
----------------------
1) NFTables rulesets
----------------------

table ip mangle { # handle 1
	chain KUBE-IPTABLES-HINT { # handle 1
	}

	chain KUBE-KUBELET-CANARY { # handle 2
	}
}
table ip nat { # handle 3
	chain KUBE-MARK-DROP { # handle 1
		counter packets 0 bytes 0 meta mark set mark or 0x8000 # handle 2
	}

	chain KUBE-MARK-MASQ { # handle 3
		counter packets 0 bytes 0 meta mark set mark or 0x4000 # handle 5
	}

	chain KUBE-POSTROUTING { # handle 4
		meta mark & 0x00004000 != 0x00004000 counter packets 4043587 bytes 247730702 return # handle 8
		counter packets 0 bytes 0 meta mark set mark xor 0x4000 # handle 9
		 counter packets 0 bytes 0 masquerade fully-random # handle 10
	}

	chain POSTROUTING { # handle 6
		type nat hook postrouting priority srcnat; policy accept;
		 counter packets 4043587 bytes 247730702 jump KUBE-POSTROUTING # handle 7
		xt match set xt match set xt match set counter packets 26793 bytes 1594688 masquerade fully-random # handle 12
		ip saddr != 172.16.0.0/16 ip daddr != 172.16.0.0/16 xt match ipvs  counter packets 5 bytes 300 snat to 192.168.1.5 fully-random # handle 13
	}

	chain KUBE-KUBELET-CANARY { # handle 11
	}
}
table ip6 mangle { # handle 4
	chain KUBE-IPTABLES-HINT { # handle 1
	}

	chain KUBE-KUBELET-CANARY { # handle 2
	}
}
table ip6 nat { # handle 5
	chain KUBE-MARK-DROP { # handle 1
		counter packets 0 bytes 0 meta mark set mark or 0x8000 # handle 2
	}

	chain KUBE-MARK-MASQ { # handle 3
		counter packets 0 bytes 0 meta mark set mark or 0x4000 # handle 5
	}

	chain KUBE-POSTROUTING { # handle 4
		meta mark & 0x00004000 != 0x00004000 counter packets 19737 bytes 3727270 return # handle 8
		counter packets 0 bytes 0 meta mark set mark xor 0x4000 # handle 9
		 counter packets 0 bytes 0  # handle 10
	}

	chain POSTROUTING { # handle 6
		type nat hook postrouting priority srcnat; policy accept;
		 counter packets 19737 bytes 3727270 jump KUBE-POSTROUTING # handle 7
	}

	chain KUBE-KUBELET-CANARY { # handle 11
	}
}
table ip6 filter { # handle 6
	chain KUBE-FIREWALL { # handle 1
		 meta mark & 0x00008000 == 0x00008000 counter packets 0 bytes 0 drop # handle 2
	}

	chain KUBE-KUBELET-CANARY { # handle 3
	}
}
table ip filter { # handle 3871
	chain INPUT { # handle 1
		type filter hook input priority filter; policy accept;
		 counter packets 10029 bytes 5738032 jump KUBE-ROUTER-INPUT # handle 28
		 xt match set counter packets 1996 bytes 1231738 jump KUBE-ROUTER-SERVICES # handle 29
		counter packets 7752 bytes 5187156 jump KUBE-FIREWALL # handle 30
	}

	chain FORWARD { # handle 2
		type filter hook forward priority filter; policy accept;
		 counter packets 543 bytes 69702 jump KUBE-ROUTER-FORWARD # handle 31
		oifname "br0"  counter packets 34 bytes 3917 accept # handle 32
		oifname "kube-bridge"  counter packets 0 bytes 0 accept # handle 33
		iifname "kube-bridge"  counter packets 0 bytes 0 accept # handle 34
	}

	chain OUTPUT { # handle 3
		type filter hook output priority filter; policy accept;
		 counter packets 10127 bytes 5652308 jump KUBE-ROUTER-OUTPUT # handle 35
		counter packets 7509 bytes 5159165 jump KUBE-FIREWALL # handle 36
	}

	chain KUBE-FIREWALL { # handle 4
		ip saddr != 127.0.0.0/8 ip daddr 127.0.0.0/8  ct status dnat counter packets 0 bytes 0 drop # handle 37
		 meta mark & 0x00008000 == 0x00008000 counter packets 0 bytes 0 drop # handle 38
	}

	chain KUBE-KUBELET-CANARY { # handle 5
	}

	chain KUBE-NWPLCY-DEFAULT { # handle 6
		 counter packets 495 bytes 66102 meta mark set mark or 0x10000 # handle 39
	}

	chain KUBE-ROUTER-FORWARD { # handle 7
		ip daddr 172.16.0.178  counter packets 0 bytes 0 jump KUBE-POD-FW-6VCGFG5ZNSAHDNTX # handle 53
		ip daddr 172.16.0.178 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-6VCGFG5ZNSAHDNTX # handle 55
		ip saddr 172.16.0.178  counter packets 0 bytes 0 jump KUBE-POD-FW-6VCGFG5ZNSAHDNTX # handle 57
		ip saddr 172.16.0.178 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-6VCGFG5ZNSAHDNTX # handle 59
		ip daddr 172.16.0.184  counter packets 0 bytes 0 jump KUBE-POD-FW-IRQS3WVXPLW7SY7E # handle 69
		ip daddr 172.16.0.184 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-IRQS3WVXPLW7SY7E # handle 71
		ip saddr 172.16.0.184  counter packets 0 bytes 0 jump KUBE-POD-FW-IRQS3WVXPLW7SY7E # handle 73
		ip saddr 172.16.0.184 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-IRQS3WVXPLW7SY7E # handle 75
		ip daddr 172.16.0.179  counter packets 0 bytes 0 jump KUBE-POD-FW-QHD2Z6DRBKCTLQQ6 # handle 85
		ip daddr 172.16.0.179 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-QHD2Z6DRBKCTLQQ6 # handle 87
		ip saddr 172.16.0.179  counter packets 0 bytes 0 jump KUBE-POD-FW-QHD2Z6DRBKCTLQQ6 # handle 89
		ip saddr 172.16.0.179 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-QHD2Z6DRBKCTLQQ6 # handle 91
		ip daddr 172.16.0.199  counter packets 0 bytes 0 jump KUBE-POD-FW-TCW4ORQVYYM3JI5C # handle 101
		ip daddr 172.16.0.199 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-TCW4ORQVYYM3JI5C # handle 103
		ip saddr 172.16.0.199  counter packets 0 bytes 0 jump KUBE-POD-FW-TCW4ORQVYYM3JI5C # handle 105
		ip saddr 172.16.0.199 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-TCW4ORQVYYM3JI5C # handle 107
		ip daddr 172.16.0.201  counter packets 106 bytes 20634 jump KUBE-POD-FW-SJPQKXEG45U3LNKG # handle 117
		ip daddr 172.16.0.201 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-SJPQKXEG45U3LNKG # handle 119
		ip saddr 172.16.0.201  counter packets 397 bytes 44423 jump KUBE-POD-FW-SJPQKXEG45U3LNKG # handle 120
		ip saddr 172.16.0.201 xt match physdev  counter packets 240 bytes 32544 jump KUBE-POD-FW-SJPQKXEG45U3LNKG # handle 123
		ip daddr 172.16.0.196  counter packets 0 bytes 0 jump KUBE-POD-FW-RI2WQBTNZ4S52ZFF # handle 133
		ip daddr 172.16.0.196 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-RI2WQBTNZ4S52ZFF # handle 135
		ip saddr 172.16.0.196  counter packets 0 bytes 0 jump KUBE-POD-FW-RI2WQBTNZ4S52ZFF # handle 137
		ip saddr 172.16.0.196 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-RI2WQBTNZ4S52ZFF # handle 139
		ip daddr 172.16.0.185  counter packets 0 bytes 0 jump KUBE-POD-FW-IBTPBH5XOLZM67ZN # handle 149
		ip daddr 172.16.0.185 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-IBTPBH5XOLZM67ZN # handle 151
		ip saddr 172.16.0.185  counter packets 0 bytes 0 jump KUBE-POD-FW-IBTPBH5XOLZM67ZN # handle 153
		ip saddr 172.16.0.185 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-IBTPBH5XOLZM67ZN # handle 155
		ip daddr 172.16.0.188  counter packets 0 bytes 0 jump KUBE-POD-FW-KCOFK6OOE6EIBGE4 # handle 165
		ip daddr 172.16.0.188 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-KCOFK6OOE6EIBGE4 # handle 167
		ip saddr 172.16.0.188  counter packets 0 bytes 0 jump KUBE-POD-FW-KCOFK6OOE6EIBGE4 # handle 169
		ip saddr 172.16.0.188 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-KCOFK6OOE6EIBGE4 # handle 171
		ip daddr 172.16.0.195  counter packets 0 bytes 0 jump KUBE-POD-FW-TBLFRC5U77W5XLIW # handle 181
		ip daddr 172.16.0.195 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-TBLFRC5U77W5XLIW # handle 183
		ip saddr 172.16.0.195  counter packets 0 bytes 0 jump KUBE-POD-FW-TBLFRC5U77W5XLIW # handle 185
		ip saddr 172.16.0.195 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-TBLFRC5U77W5XLIW # handle 187
		ip daddr 172.16.0.198  counter packets 0 bytes 0 jump KUBE-POD-FW-XSMF6UPLX3IJOQ2N # handle 197
		ip daddr 172.16.0.198 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-XSMF6UPLX3IJOQ2N # handle 199
		ip saddr 172.16.0.198  counter packets 0 bytes 0 jump KUBE-POD-FW-XSMF6UPLX3IJOQ2N # handle 202
		ip saddr 172.16.0.198 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-XSMF6UPLX3IJOQ2N # handle 203
		ip daddr 172.16.0.186  counter packets 0 bytes 0 jump KUBE-POD-FW-UIKFRRPGHXHIGTP3 # handle 213
		ip daddr 172.16.0.186 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-UIKFRRPGHXHIGTP3 # handle 215
		ip saddr 172.16.0.186  counter packets 0 bytes 0 jump KUBE-POD-FW-UIKFRRPGHXHIGTP3 # handle 217
		ip saddr 172.16.0.186 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-UIKFRRPGHXHIGTP3 # handle 219
		ip daddr 172.16.0.189  counter packets 0 bytes 0 jump KUBE-POD-FW-3KEIL2AZDHCNNSTK # handle 229
		ip daddr 172.16.0.189 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-3KEIL2AZDHCNNSTK # handle 231
		ip saddr 172.16.0.189  counter packets 0 bytes 0 jump KUBE-POD-FW-3KEIL2AZDHCNNSTK # handle 232
		ip saddr 172.16.0.189 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-3KEIL2AZDHCNNSTK # handle 235
		ip daddr 172.16.0.176  counter packets 0 bytes 0 jump KUBE-POD-FW-DUOSDOW5G6Z4TB7K # handle 245
		ip daddr 172.16.0.176 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-DUOSDOW5G6Z4TB7K # handle 247
		ip saddr 172.16.0.176  counter packets 0 bytes 0 jump KUBE-POD-FW-DUOSDOW5G6Z4TB7K # handle 249
		ip saddr 172.16.0.176 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-DUOSDOW5G6Z4TB7K # handle 251
		ip daddr 172.16.0.182  counter packets 0 bytes 0 jump KUBE-POD-FW-SJZXVJVY4H47G6P6 # handle 261
		ip daddr 172.16.0.182 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-SJZXVJVY4H47G6P6 # handle 263
		ip saddr 172.16.0.182  counter packets 0 bytes 0 jump KUBE-POD-FW-SJZXVJVY4H47G6P6 # handle 265
		ip saddr 172.16.0.182 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-SJZXVJVY4H47G6P6 # handle 267
		ip daddr 172.16.0.190  counter packets 0 bytes 0 jump KUBE-POD-FW-EXJOQQON2FWBRQXO # handle 277
		ip daddr 172.16.0.190 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-EXJOQQON2FWBRQXO # handle 279
		ip saddr 172.16.0.190  counter packets 0 bytes 0 jump KUBE-POD-FW-EXJOQQON2FWBRQXO # handle 281
		ip saddr 172.16.0.190 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-EXJOQQON2FWBRQXO # handle 283
		ip daddr 172.16.0.177  counter packets 0 bytes 0 jump KUBE-POD-FW-XJGUJ2O247TY7YGD # handle 293
		ip daddr 172.16.0.177 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-XJGUJ2O247TY7YGD # handle 295
		ip saddr 172.16.0.177  counter packets 0 bytes 0 jump KUBE-POD-FW-XJGUJ2O247TY7YGD # handle 297
		ip saddr 172.16.0.177 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-XJGUJ2O247TY7YGD # handle 299
		ip daddr 172.16.0.180  counter packets 3 bytes 513 jump KUBE-POD-FW-6YPUG7OR3WWK3FSD # handle 309
		ip daddr 172.16.0.180 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-6YPUG7OR3WWK3FSD # handle 311
		ip saddr 172.16.0.180  counter packets 3 bytes 215 jump KUBE-POD-FW-6YPUG7OR3WWK3FSD # handle 313
		ip saddr 172.16.0.180 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-6YPUG7OR3WWK3FSD # handle 315
		 meta mark & 0x00020000 == 0x00020000 counter packets 244 bytes 32823 accept # handle 320
	}

	chain KUBE-ROUTER-INPUT { # handle 8
		ip daddr 10.96.0.0/12  counter packets 0 bytes 0 return # handle 40
		meta l4proto tcp  fib daddr type local tcp dport 30000-32767 counter packets 31 bytes 2638 return # handle 41
		meta l4proto udp  fib daddr type local udp dport 30000-32767 counter packets 0 bytes 0 return # handle 42
		ip saddr 172.16.0.178  counter packets 513 bytes 98465 jump KUBE-POD-FW-6VCGFG5ZNSAHDNTX # handle 56
		ip saddr 172.16.0.184  counter packets 129 bytes 147932 jump KUBE-POD-FW-IRQS3WVXPLW7SY7E # handle 72
		ip saddr 172.16.0.179  counter packets 548 bytes 100453 jump KUBE-POD-FW-QHD2Z6DRBKCTLQQ6 # handle 88
		ip saddr 172.16.0.199  counter packets 0 bytes 0 jump KUBE-POD-FW-TCW4ORQVYYM3JI5C # handle 104
		ip saddr 172.16.0.201  counter packets 88 bytes 12153 jump KUBE-POD-FW-SJPQKXEG45U3LNKG # handle 122
		ip saddr 172.16.0.196  counter packets 0 bytes 0 jump KUBE-POD-FW-RI2WQBTNZ4S52ZFF # handle 136
		ip saddr 172.16.0.185  counter packets 26 bytes 2827 jump KUBE-POD-FW-IBTPBH5XOLZM67ZN # handle 152
		ip saddr 172.16.0.188  counter packets 0 bytes 0 jump KUBE-POD-FW-KCOFK6OOE6EIBGE4 # handle 168
		ip saddr 172.16.0.195  counter packets 310 bytes 125538 jump KUBE-POD-FW-TBLFRC5U77W5XLIW # handle 184
		ip saddr 172.16.0.198  counter packets 0 bytes 0 jump KUBE-POD-FW-XSMF6UPLX3IJOQ2N # handle 201
		ip saddr 172.16.0.186  counter packets 0 bytes 0 jump KUBE-POD-FW-UIKFRRPGHXHIGTP3 # handle 216
		ip saddr 172.16.0.189  counter packets 28 bytes 2033 jump KUBE-POD-FW-3KEIL2AZDHCNNSTK # handle 234
		ip saddr 172.16.0.176  counter packets 29 bytes 3347 jump KUBE-POD-FW-DUOSDOW5G6Z4TB7K # handle 248
		ip saddr 172.16.0.182  counter packets 47 bytes 8928 jump KUBE-POD-FW-SJZXVJVY4H47G6P6 # handle 264
		ip saddr 172.16.0.190  counter packets 154 bytes 11185 jump KUBE-POD-FW-EXJOQQON2FWBRQXO # handle 280
		ip saddr 172.16.0.177  counter packets 51 bytes 9321 jump KUBE-POD-FW-XJGUJ2O247TY7YGD # handle 296
		ip saddr 172.16.0.180  counter packets 321 bytes 25944 jump KUBE-POD-FW-6YPUG7OR3WWK3FSD # handle 312
		 meta mark & 0x00020000 == 0x00020000 counter packets 4 bytes 245 accept # handle 322
	}

	chain KUBE-ROUTER-OUTPUT { # handle 9
		ip daddr 172.16.0.178  counter packets 633 bytes 138482 jump KUBE-POD-FW-6VCGFG5ZNSAHDNTX # handle 54
		ip saddr 172.16.0.178  counter packets 0 bytes 0 jump KUBE-POD-FW-6VCGFG5ZNSAHDNTX # handle 58
		ip daddr 172.16.0.184  counter packets 135 bytes 9637 jump KUBE-POD-FW-IRQS3WVXPLW7SY7E # handle 70
		ip saddr 172.16.0.184  counter packets 0 bytes 0 jump KUBE-POD-FW-IRQS3WVXPLW7SY7E # handle 74
		ip daddr 172.16.0.179  counter packets 609 bytes 182004 jump KUBE-POD-FW-QHD2Z6DRBKCTLQQ6 # handle 86
		ip saddr 172.16.0.179  counter packets 0 bytes 0 jump KUBE-POD-FW-QHD2Z6DRBKCTLQQ6 # handle 90
		ip daddr 172.16.0.199  counter packets 0 bytes 0 jump KUBE-POD-FW-TCW4ORQVYYM3JI5C # handle 102
		ip saddr 172.16.0.199  counter packets 0 bytes 0 jump KUBE-POD-FW-TCW4ORQVYYM3JI5C # handle 106
		ip daddr 172.16.0.201  counter packets 152 bytes 11356 jump KUBE-POD-FW-SJPQKXEG45U3LNKG # handle 118
		ip saddr 172.16.0.201  counter packets 3 bytes 215 jump KUBE-POD-FW-SJPQKXEG45U3LNKG # handle 121
		ip daddr 172.16.0.196  counter packets 0 bytes 0 jump KUBE-POD-FW-RI2WQBTNZ4S52ZFF # handle 134
		ip saddr 172.16.0.196  counter packets 0 bytes 0 jump KUBE-POD-FW-RI2WQBTNZ4S52ZFF # handle 138
		ip daddr 172.16.0.185  counter packets 28 bytes 11691 jump KUBE-POD-FW-IBTPBH5XOLZM67ZN # handle 150
		ip saddr 172.16.0.185  counter packets 0 bytes 0 jump KUBE-POD-FW-IBTPBH5XOLZM67ZN # handle 154
		ip daddr 172.16.0.188  counter packets 0 bytes 0 jump KUBE-POD-FW-KCOFK6OOE6EIBGE4 # handle 166
		ip saddr 172.16.0.188  counter packets 0 bytes 0 jump KUBE-POD-FW-KCOFK6OOE6EIBGE4 # handle 170
		ip daddr 172.16.0.195  counter packets 393 bytes 36056 jump KUBE-POD-FW-TBLFRC5U77W5XLIW # handle 182
		ip saddr 172.16.0.195  counter packets 0 bytes 0 jump KUBE-POD-FW-TBLFRC5U77W5XLIW # handle 186
		ip daddr 172.16.0.198  counter packets 0 bytes 0 jump KUBE-POD-FW-XSMF6UPLX3IJOQ2N # handle 198
		ip saddr 172.16.0.198  counter packets 0 bytes 0 jump KUBE-POD-FW-XSMF6UPLX3IJOQ2N # handle 200
		ip daddr 172.16.0.186  counter packets 0 bytes 0 jump KUBE-POD-FW-UIKFRRPGHXHIGTP3 # handle 214
		ip saddr 172.16.0.186  counter packets 0 bytes 0 jump KUBE-POD-FW-UIKFRRPGHXHIGTP3 # handle 218
		ip daddr 172.16.0.189  counter packets 30 bytes 12646 jump KUBE-POD-FW-3KEIL2AZDHCNNSTK # handle 230
		ip saddr 172.16.0.189  counter packets 0 bytes 0 jump KUBE-POD-FW-3KEIL2AZDHCNNSTK # handle 233
		ip daddr 172.16.0.176  counter packets 25 bytes 21857 jump KUBE-POD-FW-DUOSDOW5G6Z4TB7K # handle 246
		ip saddr 172.16.0.176  counter packets 0 bytes 0 jump KUBE-POD-FW-DUOSDOW5G6Z4TB7K # handle 250
		ip daddr 172.16.0.182  counter packets 53 bytes 15774 jump KUBE-POD-FW-SJZXVJVY4H47G6P6 # handle 262
		ip saddr 172.16.0.182  counter packets 0 bytes 0 jump KUBE-POD-FW-SJZXVJVY4H47G6P6 # handle 266
		ip daddr 172.16.0.190  counter packets 167 bytes 12351 jump KUBE-POD-FW-EXJOQQON2FWBRQXO # handle 278
		ip saddr 172.16.0.190  counter packets 0 bytes 0 jump KUBE-POD-FW-EXJOQQON2FWBRQXO # handle 282
		ip daddr 172.16.0.177  counter packets 57 bytes 16259 jump KUBE-POD-FW-XJGUJ2O247TY7YGD # handle 294
		ip saddr 172.16.0.177  counter packets 0 bytes 0 jump KUBE-POD-FW-XJGUJ2O247TY7YGD # handle 298
		ip daddr 172.16.0.180  counter packets 336 bytes 25030 jump KUBE-POD-FW-6YPUG7OR3WWK3FSD # handle 310
		ip saddr 172.16.0.180  counter packets 0 bytes 0 jump KUBE-POD-FW-6YPUG7OR3WWK3FSD # handle 314
		 meta mark & 0x00020000 == 0x00020000 counter packets 4 bytes 275 accept # handle 321
	}

	chain KUBE-ROUTER-SERVICES { # handle 10
		 xt match set counter packets 31 bytes 2638 accept # handle 43
		meta l4proto icmp  icmp type echo-request counter packets 0 bytes 0 accept # handle 44
		meta l4proto icmp  icmp type destination-unreachable counter packets 2 bytes 112 accept # handle 45
		meta l4proto icmp  icmp type time-exceeded counter packets 0 bytes 0 accept # handle 46
		 xt match set counter packets 0 bytes 0 reject # handle 47
	}

	chain KUBE-POD-FW-6VCGFG5ZNSAHDNTX { # handle 11
		 ct state related,established counter packets 1121 bytes 235447 accept # handle 52
		 ct state invalid counter packets 0 bytes 0 drop # handle 51
		ip daddr 172.16.0.178  fib saddr type local counter packets 25 bytes 1500 accept # handle 50
		ip saddr 172.16.0.178  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 49
		ip daddr 172.16.0.178  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 48
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 60
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 61
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 62
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 63
	}

	chain KUBE-POD-FW-IRQS3WVXPLW7SY7E { # handle 12
		 ct state related,established counter packets 244 bytes 156369 accept # handle 68
		 ct state invalid counter packets 0 bytes 0 drop # handle 67
		ip daddr 172.16.0.184  fib saddr type local counter packets 20 bytes 1200 accept # handle 66
		ip saddr 172.16.0.184  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 65
		ip daddr 172.16.0.184  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 64
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 76
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 77
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 78
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 79
	}

	chain KUBE-POD-FW-QHD2Z6DRBKCTLQQ6 { # handle 13
		 ct state related,established counter packets 1157 bytes 282457 accept # handle 84
		 ct state invalid counter packets 0 bytes 0 drop # handle 83
		ip daddr 172.16.0.179  fib saddr type local counter packets 0 bytes 0 accept # handle 82
		ip saddr 172.16.0.179  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 81
		ip daddr 172.16.0.179  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 80
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 92
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 93
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 94
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 95
	}

	chain KUBE-POD-FW-TCW4ORQVYYM3JI5C { # handle 14
		 ct state related,established counter packets 0 bytes 0 accept # handle 100
		 ct state invalid counter packets 0 bytes 0 drop # handle 99
		ip daddr 172.16.0.199  fib saddr type local counter packets 0 bytes 0 accept # handle 98
		ip saddr 172.16.0.199  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 97
		ip daddr 172.16.0.199  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 96
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 108
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 109
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 110
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 111
	}

	chain KUBE-POD-FW-SJPQKXEG45U3LNKG { # handle 15
		 ct state related,established counter packets 476 bytes 54397 accept # handle 116
		 ct state invalid counter packets 0 bytes 0 drop # handle 115
		ip daddr 172.16.0.201  fib saddr type local counter packets 20 bytes 1200 accept # handle 114
		ip saddr 172.16.0.201  counter packets 489 bytes 65668 jump KUBE-NWPLCY-DEFAULT # handle 113
		ip daddr 172.16.0.201  counter packets 1 bytes 60 jump KUBE-NWPLCY-DEFAULT # handle 112
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 124
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 125
		counter packets 490 bytes 65728 meta mark set mark and 0xfffeffff # handle 126
		 counter packets 490 bytes 65728 meta mark set mark or 0x20000 # handle 127
	}

	chain KUBE-POD-FW-RI2WQBTNZ4S52ZFF { # handle 16
		 ct state related,established counter packets 0 bytes 0 accept # handle 132
		 ct state invalid counter packets 0 bytes 0 drop # handle 131
		ip daddr 172.16.0.196  fib saddr type local counter packets 0 bytes 0 accept # handle 130
		ip saddr 172.16.0.196  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 129
		ip daddr 172.16.0.196  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 128
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 140
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 141
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 142
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 143
	}

	chain KUBE-POD-FW-IBTPBH5XOLZM67ZN { # handle 17
		 ct state related,established counter packets 54 bytes 14518 accept # handle 148
		 ct state invalid counter packets 0 bytes 0 drop # handle 147
		ip daddr 172.16.0.185  fib saddr type local counter packets 0 bytes 0 accept # handle 146
		ip saddr 172.16.0.185  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 145
		ip daddr 172.16.0.185  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 144
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 156
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 157
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 158
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 159
	}

	chain KUBE-POD-FW-KCOFK6OOE6EIBGE4 { # handle 18
		 ct state related,established counter packets 0 bytes 0 accept # handle 164
		 ct state invalid counter packets 0 bytes 0 drop # handle 163
		ip daddr 172.16.0.188  fib saddr type local counter packets 0 bytes 0 accept # handle 162
		ip saddr 172.16.0.188  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 161
		ip daddr 172.16.0.188  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 160
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 172
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 173
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 174
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 175
	}

	chain KUBE-POD-FW-TBLFRC5U77W5XLIW { # handle 19
		 ct state related,established counter packets 659 bytes 158954 accept # handle 180
		 ct state invalid counter packets 0 bytes 0 drop # handle 179
		ip daddr 172.16.0.195  fib saddr type local counter packets 44 bytes 2640 accept # handle 178
		ip saddr 172.16.0.195  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 177
		ip daddr 172.16.0.195  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 176
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 188
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 189
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 190
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 191
	}

	chain KUBE-POD-FW-XSMF6UPLX3IJOQ2N { # handle 20
		 ct state related,established counter packets 0 bytes 0 accept # handle 196
		 ct state invalid counter packets 0 bytes 0 drop # handle 195
		ip daddr 172.16.0.198  fib saddr type local counter packets 0 bytes 0 accept # handle 194
		ip saddr 172.16.0.198  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 193
		ip daddr 172.16.0.198  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 192
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 204
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 205
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 206
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 207
	}

	chain KUBE-POD-FW-UIKFRRPGHXHIGTP3 { # handle 21
		 ct state related,established counter packets 0 bytes 0 accept # handle 212
		 ct state invalid counter packets 0 bytes 0 drop # handle 211
		ip daddr 172.16.0.186  fib saddr type local counter packets 0 bytes 0 accept # handle 210
		ip saddr 172.16.0.186  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 209
		ip daddr 172.16.0.186  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 208
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 220
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 221
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 222
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 223
	}

	chain KUBE-POD-FW-3KEIL2AZDHCNNSTK { # handle 22
		 ct state related,established counter packets 58 bytes 14679 accept # handle 228
		 ct state invalid counter packets 0 bytes 0 drop # handle 227
		ip daddr 172.16.0.189  fib saddr type local counter packets 0 bytes 0 accept # handle 226
		ip saddr 172.16.0.189  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 225
		ip daddr 172.16.0.189  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 224
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 236
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 237
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 238
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 239
	}

	chain KUBE-POD-FW-DUOSDOW5G6Z4TB7K { # handle 23
		 ct state related,established counter packets 54 bytes 25204 accept # handle 244
		 ct state invalid counter packets 0 bytes 0 drop # handle 243
		ip daddr 172.16.0.176  fib saddr type local counter packets 0 bytes 0 accept # handle 242
		ip saddr 172.16.0.176  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 241
		ip daddr 172.16.0.176  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 240
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 252
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 253
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 254
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 255
	}

	chain KUBE-POD-FW-SJZXVJVY4H47G6P6 { # handle 24
		 ct state related,established counter packets 100 bytes 24702 accept # handle 260
		 ct state invalid counter packets 0 bytes 0 drop # handle 259
		ip daddr 172.16.0.182  fib saddr type local counter packets 0 bytes 0 accept # handle 258
		ip saddr 172.16.0.182  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 257
		ip daddr 172.16.0.182  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 256
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 268
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 269
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 270
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 271
	}

	chain KUBE-POD-FW-EXJOQQON2FWBRQXO { # handle 25
		 ct state related,established counter packets 291 bytes 21736 accept # handle 276
		 ct state invalid counter packets 0 bytes 0 drop # handle 275
		ip daddr 172.16.0.190  fib saddr type local counter packets 30 bytes 1800 accept # handle 274
		ip saddr 172.16.0.190  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 273
		ip daddr 172.16.0.190  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 272
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 284
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 285
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 286
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 287
	}

	chain KUBE-POD-FW-XJGUJ2O247TY7YGD { # handle 26
		 ct state related,established counter packets 108 bytes 25580 accept # handle 292
		 ct state invalid counter packets 0 bytes 0 drop # handle 291
		ip daddr 172.16.0.177  fib saddr type local counter packets 0 bytes 0 accept # handle 290
		ip saddr 172.16.0.177  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 289
		ip daddr 172.16.0.177  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 288
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 300
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 301
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 302
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 303
	}

	chain KUBE-POD-FW-6YPUG7OR3WWK3FSD { # handle 27
		 ct state related,established counter packets 595 bytes 47548 accept # handle 308
		 ct state invalid counter packets 0 bytes 0 drop # handle 307
		ip daddr 172.16.0.180  fib saddr type local counter packets 63 bytes 3780 accept # handle 306
		ip saddr 172.16.0.180  counter packets 2 bytes 159 jump KUBE-NWPLCY-DEFAULT # handle 305
		ip daddr 172.16.0.180  counter packets 3 bytes 215 jump KUBE-NWPLCY-DEFAULT # handle 304
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 316
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 317
		counter packets 5 bytes 374 meta mark set mark and 0xfffeffff # handle 318
		 counter packets 5 bytes 374 meta mark set mark or 0x20000 # handle 319
	}
}
