
----------------------
1) NFTables rulesets
----------------------

table ip mangle { # handle 1
	chain KUBE-IPTABLES-HINT { # handle 1
	}

	chain KUBE-KUBELET-CANARY { # handle 2
	}
}
table ip nat { # handle 3
	chain KUBE-MARK-DROP { # handle 1
		counter packets 0 bytes 0 meta mark set mark or 0x8000 # handle 2
	}

	chain KUBE-MARK-MASQ { # handle 3
		counter packets 0 bytes 0 meta mark set mark or 0x4000 # handle 5
	}

	chain KUBE-POSTROUTING { # handle 4
		meta mark & 0x00004000 != 0x00004000 counter packets 21092 bytes 1315269 return # handle 8
		counter packets 0 bytes 0 meta mark set mark xor 0x4000 # handle 9
		 counter packets 0 bytes 0 masquerade fully-random # handle 10
	}

	chain POSTROUTING { # handle 6
		type nat hook postrouting priority srcnat; policy accept;
		 counter packets 21092 bytes 1315269 jump KUBE-POSTROUTING # handle 7
		xt match set xt match set xt match set counter packets 57 bytes 4105 masquerade fully-random # handle 12
		ip saddr != 172.16.0.0/16 ip daddr != 172.16.0.0/16 xt match ipvs  counter packets 14 bytes 796 snat to 192.168.1.3 fully-random # handle 13
	}

	chain KUBE-KUBELET-CANARY { # handle 11
	}
}
table ip6 mangle { # handle 4
	chain KUBE-IPTABLES-HINT { # handle 1
	}

	chain KUBE-KUBELET-CANARY { # handle 2
	}
}
table ip6 nat { # handle 5
	chain KUBE-MARK-DROP { # handle 1
		counter packets 0 bytes 0 meta mark set mark or 0x8000 # handle 2
	}

	chain KUBE-MARK-MASQ { # handle 3
		counter packets 0 bytes 0 meta mark set mark or 0x4000 # handle 5
	}

	chain KUBE-POSTROUTING { # handle 4
		meta mark & 0x00004000 != 0x00004000 counter packets 4 bytes 517 return # handle 8
		counter packets 0 bytes 0 meta mark set mark xor 0x4000 # handle 9
		 counter packets 0 bytes 0  # handle 10
	}

	chain POSTROUTING { # handle 6
		type nat hook postrouting priority srcnat; policy accept;
		 counter packets 4 bytes 517 jump KUBE-POSTROUTING # handle 7
	}

	chain KUBE-KUBELET-CANARY { # handle 11
	}
}
table ip6 filter { # handle 6
	chain KUBE-FIREWALL { # handle 1
		 meta mark & 0x00008000 == 0x00008000 counter packets 0 bytes 0 drop # handle 2
	}

	chain KUBE-KUBELET-CANARY { # handle 3
	}
}
table ip filter { # handle 762
	chain INPUT { # handle 1
		type filter hook input priority filter; policy accept;
		 counter packets 74029 bytes 40186096 jump KUBE-ROUTER-INPUT # handle 21
		 xt match set counter packets 8323 bytes 1405786 jump KUBE-ROUTER-SERVICES # handle 22
		counter packets 69711 bytes 39371860 jump KUBE-FIREWALL # handle 23
		ip saddr 192.168.1.3 tcp dport 6443  counter packets 1012 bytes 172808 accept # handle 24
		ip saddr 127.0.0.1 tcp dport 6443  counter packets 26382 bytes 5955812 accept # handle 25
		tcp dport 6443  counter packets 0 bytes 0 drop # handle 26
	}

	chain FORWARD { # handle 2
		type filter hook forward priority filter; policy accept;
		 counter packets 0 bytes 0 jump KUBE-ROUTER-FORWARD # handle 27
		oifname "enp5s0"  counter packets 0 bytes 0 accept # handle 28
		oifname "kube-bridge"  counter packets 0 bytes 0 accept # handle 29
		iifname "kube-bridge"  counter packets 0 bytes 0 accept # handle 30
	}

	chain OUTPUT { # handle 3
		type filter hook output priority filter; policy accept;
		 counter packets 72351 bytes 39286260 jump KUBE-ROUTER-OUTPUT # handle 31
		counter packets 69774 bytes 38738572 jump KUBE-FIREWALL # handle 32
	}

	chain KUBE-FIREWALL { # handle 4
		ip saddr != 127.0.0.0/8 ip daddr 127.0.0.0/8  ct status dnat counter packets 0 bytes 0 drop # handle 33
		 meta mark & 0x00008000 == 0x00008000 counter packets 0 bytes 0 drop # handle 34
	}

	chain KUBE-KUBELET-CANARY { # handle 5
	}

	chain KUBE-NWPLCY-DEFAULT { # handle 6
		 counter packets 0 bytes 0 meta mark set mark or 0x10000 # handle 35
	}

	chain KUBE-ROUTER-FORWARD { # handle 7
		ip daddr 172.16.0.234  counter packets 0 bytes 0 jump KUBE-POD-FW-KOFW2DXTBCDOMCSC # handle 49
		ip daddr 172.16.0.234 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-KOFW2DXTBCDOMCSC # handle 51
		ip saddr 172.16.0.234  counter packets 0 bytes 0 jump KUBE-POD-FW-KOFW2DXTBCDOMCSC # handle 53
		ip saddr 172.16.0.234 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-KOFW2DXTBCDOMCSC # handle 55
		ip daddr 172.16.0.236  counter packets 0 bytes 0 jump KUBE-POD-FW-Q6SD4ZTH74L3BRN4 # handle 65
		ip daddr 172.16.0.236 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-Q6SD4ZTH74L3BRN4 # handle 67
		ip saddr 172.16.0.236  counter packets 0 bytes 0 jump KUBE-POD-FW-Q6SD4ZTH74L3BRN4 # handle 69
		ip saddr 172.16.0.236 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-Q6SD4ZTH74L3BRN4 # handle 71
		ip daddr 172.16.0.239  counter packets 0 bytes 0 jump KUBE-POD-FW-2L6JXGGQBMYQMR6D # handle 81
		ip daddr 172.16.0.239 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-2L6JXGGQBMYQMR6D # handle 83
		ip saddr 172.16.0.239  counter packets 0 bytes 0 jump KUBE-POD-FW-2L6JXGGQBMYQMR6D # handle 85
		ip saddr 172.16.0.239 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-2L6JXGGQBMYQMR6D # handle 87
		ip daddr 172.16.0.237  counter packets 0 bytes 0 jump KUBE-POD-FW-7WIPH6APIQEI23PL # handle 97
		ip daddr 172.16.0.237 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-7WIPH6APIQEI23PL # handle 99
		ip saddr 172.16.0.237  counter packets 0 bytes 0 jump KUBE-POD-FW-7WIPH6APIQEI23PL # handle 100
		ip saddr 172.16.0.237 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-7WIPH6APIQEI23PL # handle 103
		ip daddr 172.16.0.241  counter packets 0 bytes 0 jump KUBE-POD-FW-3OCEZYSDOSFUCADL # handle 113
		ip daddr 172.16.0.241 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-3OCEZYSDOSFUCADL # handle 115
		ip saddr 172.16.0.241  counter packets 0 bytes 0 jump KUBE-POD-FW-3OCEZYSDOSFUCADL # handle 116
		ip saddr 172.16.0.241 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-3OCEZYSDOSFUCADL # handle 119
		ip daddr 172.16.0.240  counter packets 0 bytes 0 jump KUBE-POD-FW-YF4EVBPNYVJLBZ6E # handle 129
		ip daddr 172.16.0.240 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-YF4EVBPNYVJLBZ6E # handle 131
		ip saddr 172.16.0.240  counter packets 0 bytes 0 jump KUBE-POD-FW-YF4EVBPNYVJLBZ6E # handle 133
		ip saddr 172.16.0.240 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-YF4EVBPNYVJLBZ6E # handle 135
		ip daddr 172.16.0.238  counter packets 0 bytes 0 jump KUBE-POD-FW-MX5GTBHGYITSYO3D # handle 145
		ip daddr 172.16.0.238 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-MX5GTBHGYITSYO3D # handle 147
		ip saddr 172.16.0.238  counter packets 0 bytes 0 jump KUBE-POD-FW-MX5GTBHGYITSYO3D # handle 149
		ip saddr 172.16.0.238 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-MX5GTBHGYITSYO3D # handle 151
		ip daddr 172.16.0.232  counter packets 0 bytes 0 jump KUBE-POD-FW-45UVD2XHAAPYI4NB # handle 161
		ip daddr 172.16.0.232 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-45UVD2XHAAPYI4NB # handle 163
		ip saddr 172.16.0.232  counter packets 0 bytes 0 jump KUBE-POD-FW-45UVD2XHAAPYI4NB # handle 165
		ip saddr 172.16.0.232 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-45UVD2XHAAPYI4NB # handle 167
		ip daddr 172.16.0.235  counter packets 0 bytes 0 jump KUBE-POD-FW-ZCPB5TD6WSSILQSH # handle 177
		ip daddr 172.16.0.235 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-ZCPB5TD6WSSILQSH # handle 179
		ip saddr 172.16.0.235  counter packets 0 bytes 0 jump KUBE-POD-FW-ZCPB5TD6WSSILQSH # handle 181
		ip saddr 172.16.0.235 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-ZCPB5TD6WSSILQSH # handle 183
		ip daddr 172.16.0.233  counter packets 0 bytes 0 jump KUBE-POD-FW-V5HQ576HZGZH2RBO # handle 193
		ip daddr 172.16.0.233 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-V5HQ576HZGZH2RBO # handle 195
		ip saddr 172.16.0.233  counter packets 0 bytes 0 jump KUBE-POD-FW-V5HQ576HZGZH2RBO # handle 197
		ip saddr 172.16.0.233 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-V5HQ576HZGZH2RBO # handle 199
		 meta mark & 0x00020000 == 0x00020000 counter packets 0 bytes 0 accept # handle 205
	}

	chain KUBE-ROUTER-INPUT { # handle 8
		ip daddr 10.96.0.0/12  counter packets 0 bytes 0 return # handle 36
		meta l4proto tcp  fib daddr type local tcp dport 30000-32767 counter packets 264 bytes 14234 return # handle 37
		meta l4proto udp  fib daddr type local udp dport 30000-32767 counter packets 1144 bytes 56056 return # handle 38
		ip saddr 172.16.0.234  counter packets 0 bytes 0 jump KUBE-POD-FW-KOFW2DXTBCDOMCSC # handle 52
		ip saddr 172.16.0.236  counter packets 1182 bytes 216220 jump KUBE-POD-FW-Q6SD4ZTH74L3BRN4 # handle 68
		ip saddr 172.16.0.239  counter packets 63 bytes 4582 jump KUBE-POD-FW-2L6JXGGQBMYQMR6D # handle 84
		ip saddr 172.16.0.237  counter packets 0 bytes 0 jump KUBE-POD-FW-7WIPH6APIQEI23PL # handle 102
		ip saddr 172.16.0.241  counter packets 88 bytes 4928 jump KUBE-POD-FW-3OCEZYSDOSFUCADL # handle 118
		ip saddr 172.16.0.240  counter packets 678 bytes 54868 jump KUBE-POD-FW-YF4EVBPNYVJLBZ6E # handle 132
		ip saddr 172.16.0.238  counter packets 63 bytes 4582 jump KUBE-POD-FW-MX5GTBHGYITSYO3D # handle 148
		ip saddr 172.16.0.232  counter packets 0 bytes 0 jump KUBE-POD-FW-45UVD2XHAAPYI4NB # handle 164
		ip saddr 172.16.0.235  counter packets 220 bytes 380952 jump KUBE-POD-FW-ZCPB5TD6WSSILQSH # handle 180
		ip saddr 172.16.0.233  counter packets 0 bytes 0 jump KUBE-POD-FW-V5HQ576HZGZH2RBO # handle 196
		 meta mark & 0x00020000 == 0x00020000 counter packets 0 bytes 0 accept # handle 204
	}

	chain KUBE-ROUTER-OUTPUT { # handle 9
		ip daddr 172.16.0.234  counter packets 0 bytes 0 jump KUBE-POD-FW-KOFW2DXTBCDOMCSC # handle 50
		ip saddr 172.16.0.234  counter packets 0 bytes 0 jump KUBE-POD-FW-KOFW2DXTBCDOMCSC # handle 54
		ip daddr 172.16.0.236  counter packets 1338 bytes 412366 jump KUBE-POD-FW-Q6SD4ZTH74L3BRN4 # handle 66
		ip saddr 172.16.0.236  counter packets 0 bytes 0 jump KUBE-POD-FW-Q6SD4ZTH74L3BRN4 # handle 70
		ip daddr 172.16.0.239  counter packets 67 bytes 28320 jump KUBE-POD-FW-2L6JXGGQBMYQMR6D # handle 82
		ip saddr 172.16.0.239  counter packets 0 bytes 0 jump KUBE-POD-FW-2L6JXGGQBMYQMR6D # handle 86
		ip daddr 172.16.0.237  counter packets 0 bytes 0 jump KUBE-POD-FW-7WIPH6APIQEI23PL # handle 98
		ip saddr 172.16.0.237  counter packets 0 bytes 0 jump KUBE-POD-FW-7WIPH6APIQEI23PL # handle 101
		ip daddr 172.16.0.241  counter packets 176 bytes 9504 jump KUBE-POD-FW-3OCEZYSDOSFUCADL # handle 114
		ip saddr 172.16.0.241  counter packets 0 bytes 0 jump KUBE-POD-FW-3OCEZYSDOSFUCADL # handle 117
		ip daddr 172.16.0.240  counter packets 709 bytes 52808 jump KUBE-POD-FW-YF4EVBPNYVJLBZ6E # handle 130
		ip saddr 172.16.0.240  counter packets 0 bytes 0 jump KUBE-POD-FW-YF4EVBPNYVJLBZ6E # handle 134
		ip daddr 172.16.0.238  counter packets 67 bytes 28322 jump KUBE-POD-FW-MX5GTBHGYITSYO3D # handle 146
		ip saddr 172.16.0.238  counter packets 0 bytes 0 jump KUBE-POD-FW-MX5GTBHGYITSYO3D # handle 150
		ip daddr 172.16.0.232  counter packets 0 bytes 0 jump KUBE-POD-FW-45UVD2XHAAPYI4NB # handle 162
		ip saddr 172.16.0.232  counter packets 0 bytes 0 jump KUBE-POD-FW-45UVD2XHAAPYI4NB # handle 166
		ip daddr 172.16.0.235  counter packets 220 bytes 16368 jump KUBE-POD-FW-ZCPB5TD6WSSILQSH # handle 178
		ip saddr 172.16.0.235  counter packets 0 bytes 0 jump KUBE-POD-FW-ZCPB5TD6WSSILQSH # handle 182
		ip daddr 172.16.0.233  counter packets 0 bytes 0 jump KUBE-POD-FW-V5HQ576HZGZH2RBO # handle 194
		ip saddr 172.16.0.233  counter packets 0 bytes 0 jump KUBE-POD-FW-V5HQ576HZGZH2RBO # handle 198
		 meta mark & 0x00020000 == 0x00020000 counter packets 0 bytes 0 accept # handle 206
	}

	chain KUBE-ROUTER-SERVICES { # handle 10
		 xt match set counter packets 0 bytes 0 accept # handle 39
		meta l4proto icmp  icmp type echo-request counter packets 0 bytes 0 accept # handle 40
		meta l4proto icmp  icmp type destination-unreachable counter packets 1012 bytes 88220 accept # handle 41
		meta l4proto icmp  icmp type time-exceeded counter packets 0 bytes 0 accept # handle 42
		 xt match set counter packets 1012 bytes 59884 reject # handle 43
	}

	chain KUBE-POD-FW-KOFW2DXTBCDOMCSC { # handle 11
		 ct state related,established counter packets 0 bytes 0 accept # handle 48
		 ct state invalid counter packets 0 bytes 0 drop # handle 47
		ip daddr 172.16.0.234  fib saddr type local counter packets 0 bytes 0 accept # handle 46
		ip saddr 172.16.0.234  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 45
		ip daddr 172.16.0.234  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 44
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 56
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 57
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 58
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 59
	}

	chain KUBE-POD-FW-Q6SD4ZTH74L3BRN4 { # handle 12
		 ct state related,established counter packets 2520 bytes 628586 accept # handle 64
		 ct state invalid counter packets 0 bytes 0 drop # handle 63
		ip daddr 172.16.0.236  fib saddr type local counter packets 0 bytes 0 accept # handle 62
		ip saddr 172.16.0.236  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 61
		ip daddr 172.16.0.236  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 60
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 72
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 73
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 74
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 75
	}

	chain KUBE-POD-FW-2L6JXGGQBMYQMR6D { # handle 13
		 ct state related,established counter packets 130 bytes 32902 accept # handle 80
		 ct state invalid counter packets 0 bytes 0 drop # handle 79
		ip daddr 172.16.0.239  fib saddr type local counter packets 0 bytes 0 accept # handle 78
		ip saddr 172.16.0.239  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 77
		ip daddr 172.16.0.239  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 76
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 88
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 89
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 90
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 91
	}

	chain KUBE-POD-FW-7WIPH6APIQEI23PL { # handle 14
		 ct state related,established counter packets 0 bytes 0 accept # handle 96
		 ct state invalid counter packets 0 bytes 0 drop # handle 95
		ip daddr 172.16.0.237  fib saddr type local counter packets 0 bytes 0 accept # handle 94
		ip saddr 172.16.0.237  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 93
		ip daddr 172.16.0.237  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 92
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 104
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 105
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 106
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 107
	}

	chain KUBE-POD-FW-3OCEZYSDOSFUCADL { # handle 15
		 ct state related,established counter packets 220 bytes 11792 accept # handle 112
		 ct state invalid counter packets 0 bytes 0 drop # handle 111
		ip daddr 172.16.0.241  fib saddr type local counter packets 44 bytes 2640 accept # handle 110
		ip saddr 172.16.0.241  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 109
		ip daddr 172.16.0.241  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 108
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 120
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 121
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 122
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 123
	}

	chain KUBE-POD-FW-YF4EVBPNYVJLBZ6E { # handle 16
		 ct state related,established counter packets 1255 bytes 99756 accept # handle 128
		 ct state invalid counter packets 0 bytes 0 drop # handle 127
		ip daddr 172.16.0.240  fib saddr type local counter packets 132 bytes 7920 accept # handle 126
		ip saddr 172.16.0.240  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 125
		ip daddr 172.16.0.240  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 124
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 136
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 137
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 138
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 139
	}

	chain KUBE-POD-FW-MX5GTBHGYITSYO3D { # handle 17
		 ct state related,established counter packets 130 bytes 32904 accept # handle 144
		 ct state invalid counter packets 0 bytes 0 drop # handle 143
		ip daddr 172.16.0.238  fib saddr type local counter packets 0 bytes 0 accept # handle 142
		ip saddr 172.16.0.238  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 141
		ip daddr 172.16.0.238  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 140
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 152
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 153
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 154
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 155
	}

	chain KUBE-POD-FW-45UVD2XHAAPYI4NB { # handle 18
		 ct state related,established counter packets 0 bytes 0 accept # handle 160
		 ct state invalid counter packets 0 bytes 0 drop # handle 159
		ip daddr 172.16.0.232  fib saddr type local counter packets 0 bytes 0 accept # handle 158
		ip saddr 172.16.0.232  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 157
		ip daddr 172.16.0.232  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 156
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 168
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 169
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 170
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 171
	}

	chain KUBE-POD-FW-ZCPB5TD6WSSILQSH { # handle 19
		 ct state related,established counter packets 396 bytes 394680 accept # handle 176
		 ct state invalid counter packets 0 bytes 0 drop # handle 175
		ip daddr 172.16.0.235  fib saddr type local counter packets 44 bytes 2640 accept # handle 174
		ip saddr 172.16.0.235  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 173
		ip daddr 172.16.0.235  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 172
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 184
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 185
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 186
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 187
	}

	chain KUBE-POD-FW-V5HQ576HZGZH2RBO { # handle 20
		 ct state related,established counter packets 0 bytes 0 accept # handle 192
		 ct state invalid counter packets 0 bytes 0 drop # handle 191
		ip daddr 172.16.0.233  fib saddr type local counter packets 0 bytes 0 accept # handle 190
		ip saddr 172.16.0.233  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 189
		ip daddr 172.16.0.233  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 188
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 200
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 201
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 202
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 203
	}
}
