
----------------------
1) NFTables rulesets
----------------------

table ip mangle { # handle 1
	chain KUBE-IPTABLES-HINT { # handle 1
	}

	chain KUBE-KUBELET-CANARY { # handle 2
	}
}
table ip nat { # handle 3
	chain KUBE-MARK-DROP { # handle 1
		counter packets 0 bytes 0 meta mark set mark or 0x8000 # handle 2
	}

	chain KUBE-MARK-MASQ { # handle 3
		counter packets 0 bytes 0 meta mark set mark or 0x4000 # handle 5
	}

	chain KUBE-POSTROUTING { # handle 4
		meta mark & 0x00004000 != 0x00004000 counter packets 5930 bytes 392098 return # handle 8
		counter packets 0 bytes 0 meta mark set mark xor 0x4000 # handle 9
		 counter packets 0 bytes 0 masquerade fully-random # handle 10
	}

	chain POSTROUTING { # handle 6
		type nat hook postrouting priority srcnat; policy accept;
		 counter packets 5930 bytes 392098 jump KUBE-POSTROUTING # handle 7
		xt match set xt match set xt match set counter packets 14 bytes 887 masquerade fully-random # handle 12
		ip saddr != 172.16.0.0/16 ip daddr != 172.16.0.0/16 xt match ipvs  counter packets 4 bytes 240 snat to 192.168.0.100 fully-random # handle 13
	}

	chain KUBE-KUBELET-CANARY { # handle 11
	}
}
table ip6 mangle { # handle 4
	chain KUBE-IPTABLES-HINT { # handle 1
	}

	chain KUBE-KUBELET-CANARY { # handle 2
	}
}
table ip6 nat { # handle 5
	chain KUBE-MARK-DROP { # handle 1
		counter packets 0 bytes 0 meta mark set mark or 0x8000 # handle 2
	}

	chain KUBE-MARK-MASQ { # handle 3
		counter packets 0 bytes 0 meta mark set mark or 0x4000 # handle 5
	}

	chain KUBE-POSTROUTING { # handle 4
		meta mark & 0x00004000 != 0x00004000 counter packets 0 bytes 0 return # handle 8
		counter packets 0 bytes 0 meta mark set mark xor 0x4000 # handle 9
		 counter packets 0 bytes 0  # handle 10
	}

	chain POSTROUTING { # handle 6
		type nat hook postrouting priority srcnat; policy accept;
		 counter packets 0 bytes 0 jump KUBE-POSTROUTING # handle 7
	}

	chain KUBE-KUBELET-CANARY { # handle 11
	}
}
table ip6 filter { # handle 6
	chain KUBE-FIREWALL { # handle 1
		 meta mark & 0x00008000 == 0x00008000 counter packets 0 bytes 0 drop # handle 2
	}

	chain KUBE-KUBELET-CANARY { # handle 3
	}
}
table ip filter { # handle 71
	chain INPUT { # handle 1
		type filter hook input priority filter; policy accept;
		 counter packets 9385 bytes 6160879 jump KUBE-ROUTER-INPUT # handle 28
		 xt match set counter packets 1163 bytes 199885 jump KUBE-ROUTER-SERVICES # handle 29
		counter packets 7915 bytes 5886647 jump KUBE-FIREWALL # handle 30
		ip saddr 192.168.0.100 tcp dport 6443  counter packets 298 bytes 51095 accept # handle 31
		ip saddr 127.0.0.1 tcp dport 6443  counter packets 2370 bytes 363066 accept # handle 32
		tcp dport 6443  counter packets 0 bytes 0 drop # handle 33
	}

	chain FORWARD { # handle 2
		type filter hook forward priority filter; policy accept;
		 counter packets 288 bytes 257808 jump KUBE-ROUTER-FORWARD # handle 34
		oifname "enp2s0"  counter packets 0 bytes 0 accept # handle 35
		oifname "kube-bridge"  counter packets 0 bytes 0 accept # handle 36
		iifname "kube-bridge"  counter packets 0 bytes 0 accept # handle 37
	}

	chain OUTPUT { # handle 3
		type filter hook output priority filter; policy accept;
		 counter packets 9432 bytes 6146425 jump KUBE-ROUTER-OUTPUT # handle 38
		counter packets 7829 bytes 5864941 jump KUBE-FIREWALL # handle 39
	}

	chain KUBE-FIREWALL { # handle 4
		ip saddr != 127.0.0.0/8 ip daddr 127.0.0.0/8  ct status dnat counter packets 0 bytes 0 drop # handle 40
		 meta mark & 0x00008000 == 0x00008000 counter packets 0 bytes 0 drop # handle 41
	}

	chain KUBE-KUBELET-CANARY { # handle 5
	}

	chain KUBE-NWPLCY-DEFAULT { # handle 6
		 counter packets 216 bytes 18000 meta mark set mark or 0x10000 # handle 42
	}

	chain KUBE-ROUTER-FORWARD { # handle 7
		ip daddr 172.16.1.141  counter packets 0 bytes 0 jump KUBE-POD-FW-LFRKHVDJ5CV6PXZQ # handle 56
		ip daddr 172.16.1.141 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-LFRKHVDJ5CV6PXZQ # handle 58
		ip saddr 172.16.1.141  counter packets 0 bytes 0 jump KUBE-POD-FW-LFRKHVDJ5CV6PXZQ # handle 60
		ip saddr 172.16.1.141 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-LFRKHVDJ5CV6PXZQ # handle 62
		ip daddr 172.16.1.143  counter packets 0 bytes 0 jump KUBE-POD-FW-7KNV7AQVWBUKGCBG # handle 72
		ip daddr 172.16.1.143 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-7KNV7AQVWBUKGCBG # handle 74
		ip saddr 172.16.1.143  counter packets 240 bytes 249456 jump KUBE-POD-FW-7KNV7AQVWBUKGCBG # handle 75
		ip saddr 172.16.1.143 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-7KNV7AQVWBUKGCBG # handle 78
		ip daddr 172.16.1.136  counter packets 0 bytes 0 jump KUBE-POD-FW-Z6SL7PYFIPLGIICQ # handle 88
		ip daddr 172.16.1.136 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-Z6SL7PYFIPLGIICQ # handle 90
		ip saddr 172.16.1.136  counter packets 0 bytes 0 jump KUBE-POD-FW-Z6SL7PYFIPLGIICQ # handle 92
		ip saddr 172.16.1.136 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-Z6SL7PYFIPLGIICQ # handle 94
		ip daddr 172.16.1.129  counter packets 0 bytes 0 jump KUBE-POD-FW-OVZ4RTUFSYNYSXOT # handle 104
		ip daddr 172.16.1.129 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-OVZ4RTUFSYNYSXOT # handle 106
		ip saddr 172.16.1.129  counter packets 0 bytes 0 jump KUBE-POD-FW-OVZ4RTUFSYNYSXOT # handle 108
		ip saddr 172.16.1.129 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-OVZ4RTUFSYNYSXOT # handle 110
		ip daddr 172.16.1.133  counter packets 0 bytes 0 jump KUBE-POD-FW-XU2HNN7ZCC7B2NWY # handle 120
		ip daddr 172.16.1.133 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-XU2HNN7ZCC7B2NWY # handle 122
		ip saddr 172.16.1.133  counter packets 0 bytes 0 jump KUBE-POD-FW-XU2HNN7ZCC7B2NWY # handle 124
		ip saddr 172.16.1.133 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-XU2HNN7ZCC7B2NWY # handle 126
		ip daddr 172.16.1.142  counter packets 0 bytes 0 jump KUBE-POD-FW-BJ6IUOYYJ2KPDG6K # handle 136
		ip daddr 172.16.1.142 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-BJ6IUOYYJ2KPDG6K # handle 138
		ip saddr 172.16.1.142  counter packets 48 bytes 8352 jump KUBE-POD-FW-BJ6IUOYYJ2KPDG6K # handle 139
		ip saddr 172.16.1.142 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-BJ6IUOYYJ2KPDG6K # handle 142
		ip daddr 172.16.1.140  counter packets 0 bytes 0 jump KUBE-POD-FW-GJIFLNI6HLJE2O5C # handle 152
		ip daddr 172.16.1.140 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-GJIFLNI6HLJE2O5C # handle 154
		ip saddr 172.16.1.140  counter packets 0 bytes 0 jump KUBE-POD-FW-GJIFLNI6HLJE2O5C # handle 156
		ip saddr 172.16.1.140 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-GJIFLNI6HLJE2O5C # handle 158
		ip daddr 172.16.1.139  counter packets 0 bytes 0 jump KUBE-POD-FW-7RMDGKBCW7YI7TIN # handle 168
		ip daddr 172.16.1.139 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-7RMDGKBCW7YI7TIN # handle 170
		ip saddr 172.16.1.139  counter packets 0 bytes 0 jump KUBE-POD-FW-7RMDGKBCW7YI7TIN # handle 172
		ip saddr 172.16.1.139 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-7RMDGKBCW7YI7TIN # handle 174
		ip daddr 172.16.1.138  counter packets 0 bytes 0 jump KUBE-POD-FW-ZH4TCFOACTHYJN26 # handle 184
		ip daddr 172.16.1.138 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-ZH4TCFOACTHYJN26 # handle 186
		ip saddr 172.16.1.138  counter packets 0 bytes 0 jump KUBE-POD-FW-ZH4TCFOACTHYJN26 # handle 188
		ip saddr 172.16.1.138 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-ZH4TCFOACTHYJN26 # handle 190
		ip daddr 172.16.1.134  counter packets 0 bytes 0 jump KUBE-POD-FW-YSD2PRH2UDUJXXOM # handle 200
		ip daddr 172.16.1.134 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-YSD2PRH2UDUJXXOM # handle 202
		ip saddr 172.16.1.134  counter packets 0 bytes 0 jump KUBE-POD-FW-YSD2PRH2UDUJXXOM # handle 204
		ip saddr 172.16.1.134 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-YSD2PRH2UDUJXXOM # handle 206
		ip daddr 172.16.1.135  counter packets 0 bytes 0 jump KUBE-POD-FW-MHTDLCIKOXY4AI77 # handle 216
		ip daddr 172.16.1.135 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-MHTDLCIKOXY4AI77 # handle 218
		ip saddr 172.16.1.135  counter packets 0 bytes 0 jump KUBE-POD-FW-MHTDLCIKOXY4AI77 # handle 220
		ip saddr 172.16.1.135 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-MHTDLCIKOXY4AI77 # handle 222
		ip daddr 172.16.1.144  counter packets 0 bytes 0 jump KUBE-POD-FW-ZOSDWKW3YWQ7SEGZ # handle 232
		ip daddr 172.16.1.144 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-ZOSDWKW3YWQ7SEGZ # handle 234
		ip saddr 172.16.1.144  counter packets 0 bytes 0 jump KUBE-POD-FW-ZOSDWKW3YWQ7SEGZ # handle 236
		ip saddr 172.16.1.144 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-ZOSDWKW3YWQ7SEGZ # handle 238
		ip daddr 172.16.1.132  counter packets 0 bytes 0 jump KUBE-POD-FW-FKBC5JDEPO4TBMRT # handle 248
		ip daddr 172.16.1.132 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-FKBC5JDEPO4TBMRT # handle 250
		ip saddr 172.16.1.132  counter packets 0 bytes 0 jump KUBE-POD-FW-FKBC5JDEPO4TBMRT # handle 252
		ip saddr 172.16.1.132 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-FKBC5JDEPO4TBMRT # handle 254
		ip daddr 172.16.1.131  counter packets 0 bytes 0 jump KUBE-POD-FW-PJK3FNSCAUH4YX4X # handle 264
		ip daddr 172.16.1.131 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-PJK3FNSCAUH4YX4X # handle 266
		ip saddr 172.16.1.131  counter packets 0 bytes 0 jump KUBE-POD-FW-PJK3FNSCAUH4YX4X # handle 268
		ip saddr 172.16.1.131 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-PJK3FNSCAUH4YX4X # handle 270
		ip daddr 172.16.1.130  counter packets 0 bytes 0 jump KUBE-POD-FW-DLBXOCBFS5C5CW3X # handle 280
		ip daddr 172.16.1.130 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-DLBXOCBFS5C5CW3X # handle 282
		ip saddr 172.16.1.130  counter packets 0 bytes 0 jump KUBE-POD-FW-DLBXOCBFS5C5CW3X # handle 284
		ip saddr 172.16.1.130 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-DLBXOCBFS5C5CW3X # handle 286
		ip daddr 172.16.1.137  counter packets 0 bytes 0 jump KUBE-POD-FW-CQHQD47T72QAFGB3 # handle 296
		ip daddr 172.16.1.137 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-CQHQD47T72QAFGB3 # handle 298
		ip saddr 172.16.1.137  counter packets 0 bytes 0 jump KUBE-POD-FW-CQHQD47T72QAFGB3 # handle 300
		ip saddr 172.16.1.137 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-CQHQD47T72QAFGB3 # handle 302
		ip daddr 172.16.1.145  counter packets 0 bytes 0 jump KUBE-POD-FW-JHAA5IMIR6GTZTLE # handle 312
		ip daddr 172.16.1.145 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-JHAA5IMIR6GTZTLE # handle 314
		ip saddr 172.16.1.145  counter packets 0 bytes 0 jump KUBE-POD-FW-JHAA5IMIR6GTZTLE # handle 317
		ip saddr 172.16.1.145 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-JHAA5IMIR6GTZTLE # handle 318
		 meta mark & 0x00020000 == 0x00020000 counter packets 0 bytes 0 accept # handle 325
	}

	chain KUBE-ROUTER-INPUT { # handle 8
		ip daddr 10.96.0.0/12  counter packets 0 bytes 0 return # handle 43
		meta l4proto tcp  fib daddr type local tcp dport 30000-32767 counter packets 145 bytes 10852 return # handle 44
		meta l4proto udp  fib daddr type local udp dport 30000-32767 counter packets 0 bytes 0 return # handle 45
		ip saddr 172.16.1.141  counter packets 18 bytes 1318 jump KUBE-POD-FW-LFRKHVDJ5CV6PXZQ # handle 59
		ip saddr 172.16.1.143  counter packets 0 bytes 0 jump KUBE-POD-FW-7KNV7AQVWBUKGCBG # handle 77
		ip saddr 172.16.1.136  counter packets 30 bytes 5463 jump KUBE-POD-FW-Z6SL7PYFIPLGIICQ # handle 91
		ip saddr 172.16.1.129  counter packets 61 bytes 6124 jump KUBE-POD-FW-OVZ4RTUFSYNYSXOT # handle 107
		ip saddr 172.16.1.133  counter packets 98 bytes 7246 jump KUBE-POD-FW-XU2HNN7ZCC7B2NWY # handle 123
		ip saddr 172.16.1.142  counter packets 208 bytes 16911 jump KUBE-POD-FW-BJ6IUOYYJ2KPDG6K # handle 141
		ip saddr 172.16.1.140  counter packets 0 bytes 0 jump KUBE-POD-FW-GJIFLNI6HLJE2O5C # handle 155
		ip saddr 172.16.1.139  counter packets 18 bytes 1318 jump KUBE-POD-FW-7RMDGKBCW7YI7TIN # handle 171
		ip saddr 172.16.1.138  counter packets 363 bytes 65446 jump KUBE-POD-FW-ZH4TCFOACTHYJN26 # handle 187
		ip saddr 172.16.1.134  counter packets 37 bytes 6154 jump KUBE-POD-FW-YSD2PRH2UDUJXXOM # handle 203
		ip saddr 172.16.1.135  counter packets 36 bytes 4005 jump KUBE-POD-FW-MHTDLCIKOXY4AI77 # handle 219
		ip saddr 172.16.1.144  counter packets 0 bytes 0 jump KUBE-POD-FW-ZOSDWKW3YWQ7SEGZ # handle 235
		ip saddr 172.16.1.132  counter packets 0 bytes 0 jump KUBE-POD-FW-FKBC5JDEPO4TBMRT # handle 251
		ip saddr 172.16.1.131  counter packets 0 bytes 0 jump KUBE-POD-FW-PJK3FNSCAUH4YX4X # handle 267
		ip saddr 172.16.1.130  counter packets 0 bytes 0 jump KUBE-POD-FW-DLBXOCBFS5C5CW3X # handle 283
		ip saddr 172.16.1.137  counter packets 531 bytes 129559 jump KUBE-POD-FW-CQHQD47T72QAFGB3 # handle 299
		ip saddr 172.16.1.145  counter packets 70 bytes 30688 jump KUBE-POD-FW-JHAA5IMIR6GTZTLE # handle 316
		 meta mark & 0x00020000 == 0x00020000 counter packets 72 bytes 6000 accept # handle 324
	}

	chain KUBE-ROUTER-OUTPUT { # handle 9
		ip daddr 172.16.1.141  counter packets 20 bytes 7864 jump KUBE-POD-FW-LFRKHVDJ5CV6PXZQ # handle 57
		ip saddr 172.16.1.141  counter packets 0 bytes 0 jump KUBE-POD-FW-LFRKHVDJ5CV6PXZQ # handle 61
		ip daddr 172.16.1.143  counter packets 303 bytes 21948 jump KUBE-POD-FW-7KNV7AQVWBUKGCBG # handle 73
		ip saddr 172.16.1.143  counter packets 0 bytes 0 jump KUBE-POD-FW-7KNV7AQVWBUKGCBG # handle 76
		ip daddr 172.16.1.136  counter packets 32 bytes 9268 jump KUBE-POD-FW-Z6SL7PYFIPLGIICQ # handle 89
		ip saddr 172.16.1.136  counter packets 0 bytes 0 jump KUBE-POD-FW-Z6SL7PYFIPLGIICQ # handle 93
		ip daddr 172.16.1.129  counter packets 83 bytes 5804 jump KUBE-POD-FW-OVZ4RTUFSYNYSXOT # handle 105
		ip saddr 172.16.1.129  counter packets 0 bytes 0 jump KUBE-POD-FW-OVZ4RTUFSYNYSXOT # handle 109
		ip daddr 172.16.1.133  counter packets 112 bytes 8232 jump KUBE-POD-FW-XU2HNN7ZCC7B2NWY # handle 121
		ip saddr 172.16.1.133  counter packets 0 bytes 0 jump KUBE-POD-FW-XU2HNN7ZCC7B2NWY # handle 125
		ip daddr 172.16.1.142  counter packets 270 bytes 21070 jump KUBE-POD-FW-BJ6IUOYYJ2KPDG6K # handle 137
		ip saddr 172.16.1.142  counter packets 0 bytes 0 jump KUBE-POD-FW-BJ6IUOYYJ2KPDG6K # handle 140
		ip daddr 172.16.1.140  counter packets 0 bytes 0 jump KUBE-POD-FW-GJIFLNI6HLJE2O5C # handle 153
		ip saddr 172.16.1.140  counter packets 0 bytes 0 jump KUBE-POD-FW-GJIFLNI6HLJE2O5C # handle 157
		ip daddr 172.16.1.139  counter packets 20 bytes 7864 jump KUBE-POD-FW-7RMDGKBCW7YI7TIN # handle 169
		ip saddr 172.16.1.139  counter packets 0 bytes 0 jump KUBE-POD-FW-7RMDGKBCW7YI7TIN # handle 173
		ip daddr 172.16.1.138  counter packets 409 bytes 143656 jump KUBE-POD-FW-ZH4TCFOACTHYJN26 # handle 185
		ip saddr 172.16.1.138  counter packets 0 bytes 0 jump KUBE-POD-FW-ZH4TCFOACTHYJN26 # handle 189
		ip daddr 172.16.1.134  counter packets 36 bytes 9954 jump KUBE-POD-FW-YSD2PRH2UDUJXXOM # handle 201
		ip saddr 172.16.1.134  counter packets 0 bytes 0 jump KUBE-POD-FW-YSD2PRH2UDUJXXOM # handle 205
		ip daddr 172.16.1.135  counter packets 29 bytes 20736 jump KUBE-POD-FW-MHTDLCIKOXY4AI77 # handle 217
		ip saddr 172.16.1.135  counter packets 0 bytes 0 jump KUBE-POD-FW-MHTDLCIKOXY4AI77 # handle 221
		ip daddr 172.16.1.144  counter packets 0 bytes 0 jump KUBE-POD-FW-ZOSDWKW3YWQ7SEGZ # handle 233
		ip saddr 172.16.1.144  counter packets 0 bytes 0 jump KUBE-POD-FW-ZOSDWKW3YWQ7SEGZ # handle 237
		ip daddr 172.16.1.132  counter packets 0 bytes 0 jump KUBE-POD-FW-FKBC5JDEPO4TBMRT # handle 249
		ip saddr 172.16.1.132  counter packets 0 bytes 0 jump KUBE-POD-FW-FKBC5JDEPO4TBMRT # handle 253
		ip daddr 172.16.1.131  counter packets 0 bytes 0 jump KUBE-POD-FW-PJK3FNSCAUH4YX4X # handle 265
		ip saddr 172.16.1.131  counter packets 0 bytes 0 jump KUBE-POD-FW-PJK3FNSCAUH4YX4X # handle 269
		ip daddr 172.16.1.130  counter packets 0 bytes 0 jump KUBE-POD-FW-DLBXOCBFS5C5CW3X # handle 281
		ip saddr 172.16.1.130  counter packets 0 bytes 0 jump KUBE-POD-FW-DLBXOCBFS5C5CW3X # handle 285
		ip daddr 172.16.1.137  counter packets 219 bytes 19908 jump KUBE-POD-FW-CQHQD47T72QAFGB3 # handle 297
		ip saddr 172.16.1.137  counter packets 72 bytes 6000 jump KUBE-POD-FW-CQHQD47T72QAFGB3 # handle 301
		ip daddr 172.16.1.145  counter packets 70 bytes 5180 jump KUBE-POD-FW-JHAA5IMIR6GTZTLE # handle 313
		ip saddr 172.16.1.145  counter packets 0 bytes 0 jump KUBE-POD-FW-JHAA5IMIR6GTZTLE # handle 315
		 meta mark & 0x00020000 == 0x00020000 counter packets 72 bytes 6000 accept # handle 323
	}

	chain KUBE-ROUTER-SERVICES { # handle 10
		 xt match set counter packets 0 bytes 0 accept # handle 46
		meta l4proto icmp  icmp type echo-request counter packets 0 bytes 0 accept # handle 47
		meta l4proto icmp  icmp type destination-unreachable counter packets 0 bytes 0 accept # handle 48
		meta l4proto icmp  icmp type time-exceeded counter packets 0 bytes 0 accept # handle 49
		 xt match set counter packets 0 bytes 0 reject # handle 50
	}

	chain KUBE-POD-FW-LFRKHVDJ5CV6PXZQ { # handle 11
		 ct state related,established counter packets 38 bytes 9182 accept # handle 55
		 ct state invalid counter packets 0 bytes 0 drop # handle 54
		ip daddr 172.16.1.141  fib saddr type local counter packets 0 bytes 0 accept # handle 53
		ip saddr 172.16.1.141  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 52
		ip daddr 172.16.1.141  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 51
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 63
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 64
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 65
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 66
	}

	chain KUBE-POD-FW-7KNV7AQVWBUKGCBG { # handle 12
		 ct state related,established counter packets 519 bytes 269964 accept # handle 71
		 ct state invalid counter packets 0 bytes 0 drop # handle 70
		ip daddr 172.16.1.143  fib saddr type local counter packets 0 bytes 0 accept # handle 69
		ip saddr 172.16.1.143  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 68
		ip daddr 172.16.1.143  counter packets 24 bytes 1440 jump KUBE-NWPLCY-DEFAULT # handle 67
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 79
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 80
		counter packets 24 bytes 1440 meta mark set mark and 0xfffeffff # handle 81
		 counter packets 24 bytes 1440 meta mark set mark or 0x20000 # handle 82
	}

	chain KUBE-POD-FW-Z6SL7PYFIPLGIICQ { # handle 13
		 ct state related,established counter packets 62 bytes 14731 accept # handle 87
		 ct state invalid counter packets 0 bytes 0 drop # handle 86
		ip daddr 172.16.1.136  fib saddr type local counter packets 0 bytes 0 accept # handle 85
		ip saddr 172.16.1.136  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 84
		ip daddr 172.16.1.136  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 83
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 95
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 96
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 97
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 98
	}

	chain KUBE-POD-FW-OVZ4RTUFSYNYSXOT { # handle 14
		 ct state related,established counter packets 132 bytes 11208 accept # handle 103
		 ct state invalid counter packets 0 bytes 0 drop # handle 102
		ip daddr 172.16.1.129  fib saddr type local counter packets 12 bytes 720 accept # handle 101
		ip saddr 172.16.1.129  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 100
		ip daddr 172.16.1.129  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 99
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 111
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 112
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 113
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 114
	}

	chain KUBE-POD-FW-XU2HNN7ZCC7B2NWY { # handle 15
		 ct state related,established counter packets 191 bytes 14338 accept # handle 119
		 ct state invalid counter packets 0 bytes 0 drop # handle 118
		ip daddr 172.16.1.133  fib saddr type local counter packets 19 bytes 1140 accept # handle 117
		ip saddr 172.16.1.133  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 116
		ip daddr 172.16.1.133  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 115
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 127
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 128
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 129
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 130
	}

	chain KUBE-POD-FW-BJ6IUOYYJ2KPDG6K { # handle 16
		 ct state related,established counter packets 438 bytes 39373 accept # handle 135
		 ct state invalid counter packets 0 bytes 0 drop # handle 134
		ip daddr 172.16.1.142  fib saddr type local counter packets 40 bytes 2400 accept # handle 133
		ip saddr 172.16.1.142  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 132
		ip daddr 172.16.1.142  counter packets 48 bytes 4560 jump KUBE-NWPLCY-DEFAULT # handle 131
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 143
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 144
		counter packets 48 bytes 4560 meta mark set mark and 0xfffeffff # handle 145
		 counter packets 48 bytes 4560 meta mark set mark or 0x20000 # handle 146
	}

	chain KUBE-POD-FW-GJIFLNI6HLJE2O5C { # handle 17
		 ct state related,established counter packets 0 bytes 0 accept # handle 151
		 ct state invalid counter packets 0 bytes 0 drop # handle 150
		ip daddr 172.16.1.140  fib saddr type local counter packets 0 bytes 0 accept # handle 149
		ip saddr 172.16.1.140  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 148
		ip daddr 172.16.1.140  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 147
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 159
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 160
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 161
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 162
	}

	chain KUBE-POD-FW-7RMDGKBCW7YI7TIN { # handle 18
		 ct state related,established counter packets 38 bytes 9182 accept # handle 167
		 ct state invalid counter packets 0 bytes 0 drop # handle 166
		ip daddr 172.16.1.139  fib saddr type local counter packets 0 bytes 0 accept # handle 165
		ip saddr 172.16.1.139  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 164
		ip daddr 172.16.1.139  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 163
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 175
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 176
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 177
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 178
	}

	chain KUBE-POD-FW-ZH4TCFOACTHYJN26 { # handle 19
		 ct state related,established counter packets 772 bytes 209102 accept # handle 183
		 ct state invalid counter packets 0 bytes 0 drop # handle 182
		ip daddr 172.16.1.138  fib saddr type local counter packets 0 bytes 0 accept # handle 181
		ip saddr 172.16.1.138  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 180
		ip daddr 172.16.1.138  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 179
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 191
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 192
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 193
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 194
	}

	chain KUBE-POD-FW-YSD2PRH2UDUJXXOM { # handle 20
		 ct state related,established counter packets 73 bytes 16108 accept # handle 199
		 ct state invalid counter packets 0 bytes 0 drop # handle 198
		ip daddr 172.16.1.134  fib saddr type local counter packets 0 bytes 0 accept # handle 197
		ip saddr 172.16.1.134  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 196
		ip daddr 172.16.1.134  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 195
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 207
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 208
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 209
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 210
	}

	chain KUBE-POD-FW-MHTDLCIKOXY4AI77 { # handle 21
		 ct state related,established counter packets 65 bytes 24741 accept # handle 215
		 ct state invalid counter packets 0 bytes 0 drop # handle 214
		ip daddr 172.16.1.135  fib saddr type local counter packets 0 bytes 0 accept # handle 213
		ip saddr 172.16.1.135  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 212
		ip daddr 172.16.1.135  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 211
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 223
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 224
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 225
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 226
	}

	chain KUBE-POD-FW-ZOSDWKW3YWQ7SEGZ { # handle 22
		 ct state related,established counter packets 0 bytes 0 accept # handle 231
		 ct state invalid counter packets 0 bytes 0 drop # handle 230
		ip daddr 172.16.1.144  fib saddr type local counter packets 0 bytes 0 accept # handle 229
		ip saddr 172.16.1.144  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 228
		ip daddr 172.16.1.144  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 227
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 239
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 240
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 241
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 242
	}

	chain KUBE-POD-FW-FKBC5JDEPO4TBMRT { # handle 23
		 ct state related,established counter packets 0 bytes 0 accept # handle 247
		 ct state invalid counter packets 0 bytes 0 drop # handle 246
		ip daddr 172.16.1.132  fib saddr type local counter packets 0 bytes 0 accept # handle 245
		ip saddr 172.16.1.132  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 244
		ip daddr 172.16.1.132  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 243
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 255
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 256
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 257
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 258
	}

	chain KUBE-POD-FW-PJK3FNSCAUH4YX4X { # handle 24
		 ct state related,established counter packets 0 bytes 0 accept # handle 263
		 ct state invalid counter packets 0 bytes 0 drop # handle 262
		ip daddr 172.16.1.131  fib saddr type local counter packets 0 bytes 0 accept # handle 261
		ip saddr 172.16.1.131  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 260
		ip daddr 172.16.1.131  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 259
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 271
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 272
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 273
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 274
	}

	chain KUBE-POD-FW-DLBXOCBFS5C5CW3X { # handle 25
		 ct state related,established counter packets 0 bytes 0 accept # handle 279
		 ct state invalid counter packets 0 bytes 0 drop # handle 278
		ip daddr 172.16.1.130  fib saddr type local counter packets 0 bytes 0 accept # handle 277
		ip saddr 172.16.1.130  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 276
		ip daddr 172.16.1.130  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 275
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 287
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 288
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 289
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 290
	}

	chain KUBE-POD-FW-CQHQD47T72QAFGB3 { # handle 26
		 ct state related,established counter packets 654 bytes 142027 accept # handle 295
		 ct state invalid counter packets 0 bytes 0 drop # handle 294
		ip daddr 172.16.1.137  fib saddr type local counter packets 24 bytes 1440 accept # handle 293
		ip saddr 172.16.1.137  counter packets 144 bytes 12000 jump KUBE-NWPLCY-DEFAULT # handle 292
		ip daddr 172.16.1.137  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 291
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 303
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 304
		counter packets 144 bytes 12000 meta mark set mark and 0xfffeffff # handle 305
		 counter packets 144 bytes 12000 meta mark set mark or 0x20000 # handle 306
	}

	chain KUBE-POD-FW-JHAA5IMIR6GTZTLE { # handle 27
		 ct state related,established counter packets 126 bytes 35028 accept # handle 311
		 ct state invalid counter packets 0 bytes 0 drop # handle 310
		ip daddr 172.16.1.145  fib saddr type local counter packets 14 bytes 840 accept # handle 309
		ip saddr 172.16.1.145  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 308
		ip daddr 172.16.1.145  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 307
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 319
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 320
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 321
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 322
	}
}
