Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- # Generated by iptables-save v1.8.4 on Thu Aug 13 08:52:12 2020
- *filter
- :INPUT ACCEPT [8952:2038529]
- :FORWARD DROP [0:0]
- :OUTPUT ACCEPT [8941:1177074]
- :DOCKER - [0:0]
- :DOCKER-ISOLATION-STAGE-1 - [0:0]
- :DOCKER-ISOLATION-STAGE-2 - [0:0]
- :DOCKER-USER - [0:0]
- :KUBE-EXTERNAL-SERVICES - [0:0]
- :KUBE-FIREWALL - [0:0]
- :KUBE-FORWARD - [0:0]
- :KUBE-SERVICES - [0:0]
- -A INPUT -m conntrack --ctstate NEW -m comment --comment "kubernetes service portals" -j KUBE-SERVICES
- -A INPUT -m conntrack --ctstate NEW -m comment --comment "kubernetes externally-visible service portals" -j KUBE-EXTERNAL-SERVICES
- -A INPUT -j KUBE-FIREWALL
- -A FORWARD -m comment --comment "kubernetes forwarding rules" -j KUBE-FORWARD
- -A FORWARD -m conntrack --ctstate NEW -m comment --comment "kubernetes service portals" -j KUBE-SERVICES
- -A FORWARD -j DOCKER-USER
- -A FORWARD -j DOCKER-ISOLATION-STAGE-1
- -A FORWARD -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
- -A FORWARD -o docker0 -j DOCKER
- -A FORWARD -i docker0 ! -o docker0 -j ACCEPT
- -A FORWARD -i docker0 -o docker0 -j ACCEPT
- -A FORWARD -s 10.244.0.0/16 -j ACCEPT
- -A FORWARD -d 10.244.0.0/16 -j ACCEPT
- -A OUTPUT -m conntrack --ctstate NEW -m comment --comment "kubernetes service portals" -j KUBE-SERVICES
- -A OUTPUT -j KUBE-FIREWALL
- -A DOCKER -d 172.17.0.2/32 ! -i docker0 -o docker0 -p tcp -m tcp --dport 9000 -j ACCEPT
- -A DOCKER-ISOLATION-STAGE-1 -i docker0 ! -o docker0 -j DOCKER-ISOLATION-STAGE-2
- -A DOCKER-ISOLATION-STAGE-1 -j RETURN
- -A DOCKER-ISOLATION-STAGE-2 -o docker0 -j DROP
- -A DOCKER-ISOLATION-STAGE-2 -j RETURN
- -A DOCKER-USER -j RETURN
- -A KUBE-FIREWALL -m comment --comment "kubernetes firewall for dropping marked packets" -m mark --mark 0x8000/0x8000 -j DROP
- -A KUBE-FIREWALL ! -s 127.0.0.0/8 -d 127.0.0.0/8 -m comment --comment "block incoming localnet connections" -m conntrack ! --ctstate RELATED,ESTABLISHED,DNAT -j DROP
- -A KUBE-FORWARD -m conntrack --ctstate INVALID -j DROP
- -A KUBE-FORWARD -m comment --comment "kubernetes forwarding rules" -m mark --mark 0x4000/0x4000 -j ACCEPT
- -A KUBE-FORWARD -s 10.244.0.0/16 -m comment --comment "kubernetes forwarding conntrack pod source rule" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
- -A KUBE-FORWARD -d 10.244.0.0/16 -m comment --comment "kubernetes forwarding conntrack pod destination rule" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
- -A KUBE-SERVICES -d 10.108.154.156/32 -p tcp -m comment --comment "www-ilsa-ru-4848973-review-issue-457-b7gmcp/review-issue-457-b7gmcp-web:http has no endpoints" -m tcp --dport 80 -j REJECT --reject-with icmp-port-unreachable
- COMMIT
- # Completed on Thu Aug 13 08:52:12 2020
- # Generated by iptables-save v1.8.4 on Thu Aug 13 08:52:12 2020
- *nat
- :PREROUTING ACCEPT [144:32014]
- :INPUT ACCEPT [144:32014]
- :OUTPUT ACCEPT [145:19652]
- :POSTROUTING ACCEPT [284:32223]
- :CNI-DN-8ed702d64b803ad708087 - [0:0]
- :CNI-HOSTPORT-DNAT - [0:0]
- :CNI-HOSTPORT-MASQ - [0:0]
- :CNI-HOSTPORT-SETMARK - [0:0]
- :DOCKER - [0:0]
- :KUBE-MARK-DROP - [0:0]
- :KUBE-MARK-MASQ - [0:0]
- :KUBE-NODEPORTS - [0:0]
- :KUBE-POSTROUTING - [0:0]
- :KUBE-SEP-2I47MFX6OT6QLXCI - [0:0]
- :KUBE-SEP-2QIPG66NZTEHGQQI - [0:0]
- :KUBE-SEP-2TTC3UYXG37SU3KX - [0:0]
- :KUBE-SEP-36LOF2UTI4ZMKJXW - [0:0]
- :KUBE-SEP-3PFWNMKJADUNX4YK - [0:0]
- :KUBE-SEP-4ACLDMUTS56STFGO - [0:0]
- :KUBE-SEP-5TV3VVNIPJIABVFR - [0:0]
- :KUBE-SEP-5WE4LA3GQVUFJHF4 - [0:0]
- :KUBE-SEP-62DF4F3NN6UAKF4Z - [0:0]
- :KUBE-SEP-6ATSTCLFRM46K5DD - [0:0]
- :KUBE-SEP-6KIWZES7FWXKKLV2 - [0:0]
- :KUBE-SEP-6MECCFALFZC3HIGN - [0:0]
- :KUBE-SEP-6OJEJN53ZZTBSVY2 - [0:0]
- :KUBE-SEP-6W5TZKUDSO7DYL2Q - [0:0]
- :KUBE-SEP-6XPLCQX2W4EZJVPC - [0:0]
- :KUBE-SEP-6ZZD4XWK37KEDYZJ - [0:0]
- :KUBE-SEP-727DCLPPEECJRJOW - [0:0]
- :KUBE-SEP-7VAY5USIKAYB7HXS - [0:0]
- :KUBE-SEP-7ZPZGPQGJXPNYLVW - [0:0]
- :KUBE-SEP-A5H5PZLCAJ6TKVCT - [0:0]
- :KUBE-SEP-AYT3JQTQWNMYKX2K - [0:0]
- :KUBE-SEP-BIA6COIHC4DXKTHN - [0:0]
- :KUBE-SEP-C5XXC2T4NHB4ZNVC - [0:0]
- :KUBE-SEP-CQ4HSSHDN4ZQIVID - [0:0]
- :KUBE-SEP-CUT2G4MTWKWBPBBB - [0:0]
- :KUBE-SEP-CYOR4J7ACUWVB7FO - [0:0]
- :KUBE-SEP-DMXZDOJXA4ZQOX3M - [0:0]
- :KUBE-SEP-E23DZQ7XS2OYNBBS - [0:0]
- :KUBE-SEP-ELMDV6ZZN6YAAHIA - [0:0]
- :KUBE-SEP-ERH4RKMSH6D4564Q - [0:0]
- :KUBE-SEP-FQJNIWZHRFIHAOHQ - [0:0]
- :KUBE-SEP-FWI36LXHI6MNCZQR - [0:0]
- :KUBE-SEP-GLQBVE3PZ2DSW4BX - [0:0]
- :KUBE-SEP-GRQWJEM5AKS65C3A - [0:0]
- :KUBE-SEP-GUDLTOL7HYRHFR2F - [0:0]
- :KUBE-SEP-GXCPRK6QL5IJJXCV - [0:0]
- :KUBE-SEP-HE73O5BWC4FEUSUX - [0:0]
- :KUBE-SEP-HF6DQQARROOKQA6C - [0:0]
- :KUBE-SEP-HMEBLTTCYY67RMUJ - [0:0]
- :KUBE-SEP-HTDUBISSCHABJZJW - [0:0]
- :KUBE-SEP-HTJ422GI3ZJQLS4R - [0:0]
- :KUBE-SEP-I4B7TLANONZQ4V27 - [0:0]
- :KUBE-SEP-IPPNEHKZMHXUN37Q - [0:0]
- :KUBE-SEP-ITGRE4C5JZH7FAK2 - [0:0]
- :KUBE-SEP-ITLC52OBFHEZLA2J - [0:0]
- :KUBE-SEP-ITMRBCPFOWQ5MHNP - [0:0]
- :KUBE-SEP-IVZMUIZTLR5JR3N6 - [0:0]
- :KUBE-SEP-J2K5MTH7MG4OH27A - [0:0]
- :KUBE-SEP-JDCWU3LT5YQ5EMH6 - [0:0]
- :KUBE-SEP-JV5PNHUQKPMI4MKH - [0:0]
- :KUBE-SEP-KBIYDSSKQPK5NOS6 - [0:0]
- :KUBE-SEP-KDGSFGSS5PHUYA3X - [0:0]
- :KUBE-SEP-KN23XG3W2HVDAQZB - [0:0]
- :KUBE-SEP-LYQDPCHVRWVW4M4N - [0:0]
- :KUBE-SEP-MUUW2M5EFFT2OLCZ - [0:0]
- :KUBE-SEP-N5SJA4GQOBZGR3UC - [0:0]
- :KUBE-SEP-OQNBVSC2GMNNIN5S - [0:0]
- :KUBE-SEP-OQV6GZIYR7JIEEUX - [0:0]
- :KUBE-SEP-OX7YYSFBPJRPNNYM - [0:0]
- :KUBE-SEP-OY6BDVJBBXGLMJNZ - [0:0]
- :KUBE-SEP-OYIOPRQHVMKWO4ET - [0:0]
- :KUBE-SEP-PU5665C3QA2SUFXW - [0:0]
- :KUBE-SEP-QHGG2RLHNDIIBTVQ - [0:0]
- :KUBE-SEP-QTRVDAVVBVTUUYBU - [0:0]
- :KUBE-SEP-QX3JXG5XL2FJPS4E - [0:0]
- :KUBE-SEP-R366XD6ORC3KQZ6N - [0:0]
- :KUBE-SEP-RGNNVFNWDEZTQEWD - [0:0]
- :KUBE-SEP-RLOMKF5XXX5SES6U - [0:0]
- :KUBE-SEP-RZ3N3UPGBY7KYWF2 - [0:0]
- :KUBE-SEP-SA2O2U44GHDFCCLN - [0:0]
- :KUBE-SEP-SCIWZAC32N2HORP4 - [0:0]
- :KUBE-SEP-SE4YTJ7GFP6YB7FN - [0:0]
- :KUBE-SEP-SPD2SEY2IQXP7ADH - [0:0]
- :KUBE-SEP-STIX4KJH37HE34LN - [0:0]
- :KUBE-SEP-T5MC2P4OB2GRRCG6 - [0:0]
- :KUBE-SEP-TKDNRELBBQ5FU3ND - [0:0]
- :KUBE-SEP-UB4CY6X3UOSXP5TD - [0:0]
- :KUBE-SEP-UDW7GMVNZ5F4ZFPD - [0:0]
- :KUBE-SEP-V5M4OGB5FO27CGNM - [0:0]
- :KUBE-SEP-VI5DEO2UBC64JR5V - [0:0]
- :KUBE-SEP-VKISRV332LVKSKAS - [0:0]
- :KUBE-SEP-VLRTF377K6UDTE3U - [0:0]
- :KUBE-SEP-VUXHRZM6WIMZYMIL - [0:0]
- :KUBE-SEP-WT5RZHVTOEUUWQ35 - [0:0]
- :KUBE-SEP-X3WSABGJ254GBSE4 - [0:0]
- :KUBE-SEP-X4F6ZJ7LQWWT6ZWW - [0:0]
- :KUBE-SEP-XH3DFDTYHIEOSYJK - [0:0]
- :KUBE-SEP-XJBYADZHX4C3RCC7 - [0:0]
- :KUBE-SEP-Y7HHC3QRMBYN2OCY - [0:0]
- :KUBE-SEP-Y7OLX3KBDDDCCGXF - [0:0]
- :KUBE-SEP-YEZ2JMXEJWB6EJA7 - [0:0]
- :KUBE-SEP-YS6JISMIZTZ2NSKH - [0:0]
- :KUBE-SEP-Z3PVFCBKXEH2OSPJ - [0:0]
- :KUBE-SEP-Z7Q3ACRES7FPDRVG - [0:0]
- :KUBE-SEP-ZGD4RXUX4XHBMR7O - [0:0]
- :KUBE-SEP-ZRIEVFDEFQAL27LE - [0:0]
- :KUBE-SEP-ZW4B6JOBCPPH4HEQ - [0:0]
- :KUBE-SERVICES - [0:0]
- :KUBE-SVC-2H22HDYEVKYTESCO - [0:0]
- :KUBE-SVC-2UGGNXGPPPSPPMLS - [0:0]
- :KUBE-SVC-3KAYW4GCVYV7RVN5 - [0:0]
- :KUBE-SVC-3MZQ7JRBBGEZQMJZ - [0:0]
- :KUBE-SVC-3QQCAF7DJHCRYAXZ - [0:0]
- :KUBE-SVC-3QWL7PDP2KLRJZPH - [0:0]
- :KUBE-SVC-3W25UXR7PCLF6DI6 - [0:0]
- :KUBE-SVC-4SJLJGMA6G4JMGPD - [0:0]
- :KUBE-SVC-555QPBWBGYL6SUVU - [0:0]
- :KUBE-SVC-6US5C4SL6OMJES6X - [0:0]
- :KUBE-SVC-7GKA32WHHS3LHJ6K - [0:0]
- :KUBE-SVC-AC6NWKR6HYUJRF6H - [0:0]
- :KUBE-SVC-AICHGEYX3BVTOED6 - [0:0]
- :KUBE-SVC-B6ATNMJRWV3EYBBT - [0:0]
- :KUBE-SVC-C3NKWW2YAK3EV6WO - [0:0]
- :KUBE-SVC-CFHLBYYB4YGHK7TJ - [0:0]
- :KUBE-SVC-CUDBAC65LFUWWAGP - [0:0]
- :KUBE-SVC-DF4L2MKNKCT6HOO6 - [0:0]
- :KUBE-SVC-DNJUP3CRF6WUI6WP - [0:0]
- :KUBE-SVC-DP64XFHK74QZ2CEM - [0:0]
- :KUBE-SVC-EP4QPNLBYVNYVRWP - [0:0]
- :KUBE-SVC-ERIFXISQEP7F7OF4 - [0:0]
- :KUBE-SVC-FC7ZM2TFQM62ZYRP - [0:0]
- :KUBE-SVC-G4IDSOOHZEPGOAGZ - [0:0]
- :KUBE-SVC-GS33IQCCXJYCF6G3 - [0:0]
- :KUBE-SVC-H4XXCCQHGTX356OF - [0:0]
- :KUBE-SVC-HEJG3VL2OBQGMPRE - [0:0]
- :KUBE-SVC-JD5MR3NA4I4DYORP - [0:0]
- :KUBE-SVC-JD77LS6CGFAZWFSF - [0:0]
- :KUBE-SVC-JWRRAPASBK5SJQZX - [0:0]
- :KUBE-SVC-K7J76NXP7AUZVFGS - [0:0]
- :KUBE-SVC-LENZUHWFDRKNFKMN - [0:0]
- :KUBE-SVC-M37ZWITXO6U6JADQ - [0:0]
- :KUBE-SVC-MH3DXGNMOEVGARYR - [0:0]
- :KUBE-SVC-MQ4ORREHVQXZ23SQ - [0:0]
- :KUBE-SVC-NETLNZIY34CGM2RD - [0:0]
- :KUBE-SVC-NHO35BGNFBCILAXG - [0:0]
- :KUBE-SVC-NPX46M4PTMTKRN6Y - [0:0]
- :KUBE-SVC-OBTPQZYQ6XKY2NFB - [0:0]
- :KUBE-SVC-PZM4WR2KGKUH2YGL - [0:0]
- :KUBE-SVC-Q6LBIJ4JTGMXRAN7 - [0:0]
- :KUBE-SVC-QMUOK2R7Z7IHZXTR - [0:0]
- :KUBE-SVC-RD6ZUC3WDSNJ7ZUA - [0:0]
- :KUBE-SVC-RDEKVQQYAX2LLES5 - [0:0]
- :KUBE-SVC-RLSDJ66UWGBNHREY - [0:0]
- :KUBE-SVC-RY23AY2CFMC3FVNC - [0:0]
- :KUBE-SVC-SALS67HEE6XK3UR2 - [0:0]
- :KUBE-SVC-T6URFN7ED4NRY3JM - [0:0]
- :KUBE-SVC-TCOU7JCQXEZGVUNU - [0:0]
- :KUBE-SVC-UJDKNIFG53EJXXYL - [0:0]
- :KUBE-SVC-ULT42FO3QBEFLBE7 - [0:0]
- :KUBE-SVC-URFDFDNHMVT2SXSR - [0:0]
- :KUBE-SVC-VC7AUUYUDCII4O6U - [0:0]
- :KUBE-SVC-VFUGSBFCOP5EDXWM - [0:0]
- :KUBE-SVC-WLDJ22CTQ65KV4JG - [0:0]
- :KUBE-SVC-XGLOHA7QRQ3V22RZ - [0:0]
- :KUBE-SVC-YILO3KUSNW7QJONU - [0:0]
- :KUBE-SVC-YO27AO526SW7FVUF - [0:0]
- :KUBE-SVC-YVFLX6G3DN2CV3HS - [0:0]
- :KUBE-SVC-ZCWWUTPXOO7N2XL6 - [0:0]
- :KUBE-SVC-ZZUI3B73WEQG5WIL - [0:0]
- -A PREROUTING -m comment --comment "kubernetes service portals" -j KUBE-SERVICES
- -A PREROUTING -m addrtype --dst-type LOCAL -j DOCKER
- -A PREROUTING -m addrtype --dst-type LOCAL -j CNI-HOSTPORT-DNAT
- -A OUTPUT -m comment --comment "kubernetes service portals" -j KUBE-SERVICES
- -A OUTPUT ! -d 127.0.0.0/8 -m addrtype --dst-type LOCAL -j DOCKER
- -A OUTPUT -m addrtype --dst-type LOCAL -j CNI-HOSTPORT-DNAT
- -A POSTROUTING -m comment --comment "CNI portfwd requiring masquerade" -j CNI-HOSTPORT-MASQ
- -A POSTROUTING -m comment --comment "kubernetes postrouting rules" -j KUBE-POSTROUTING
- -A POSTROUTING -s 172.17.0.0/16 ! -o docker0 -j MASQUERADE
- -A POSTROUTING -s 172.17.0.2/32 -d 172.17.0.2/32 -p tcp -m tcp --dport 9000 -j MASQUERADE
- -A POSTROUTING -s 10.244.0.0/16 -d 10.244.0.0/16 -j RETURN
- -A POSTROUTING -s 10.244.0.0/16 ! -d 224.0.0.0/4 -j MASQUERADE --random-fully
- -A POSTROUTING ! -s 10.244.0.0/16 -d 10.244.3.0/24 -j RETURN
- -A POSTROUTING ! -s 10.244.0.0/16 -d 10.244.0.0/16 -j MASQUERADE --random-fully
- -A CNI-DN-8ed702d64b803ad708087 -s 10.244.3.135/32 -p tcp -m tcp --dport 80 -j CNI-HOSTPORT-SETMARK
- -A CNI-DN-8ed702d64b803ad708087 -s 127.0.0.1/32 -p tcp -m tcp --dport 80 -j CNI-HOSTPORT-SETMARK
- -A CNI-DN-8ed702d64b803ad708087 -p tcp -m tcp --dport 80 -j DNAT --to-destination 10.244.3.135:80
- -A CNI-DN-8ed702d64b803ad708087 -s 10.244.3.135/32 -p tcp -m tcp --dport 443 -j CNI-HOSTPORT-SETMARK
- -A CNI-DN-8ed702d64b803ad708087 -s 127.0.0.1/32 -p tcp -m tcp --dport 443 -j CNI-HOSTPORT-SETMARK
- -A CNI-DN-8ed702d64b803ad708087 -p tcp -m tcp --dport 443 -j DNAT --to-destination 10.244.3.135:443
- -A CNI-HOSTPORT-DNAT -p tcp -m comment --comment "dnat name: \"cbr0\" id: \"7546951dd281e9703711db35fda60bc64344234bea54ff4ac3a786ef6388a089\"" -m multiport --dports 80,443 -j CNI-DN-8ed702d64b803ad708087
- -A CNI-HOSTPORT-MASQ -m mark --mark 0x2000/0x2000 -j MASQUERADE
- -A CNI-HOSTPORT-SETMARK -m comment --comment "CNI portfwd masquerade mark" -j MARK --set-xmark 0x2000/0x2000
- -A DOCKER -i docker0 -j RETURN
- -A DOCKER ! -i docker0 -p tcp -m tcp --dport 9000 -j DNAT --to-destination 172.17.0.2:9000
- -A KUBE-MARK-DROP -j MARK --set-xmark 0x8000/0x8000
- -A KUBE-MARK-MASQ -j MARK --set-xmark 0x4000/0x4000
- -A KUBE-NODEPORTS -p tcp -m comment --comment "production/public-mysql-router:mysql-readwrite" -m tcp --dport 32446 -j KUBE-MARK-MASQ
- -A KUBE-NODEPORTS -p tcp -m comment --comment "production/public-mysql-router:mysql-readwrite" -m tcp --dport 32446 -j KUBE-SVC-WLDJ22CTQ65KV4JG
- -A KUBE-NODEPORTS -p tcp -m comment --comment "production/public-mysql-router:mysql-readonly" -m tcp --dport 32447 -j KUBE-MARK-MASQ
- -A KUBE-NODEPORTS -p tcp -m comment --comment "production/public-mysql-router:mysql-readonly" -m tcp --dport 32447 -j KUBE-SVC-PZM4WR2KGKUH2YGL
- -A KUBE-NODEPORTS -p tcp -m comment --comment "production/s3-minio:service" -m tcp --dport 31311 -j KUBE-MARK-MASQ
- -A KUBE-NODEPORTS -p tcp -m comment --comment "production/s3-minio:service" -m tcp --dport 31311 -j KUBE-SVC-3QWL7PDP2KLRJZPH
- -A KUBE-NODEPORTS -p tcp -m comment --comment "core/jazzed-rabbit-solr:http" -m tcp --dport 30103 -j KUBE-MARK-MASQ
- -A KUBE-NODEPORTS -p tcp -m comment --comment "core/jazzed-rabbit-solr:http" -m tcp --dport 30103 -j KUBE-SVC-RY23AY2CFMC3FVNC
- -A KUBE-NODEPORTS -p tcp -m comment --comment "nginx-ingress/nginx-ingress-controller:http" -m tcp --dport 31945 -j KUBE-MARK-MASQ
- -A KUBE-NODEPORTS -p tcp -m comment --comment "nginx-ingress/nginx-ingress-controller:http" -m tcp --dport 31945 -j KUBE-SVC-SALS67HEE6XK3UR2
- -A KUBE-NODEPORTS -p tcp -m comment --comment "default/ilsa-bcmove:tcp-38080-8080-hkv84" -m tcp --dport 32467 -j KUBE-MARK-MASQ
- -A KUBE-NODEPORTS -p tcp -m comment --comment "default/ilsa-bcmove:tcp-38080-8080-hkv84" -m tcp --dport 32467 -j KUBE-SVC-RLSDJ66UWGBNHREY
- -A KUBE-NODEPORTS -p tcp -m comment --comment "core/killjoy-catfish-rabbitmq-public:http" -m tcp --dport 31670 -j KUBE-MARK-MASQ
- -A KUBE-NODEPORTS -p tcp -m comment --comment "core/killjoy-catfish-rabbitmq-public:http" -m tcp --dport 31670 -j KUBE-SVC-VFUGSBFCOP5EDXWM
- -A KUBE-NODEPORTS -p tcp -m comment --comment "core/washing-gnat-sphinxsearch:mysql" -m tcp --dport 30102 -j KUBE-MARK-MASQ
- -A KUBE-NODEPORTS -p tcp -m comment --comment "core/washing-gnat-sphinxsearch:mysql" -m tcp --dport 30102 -j KUBE-SVC-QMUOK2R7Z7IHZXTR
- -A KUBE-NODEPORTS -p tcp -m comment --comment "nginx-ingress/nginx-ingress-controller:https" -m tcp --dport 31301 -j KUBE-MARK-MASQ
- -A KUBE-NODEPORTS -p tcp -m comment --comment "nginx-ingress/nginx-ingress-controller:https" -m tcp --dport 31301 -j KUBE-SVC-ZCWWUTPXOO7N2XL6
- -A KUBE-NODEPORTS -p tcp -m comment --comment "admin/search-solr:solr-client" -m tcp --dport 30104 -j KUBE-MARK-MASQ
- -A KUBE-NODEPORTS -p tcp -m comment --comment "admin/search-solr:solr-client" -m tcp --dport 30104 -j KUBE-SVC-G4IDSOOHZEPGOAGZ
- -A KUBE-POSTROUTING -m comment --comment "kubernetes service traffic requiring SNAT" -m mark --mark 0x4000/0x4000 -j MASQUERADE
- -A KUBE-POSTROUTING -m comment --comment "kubernetes service traffic requiring SNAT" -m mark --mark 0x4000/0x4000 -j MASQUERADE --random-fully
- -A KUBE-SEP-2I47MFX6OT6QLXCI -s 10.244.0.147/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-2I47MFX6OT6QLXCI -p tcp -m tcp -j DNAT --to-destination 10.244.0.147:5672
- -A KUBE-SEP-2QIPG66NZTEHGQQI -s 10.244.2.221/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-2QIPG66NZTEHGQQI -p tcp -m tcp -j DNAT --to-destination 10.244.2.221:80
- -A KUBE-SEP-2TTC3UYXG37SU3KX -s 10.244.0.152/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-2TTC3UYXG37SU3KX -p tcp -m tcp -j DNAT --to-destination 10.244.0.152:25
- -A KUBE-SEP-36LOF2UTI4ZMKJXW -s 10.244.1.127/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-36LOF2UTI4ZMKJXW -p tcp -m tcp -j DNAT --to-destination 10.244.1.127:3000
- -A KUBE-SEP-3PFWNMKJADUNX4YK -s 10.244.0.160/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-3PFWNMKJADUNX4YK -p tcp -m tcp -j DNAT --to-destination 10.244.0.160:9000
- -A KUBE-SEP-4ACLDMUTS56STFGO -s 10.244.2.199/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-4ACLDMUTS56STFGO -p tcp -m tcp -j DNAT --to-destination 10.244.2.199:8983
- -A KUBE-SEP-5TV3VVNIPJIABVFR -s 10.244.2.218/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-5TV3VVNIPJIABVFR -p tcp -m tcp -j DNAT --to-destination 10.244.2.218:9200
- -A KUBE-SEP-5WE4LA3GQVUFJHF4 -s 10.244.1.111/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-5WE4LA3GQVUFJHF4 -p tcp -m tcp -j DNAT --to-destination 10.244.1.111:3000
- -A KUBE-SEP-62DF4F3NN6UAKF4Z -s 10.244.0.222/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-62DF4F3NN6UAKF4Z -p tcp -m tcp -j DNAT --to-destination 10.244.0.222:8000
- -A KUBE-SEP-6ATSTCLFRM46K5DD -s 10.244.2.196/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-6ATSTCLFRM46K5DD -p tcp -m tcp -j DNAT --to-destination 10.244.2.196:9000
- -A KUBE-SEP-6KIWZES7FWXKKLV2 -s 10.244.2.210/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-6KIWZES7FWXKKLV2 -p tcp -m tcp -j DNAT --to-destination 10.244.2.210:80
- -A KUBE-SEP-6MECCFALFZC3HIGN -s 10.244.2.211/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-6MECCFALFZC3HIGN -p tcp -m tcp -j DNAT --to-destination 10.244.2.211:443
- -A KUBE-SEP-6OJEJN53ZZTBSVY2 -s 10.244.3.135/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-6OJEJN53ZZTBSVY2 -p tcp -m tcp -j DNAT --to-destination 10.244.3.135:80
- -A KUBE-SEP-6W5TZKUDSO7DYL2Q -s 10.244.2.222/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-6W5TZKUDSO7DYL2Q -p tcp -m tcp -j DNAT --to-destination 10.244.2.222:3000
- -A KUBE-SEP-6XPLCQX2W4EZJVPC -s 10.244.0.147/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-6XPLCQX2W4EZJVPC -p tcp -m tcp -j DNAT --to-destination 10.244.0.147:15672
- -A KUBE-SEP-6ZZD4XWK37KEDYZJ -s 10.244.0.161/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-6ZZD4XWK37KEDYZJ -p tcp -m tcp -j DNAT --to-destination 10.244.0.161:9000
- -A KUBE-SEP-727DCLPPEECJRJOW -s 10.244.1.241/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-727DCLPPEECJRJOW -p udp -m udp -j DNAT --to-destination 10.244.1.241:53
- -A KUBE-SEP-7VAY5USIKAYB7HXS -s 10.244.1.218/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-7VAY5USIKAYB7HXS -p tcp -m tcp -j DNAT --to-destination 10.244.1.218:8000
- -A KUBE-SEP-7ZPZGPQGJXPNYLVW -s 10.244.0.72/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-7ZPZGPQGJXPNYLVW -p udp -m udp -j DNAT --to-destination 10.244.0.72:53
- -A KUBE-SEP-A5H5PZLCAJ6TKVCT -s 10.244.2.204/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-A5H5PZLCAJ6TKVCT -p tcp -m tcp -j DNAT --to-destination 10.244.2.204:9306
- -A KUBE-SEP-AYT3JQTQWNMYKX2K -s 10.244.1.132/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-AYT3JQTQWNMYKX2K -p tcp -m tcp -j DNAT --to-destination 10.244.1.132:9090
- -A KUBE-SEP-BIA6COIHC4DXKTHN -s 10.244.1.146/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-BIA6COIHC4DXKTHN -p tcp -m tcp -j DNAT --to-destination 10.244.1.146:80
- -A KUBE-SEP-C5XXC2T4NHB4ZNVC -s 10.244.2.226/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-C5XXC2T4NHB4ZNVC -p tcp -m tcp -j DNAT --to-destination 10.244.2.226:80
- -A KUBE-SEP-CQ4HSSHDN4ZQIVID -s 10.244.0.147/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-CQ4HSSHDN4ZQIVID -p tcp -m tcp -j DNAT --to-destination 10.244.0.147:5672
- -A KUBE-SEP-CUT2G4MTWKWBPBBB -s 10.244.2.215/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-CUT2G4MTWKWBPBBB -p tcp -m tcp -j DNAT --to-destination 10.244.2.215:6446
- -A KUBE-SEP-CYOR4J7ACUWVB7FO -s 10.244.2.219/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-CYOR4J7ACUWVB7FO -p tcp -m tcp -j DNAT --to-destination 10.244.2.219:80
- -A KUBE-SEP-DMXZDOJXA4ZQOX3M -s 10.244.2.224/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-DMXZDOJXA4ZQOX3M -p tcp -m tcp -j DNAT --to-destination 10.244.2.224:8000
- -A KUBE-SEP-E23DZQ7XS2OYNBBS -s 10.244.0.75/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-E23DZQ7XS2OYNBBS -p tcp -m tcp -j DNAT --to-destination 10.244.0.75:80
- -A KUBE-SEP-ELMDV6ZZN6YAAHIA -s 10.244.0.218/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-ELMDV6ZZN6YAAHIA -p tcp -m tcp -j DNAT --to-destination 10.244.0.218:8000
- -A KUBE-SEP-ERH4RKMSH6D4564Q -s 10.244.2.201/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-ERH4RKMSH6D4564Q -p tcp -m tcp -j DNAT --to-destination 10.244.2.201:44134
- -A KUBE-SEP-FQJNIWZHRFIHAOHQ -s 10.244.1.226/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-FQJNIWZHRFIHAOHQ -p tcp -m tcp -j DNAT --to-destination 10.244.1.226:3000
- -A KUBE-SEP-FWI36LXHI6MNCZQR -s 10.244.1.241/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-FWI36LXHI6MNCZQR -p tcp -m tcp -j DNAT --to-destination 10.244.1.241:53
- -A KUBE-SEP-GLQBVE3PZ2DSW4BX -s 10.244.0.159/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-GLQBVE3PZ2DSW4BX -p tcp -m tcp -j DNAT --to-destination 10.244.0.159:8443
- -A KUBE-SEP-GRQWJEM5AKS65C3A -s 10.244.2.200/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-GRQWJEM5AKS65C3A -p tcp -m tcp -j DNAT --to-destination 10.244.2.200:3000
- -A KUBE-SEP-GUDLTOL7HYRHFR2F -s 10.244.2.215/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-GUDLTOL7HYRHFR2F -p tcp -m tcp -j DNAT --to-destination 10.244.2.215:6447
- -A KUBE-SEP-GXCPRK6QL5IJJXCV -s 10.244.2.224/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-GXCPRK6QL5IJJXCV -p tcp -m tcp -j DNAT --to-destination 10.244.2.224:3000
- -A KUBE-SEP-HE73O5BWC4FEUSUX -s 10.244.0.73/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-HE73O5BWC4FEUSUX -p tcp -m tcp -j DNAT --to-destination 10.244.0.73:3000
- -A KUBE-SEP-HF6DQQARROOKQA6C -s 10.244.1.145/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-HF6DQQARROOKQA6C -p tcp -m tcp -j DNAT --to-destination 10.244.1.145:80
- -A KUBE-SEP-HMEBLTTCYY67RMUJ -s 10.244.0.183/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-HMEBLTTCYY67RMUJ -p tcp -m tcp -j DNAT --to-destination 10.244.0.183:9000
- -A KUBE-SEP-HTDUBISSCHABJZJW -s 10.244.2.212/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-HTDUBISSCHABJZJW -p tcp -m tcp -j DNAT --to-destination 10.244.2.212:9000
- -A KUBE-SEP-HTJ422GI3ZJQLS4R -s 10.244.0.181/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-HTJ422GI3ZJQLS4R -p tcp -m tcp -j DNAT --to-destination 10.244.0.181:8080
- -A KUBE-SEP-I4B7TLANONZQ4V27 -s 10.244.1.68/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-I4B7TLANONZQ4V27 -p tcp -m tcp -j DNAT --to-destination 10.244.1.68:9000
- -A KUBE-SEP-IPPNEHKZMHXUN37Q -s 10.244.0.224/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-IPPNEHKZMHXUN37Q -p tcp -m tcp -j DNAT --to-destination 10.244.0.224:3000
- -A KUBE-SEP-ITGRE4C5JZH7FAK2 -s 10.244.0.222/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-ITGRE4C5JZH7FAK2 -p tcp -m tcp -j DNAT --to-destination 10.244.0.222:3000
- -A KUBE-SEP-ITLC52OBFHEZLA2J -s 10.244.2.216/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-ITLC52OBFHEZLA2J -p tcp -m tcp -j DNAT --to-destination 10.244.2.216:3000
- -A KUBE-SEP-ITMRBCPFOWQ5MHNP -s 10.244.2.222/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-ITMRBCPFOWQ5MHNP -p tcp -m tcp -j DNAT --to-destination 10.244.2.222:8000
- -A KUBE-SEP-IVZMUIZTLR5JR3N6 -s 10.244.1.134/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-IVZMUIZTLR5JR3N6 -p tcp -m tcp -j DNAT --to-destination 10.244.1.134:80
- -A KUBE-SEP-J2K5MTH7MG4OH27A -s 10.244.2.205/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-J2K5MTH7MG4OH27A -p tcp -m tcp -j DNAT --to-destination 10.244.2.205:8000
- -A KUBE-SEP-JDCWU3LT5YQ5EMH6 -s 10.244.1.131/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-JDCWU3LT5YQ5EMH6 -p tcp -m tcp -j DNAT --to-destination 10.244.1.131:8080
- -A KUBE-SEP-JV5PNHUQKPMI4MKH -s 10.244.0.157/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-JV5PNHUQKPMI4MKH -p tcp -m tcp -j DNAT --to-destination 10.244.0.157:44134
- -A KUBE-SEP-KBIYDSSKQPK5NOS6 -s 10.244.0.147/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-KBIYDSSKQPK5NOS6 -p tcp -m tcp -j DNAT --to-destination 10.244.0.147:25672
- -A KUBE-SEP-KDGSFGSS5PHUYA3X -s 10.244.2.223/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-KDGSFGSS5PHUYA3X -p tcp -m tcp -j DNAT --to-destination 10.244.2.223:3000
- -A KUBE-SEP-KN23XG3W2HVDAQZB -s 10.244.1.142/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-KN23XG3W2HVDAQZB -p tcp -m tcp -j DNAT --to-destination 10.244.1.142:80
- -A KUBE-SEP-LYQDPCHVRWVW4M4N -s 10.244.2.211/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-LYQDPCHVRWVW4M4N -p tcp -m tcp -j DNAT --to-destination 10.244.2.211:80
- -A KUBE-SEP-MUUW2M5EFFT2OLCZ -s 10.244.0.72/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-MUUW2M5EFFT2OLCZ -p tcp -m tcp -j DNAT --to-destination 10.244.0.72:53
- -A KUBE-SEP-N5SJA4GQOBZGR3UC -s 10.244.0.167/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-N5SJA4GQOBZGR3UC -p tcp -m tcp -j DNAT --to-destination 10.244.0.167:8080
- -A KUBE-SEP-OQNBVSC2GMNNIN5S -s 10.244.1.147/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-OQNBVSC2GMNNIN5S -p tcp -m tcp -j DNAT --to-destination 10.244.1.147:80
- -A KUBE-SEP-OQV6GZIYR7JIEEUX -s 10.244.2.248/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-OQV6GZIYR7JIEEUX -p tcp -m tcp -j DNAT --to-destination 10.244.2.248:80
- -A KUBE-SEP-OX7YYSFBPJRPNNYM -s 10.244.0.147/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-OX7YYSFBPJRPNNYM -p tcp -m tcp -j DNAT --to-destination 10.244.0.147:4369
- -A KUBE-SEP-OY6BDVJBBXGLMJNZ -s 10.244.0.46/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-OY6BDVJBBXGLMJNZ -p tcp -m tcp -j DNAT --to-destination 10.244.0.46:80
- -A KUBE-SEP-OYIOPRQHVMKWO4ET -s 10.244.0.153/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-OYIOPRQHVMKWO4ET -p tcp -m tcp -j DNAT --to-destination 10.244.0.153:80
- -A KUBE-SEP-PU5665C3QA2SUFXW -s 10.244.1.123/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-PU5665C3QA2SUFXW -p tcp -m tcp -j DNAT --to-destination 10.244.1.123:8080
- -A KUBE-SEP-QHGG2RLHNDIIBTVQ -s 10.244.2.203/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-QHGG2RLHNDIIBTVQ -p tcp -m tcp -j DNAT --to-destination 10.244.2.203:8080
- -A KUBE-SEP-QTRVDAVVBVTUUYBU -s 10.244.1.133/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-QTRVDAVVBVTUUYBU -p tcp -m tcp -j DNAT --to-destination 10.244.1.133:9000
- -A KUBE-SEP-QX3JXG5XL2FJPS4E -s 10.244.2.207/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-QX3JXG5XL2FJPS4E -p tcp -m tcp -j DNAT --to-destination 10.244.2.207:9091
- -A KUBE-SEP-R366XD6ORC3KQZ6N -s 10.244.0.42/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-R366XD6ORC3KQZ6N -p tcp -m tcp -j DNAT --to-destination 10.244.0.42:8000
- -A KUBE-SEP-RGNNVFNWDEZTQEWD -s 10.244.1.64/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-RGNNVFNWDEZTQEWD -p tcp -m tcp -j DNAT --to-destination 10.244.1.64:9200
- -A KUBE-SEP-RLOMKF5XXX5SES6U -s 10.244.1.206/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-RLOMKF5XXX5SES6U -p tcp -m tcp -j DNAT --to-destination 10.244.1.206:8000
- -A KUBE-SEP-RZ3N3UPGBY7KYWF2 -s 10.244.2.225/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-RZ3N3UPGBY7KYWF2 -p tcp -m tcp -j DNAT --to-destination 10.244.2.225:80
- -A KUBE-SEP-SA2O2U44GHDFCCLN -s 10.244.0.72/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-SA2O2U44GHDFCCLN -p tcp -m tcp -j DNAT --to-destination 10.244.0.72:9153
- -A KUBE-SEP-SCIWZAC32N2HORP4 -s 10.244.3.135/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-SCIWZAC32N2HORP4 -p tcp -m tcp -j DNAT --to-destination 10.244.3.135:443
- -A KUBE-SEP-SE4YTJ7GFP6YB7FN -s 10.244.1.125/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-SE4YTJ7GFP6YB7FN -p tcp -m tcp -j DNAT --to-destination 10.244.1.125:8080
- -A KUBE-SEP-SPD2SEY2IQXP7ADH -s 10.244.0.143/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-SPD2SEY2IQXP7ADH -p tcp -m tcp -j DNAT --to-destination 10.244.0.143:80
- -A KUBE-SEP-STIX4KJH37HE34LN -s 10.244.0.237/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-STIX4KJH37HE34LN -p tcp -m tcp -j DNAT --to-destination 10.244.0.237:9000
- -A KUBE-SEP-T5MC2P4OB2GRRCG6 -s 10.244.1.64/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-T5MC2P4OB2GRRCG6 -p tcp -m tcp -j DNAT --to-destination 10.244.1.64:9300
- -A KUBE-SEP-TKDNRELBBQ5FU3ND -s 10.244.2.218/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-TKDNRELBBQ5FU3ND -p tcp -m tcp -j DNAT --to-destination 10.244.2.218:9300
- -A KUBE-SEP-UB4CY6X3UOSXP5TD -s 10.244.0.99/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-UB4CY6X3UOSXP5TD -p tcp -m tcp -j DNAT --to-destination 10.244.0.99:8000
- -A KUBE-SEP-UDW7GMVNZ5F4ZFPD -s 10.244.1.126/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-UDW7GMVNZ5F4ZFPD -p tcp -m tcp -j DNAT --to-destination 10.244.1.126:6447
- -A KUBE-SEP-V5M4OGB5FO27CGNM -s 10.244.0.165/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-V5M4OGB5FO27CGNM -p tcp -m tcp -j DNAT --to-destination 10.244.0.165:8080
- -A KUBE-SEP-VI5DEO2UBC64JR5V -s 10.244.0.53/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-VI5DEO2UBC64JR5V -p tcp -m tcp -j DNAT --to-destination 10.244.0.53:80
- -A KUBE-SEP-VKISRV332LVKSKAS -s 10.244.1.160/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-VKISRV332LVKSKAS -p tcp -m tcp -j DNAT --to-destination 10.244.1.160:8000
- -A KUBE-SEP-VLRTF377K6UDTE3U -s 10.244.0.70/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-VLRTF377K6UDTE3U -p tcp -m tcp -j DNAT --to-destination 10.244.0.70:3000
- -A KUBE-SEP-VUXHRZM6WIMZYMIL -s 10.244.2.214/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-VUXHRZM6WIMZYMIL -p tcp -m tcp -j DNAT --to-destination 10.244.2.214:3000
- -A KUBE-SEP-WT5RZHVTOEUUWQ35 -s 10.244.0.192/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-WT5RZHVTOEUUWQ35 -p tcp -m tcp -j DNAT --to-destination 10.244.0.192:8000
- -A KUBE-SEP-X3WSABGJ254GBSE4 -s 10.244.0.150/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-X3WSABGJ254GBSE4 -p tcp -m tcp -j DNAT --to-destination 10.244.0.150:8983
- -A KUBE-SEP-X4F6ZJ7LQWWT6ZWW -s 10.244.0.41/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-X4F6ZJ7LQWWT6ZWW -p tcp -m tcp -j DNAT --to-destination 10.244.0.41:8000
- -A KUBE-SEP-XH3DFDTYHIEOSYJK -s 10.244.0.69/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-XH3DFDTYHIEOSYJK -p tcp -m tcp -j DNAT --to-destination 10.244.0.69:80
- -A KUBE-SEP-XJBYADZHX4C3RCC7 -s 10.244.0.75/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-XJBYADZHX4C3RCC7 -p tcp -m tcp -j DNAT --to-destination 10.244.0.75:443
- -A KUBE-SEP-Y7HHC3QRMBYN2OCY -s 10.244.1.128/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-Y7HHC3QRMBYN2OCY -p tcp -m tcp -j DNAT --to-destination 10.244.1.128:80
- -A KUBE-SEP-Y7OLX3KBDDDCCGXF -s 10.244.1.126/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-Y7OLX3KBDDDCCGXF -p tcp -m tcp -j DNAT --to-destination 10.244.1.126:6446
- -A KUBE-SEP-YEZ2JMXEJWB6EJA7 -s 10.244.1.141/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-YEZ2JMXEJWB6EJA7 -p tcp -m tcp -j DNAT --to-destination 10.244.1.141:3000
- -A KUBE-SEP-YS6JISMIZTZ2NSKH -s 10.244.1.146/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-YS6JISMIZTZ2NSKH -p tcp -m tcp -j DNAT --to-destination 10.244.1.146:443
- -A KUBE-SEP-Z3PVFCBKXEH2OSPJ -s 10.244.1.197/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-Z3PVFCBKXEH2OSPJ -p tcp -m tcp -j DNAT --to-destination 10.244.1.197:8000
- -A KUBE-SEP-Z7Q3ACRES7FPDRVG -s 10.244.1.241/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-Z7Q3ACRES7FPDRVG -p tcp -m tcp -j DNAT --to-destination 10.244.1.241:9153
- -A KUBE-SEP-ZGD4RXUX4XHBMR7O -s 78.46.45.146/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-ZGD4RXUX4XHBMR7O -p tcp -m tcp -j DNAT --to-destination 78.46.45.146:6443
- -A KUBE-SEP-ZRIEVFDEFQAL27LE -s 10.244.1.234/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-ZRIEVFDEFQAL27LE -p tcp -m tcp -j DNAT --to-destination 10.244.1.234:80
- -A KUBE-SEP-ZW4B6JOBCPPH4HEQ -s 10.244.0.140/32 -j KUBE-MARK-MASQ
- -A KUBE-SEP-ZW4B6JOBCPPH4HEQ -p tcp -m tcp -j DNAT --to-destination 10.244.0.140:9093
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.104.42.214/32 -p tcp -m comment --comment "internal/mangy-bear-ilsa-catalog:grpc cluster IP" -m tcp --dport 3000 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.104.42.214/32 -p tcp -m comment --comment "internal/mangy-bear-ilsa-catalog:grpc cluster IP" -m tcp --dport 3000 -j KUBE-SVC-ULT42FO3QBEFLBE7
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.104.42.214/32 -p tcp -m comment --comment "internal/mangy-bear-ilsa-catalog:http cluster IP" -m tcp --dport 8000 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.104.42.214/32 -p tcp -m comment --comment "internal/mangy-bear-ilsa-catalog:http cluster IP" -m tcp --dport 8000 -j KUBE-SVC-VC7AUUYUDCII4O6U
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.97.72.185/32 -p tcp -m comment --comment "kube-system/kubernetes-dashboard: cluster IP" -m tcp --dport 443 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.97.72.185/32 -p tcp -m comment --comment "kube-system/kubernetes-dashboard: cluster IP" -m tcp --dport 443 -j KUBE-SVC-XGLOHA7QRQ3V22RZ
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.100.43.156/32 -p tcp -m comment --comment "production/public-mysql-router:mysql-readwrite cluster IP" -m tcp --dport 6446 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.100.43.156/32 -p tcp -m comment --comment "production/public-mysql-router:mysql-readwrite cluster IP" -m tcp --dport 6446 -j KUBE-SVC-WLDJ22CTQ65KV4JG
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.111.208.103/32 -p tcp -m comment --comment "internal/convert:http cluster IP" -m tcp --dport 80 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.111.208.103/32 -p tcp -m comment --comment "internal/convert:http cluster IP" -m tcp --dport 80 -j KUBE-SVC-H4XXCCQHGTX356OF
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.100.43.156/32 -p tcp -m comment --comment "production/public-mysql-router:mysql-readonly cluster IP" -m tcp --dport 6447 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.100.43.156/32 -p tcp -m comment --comment "production/public-mysql-router:mysql-readonly cluster IP" -m tcp --dport 6447 -j KUBE-SVC-PZM4WR2KGKUH2YGL
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.111.226.112/32 -p tcp -m comment --comment "production/s3-minio:service cluster IP" -m tcp --dport 9000 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.111.226.112/32 -p tcp -m comment --comment "production/s3-minio:service cluster IP" -m tcp --dport 9000 -j KUBE-SVC-3QWL7PDP2KLRJZPH
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.104.114.166/32 -p tcp -m comment --comment "internal/pricelist:http cluster IP" -m tcp --dport 80 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.104.114.166/32 -p tcp -m comment --comment "internal/pricelist:http cluster IP" -m tcp --dport 80 -j KUBE-SVC-3W25UXR7PCLF6DI6
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.111.107.222/32 -p tcp -m comment --comment "catalog-19589619-review-oet-rh2o01/catalog-app:http cluster IP" -m tcp --dport 80 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.111.107.222/32 -p tcp -m comment --comment "catalog-19589619-review-oet-rh2o01/catalog-app:http cluster IP" -m tcp --dport 80 -j KUBE-SVC-3QQCAF7DJHCRYAXZ
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.104.79.211/32 -p tcp -m comment --comment "pricelist-19192907-review-errors-cc36bj/pricelist-app:http cluster IP" -m tcp --dport 80 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.104.79.211/32 -p tcp -m comment --comment "pricelist-19192907-review-errors-cc36bj/pricelist-app:http cluster IP" -m tcp --dport 80 -j KUBE-SVC-GS33IQCCXJYCF6G3
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.108.114.41/32 -p tcp -m comment --comment "internal/catalog:http cluster IP" -m tcp --dport 80 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.108.114.41/32 -p tcp -m comment --comment "internal/catalog:http cluster IP" -m tcp --dport 80 -j KUBE-SVC-CUDBAC65LFUWWAGP
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.102.127.22/32 -p tcp -m comment --comment "internal/ringed-armadillo-call:fastcgi cluster IP" -m tcp --dport 9000 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.102.127.22/32 -p tcp -m comment --comment "internal/ringed-armadillo-call:fastcgi cluster IP" -m tcp --dport 9000 -j KUBE-SVC-RD6ZUC3WDSNJ7ZUA
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.96.93.226/32 -p tcp -m comment --comment "production/boisterous-skunk:service cluster IP" -m tcp --dport 9000 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.96.93.226/32 -p tcp -m comment --comment "production/boisterous-skunk:service cluster IP" -m tcp --dport 9000 -j KUBE-SVC-CFHLBYYB4YGHK7TJ
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.102.17.16/32 -p tcp -m comment --comment "production/elasticsearch-master:transport cluster IP" -m tcp --dport 9300 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.102.17.16/32 -p tcp -m comment --comment "production/elasticsearch-master:transport cluster IP" -m tcp --dport 9300 -j KUBE-SVC-AICHGEYX3BVTOED6
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.111.220.140/32 -p tcp -m comment --comment "production/media-proxy-nginx:http cluster IP" -m tcp --dport 80 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.111.220.140/32 -p tcp -m comment --comment "production/media-proxy-nginx:http cluster IP" -m tcp --dport 80 -j KUBE-SVC-UJDKNIFG53EJXXYL
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.96.183.120/32 -p tcp -m comment --comment "internal/api-import-phpfpm:cgi cluster IP" -m tcp --dport 9000 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.96.183.120/32 -p tcp -m comment --comment "internal/api-import-phpfpm:cgi cluster IP" -m tcp --dport 9000 -j KUBE-SVC-M37ZWITXO6U6JADQ
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.108.2.252/32 -p tcp -m comment --comment "internal/cranky-saola-ilsa-booking:http cluster IP" -m tcp --dport 80 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.108.2.252/32 -p tcp -m comment --comment "internal/cranky-saola-ilsa-booking:http cluster IP" -m tcp --dport 80 -j KUBE-SVC-C3NKWW2YAK3EV6WO
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.96.0.10/32 -p tcp -m comment --comment "kube-system/kube-dns:dns-tcp cluster IP" -m tcp --dport 53 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.96.0.10/32 -p tcp -m comment --comment "kube-system/kube-dns:dns-tcp cluster IP" -m tcp --dport 53 -j KUBE-SVC-ERIFXISQEP7F7OF4
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.96.0.10/32 -p tcp -m comment --comment "kube-system/kube-dns:metrics cluster IP" -m tcp --dport 9153 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.96.0.10/32 -p tcp -m comment --comment "kube-system/kube-dns:metrics cluster IP" -m tcp --dport 9153 -j KUBE-SVC-JD5MR3NA4I4DYORP
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.109.122.209/32 -p tcp -m comment --comment "production/busted-lightningbug-ui:http cluster IP" -m tcp --dport 80 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.109.122.209/32 -p tcp -m comment --comment "production/busted-lightningbug-ui:http cluster IP" -m tcp --dport 80 -j KUBE-SVC-MH3DXGNMOEVGARYR
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.106.42.249/32 -p tcp -m comment --comment "internal/api-ilsa-gallery:http cluster IP" -m tcp --dport 80 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.106.42.249/32 -p tcp -m comment --comment "internal/api-ilsa-gallery:http cluster IP" -m tcp --dport 80 -j KUBE-SVC-3KAYW4GCVYV7RVN5
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.104.73.56/32 -p tcp -m comment --comment "production/smelly-stingray-ilsa-widget:http cluster IP" -m tcp --dport 80 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.104.73.56/32 -p tcp -m comment --comment "production/smelly-stingray-ilsa-widget:http cluster IP" -m tcp --dport 80 -j KUBE-SVC-YO27AO526SW7FVUF
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.108.73.242/32 -p tcp -m comment --comment "internal/wayfaring-ocelot-ilsa-price:grpc cluster IP" -m tcp --dport 3000 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.108.73.242/32 -p tcp -m comment --comment "internal/wayfaring-ocelot-ilsa-price:grpc cluster IP" -m tcp --dport 3000 -j KUBE-SVC-7GKA32WHHS3LHJ6K
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.102.112.148/32 -p tcp -m comment --comment "ilsa-api2-3651255-review-pricelist-b2g4cj/ilsa-api2-app:http cluster IP" -m tcp --dport 80 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.102.112.148/32 -p tcp -m comment --comment "ilsa-api2-3651255-review-pricelist-b2g4cj/ilsa-api2-app:http cluster IP" -m tcp --dport 80 -j KUBE-SVC-MQ4ORREHVQXZ23SQ
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.108.83.101/32 -p tcp -m comment --comment "production/winning-markhor-ilsa-api:http cluster IP" -m tcp --dport 8000 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.108.83.101/32 -p tcp -m comment --comment "production/winning-markhor-ilsa-api:http cluster IP" -m tcp --dport 8000 -j KUBE-SVC-EP4QPNLBYVNYVRWP
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.98.243.83/32 -p tcp -m comment --comment "production/api-v5-app:fastcgi cluster IP" -m tcp --dport 9000 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.98.243.83/32 -p tcp -m comment --comment "production/api-v5-app:fastcgi cluster IP" -m tcp --dport 9000 -j KUBE-SVC-LENZUHWFDRKNFKMN
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.102.222.131/32 -p tcp -m comment --comment "internal/ringed-armadillo-nginx:http cluster IP" -m tcp --dport 80 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.102.222.131/32 -p tcp -m comment --comment "internal/ringed-armadillo-nginx:http cluster IP" -m tcp --dport 80 -j KUBE-SVC-FC7ZM2TFQM62ZYRP
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.105.83.178/32 -p tcp -m comment --comment "core/jazzed-rabbit-solr:http cluster IP" -m tcp --dport 8983 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.105.83.178/32 -p tcp -m comment --comment "core/jazzed-rabbit-solr:http cluster IP" -m tcp --dport 8983 -j KUBE-SVC-RY23AY2CFMC3FVNC
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.102.18.118/32 -p tcp -m comment --comment "gitlab-managed-apps/tiller-deploy:tiller cluster IP" -m tcp --dport 44134 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.102.18.118/32 -p tcp -m comment --comment "gitlab-managed-apps/tiller-deploy:tiller cluster IP" -m tcp --dport 44134 -j KUBE-SVC-555QPBWBGYL6SUVU
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.103.104.7/32 -p tcp -m comment --comment "nginx-ingress/nginx-ingress-default-backend:http cluster IP" -m tcp --dport 80 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.103.104.7/32 -p tcp -m comment --comment "nginx-ingress/nginx-ingress-default-backend:http cluster IP" -m tcp --dport 80 -j KUBE-SVC-JD77LS6CGFAZWFSF
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.96.0.1/32 -p tcp -m comment --comment "default/kubernetes:https cluster IP" -m tcp --dport 443 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.96.0.1/32 -p tcp -m comment --comment "default/kubernetes:https cluster IP" -m tcp --dport 443 -j KUBE-SVC-NPX46M4PTMTKRN6Y
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.96.216.210/32 -p tcp -m comment --comment "monitoring/prometheus-server:http cluster IP" -m tcp --dport 80 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.96.216.210/32 -p tcp -m comment --comment "monitoring/prometheus-server:http cluster IP" -m tcp --dport 80 -j KUBE-SVC-DNJUP3CRF6WUI6WP
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.100.117.146/32 -p tcp -m comment --comment "nginx-ingress/nginx-ingress-controller:http cluster IP" -m tcp --dport 80 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.100.117.146/32 -p tcp -m comment --comment "nginx-ingress/nginx-ingress-controller:http cluster IP" -m tcp --dport 80 -j KUBE-SVC-SALS67HEE6XK3UR2
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.96.0.10/32 -p udp -m comment --comment "kube-system/kube-dns:dns cluster IP" -m udp --dport 53 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.96.0.10/32 -p udp -m comment --comment "kube-system/kube-dns:dns cluster IP" -m udp --dport 53 -j KUBE-SVC-TCOU7JCQXEZGVUNU
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.97.126.42/32 -p tcp -m comment --comment "internal/voting-gerbil-ilsa-convert:http cluster IP" -m tcp --dport 80 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.97.126.42/32 -p tcp -m comment --comment "internal/voting-gerbil-ilsa-convert:http cluster IP" -m tcp --dport 80 -j KUBE-SVC-DF4L2MKNKCT6HOO6
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.100.186.90/32 -p tcp -m comment --comment "production/imageresizer:http cluster IP" -m tcp --dport 80 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.100.186.90/32 -p tcp -m comment --comment "production/imageresizer:http cluster IP" -m tcp --dport 80 -j KUBE-SVC-Q6LBIJ4JTGMXRAN7
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.107.77.101/32 -p tcp -m comment --comment "default/ilsa-bcmove:tcp-38080-8080-hkv84 cluster IP" -m tcp --dport 80 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.107.77.101/32 -p tcp -m comment --comment "default/ilsa-bcmove:tcp-38080-8080-hkv84 cluster IP" -m tcp --dport 80 -j KUBE-SVC-RLSDJ66UWGBNHREY
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.97.175.131/32 -p tcp -m comment --comment "core/killjoy-catfish-rabbitmq:dist cluster IP" -m tcp --dport 25672 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.97.175.131/32 -p tcp -m comment --comment "core/killjoy-catfish-rabbitmq:dist cluster IP" -m tcp --dport 25672 -j KUBE-SVC-NETLNZIY34CGM2RD
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.96.252.222/32 -p tcp -m comment --comment "internal/dangling-chipmunk-autoru-graphql:http cluster IP" -m tcp --dport 80 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.96.252.222/32 -p tcp -m comment --comment "internal/dangling-chipmunk-autoru-graphql:http cluster IP" -m tcp --dport 80 -j KUBE-SVC-DP64XFHK74QZ2CEM
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.102.17.16/32 -p tcp -m comment --comment "production/elasticsearch-master:http cluster IP" -m tcp --dport 9200 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.102.17.16/32 -p tcp -m comment --comment "production/elasticsearch-master:http cluster IP" -m tcp --dport 9200 -j KUBE-SVC-URFDFDNHMVT2SXSR
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.106.117.219/32 -p tcp -m comment --comment "core/killjoy-catfish-rabbitmq-public:http cluster IP" -m tcp --dport 5672 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.106.117.219/32 -p tcp -m comment --comment "core/killjoy-catfish-rabbitmq-public:http cluster IP" -m tcp --dport 5672 -j KUBE-SVC-VFUGSBFCOP5EDXWM
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.97.175.131/32 -p tcp -m comment --comment "core/killjoy-catfish-rabbitmq:epmd cluster IP" -m tcp --dport 4369 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.97.175.131/32 -p tcp -m comment --comment "core/killjoy-catfish-rabbitmq:epmd cluster IP" -m tcp --dport 4369 -j KUBE-SVC-6US5C4SL6OMJES6X
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.98.25.126/32 -p tcp -m comment --comment "core/washing-gnat-sphinxsearch:mysql cluster IP" -m tcp --dport 9307 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.98.25.126/32 -p tcp -m comment --comment "core/washing-gnat-sphinxsearch:mysql cluster IP" -m tcp --dport 9307 -j KUBE-SVC-QMUOK2R7Z7IHZXTR
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.101.222.94/32 -p tcp -m comment --comment "kube-system/tiller-deploy:tiller cluster IP" -m tcp --dport 44134 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.101.222.94/32 -p tcp -m comment --comment "kube-system/tiller-deploy:tiller cluster IP" -m tcp --dport 44134 -j KUBE-SVC-K7J76NXP7AUZVFGS
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.97.175.131/32 -p tcp -m comment --comment "core/killjoy-catfish-rabbitmq:amqp cluster IP" -m tcp --dport 5672 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.97.175.131/32 -p tcp -m comment --comment "core/killjoy-catfish-rabbitmq:amqp cluster IP" -m tcp --dport 5672 -j KUBE-SVC-YVFLX6G3DN2CV3HS
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.97.175.131/32 -p tcp -m comment --comment "core/killjoy-catfish-rabbitmq:stats cluster IP" -m tcp --dport 15672 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.97.175.131/32 -p tcp -m comment --comment "core/killjoy-catfish-rabbitmq:stats cluster IP" -m tcp --dport 15672 -j KUBE-SVC-2UGGNXGPPPSPPMLS
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.101.153.212/32 -p tcp -m comment --comment "internal/api-catalog-decoder:http cluster IP" -m tcp --dport 80 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.101.153.212/32 -p tcp -m comment --comment "internal/api-catalog-decoder:http cluster IP" -m tcp --dport 80 -j KUBE-SVC-RDEKVQQYAX2LLES5
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.100.117.146/32 -p tcp -m comment --comment "nginx-ingress/nginx-ingress-controller:https cluster IP" -m tcp --dport 443 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.100.117.146/32 -p tcp -m comment --comment "nginx-ingress/nginx-ingress-controller:https cluster IP" -m tcp --dport 443 -j KUBE-SVC-ZCWWUTPXOO7N2XL6
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.100.22.203/32 -p tcp -m comment --comment "production/console:http cluster IP" -m tcp --dport 80 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.100.22.203/32 -p tcp -m comment --comment "production/console:http cluster IP" -m tcp --dport 80 -j KUBE-SVC-T6URFN7ED4NRY3JM
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.108.207.225/32 -p tcp -m comment --comment "production/graphql-app:http cluster IP" -m tcp --dport 80 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.108.207.225/32 -p tcp -m comment --comment "production/graphql-app:http cluster IP" -m tcp --dport 80 -j KUBE-SVC-HEJG3VL2OBQGMPRE
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.100.114.95/32 -p tcp -m comment --comment "production/partner-api-graphql:http cluster IP" -m tcp --dport 80 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.100.114.95/32 -p tcp -m comment --comment "production/partner-api-graphql:http cluster IP" -m tcp --dport 80 -j KUBE-SVC-YILO3KUSNW7QJONU
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.100.136.11/32 -p tcp -m comment --comment "internal/search-app:http cluster IP" -m tcp --dport 80 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.100.136.11/32 -p tcp -m comment --comment "internal/search-app:http cluster IP" -m tcp --dport 80 -j KUBE-SVC-NHO35BGNFBCILAXG
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.97.153.73/32 -p tcp -m comment --comment "monitoring/prometheus-alertmanager:http cluster IP" -m tcp --dport 80 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.97.153.73/32 -p tcp -m comment --comment "monitoring/prometheus-alertmanager:http cluster IP" -m tcp --dport 80 -j KUBE-SVC-3MZQ7JRBBGEZQMJZ
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.99.168.29/32 -p tcp -m comment --comment "internal/api-nginx:http cluster IP" -m tcp --dport 80 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.99.168.29/32 -p tcp -m comment --comment "internal/api-nginx:http cluster IP" -m tcp --dport 80 -j KUBE-SVC-B6ATNMJRWV3EYBBT
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.103.131.5/32 -p tcp -m comment --comment "production/frame-web:http cluster IP" -m tcp --dport 80 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.103.131.5/32 -p tcp -m comment --comment "production/frame-web:http cluster IP" -m tcp --dport 80 -j KUBE-SVC-AC6NWKR6HYUJRF6H
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.96.123.133/32 -p tcp -m comment --comment "core/awesome-sparrow-exim:smtp cluster IP" -m tcp --dport 25 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.96.123.133/32 -p tcp -m comment --comment "core/awesome-sparrow-exim:smtp cluster IP" -m tcp --dport 25 -j KUBE-SVC-OBTPQZYQ6XKY2NFB
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.96.204.105/32 -p tcp -m comment --comment "monitoring/prometheus-pushgateway:http cluster IP" -m tcp --dport 9091 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.96.204.105/32 -p tcp -m comment --comment "monitoring/prometheus-pushgateway:http cluster IP" -m tcp --dport 9091 -j KUBE-SVC-4SJLJGMA6G4JMGPD
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.108.112.243/32 -p tcp -m comment --comment "production/smelly-stingray-ilsa-widget-init:http cluster IP" -m tcp --dport 80 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.108.112.243/32 -p tcp -m comment --comment "production/smelly-stingray-ilsa-widget-init:http cluster IP" -m tcp --dport 80 -j KUBE-SVC-ZZUI3B73WEQG5WIL
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.109.95.107/32 -p tcp -m comment --comment "internal/jittery-aardvark-ilsa-pbx:http cluster IP" -m tcp --dport 8000 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.109.95.107/32 -p tcp -m comment --comment "internal/jittery-aardvark-ilsa-pbx:http cluster IP" -m tcp --dport 8000 -j KUBE-SVC-JWRRAPASBK5SJQZX
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.103.146.115/32 -p tcp -m comment --comment "admin/search-solr:solr-client cluster IP" -m tcp --dport 8983 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.103.146.115/32 -p tcp -m comment --comment "admin/search-solr:solr-client cluster IP" -m tcp --dport 8983 -j KUBE-SVC-G4IDSOOHZEPGOAGZ
- -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.108.73.242/32 -p tcp -m comment --comment "internal/wayfaring-ocelot-ilsa-price:http cluster IP" -m tcp --dport 8000 -j KUBE-MARK-MASQ
- -A KUBE-SERVICES -d 10.108.73.242/32 -p tcp -m comment --comment "internal/wayfaring-ocelot-ilsa-price:http cluster IP" -m tcp --dport 8000 -j KUBE-SVC-2H22HDYEVKYTESCO
- -A KUBE-SERVICES -m comment --comment "kubernetes service nodeports; NOTE: this must be the last rule in this chain" -m addrtype --dst-type LOCAL -j KUBE-NODEPORTS
- -A KUBE-SVC-2H22HDYEVKYTESCO -j KUBE-SEP-ITMRBCPFOWQ5MHNP
- -A KUBE-SVC-2UGGNXGPPPSPPMLS -j KUBE-SEP-6XPLCQX2W4EZJVPC
- -A KUBE-SVC-3KAYW4GCVYV7RVN5 -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-FQJNIWZHRFIHAOHQ
- -A KUBE-SVC-3KAYW4GCVYV7RVN5 -j KUBE-SEP-ITLC52OBFHEZLA2J
- -A KUBE-SVC-3MZQ7JRBBGEZQMJZ -j KUBE-SEP-ZW4B6JOBCPPH4HEQ
- -A KUBE-SVC-3QQCAF7DJHCRYAXZ -j KUBE-SEP-RLOMKF5XXX5SES6U
- -A KUBE-SVC-3QWL7PDP2KLRJZPH -m statistic --mode random --probability 0.33332999982 -j KUBE-SEP-6ZZD4XWK37KEDYZJ
- -A KUBE-SVC-3QWL7PDP2KLRJZPH -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-QTRVDAVVBVTUUYBU
- -A KUBE-SVC-3QWL7PDP2KLRJZPH -j KUBE-SEP-6ATSTCLFRM46K5DD
- -A KUBE-SVC-3W25UXR7PCLF6DI6 -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-X4F6ZJ7LQWWT6ZWW
- -A KUBE-SVC-3W25UXR7PCLF6DI6 -j KUBE-SEP-Z3PVFCBKXEH2OSPJ
- -A KUBE-SVC-4SJLJGMA6G4JMGPD -j KUBE-SEP-QX3JXG5XL2FJPS4E
- -A KUBE-SVC-555QPBWBGYL6SUVU -j KUBE-SEP-ERH4RKMSH6D4564Q
- -A KUBE-SVC-6US5C4SL6OMJES6X -j KUBE-SEP-OX7YYSFBPJRPNNYM
- -A KUBE-SVC-7GKA32WHHS3LHJ6K -j KUBE-SEP-6W5TZKUDSO7DYL2Q
- -A KUBE-SVC-AC6NWKR6HYUJRF6H -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-HF6DQQARROOKQA6C
- -A KUBE-SVC-AC6NWKR6HYUJRF6H -j KUBE-SEP-C5XXC2T4NHB4ZNVC
- -A KUBE-SVC-AICHGEYX3BVTOED6 -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-T5MC2P4OB2GRRCG6
- -A KUBE-SVC-AICHGEYX3BVTOED6 -j KUBE-SEP-TKDNRELBBQ5FU3ND
- -A KUBE-SVC-B6ATNMJRWV3EYBBT -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-SPD2SEY2IQXP7ADH
- -A KUBE-SVC-B6ATNMJRWV3EYBBT -j KUBE-SEP-OQNBVSC2GMNNIN5S
- -A KUBE-SVC-C3NKWW2YAK3EV6WO -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-N5SJA4GQOBZGR3UC
- -A KUBE-SVC-C3NKWW2YAK3EV6WO -j KUBE-SEP-SE4YTJ7GFP6YB7FN
- -A KUBE-SVC-CFHLBYYB4YGHK7TJ -j KUBE-SEP-3PFWNMKJADUNX4YK
- -A KUBE-SVC-CUDBAC65LFUWWAGP -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-WT5RZHVTOEUUWQ35
- -A KUBE-SVC-CUDBAC65LFUWWAGP -j KUBE-SEP-J2K5MTH7MG4OH27A
- -A KUBE-SVC-DF4L2MKNKCT6HOO6 -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-PU5665C3QA2SUFXW
- -A KUBE-SVC-DF4L2MKNKCT6HOO6 -j KUBE-SEP-QHGG2RLHNDIIBTVQ
- -A KUBE-SVC-DNJUP3CRF6WUI6WP -j KUBE-SEP-AYT3JQTQWNMYKX2K
- -A KUBE-SVC-DP64XFHK74QZ2CEM -j KUBE-SEP-VUXHRZM6WIMZYMIL
- -A KUBE-SVC-EP4QPNLBYVNYVRWP -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-ELMDV6ZZN6YAAHIA
- -A KUBE-SVC-EP4QPNLBYVNYVRWP -j KUBE-SEP-VKISRV332LVKSKAS
- -A KUBE-SVC-ERIFXISQEP7F7OF4 -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-MUUW2M5EFFT2OLCZ
- -A KUBE-SVC-ERIFXISQEP7F7OF4 -j KUBE-SEP-FWI36LXHI6MNCZQR
- -A KUBE-SVC-FC7ZM2TFQM62ZYRP -j KUBE-SEP-OYIOPRQHVMKWO4ET
- -A KUBE-SVC-G4IDSOOHZEPGOAGZ -j KUBE-SEP-X3WSABGJ254GBSE4
- -A KUBE-SVC-GS33IQCCXJYCF6G3 -j KUBE-SEP-R366XD6ORC3KQZ6N
- -A KUBE-SVC-H4XXCCQHGTX356OF -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-UB4CY6X3UOSXP5TD
- -A KUBE-SVC-H4XXCCQHGTX356OF -j KUBE-SEP-7VAY5USIKAYB7HXS
- -A KUBE-SVC-HEJG3VL2OBQGMPRE -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-VLRTF377K6UDTE3U
- -A KUBE-SVC-HEJG3VL2OBQGMPRE -j KUBE-SEP-5WE4LA3GQVUFJHF4
- -A KUBE-SVC-JD5MR3NA4I4DYORP -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-SA2O2U44GHDFCCLN
- -A KUBE-SVC-JD5MR3NA4I4DYORP -j KUBE-SEP-Z7Q3ACRES7FPDRVG
- -A KUBE-SVC-JD77LS6CGFAZWFSF -j KUBE-SEP-JDCWU3LT5YQ5EMH6
- -A KUBE-SVC-JWRRAPASBK5SJQZX -j KUBE-SEP-36LOF2UTI4ZMKJXW
- -A KUBE-SVC-K7J76NXP7AUZVFGS -j KUBE-SEP-JV5PNHUQKPMI4MKH
- -A KUBE-SVC-LENZUHWFDRKNFKMN -j KUBE-SEP-HMEBLTTCYY67RMUJ
- -A KUBE-SVC-M37ZWITXO6U6JADQ -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-STIX4KJH37HE34LN
- -A KUBE-SVC-M37ZWITXO6U6JADQ -j KUBE-SEP-I4B7TLANONZQ4V27
- -A KUBE-SVC-MH3DXGNMOEVGARYR -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-OY6BDVJBBXGLMJNZ
- -A KUBE-SVC-MH3DXGNMOEVGARYR -j KUBE-SEP-OQV6GZIYR7JIEEUX
- -A KUBE-SVC-MQ4ORREHVQXZ23SQ -j KUBE-SEP-HE73O5BWC4FEUSUX
- -A KUBE-SVC-NETLNZIY34CGM2RD -j KUBE-SEP-KBIYDSSKQPK5NOS6
- -A KUBE-SVC-NHO35BGNFBCILAXG -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-XH3DFDTYHIEOSYJK
- -A KUBE-SVC-NHO35BGNFBCILAXG -j KUBE-SEP-2QIPG66NZTEHGQQI
- -A KUBE-SVC-NPX46M4PTMTKRN6Y -j KUBE-SEP-ZGD4RXUX4XHBMR7O
- -A KUBE-SVC-OBTPQZYQ6XKY2NFB -j KUBE-SEP-2TTC3UYXG37SU3KX
- -A KUBE-SVC-PZM4WR2KGKUH2YGL -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-UDW7GMVNZ5F4ZFPD
- -A KUBE-SVC-PZM4WR2KGKUH2YGL -j KUBE-SEP-GUDLTOL7HYRHFR2F
- -A KUBE-SVC-Q6LBIJ4JTGMXRAN7 -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-Y7HHC3QRMBYN2OCY
- -A KUBE-SVC-Q6LBIJ4JTGMXRAN7 -j KUBE-SEP-RZ3N3UPGBY7KYWF2
- -A KUBE-SVC-QMUOK2R7Z7IHZXTR -j KUBE-SEP-A5H5PZLCAJ6TKVCT
- -A KUBE-SVC-RD6ZUC3WDSNJ7ZUA -j KUBE-SEP-HTDUBISSCHABJZJW
- -A KUBE-SVC-RDEKVQQYAX2LLES5 -j KUBE-SEP-HTJ422GI3ZJQLS4R
- -A KUBE-SVC-RLSDJ66UWGBNHREY -j KUBE-SEP-V5M4OGB5FO27CGNM
- -A KUBE-SVC-RY23AY2CFMC3FVNC -j KUBE-SEP-4ACLDMUTS56STFGO
- -A KUBE-SVC-SALS67HEE6XK3UR2 -m statistic --mode random --probability 0.25000000000 -j KUBE-SEP-E23DZQ7XS2OYNBBS
- -A KUBE-SVC-SALS67HEE6XK3UR2 -m statistic --mode random --probability 0.33332999982 -j KUBE-SEP-BIA6COIHC4DXKTHN
- -A KUBE-SVC-SALS67HEE6XK3UR2 -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-LYQDPCHVRWVW4M4N
- -A KUBE-SVC-SALS67HEE6XK3UR2 -j KUBE-SEP-6OJEJN53ZZTBSVY2
- -A KUBE-SVC-T6URFN7ED4NRY3JM -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-VI5DEO2UBC64JR5V
- -A KUBE-SVC-T6URFN7ED4NRY3JM -j KUBE-SEP-ZRIEVFDEFQAL27LE
- -A KUBE-SVC-TCOU7JCQXEZGVUNU -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-7ZPZGPQGJXPNYLVW
- -A KUBE-SVC-TCOU7JCQXEZGVUNU -j KUBE-SEP-727DCLPPEECJRJOW
- -A KUBE-SVC-UJDKNIFG53EJXXYL -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-IVZMUIZTLR5JR3N6
- -A KUBE-SVC-UJDKNIFG53EJXXYL -j KUBE-SEP-6KIWZES7FWXKKLV2
- -A KUBE-SVC-ULT42FO3QBEFLBE7 -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-ITGRE4C5JZH7FAK2
- -A KUBE-SVC-ULT42FO3QBEFLBE7 -j KUBE-SEP-GXCPRK6QL5IJJXCV
- -A KUBE-SVC-URFDFDNHMVT2SXSR -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-RGNNVFNWDEZTQEWD
- -A KUBE-SVC-URFDFDNHMVT2SXSR -j KUBE-SEP-5TV3VVNIPJIABVFR
- -A KUBE-SVC-VC7AUUYUDCII4O6U -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-62DF4F3NN6UAKF4Z
- -A KUBE-SVC-VC7AUUYUDCII4O6U -j KUBE-SEP-DMXZDOJXA4ZQOX3M
- -A KUBE-SVC-VFUGSBFCOP5EDXWM -j KUBE-SEP-CQ4HSSHDN4ZQIVID
- -A KUBE-SVC-WLDJ22CTQ65KV4JG -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-Y7OLX3KBDDDCCGXF
- -A KUBE-SVC-WLDJ22CTQ65KV4JG -j KUBE-SEP-CUT2G4MTWKWBPBBB
- -A KUBE-SVC-XGLOHA7QRQ3V22RZ -j KUBE-SEP-GLQBVE3PZ2DSW4BX
- -A KUBE-SVC-YILO3KUSNW7QJONU -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-IPPNEHKZMHXUN37Q
- -A KUBE-SVC-YILO3KUSNW7QJONU -j KUBE-SEP-KDGSFGSS5PHUYA3X
- -A KUBE-SVC-YO27AO526SW7FVUF -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-KN23XG3W2HVDAQZB
- -A KUBE-SVC-YO27AO526SW7FVUF -j KUBE-SEP-CYOR4J7ACUWVB7FO
- -A KUBE-SVC-YVFLX6G3DN2CV3HS -j KUBE-SEP-2I47MFX6OT6QLXCI
- -A KUBE-SVC-ZCWWUTPXOO7N2XL6 -m statistic --mode random --probability 0.25000000000 -j KUBE-SEP-XJBYADZHX4C3RCC7
- -A KUBE-SVC-ZCWWUTPXOO7N2XL6 -m statistic --mode random --probability 0.33332999982 -j KUBE-SEP-YS6JISMIZTZ2NSKH
- -A KUBE-SVC-ZCWWUTPXOO7N2XL6 -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-6MECCFALFZC3HIGN
- -A KUBE-SVC-ZCWWUTPXOO7N2XL6 -j KUBE-SEP-SCIWZAC32N2HORP4
- -A KUBE-SVC-ZZUI3B73WEQG5WIL -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-YEZ2JMXEJWB6EJA7
- -A KUBE-SVC-ZZUI3B73WEQG5WIL -j KUBE-SEP-GRQWJEM5AKS65C3A
- COMMIT
- # Completed on Thu Aug 13 08:52:12 2020
Add Comment
Please, Sign In to add comment