
----------------------
1) NFTables rulesets
----------------------

table ip mangle { # handle 1
	chain KUBE-IPTABLES-HINT { # handle 1
	}

	chain KUBE-KUBELET-CANARY { # handle 2
	}
}
table ip nat { # handle 3
	chain KUBE-MARK-DROP { # handle 1
		counter packets 0 bytes 0 meta mark set mark or 0x8000 # handle 2
	}

	chain KUBE-MARK-MASQ { # handle 3
		counter packets 0 bytes 0 meta mark set mark or 0x4000 # handle 5
	}

	chain KUBE-POSTROUTING { # handle 4
		meta mark & 0x00004000 != 0x00004000 counter packets 366 bytes 30798 return # handle 8
		counter packets 0 bytes 0 meta mark set mark xor 0x4000 # handle 9
		 counter packets 0 bytes 0 masquerade fully-random # handle 10
	}

	chain POSTROUTING { # handle 6
		type nat hook postrouting priority srcnat; policy accept;
		 counter packets 366 bytes 30798 jump KUBE-POSTROUTING # handle 7
		xt match set xt match set xt match set counter packets 7 bytes 443 masquerade fully-random # handle 12
		ip saddr != 172.16.0.0/16 ip daddr != 172.16.0.0/16 xt match ipvs  counter packets 4 bytes 240 snat to 192.168.0.1 fully-random # handle 13
		ip saddr 10.8.0.0/24 oifname "eth0" counter packets 0 bytes 0 masquerade # handle 14
	}

	chain KUBE-KUBELET-CANARY { # handle 11
	}
}
table ip6 mangle { # handle 4
	chain KUBE-IPTABLES-HINT { # handle 1
	}

	chain KUBE-KUBELET-CANARY { # handle 2
	}
}
table ip6 nat { # handle 5
	chain KUBE-MARK-DROP { # handle 1
		counter packets 0 bytes 0 meta mark set mark or 0x8000 # handle 2
	}

	chain KUBE-MARK-MASQ { # handle 3
		counter packets 0 bytes 0 meta mark set mark or 0x4000 # handle 5
	}

	chain KUBE-POSTROUTING { # handle 4
		meta mark & 0x00004000 != 0x00004000 counter packets 3 bytes 240 return # handle 8
		counter packets 0 bytes 0 meta mark set mark xor 0x4000 # handle 9
		 counter packets 0 bytes 0  # handle 10
	}

	chain POSTROUTING { # handle 6
		type nat hook postrouting priority srcnat; policy accept;
		 counter packets 3 bytes 240 jump KUBE-POSTROUTING # handle 7
	}

	chain KUBE-KUBELET-CANARY { # handle 11
	}
}
table ip6 filter { # handle 6
	chain KUBE-FIREWALL { # handle 1
		 meta mark & 0x00008000 == 0x00008000 counter packets 0 bytes 0 drop # handle 2
	}

	chain KUBE-KUBELET-CANARY { # handle 3
	}
}
table ip filter { # handle 73
	chain INPUT { # handle 1
		type filter hook input priority filter; policy accept;
		 counter packets 270 bytes 179112 jump KUBE-ROUTER-INPUT # handle 22
		 xt match set counter packets 1 bytes 300 jump KUBE-ROUTER-SERVICES # handle 23
		counter packets 266 bytes 178793 jump KUBE-FIREWALL # handle 24
	}

	chain FORWARD { # handle 2
		type filter hook forward priority filter; policy accept;
		 counter packets 0 bytes 0 jump KUBE-ROUTER-FORWARD # handle 25
		oifname "eno1"  counter packets 0 bytes 0 accept # handle 26
		oifname "kube-bridge"  counter packets 0 bytes 0 accept # handle 27
		iifname "kube-bridge"  counter packets 0 bytes 0 accept # handle 28
	}

	chain OUTPUT { # handle 3
		type filter hook output priority filter; policy accept;
		 counter packets 270 bytes 188647 jump KUBE-ROUTER-OUTPUT # handle 29
		counter packets 265 bytes 178493 jump KUBE-FIREWALL # handle 30
	}

	chain KUBE-FIREWALL { # handle 4
		ip saddr != 127.0.0.0/8 ip daddr 127.0.0.0/8  ct status dnat counter packets 0 bytes 0 drop # handle 31
		 meta mark & 0x00008000 == 0x00008000 counter packets 0 bytes 0 drop # handle 32
	}

	chain KUBE-KUBELET-CANARY { # handle 5
	}

	chain KUBE-NWPLCY-DEFAULT { # handle 6
		 counter packets 0 bytes 0 meta mark set mark or 0x10000 # handle 33
	}

	chain KUBE-ROUTER-FORWARD { # handle 7
		ip daddr 172.16.0.120  counter packets 0 bytes 0 jump KUBE-POD-FW-LE5LZWKU2IJQGP55 # handle 47
		ip daddr 172.16.0.120 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-LE5LZWKU2IJQGP55 # handle 49
		ip saddr 172.16.0.120  counter packets 0 bytes 0 jump KUBE-POD-FW-LE5LZWKU2IJQGP55 # handle 51
		ip saddr 172.16.0.120 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-LE5LZWKU2IJQGP55 # handle 53
		ip daddr 172.16.0.119  counter packets 0 bytes 0 jump KUBE-POD-FW-QPU2W5ESVBQSSBDN # handle 63
		ip daddr 172.16.0.119 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-QPU2W5ESVBQSSBDN # handle 65
		ip saddr 172.16.0.119  counter packets 0 bytes 0 jump KUBE-POD-FW-QPU2W5ESVBQSSBDN # handle 67
		ip saddr 172.16.0.119 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-QPU2W5ESVBQSSBDN # handle 69
		ip daddr 172.16.0.124  counter packets 0 bytes 0 jump KUBE-POD-FW-DL6RRW35YLVNK5GU # handle 79
		ip daddr 172.16.0.124 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-DL6RRW35YLVNK5GU # handle 81
		ip saddr 172.16.0.124  counter packets 0 bytes 0 jump KUBE-POD-FW-DL6RRW35YLVNK5GU # handle 83
		ip saddr 172.16.0.124 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-DL6RRW35YLVNK5GU # handle 85
		ip daddr 172.16.0.117  counter packets 0 bytes 0 jump KUBE-POD-FW-MFTVVYWZOAS7ZPUM # handle 95
		ip daddr 172.16.0.117 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-MFTVVYWZOAS7ZPUM # handle 97
		ip saddr 172.16.0.117  counter packets 0 bytes 0 jump KUBE-POD-FW-MFTVVYWZOAS7ZPUM # handle 98
		ip saddr 172.16.0.117 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-MFTVVYWZOAS7ZPUM # handle 101
		ip daddr 172.16.0.126  counter packets 0 bytes 0 jump KUBE-POD-FW-DGKZECO3T23G2CBS # handle 111
		ip daddr 172.16.0.126 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-DGKZECO3T23G2CBS # handle 113
		ip saddr 172.16.0.126  counter packets 0 bytes 0 jump KUBE-POD-FW-DGKZECO3T23G2CBS # handle 115
		ip saddr 172.16.0.126 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-DGKZECO3T23G2CBS # handle 117
		ip daddr 172.16.0.127  counter packets 0 bytes 0 jump KUBE-POD-FW-WHCP4MW4QGHMMX6Z # handle 127
		ip daddr 172.16.0.127 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-WHCP4MW4QGHMMX6Z # handle 129
		ip saddr 172.16.0.127  counter packets 0 bytes 0 jump KUBE-POD-FW-WHCP4MW4QGHMMX6Z # handle 132
		ip saddr 172.16.0.127 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-WHCP4MW4QGHMMX6Z # handle 133
		ip daddr 172.16.0.122  counter packets 0 bytes 0 jump KUBE-POD-FW-MMWYLNL2E35IPJAO # handle 143
		ip daddr 172.16.0.122 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-MMWYLNL2E35IPJAO # handle 145
		ip saddr 172.16.0.122  counter packets 0 bytes 0 jump KUBE-POD-FW-MMWYLNL2E35IPJAO # handle 146
		ip saddr 172.16.0.122 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-MMWYLNL2E35IPJAO # handle 149
		ip daddr 172.16.0.118  counter packets 0 bytes 0 jump KUBE-POD-FW-VGHTP2DZIM77WHCD # handle 159
		ip daddr 172.16.0.118 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-VGHTP2DZIM77WHCD # handle 161
		ip saddr 172.16.0.118  counter packets 0 bytes 0 jump KUBE-POD-FW-VGHTP2DZIM77WHCD # handle 163
		ip saddr 172.16.0.118 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-VGHTP2DZIM77WHCD # handle 165
		ip daddr 172.16.0.123  counter packets 0 bytes 0 jump KUBE-POD-FW-PCB4Z6O5ACZMMTYD # handle 175
		ip daddr 172.16.0.123 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-PCB4Z6O5ACZMMTYD # handle 177
		ip saddr 172.16.0.123  counter packets 0 bytes 0 jump KUBE-POD-FW-PCB4Z6O5ACZMMTYD # handle 179
		ip saddr 172.16.0.123 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-PCB4Z6O5ACZMMTYD # handle 181
		ip daddr 172.16.0.125  counter packets 0 bytes 0 jump KUBE-POD-FW-PF24KOHXICEOBQJ5 # handle 191
		ip daddr 172.16.0.125 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-PF24KOHXICEOBQJ5 # handle 193
		ip saddr 172.16.0.125  counter packets 0 bytes 0 jump KUBE-POD-FW-PF24KOHXICEOBQJ5 # handle 195
		ip saddr 172.16.0.125 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-PF24KOHXICEOBQJ5 # handle 197
		ip daddr 172.16.0.121  counter packets 0 bytes 0 jump KUBE-POD-FW-L6SXCFJPVIESCSOG # handle 207
		ip daddr 172.16.0.121 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-L6SXCFJPVIESCSOG # handle 209
		ip saddr 172.16.0.121  counter packets 0 bytes 0 jump KUBE-POD-FW-L6SXCFJPVIESCSOG # handle 211
		ip saddr 172.16.0.121 xt match physdev  counter packets 0 bytes 0 jump KUBE-POD-FW-L6SXCFJPVIESCSOG # handle 213
		 meta mark & 0x00020000 == 0x00020000 counter packets 0 bytes 0 accept # handle 219
	}

	chain KUBE-ROUTER-INPUT { # handle 8
		ip daddr 10.96.0.0/12  counter packets 0 bytes 0 return # handle 34
		meta l4proto tcp  fib daddr type local tcp dport 30000-32767 counter packets 0 bytes 0 return # handle 35
		meta l4proto udp  fib daddr type local udp dport 30000-32767 counter packets 0 bytes 0 return # handle 36
		ip saddr 172.16.0.120  counter packets 0 bytes 0 jump KUBE-POD-FW-LE5LZWKU2IJQGP55 # handle 50
		ip saddr 172.16.0.119  counter packets 0 bytes 0 jump KUBE-POD-FW-QPU2W5ESVBQSSBDN # handle 66
		ip saddr 172.16.0.124  counter packets 0 bytes 0 jump KUBE-POD-FW-DL6RRW35YLVNK5GU # handle 82
		ip saddr 172.16.0.117  counter packets 0 bytes 0 jump KUBE-POD-FW-MFTVVYWZOAS7ZPUM # handle 100
		ip saddr 172.16.0.126  counter packets 0 bytes 0 jump KUBE-POD-FW-DGKZECO3T23G2CBS # handle 114
		ip saddr 172.16.0.127  counter packets 0 bytes 0 jump KUBE-POD-FW-WHCP4MW4QGHMMX6Z # handle 131
		ip saddr 172.16.0.122  counter packets 0 bytes 0 jump KUBE-POD-FW-MMWYLNL2E35IPJAO # handle 148
		ip saddr 172.16.0.118  counter packets 0 bytes 0 jump KUBE-POD-FW-VGHTP2DZIM77WHCD # handle 162
		ip saddr 172.16.0.123  counter packets 4 bytes 319 jump KUBE-POD-FW-PCB4Z6O5ACZMMTYD # handle 178
		ip saddr 172.16.0.125  counter packets 0 bytes 0 jump KUBE-POD-FW-PF24KOHXICEOBQJ5 # handle 194
		ip saddr 172.16.0.121  counter packets 0 bytes 0 jump KUBE-POD-FW-L6SXCFJPVIESCSOG # handle 210
		 meta mark & 0x00020000 == 0x00020000 counter packets 0 bytes 0 accept # handle 218
	}

	chain KUBE-ROUTER-OUTPUT { # handle 9
		ip daddr 172.16.0.120  counter packets 0 bytes 0 jump KUBE-POD-FW-LE5LZWKU2IJQGP55 # handle 48
		ip saddr 172.16.0.120  counter packets 0 bytes 0 jump KUBE-POD-FW-LE5LZWKU2IJQGP55 # handle 52
		ip daddr 172.16.0.119  counter packets 0 bytes 0 jump KUBE-POD-FW-QPU2W5ESVBQSSBDN # handle 64
		ip saddr 172.16.0.119  counter packets 0 bytes 0 jump KUBE-POD-FW-QPU2W5ESVBQSSBDN # handle 68
		ip daddr 172.16.0.124  counter packets 0 bytes 0 jump KUBE-POD-FW-DL6RRW35YLVNK5GU # handle 80
		ip saddr 172.16.0.124  counter packets 0 bytes 0 jump KUBE-POD-FW-DL6RRW35YLVNK5GU # handle 84
		ip daddr 172.16.0.117  counter packets 0 bytes 0 jump KUBE-POD-FW-MFTVVYWZOAS7ZPUM # handle 96
		ip saddr 172.16.0.117  counter packets 0 bytes 0 jump KUBE-POD-FW-MFTVVYWZOAS7ZPUM # handle 99
		ip daddr 172.16.0.126  counter packets 0 bytes 0 jump KUBE-POD-FW-DGKZECO3T23G2CBS # handle 112
		ip saddr 172.16.0.126  counter packets 0 bytes 0 jump KUBE-POD-FW-DGKZECO3T23G2CBS # handle 116
		ip daddr 172.16.0.127  counter packets 0 bytes 0 jump KUBE-POD-FW-WHCP4MW4QGHMMX6Z # handle 128
		ip saddr 172.16.0.127  counter packets 0 bytes 0 jump KUBE-POD-FW-WHCP4MW4QGHMMX6Z # handle 130
		ip daddr 172.16.0.122  counter packets 0 bytes 0 jump KUBE-POD-FW-MMWYLNL2E35IPJAO # handle 144
		ip saddr 172.16.0.122  counter packets 0 bytes 0 jump KUBE-POD-FW-MMWYLNL2E35IPJAO # handle 147
		ip daddr 172.16.0.118  counter packets 0 bytes 0 jump KUBE-POD-FW-VGHTP2DZIM77WHCD # handle 160
		ip saddr 172.16.0.118  counter packets 0 bytes 0 jump KUBE-POD-FW-VGHTP2DZIM77WHCD # handle 164
		ip daddr 172.16.0.123  counter packets 5 bytes 10154 jump KUBE-POD-FW-PCB4Z6O5ACZMMTYD # handle 176
		ip saddr 172.16.0.123  counter packets 0 bytes 0 jump KUBE-POD-FW-PCB4Z6O5ACZMMTYD # handle 180
		ip daddr 172.16.0.125  counter packets 0 bytes 0 jump KUBE-POD-FW-PF24KOHXICEOBQJ5 # handle 192
		ip saddr 172.16.0.125  counter packets 0 bytes 0 jump KUBE-POD-FW-PF24KOHXICEOBQJ5 # handle 196
		ip daddr 172.16.0.121  counter packets 0 bytes 0 jump KUBE-POD-FW-L6SXCFJPVIESCSOG # handle 208
		ip saddr 172.16.0.121  counter packets 0 bytes 0 jump KUBE-POD-FW-L6SXCFJPVIESCSOG # handle 212
		 meta mark & 0x00020000 == 0x00020000 counter packets 0 bytes 0 accept # handle 220
	}

	chain KUBE-ROUTER-SERVICES { # handle 10
		 xt match set counter packets 0 bytes 0 accept # handle 37
		meta l4proto icmp  icmp type echo-request counter packets 0 bytes 0 accept # handle 38
		meta l4proto icmp  icmp type destination-unreachable counter packets 0 bytes 0 accept # handle 39
		meta l4proto icmp  icmp type time-exceeded counter packets 0 bytes 0 accept # handle 40
		 xt match set counter packets 0 bytes 0 reject # handle 41
	}

	chain KUBE-POD-FW-LE5LZWKU2IJQGP55 { # handle 11
		 ct state related,established counter packets 0 bytes 0 accept # handle 46
		 ct state invalid counter packets 0 bytes 0 drop # handle 45
		ip daddr 172.16.0.120  fib saddr type local counter packets 0 bytes 0 accept # handle 44
		ip saddr 172.16.0.120  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 43
		ip daddr 172.16.0.120  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 42
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 54
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 55
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 56
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 57
	}

	chain KUBE-POD-FW-QPU2W5ESVBQSSBDN { # handle 12
		 ct state related,established counter packets 0 bytes 0 accept # handle 62
		 ct state invalid counter packets 0 bytes 0 drop # handle 61
		ip daddr 172.16.0.119  fib saddr type local counter packets 0 bytes 0 accept # handle 60
		ip saddr 172.16.0.119  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 59
		ip daddr 172.16.0.119  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 58
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 70
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 71
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 72
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 73
	}

	chain KUBE-POD-FW-DL6RRW35YLVNK5GU { # handle 13
		 ct state related,established counter packets 0 bytes 0 accept # handle 78
		 ct state invalid counter packets 0 bytes 0 drop # handle 77
		ip daddr 172.16.0.124  fib saddr type local counter packets 0 bytes 0 accept # handle 76
		ip saddr 172.16.0.124  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 75
		ip daddr 172.16.0.124  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 74
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 86
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 87
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 88
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 89
	}

	chain KUBE-POD-FW-MFTVVYWZOAS7ZPUM { # handle 14
		 ct state related,established counter packets 0 bytes 0 accept # handle 94
		 ct state invalid counter packets 0 bytes 0 drop # handle 93
		ip daddr 172.16.0.117  fib saddr type local counter packets 0 bytes 0 accept # handle 92
		ip saddr 172.16.0.117  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 91
		ip daddr 172.16.0.117  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 90
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 102
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 103
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 104
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 105
	}

	chain KUBE-POD-FW-DGKZECO3T23G2CBS { # handle 15
		 ct state related,established counter packets 0 bytes 0 accept # handle 110
		 ct state invalid counter packets 0 bytes 0 drop # handle 109
		ip daddr 172.16.0.126  fib saddr type local counter packets 0 bytes 0 accept # handle 108
		ip saddr 172.16.0.126  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 107
		ip daddr 172.16.0.126  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 106
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 118
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 119
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 120
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 121
	}

	chain KUBE-POD-FW-WHCP4MW4QGHMMX6Z { # handle 16
		 ct state related,established counter packets 0 bytes 0 accept # handle 126
		 ct state invalid counter packets 0 bytes 0 drop # handle 125
		ip daddr 172.16.0.127  fib saddr type local counter packets 0 bytes 0 accept # handle 124
		ip saddr 172.16.0.127  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 123
		ip daddr 172.16.0.127  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 122
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 134
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 135
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 136
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 137
	}

	chain KUBE-POD-FW-MMWYLNL2E35IPJAO { # handle 17
		 ct state related,established counter packets 0 bytes 0 accept # handle 142
		 ct state invalid counter packets 0 bytes 0 drop # handle 141
		ip daddr 172.16.0.122  fib saddr type local counter packets 0 bytes 0 accept # handle 140
		ip saddr 172.16.0.122  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 139
		ip daddr 172.16.0.122  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 138
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 150
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 151
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 152
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 153
	}

	chain KUBE-POD-FW-VGHTP2DZIM77WHCD { # handle 18
		 ct state related,established counter packets 0 bytes 0 accept # handle 158
		 ct state invalid counter packets 0 bytes 0 drop # handle 157
		ip daddr 172.16.0.118  fib saddr type local counter packets 0 bytes 0 accept # handle 156
		ip saddr 172.16.0.118  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 155
		ip daddr 172.16.0.118  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 154
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 166
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 167
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 168
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 169
	}

	chain KUBE-POD-FW-PCB4Z6O5ACZMMTYD { # handle 19
		 ct state related,established counter packets 9 bytes 10473 accept # handle 174
		 ct state invalid counter packets 0 bytes 0 drop # handle 173
		ip daddr 172.16.0.123  fib saddr type local counter packets 0 bytes 0 accept # handle 172
		ip saddr 172.16.0.123  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 171
		ip daddr 172.16.0.123  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 170
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 182
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 183
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 184
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 185
	}

	chain KUBE-POD-FW-PF24KOHXICEOBQJ5 { # handle 20
		 ct state related,established counter packets 0 bytes 0 accept # handle 190
		 ct state invalid counter packets 0 bytes 0 drop # handle 189
		ip daddr 172.16.0.125  fib saddr type local counter packets 0 bytes 0 accept # handle 188
		ip saddr 172.16.0.125  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 187
		ip daddr 172.16.0.125  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 186
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 198
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 199
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 200
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 201
	}

	chain KUBE-POD-FW-L6SXCFJPVIESCSOG { # handle 21
		 ct state related,established counter packets 0 bytes 0 accept # handle 206
		 ct state invalid counter packets 0 bytes 0 drop # handle 205
		ip daddr 172.16.0.121  fib saddr type local counter packets 0 bytes 0 accept # handle 204
		ip saddr 172.16.0.121  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 203
		ip daddr 172.16.0.121  counter packets 0 bytes 0 jump KUBE-NWPLCY-DEFAULT # handle 202
		 meta mark & 0x00010000 != 0x00010000 limit rate 10/minute burst 10 packets counter packets 0 bytes 0 log group 100 # handle 214
		 meta mark & 0x00010000 != 0x00010000 counter packets 0 bytes 0 reject # handle 215
		counter packets 0 bytes 0 meta mark set mark and 0xfffeffff # handle 216
		 counter packets 0 bytes 0 meta mark set mark or 0x20000 # handle 217
	}
}
