule_entries gauge
fluxvm_sentinel_policy_rule_entries{direction="egress",kind="rules",pod_id="1521024349",vm="da32c7b75a6b41808149c80233f970fb"} 1
fluxvm_sentinel_policy_rule_entries{direction="ingress",kind="rules",pod_id="1521024349",vm="da32c7b75a6b41808149c80233f970fb"} 1
fluxvm_sentinel_policy_rule_entries{direction="shared",kind="address_v4",pod_id="1521024349",vm="da32c7b75a6b41808149c80233f970fb"} 0
fluxvm_sentinel_policy_rule_entries{direction="shared",kind="address_v6",pod_id="1521024349",vm="da32c7b75a6b41808149c80233f970fb"} 0
fluxvm_sentinel_policy_rule_entries{direction="shared",kind="exact_port_v4",pod_id="1521024349",vm="da32c7b75a6b41808149c80233f970fb"} 0
fluxvm_sentinel_policy_rule_entries{direction="shared",kind="exact_port_v6",pod_id="1521024349",vm="da32c7b75a6b41808149c80233f970fb"} 0

S3 PRHIT DIRECTIONAL SCRAPE: PASS
note: fluxvm_sentinel_policy_directional_counters=1 (Set 17 prhit path); ingress+egress hooks attached; schema recorded=11
cleaned vm=da32c7b7-5a6b-4180-8149-c80233f970fb