Created
July 24, 2018 15:09
-
-
Save cpressland/9745d9e2fd9547c06e84b6ba11aede5e to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Generated by iptables-save v1.6.0 on Tue Jul 24 15:09:10 2018 | |
| *filter | |
| :INPUT ACCEPT [5488:1955002] | |
| :FORWARD ACCEPT [0:0] | |
| :OUTPUT ACCEPT [5211:1641027] | |
| :KUBE-EXTERNAL-SERVICES - [0:0] | |
| :KUBE-FIREWALL - [0:0] | |
| :KUBE-FORWARD - [0:0] | |
| :KUBE-SERVICES - [0:0] | |
| :WEAVE-NPC - [0:0] | |
| :WEAVE-NPC-DEFAULT - [0:0] | |
| :WEAVE-NPC-INGRESS - [0:0] | |
| -A INPUT -j KUBE-FIREWALL | |
| -A INPUT -m conntrack --ctstate NEW -m comment --comment "kubernetes externally-visible service portals" -j KUBE-EXTERNAL-SERVICES | |
| -A FORWARD -o weave -m comment --comment "NOTE: this must go before \'-j KUBE-FORWARD\'" -j WEAVE-NPC | |
| -A FORWARD -o weave -m state --state NEW -j NFLOG --nflog-group 86 | |
| -A FORWARD -o weave -j DROP | |
| -A FORWARD -i weave ! -o weave -j ACCEPT | |
| -A FORWARD -o weave -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT | |
| -A FORWARD -m comment --comment "kubernetes forwarding rules" -j KUBE-FORWARD | |
| -A OUTPUT -j KUBE-FIREWALL | |
| -A OUTPUT -m conntrack --ctstate NEW -m comment --comment "kubernetes service portals" -j KUBE-SERVICES | |
| -A KUBE-FIREWALL -m comment --comment "kubernetes firewall for dropping marked packets" -m mark --mark 0x8000/0x8000 -j DROP | |
| -A KUBE-FORWARD -m comment --comment "kubernetes forwarding rules" -m mark --mark 0x4000/0x4000 -j ACCEPT | |
| -A KUBE-FORWARD -s 10.32.0.0/12 -m comment --comment "kubernetes forwarding conntrack pod source rule" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT | |
| -A KUBE-FORWARD -d 10.32.0.0/12 -m comment --comment "kubernetes forwarding conntrack pod destination rule" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT | |
| -A WEAVE-NPC -m state --state RELATED,ESTABLISHED -j ACCEPT | |
| -A WEAVE-NPC -d 224.0.0.0/4 -j ACCEPT | |
| -A WEAVE-NPC -m state --state NEW -j WEAVE-NPC-DEFAULT | |
| -A WEAVE-NPC -m state --state NEW -j WEAVE-NPC-INGRESS | |
| -A WEAVE-NPC -m set ! --match-set weave-local-pods dst -j ACCEPT | |
| -A WEAVE-NPC-DEFAULT -m set --match-set weave-?b%zl9GIe0AET1(QI^7NWe*fO dst -m comment --comment "DefaultAllow isolation for namespace: kube-system" -j ACCEPT | |
| -A WEAVE-NPC-DEFAULT -m set --match-set weave-E.1.0W^NGSp]0_t5WwH/]gX@L dst -m comment --comment "DefaultAllow isolation for namespace: default" -j ACCEPT | |
| -A WEAVE-NPC-DEFAULT -m set --match-set weave-(OFih%RP%?c@0BPw;F;Cvf!oG dst -m comment --comment "DefaultAllow isolation for namespace: ingress-nginx" -j ACCEPT | |
| -A WEAVE-NPC-DEFAULT -m set --match-set weave-0EHD/vdN#O4]V?o4Tx7kS;APH dst -m comment --comment "DefaultAllow isolation for namespace: kube-public" -j ACCEPT | |
| -A WEAVE-NPC-INGRESS -p tcp -m set --match-set weave-12L/o(A=019_2HgD+C5jOQBYT src -m set --match-set weave-wRd0kG+r;C=JI:)Pj6b5!r?Ly dst -m tcp --dport 5432 -m comment --comment "pods: namespace: default, selector: olympus-db-postgresql-client=true -> pods: namespace: default, selector: app=postgresql,release=olympus-db" -j ACCEPT | |
| -A WEAVE-NPC-INGRESS -p tcp -m set --match-set weave-wRd0kG+r;C=JI:)Pj6b5!r?Ly dst -m tcp --dport 9187 -m comment --comment "anywhere -> pods: namespace: default, selector: app=postgresql,release=olympus-db" -j ACCEPT | |
| COMMIT | |
| # Completed on Tue Jul 24 15:09:10 2018 | |
| # Generated by iptables-save v1.6.0 on Tue Jul 24 15:09:10 2018 | |
| *nat | |
| :PREROUTING ACCEPT [333:34633] | |
| :INPUT ACCEPT [182:22497] | |
| :OUTPUT ACCEPT [276:36787] | |
| :POSTROUTING ACCEPT [431:48931] | |
| :KUBE-MARK-DROP - [0:0] | |
| :KUBE-MARK-MASQ - [0:0] | |
| :KUBE-NODEPORTS - [0:0] | |
| :KUBE-POSTROUTING - [0:0] | |
| :KUBE-SEP-23EM4XK5QT7GSZ2D - [0:0] | |
| :KUBE-SEP-2CAZ3XBOSOXTHDUS - [0:0] | |
| :KUBE-SEP-2FAT52RNT6X36RKC - [0:0] | |
| :KUBE-SEP-2HQ5KOWWC52E2LLT - [0:0] | |
| :KUBE-SEP-2WW32B5QKIDLZ7VJ - [0:0] | |
| :KUBE-SEP-3W5QQUT5QGLCDCC7 - [0:0] | |
| :KUBE-SEP-42SCO54T5R2TNJ6N - [0:0] | |
| :KUBE-SEP-4ENNMF5AUSUC4NC7 - [0:0] | |
| :KUBE-SEP-4N4WPX5E6VZ3W33P - [0:0] | |
| :KUBE-SEP-4ZOHBKWCX7YHNBUR - [0:0] | |
| :KUBE-SEP-566OMSFT5INV24CS - [0:0] | |
| :KUBE-SEP-57R634FT2Z2557SN - [0:0] | |
| :KUBE-SEP-5VCDBUZPBCYPOXB4 - [0:0] | |
| :KUBE-SEP-5ZRU6OOX4RSKQRYV - [0:0] | |
| :KUBE-SEP-64JP6TJDTAQBZDCQ - [0:0] | |
| :KUBE-SEP-65SRNQYIWZQJRIBW - [0:0] | |
| :KUBE-SEP-6L47JAL3LE3CTQBA - [0:0] | |
| :KUBE-SEP-6O3BAYJHCS6CSOWR - [0:0] | |
| :KUBE-SEP-6V2UNCHVFNQMMWCG - [0:0] | |
| :KUBE-SEP-76PVWFX4JYWLDMN6 - [0:0] | |
| :KUBE-SEP-7MKTCGZVVOCDRRG4 - [0:0] | |
| :KUBE-SEP-A3OQWOZUGESQFUQG - [0:0] | |
| :KUBE-SEP-A6G4Z7LLNWMW5BAK - [0:0] | |
| :KUBE-SEP-AJA3HF2KHT5E3FKM - [0:0] | |
| :KUBE-SEP-AMHKVZ7QN5Q5T6YR - [0:0] | |
| :KUBE-SEP-ANR76H4XIU2BIYBX - [0:0] | |
| :KUBE-SEP-B42FYSAUMMTDA52G - [0:0] | |
| :KUBE-SEP-BIIWN27ZF2DSVZ4S - [0:0] | |
| :KUBE-SEP-BSGJHHBN6RKTGYGF - [0:0] | |
| :KUBE-SEP-CBBOSMRS3B3SWUYB - [0:0] | |
| :KUBE-SEP-CCOA5AO7MFHYACD2 - [0:0] | |
| :KUBE-SEP-CG3YGUUJJ72XNALU - [0:0] | |
| :KUBE-SEP-CGOBHC6VQ6C6IT25 - [0:0] | |
| :KUBE-SEP-CI6T5MFJDX44YH7M - [0:0] | |
| :KUBE-SEP-CYDJE7RPHEEQYYW6 - [0:0] | |
| :KUBE-SEP-DD5COG25HKXKGLKQ - [0:0] | |
| :KUBE-SEP-DVXTCFQO3QCIXYZU - [0:0] | |
| :KUBE-SEP-E3H3UEPABPQYPO3H - [0:0] | |
| :KUBE-SEP-EI65V2ILECVXWDW3 - [0:0] | |
| :KUBE-SEP-EIKDO5BV2MIU56TS - [0:0] | |
| :KUBE-SEP-ESRCT6VSPUSFSEVY - [0:0] | |
| :KUBE-SEP-EU2SAOSV3VTCGEE3 - [0:0] | |
| :KUBE-SEP-EVZG2XZ2ETL264VG - [0:0] | |
| :KUBE-SEP-F4DKCVJUKCUE5KYM - [0:0] | |
| :KUBE-SEP-FRL7NSX6AAGTZ645 - [0:0] | |
| :KUBE-SEP-G7IE2QENOPPDVAYI - [0:0] | |
| :KUBE-SEP-GCG7CW6SEC65GFSS - [0:0] | |
| :KUBE-SEP-GFXEAZECXKCHX564 - [0:0] | |
| :KUBE-SEP-GUIKSO726UDZ76I7 - [0:0] | |
| :KUBE-SEP-HD256TR25FCNCQXZ - [0:0] | |
| :KUBE-SEP-HOWHXCJGSYYWQN56 - [0:0] | |
| :KUBE-SEP-HP66BR6I3WM7NJLB - [0:0] | |
| :KUBE-SEP-HS4WO4WW7BIQMMNJ - [0:0] | |
| :KUBE-SEP-I5YLKS5AAJT7ZO7Y - [0:0] | |
| :KUBE-SEP-I6DWOAFD43V5GD7M - [0:0] | |
| :KUBE-SEP-IEZMQH3ZID45O77I - [0:0] | |
| :KUBE-SEP-IKJYB5DCZZNIKN7K - [0:0] | |
| :KUBE-SEP-IKQTLUXFHRYCMMOE - [0:0] | |
| :KUBE-SEP-IS6DEF5OTL5CWGDH - [0:0] | |
| :KUBE-SEP-IW7IUAPJTDZXRDMO - [0:0] | |
| :KUBE-SEP-J7AYD26JUJ224NUV - [0:0] | |
| :KUBE-SEP-J7O36QDEPUOJHTJB - [0:0] | |
| :KUBE-SEP-JE3SUB6G5LERMY2N - [0:0] | |
| :KUBE-SEP-JRU5FXM6KBF5P74Y - [0:0] | |
| :KUBE-SEP-K2R5UX7UEURKLVKF - [0:0] | |
| :KUBE-SEP-KKOOZIZDQASJSTOB - [0:0] | |
| :KUBE-SEP-LNNVLCCFQORZSAQE - [0:0] | |
| :KUBE-SEP-LQ2WTJAZ3REXHQP7 - [0:0] | |
| :KUBE-SEP-LS7BC5LF4YRCJ676 - [0:0] | |
| :KUBE-SEP-LWA2FK2CH2BUTGVL - [0:0] | |
| :KUBE-SEP-LZFSZU4SAKE7CYEB - [0:0] | |
| :KUBE-SEP-MDAOJ4DZ6E7EHC5W - [0:0] | |
| :KUBE-SEP-MHAVQ2IHGFAMA342 - [0:0] | |
| :KUBE-SEP-MHEZVDHJCT5RUNXX - [0:0] | |
| :KUBE-SEP-MZNSYBCWA7WXMPRU - [0:0] | |
| :KUBE-SEP-NU3C7BB2OGGXYUDR - [0:0] | |
| :KUBE-SEP-O2LKIUCO6FSZB3LK - [0:0] | |
| :KUBE-SEP-OES6J5L6TGOYSQA7 - [0:0] | |
| :KUBE-SEP-ONFRC47Q42TUVXMW - [0:0] | |
| :KUBE-SEP-OOF3M6MAX7HCZW7R - [0:0] | |
| :KUBE-SEP-OXKDPTSATJVTDP7N - [0:0] | |
| :KUBE-SEP-OZC53AZUFDCKRRUO - [0:0] | |
| :KUBE-SEP-PKI3Q6UJVA5HQU5J - [0:0] | |
| :KUBE-SEP-PLBDLG5RFRKTZ2DN - [0:0] | |
| :KUBE-SEP-PNXAUPIVQLGTG6Z7 - [0:0] | |
| :KUBE-SEP-PP4FEOBKCYJWDVDM - [0:0] | |
| :KUBE-SEP-PRUXSJU4XFED5EKL - [0:0] | |
| :KUBE-SEP-PT63DZL6DKU6BS76 - [0:0] | |
| :KUBE-SEP-QQLRQLFRRU2ZD7BH - [0:0] | |
| :KUBE-SEP-R6EDFS5QLTIZHEEM - [0:0] | |
| :KUBE-SEP-RGAQEXSE77WUAHKO - [0:0] | |
| :KUBE-SEP-RLQRMAVAKSMMHKMN - [0:0] | |
| :KUBE-SEP-RSXJ5TTYMG4HP5MT - [0:0] | |
| :KUBE-SEP-RWAZQ6S4FEG3CEBD - [0:0] | |
| :KUBE-SEP-SLJ4MTANYKGWP7HU - [0:0] | |
| :KUBE-SEP-T37MFVOPG7QYBQB5 - [0:0] | |
| :KUBE-SEP-T7TQVXKNRZBKMFJ4 - [0:0] | |
| :KUBE-SEP-TFELCJN3T4FY3XWW - [0:0] | |
| :KUBE-SEP-TFJZ45TMWNDE3ZKY - [0:0] | |
| :KUBE-SEP-TPKNHQEGJNLRDV3V - [0:0] | |
| :KUBE-SEP-U3ISNHNR3O37ULUV - [0:0] | |
| :KUBE-SEP-UEAKXORIEHKUONDL - [0:0] | |
| :KUBE-SEP-UHRVGQA3F5DHITMI - [0:0] | |
| :KUBE-SEP-UTRJ65UG43XGI27B - [0:0] | |
| :KUBE-SEP-UZIL2XX5P43F7KY7 - [0:0] | |
| :KUBE-SEP-VA5PUEV67P4GKSXG - [0:0] | |
| :KUBE-SEP-VIR6SGLXYGK6BPEZ - [0:0] | |
| :KUBE-SEP-VRWXI5AICRPOEXEW - [0:0] | |
| :KUBE-SEP-WDSOJXMMJCZPPSGX - [0:0] | |
| :KUBE-SEP-XFIEG2SM5QU2MLWK - [0:0] | |
| :KUBE-SEP-XQOORX625CS65SV2 - [0:0] | |
| :KUBE-SEP-Y6QTZMVTKLDURPJE - [0:0] | |
| :KUBE-SEP-YDXSCJK5GGYHGV3E - [0:0] | |
| :KUBE-SEP-YUNWZR2QI3LWJIVZ - [0:0] | |
| :KUBE-SEP-Z2SYITAKLEJVODWQ - [0:0] | |
| :KUBE-SEP-ZBBBGPPGHBTZNNU2 - [0:0] | |
| :KUBE-SEP-ZLDJB7BYW3KPLHIX - [0:0] | |
| :KUBE-SEP-ZWKTHVOSJXRAFACE - [0:0] | |
| :KUBE-SERVICES - [0:0] | |
| :KUBE-SVC-2C35TQCS7S5PMMKX - [0:0] | |
| :KUBE-SVC-2FGMBP2JGGZTMU6U - [0:0] | |
| :KUBE-SVC-2VSVH4IVBJQG5O7Q - [0:0] | |
| :KUBE-SVC-33NWYKCWNIAPHUE7 - [0:0] | |
| :KUBE-SVC-4RFZCZCEKORSOTRO - [0:0] | |
| :KUBE-SVC-4W2RFG5RLJX34RCC - [0:0] | |
| :KUBE-SVC-5DUUOMNUWS6IYFFO - [0:0] | |
| :KUBE-SVC-676NMKB4LX3VXS6Q - [0:0] | |
| :KUBE-SVC-7S3EAIQKNIL75FQR - [0:0] | |
| :KUBE-SVC-B7JLY2KJYDPHKXGY - [0:0] | |
| :KUBE-SVC-ERIFXISQEP7F7OF4 - [0:0] | |
| :KUBE-SVC-ET43IMG646KQ4PJE - [0:0] | |
| :KUBE-SVC-FR76EFT5JH3VYFCM - [0:0] | |
| :KUBE-SVC-GZS2473WDVDYWOSA - [0:0] | |
| :KUBE-SVC-HFVSGUDEKZLWZEG5 - [0:0] | |
| :KUBE-SVC-HQST2FPEQ72D7VOL - [0:0] | |
| :KUBE-SVC-I7TGNIU6JERYTRFQ - [0:0] | |
| :KUBE-SVC-IJ6MPYU2ZZ53H5XQ - [0:0] | |
| :KUBE-SVC-J4PGGZ6AUXZWNA2B - [0:0] | |
| :KUBE-SVC-K7J76NXP7AUZVFGS - [0:0] | |
| :KUBE-SVC-LC5QY66VUV2HJ6WZ - [0:0] | |
| :KUBE-SVC-LGLF3LQ6U7LJGNH7 - [0:0] | |
| :KUBE-SVC-LRZBKLYTWRGQ7WNB - [0:0] | |
| :KUBE-SVC-MEX75BADDJ5ASQ6C - [0:0] | |
| :KUBE-SVC-MWVH77DHIMA4R3LZ - [0:0] | |
| :KUBE-SVC-N3AMT2X5V6XTDNV7 - [0:0] | |
| :KUBE-SVC-NC5CRGHR4SBALHCS - [0:0] | |
| :KUBE-SVC-NPX46M4PTMTKRN6Y - [0:0] | |
| :KUBE-SVC-OOXZ4UPTJ6SI3OFX - [0:0] | |
| :KUBE-SVC-PHL2ULSQRA7QPP7L - [0:0] | |
| :KUBE-SVC-PP4WXCIFVG3XOVS5 - [0:0] | |
| :KUBE-SVC-REQ4FPVT7WYF4VLA - [0:0] | |
| :KUBE-SVC-SFKBQOYF2BMSJKLL - [0:0] | |
| :KUBE-SVC-T7RXRCCAUHPLG5NX - [0:0] | |
| :KUBE-SVC-TCOU7JCQXEZGVUNU - [0:0] | |
| :KUBE-SVC-VJKEPSJP3F5V7BDZ - [0:0] | |
| :KUBE-SVC-YZNT6P2AN4QFRK7C - [0:0] | |
| :KUBE-SVC-ZUXUYYHGNKX5XZHV - [0:0] | |
| :WEAVE - [0:0] | |
| -A PREROUTING -m comment --comment "kubernetes service portals" -j KUBE-SERVICES | |
| -A OUTPUT -m comment --comment "kubernetes service portals" -j KUBE-SERVICES | |
| -A POSTROUTING -m comment --comment "kubernetes postrouting rules" -j KUBE-POSTROUTING | |
| -A POSTROUTING -j WEAVE | |
| -A KUBE-MARK-DROP -j MARK --set-xmark 0x8000/0x8000 | |
| -A KUBE-MARK-MASQ -j MARK --set-xmark 0x4000/0x4000 | |
| -A KUBE-NODEPORTS -p tcp -m comment --comment "ingress-nginx/ingress-nginx:http" -m tcp --dport 32000 -j KUBE-MARK-MASQ | |
| -A KUBE-NODEPORTS -p tcp -m comment --comment "ingress-nginx/ingress-nginx:http" -m tcp --dport 32000 -j KUBE-SVC-REQ4FPVT7WYF4VLA | |
| -A KUBE-NODEPORTS -p tcp -m comment --comment "default/graylog-syslog-tcp:syslog-tcp" -m tcp --dport 32767 -j KUBE-MARK-MASQ | |
| -A KUBE-NODEPORTS -p tcp -m comment --comment "default/graylog-syslog-tcp:syslog-tcp" -m tcp --dport 32767 -j KUBE-SVC-B7JLY2KJYDPHKXGY | |
| -A KUBE-NODEPORTS -p tcp -m comment --comment "default/graylog-gelf-tcp:syslog-tcp" -m tcp --dport 32766 -j KUBE-MARK-MASQ | |
| -A KUBE-NODEPORTS -p tcp -m comment --comment "default/graylog-gelf-tcp:syslog-tcp" -m tcp --dport 32766 -j KUBE-SVC-HQST2FPEQ72D7VOL | |
| -A KUBE-POSTROUTING -m comment --comment "kubernetes service traffic requiring SNAT" -m mark --mark 0x4000/0x4000 -j MASQUERADE | |
| -A KUBE-SEP-23EM4XK5QT7GSZ2D -s 10.32.0.27/32 -m comment --comment "default/metis:nginx" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-23EM4XK5QT7GSZ2D -p tcp -m comment --comment "default/metis:nginx" -m tcp -j DNAT --to-destination 10.32.0.27:9000 | |
| -A KUBE-SEP-2CAZ3XBOSOXTHDUS -s 10.43.0.7/32 -m comment --comment "default/hades:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-2CAZ3XBOSOXTHDUS -p tcp -m comment --comment "default/hades:uwsgi" -m tcp -j DNAT --to-destination 10.43.0.7:9000 | |
| -A KUBE-SEP-2FAT52RNT6X36RKC -s 10.32.0.31/32 -m comment --comment "default/hecate:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-2FAT52RNT6X36RKC -p tcp -m comment --comment "default/hecate:uwsgi" -m tcp -j DNAT --to-destination 10.32.0.31:9000 | |
| -A KUBE-SEP-2HQ5KOWWC52E2LLT -s 10.34.128.8/32 -m comment --comment "default/my360-api-user:" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-2HQ5KOWWC52E2LLT -p tcp -m comment --comment "default/my360-api-user:" -m tcp -j DNAT --to-destination 10.34.128.8:9000 | |
| -A KUBE-SEP-2WW32B5QKIDLZ7VJ -s 10.33.0.4/32 -m comment --comment "default/redis-slave:redis" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-2WW32B5QKIDLZ7VJ -p tcp -m comment --comment "default/redis-slave:redis" -m tcp -j DNAT --to-destination 10.33.0.4:6379 | |
| -A KUBE-SEP-3W5QQUT5QGLCDCC7 -s 10.33.0.29/32 -m comment --comment "default/hermes:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-3W5QQUT5QGLCDCC7 -p tcp -m comment --comment "default/hermes:uwsgi" -m tcp -j DNAT --to-destination 10.33.0.29:9000 | |
| -A KUBE-SEP-42SCO54T5R2TNJ6N -s 10.32.0.6/32 -m comment --comment "default/lethe:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-42SCO54T5R2TNJ6N -p tcp -m comment --comment "default/lethe:uwsgi" -m tcp -j DNAT --to-destination 10.32.0.6:9000 | |
| -A KUBE-SEP-4ENNMF5AUSUC4NC7 -s 10.33.0.11/32 -m comment --comment "default/lethe:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-4ENNMF5AUSUC4NC7 -p tcp -m comment --comment "default/lethe:uwsgi" -m tcp -j DNAT --to-destination 10.33.0.11:9000 | |
| -A KUBE-SEP-4N4WPX5E6VZ3W33P -s 10.2.2.6/32 -m comment --comment "default/kubernetes:https" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-4N4WPX5E6VZ3W33P -p tcp -m comment --comment "default/kubernetes:https" -m recent --set --name KUBE-SEP-4N4WPX5E6VZ3W33P --mask 255.255.255.255 --rsource -m tcp -j DNAT --to-destination 10.2.2.6:6443 | |
| -A KUBE-SEP-4ZOHBKWCX7YHNBUR -s 10.33.0.17/32 -m comment --comment "default/graylog-gelf-udp:aphrodite-udp" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-4ZOHBKWCX7YHNBUR -p udp -m comment --comment "default/graylog-gelf-udp:aphrodite-udp" -m udp -j DNAT --to-destination 10.33.0.17:32765 | |
| -A KUBE-SEP-566OMSFT5INV24CS -s 10.33.0.12/32 -m comment --comment "default/hades:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-566OMSFT5INV24CS -p tcp -m comment --comment "default/hades:uwsgi" -m tcp -j DNAT --to-destination 10.33.0.12:9000 | |
| -A KUBE-SEP-57R634FT2Z2557SN -s 10.32.0.24/32 -m comment --comment "default/zeus:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-57R634FT2Z2557SN -p tcp -m comment --comment "default/zeus:uwsgi" -m tcp -j DNAT --to-destination 10.32.0.24:9000 | |
| -A KUBE-SEP-5VCDBUZPBCYPOXB4 -s 10.33.0.9/32 -m comment --comment "default/rabbitmq-rabbitmq-ha:http" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-5VCDBUZPBCYPOXB4 -p tcp -m comment --comment "default/rabbitmq-rabbitmq-ha:http" -m tcp -j DNAT --to-destination 10.33.0.9:15672 | |
| -A KUBE-SEP-5ZRU6OOX4RSKQRYV -s 10.34.128.4/32 -m comment --comment "default/wordpress:wordpress" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-5ZRU6OOX4RSKQRYV -p tcp -m comment --comment "default/wordpress:wordpress" -m tcp -j DNAT --to-destination 10.34.128.4:80 | |
| -A KUBE-SEP-64JP6TJDTAQBZDCQ -s 10.38.0.6/32 -m comment --comment "default/sentry-redis:redis" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-64JP6TJDTAQBZDCQ -p tcp -m comment --comment "default/sentry-redis:redis" -m tcp -j DNAT --to-destination 10.38.0.6:6379 | |
| -A KUBE-SEP-65SRNQYIWZQJRIBW -s 10.32.0.29/32 -m comment --comment "default/midas:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-65SRNQYIWZQJRIBW -p tcp -m comment --comment "default/midas:uwsgi" -m tcp -j DNAT --to-destination 10.32.0.29:9000 | |
| -A KUBE-SEP-6L47JAL3LE3CTQBA -s 10.32.0.4/32 -m comment --comment "default/prod-netdata-dashboard:" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-6L47JAL3LE3CTQBA -p tcp -m comment --comment "default/prod-netdata-dashboard:" -m tcp -j DNAT --to-destination 10.32.0.4:80 | |
| -A KUBE-SEP-6O3BAYJHCS6CSOWR -s 10.41.0.9/32 -m comment --comment "default/my360-api-rewards:" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-6O3BAYJHCS6CSOWR -p tcp -m comment --comment "default/my360-api-rewards:" -m tcp -j DNAT --to-destination 10.41.0.9:9000 | |
| -A KUBE-SEP-6V2UNCHVFNQMMWCG -s 10.41.0.14/32 -m comment --comment "default/rabbitmq-rabbitmq-ha:amqp" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-6V2UNCHVFNQMMWCG -p tcp -m comment --comment "default/rabbitmq-rabbitmq-ha:amqp" -m tcp -j DNAT --to-destination 10.41.0.14:5672 | |
| -A KUBE-SEP-76PVWFX4JYWLDMN6 -s 10.41.0.6/32 -m comment --comment "default/lethe:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-76PVWFX4JYWLDMN6 -p tcp -m comment --comment "default/lethe:uwsgi" -m tcp -j DNAT --to-destination 10.41.0.6:9000 | |
| -A KUBE-SEP-7MKTCGZVVOCDRRG4 -s 10.34.128.28/32 -m comment --comment "default/hecate:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-7MKTCGZVVOCDRRG4 -p tcp -m comment --comment "default/hecate:uwsgi" -m tcp -j DNAT --to-destination 10.34.128.28:9000 | |
| -A KUBE-SEP-A3OQWOZUGESQFUQG -s 10.32.0.11/32 -m comment --comment "default/sentry-postgresql:postgresql" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-A3OQWOZUGESQFUQG -p tcp -m comment --comment "default/sentry-postgresql:postgresql" -m tcp -j DNAT --to-destination 10.32.0.11:5432 | |
| -A KUBE-SEP-A6G4Z7LLNWMW5BAK -s 10.41.0.28/32 -m comment --comment "default/zeus:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-A6G4Z7LLNWMW5BAK -p tcp -m comment --comment "default/zeus:uwsgi" -m tcp -j DNAT --to-destination 10.41.0.28:9000 | |
| -A KUBE-SEP-AJA3HF2KHT5E3FKM -s 10.34.128.6/32 -m comment --comment "default/my360-files:http" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-AJA3HF2KHT5E3FKM -p tcp -m comment --comment "default/my360-files:http" -m tcp -j DNAT --to-destination 10.34.128.6:80 | |
| -A KUBE-SEP-AMHKVZ7QN5Q5T6YR -s 10.36.0.0/32 -m comment --comment "default/redis-master:redis" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-AMHKVZ7QN5Q5T6YR -p tcp -m comment --comment "default/redis-master:redis" -m tcp -j DNAT --to-destination 10.36.0.0:6379 | |
| -A KUBE-SEP-ANR76H4XIU2BIYBX -s 10.41.0.8/32 -m comment --comment "default/lethe:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-ANR76H4XIU2BIYBX -p tcp -m comment --comment "default/lethe:uwsgi" -m tcp -j DNAT --to-destination 10.41.0.8:9000 | |
| -A KUBE-SEP-B42FYSAUMMTDA52G -s 10.43.0.19/32 -m comment --comment "default/midas:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-B42FYSAUMMTDA52G -p tcp -m comment --comment "default/midas:uwsgi" -m tcp -j DNAT --to-destination 10.43.0.19:9000 | |
| -A KUBE-SEP-BIIWN27ZF2DSVZ4S -s 10.33.0.28/32 -m comment --comment "default/hermes:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-BIIWN27ZF2DSVZ4S -p tcp -m comment --comment "default/hermes:uwsgi" -m tcp -j DNAT --to-destination 10.33.0.28:9000 | |
| -A KUBE-SEP-BSGJHHBN6RKTGYGF -s 10.34.128.13/32 -m comment --comment "default/hades:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-BSGJHHBN6RKTGYGF -p tcp -m comment --comment "default/hades:uwsgi" -m tcp -j DNAT --to-destination 10.34.128.13:9000 | |
| -A KUBE-SEP-CBBOSMRS3B3SWUYB -s 10.33.0.42/32 -m comment --comment "default/metis:nginx" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-CBBOSMRS3B3SWUYB -p tcp -m comment --comment "default/metis:nginx" -m tcp -j DNAT --to-destination 10.33.0.42:9000 | |
| -A KUBE-SEP-CCOA5AO7MFHYACD2 -s 10.41.0.20/32 -m comment --comment "default/hades:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-CCOA5AO7MFHYACD2 -p tcp -m comment --comment "default/hades:uwsgi" -m tcp -j DNAT --to-destination 10.41.0.20:9000 | |
| -A KUBE-SEP-CG3YGUUJJ72XNALU -s 10.33.0.17/32 -m comment --comment "default/graylog-gelf-udp:docker-udp" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-CG3YGUUJJ72XNALU -p udp -m comment --comment "default/graylog-gelf-udp:docker-udp" -m udp -j DNAT --to-destination 10.33.0.17:32766 | |
| -A KUBE-SEP-CGOBHC6VQ6C6IT25 -s 10.2.2.7/32 -m comment --comment "default/kubernetes:https" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-CGOBHC6VQ6C6IT25 -p tcp -m comment --comment "default/kubernetes:https" -m recent --set --name KUBE-SEP-CGOBHC6VQ6C6IT25 --mask 255.255.255.255 --rsource -m tcp -j DNAT --to-destination 10.2.2.7:6443 | |
| -A KUBE-SEP-CI6T5MFJDX44YH7M -s 10.44.0.5/32 -m comment --comment "default/midas:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-CI6T5MFJDX44YH7M -p tcp -m comment --comment "default/midas:uwsgi" -m tcp -j DNAT --to-destination 10.44.0.5:9000 | |
| -A KUBE-SEP-CYDJE7RPHEEQYYW6 -s 10.34.128.26/32 -m comment --comment "default/midas:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-CYDJE7RPHEEQYYW6 -p tcp -m comment --comment "default/midas:uwsgi" -m tcp -j DNAT --to-destination 10.34.128.26:9000 | |
| -A KUBE-SEP-DD5COG25HKXKGLKQ -s 10.33.0.17/32 -m comment --comment "default/graylog-syslog-tcp:syslog-tcp" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-DD5COG25HKXKGLKQ -p tcp -m comment --comment "default/graylog-syslog-tcp:syslog-tcp" -m tcp -j DNAT --to-destination 10.33.0.17:32767 | |
| -A KUBE-SEP-DVXTCFQO3QCIXYZU -s 10.34.128.21/32 -m comment --comment "default/zeus:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-DVXTCFQO3QCIXYZU -p tcp -m comment --comment "default/zeus:uwsgi" -m tcp -j DNAT --to-destination 10.34.128.21:9000 | |
| -A KUBE-SEP-E3H3UEPABPQYPO3H -s 10.42.0.0/32 -m comment --comment "ingress-nginx/default-http-backend:" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-E3H3UEPABPQYPO3H -p tcp -m comment --comment "ingress-nginx/default-http-backend:" -m tcp -j DNAT --to-destination 10.42.0.0:8080 | |
| -A KUBE-SEP-EI65V2ILECVXWDW3 -s 10.41.0.29/32 -m comment --comment "default/zeus:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-EI65V2ILECVXWDW3 -p tcp -m comment --comment "default/zeus:uwsgi" -m tcp -j DNAT --to-destination 10.41.0.29:9000 | |
| -A KUBE-SEP-EIKDO5BV2MIU56TS -s 10.33.0.10/32 -m comment --comment "default/metis:nginx" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-EIKDO5BV2MIU56TS -p tcp -m comment --comment "default/metis:nginx" -m tcp -j DNAT --to-destination 10.33.0.10:9000 | |
| -A KUBE-SEP-ESRCT6VSPUSFSEVY -s 10.43.0.30/32 -m comment --comment "default/metis:nginx" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-ESRCT6VSPUSFSEVY -p tcp -m comment --comment "default/metis:nginx" -m tcp -j DNAT --to-destination 10.43.0.30:9000 | |
| -A KUBE-SEP-EU2SAOSV3VTCGEE3 -s 10.43.0.5/32 -m comment --comment "default/my360-jeff:" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-EU2SAOSV3VTCGEE3 -p tcp -m comment --comment "default/my360-jeff:" -m tcp -j DNAT --to-destination 10.43.0.5:8080 | |
| -A KUBE-SEP-EVZG2XZ2ETL264VG -s 10.33.0.36/32 -m comment --comment "default/zeus:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-EVZG2XZ2ETL264VG -p tcp -m comment --comment "default/zeus:uwsgi" -m tcp -j DNAT --to-destination 10.33.0.36:9000 | |
| -A KUBE-SEP-F4DKCVJUKCUE5KYM -s 10.46.0.3/32 -m comment --comment "default/my360-api-rewards:" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-F4DKCVJUKCUE5KYM -p tcp -m comment --comment "default/my360-api-rewards:" -m tcp -j DNAT --to-destination 10.46.0.3:9000 | |
| -A KUBE-SEP-FRL7NSX6AAGTZ645 -s 10.43.0.33/32 -m comment --comment "default/metis:nginx" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-FRL7NSX6AAGTZ645 -p tcp -m comment --comment "default/metis:nginx" -m tcp -j DNAT --to-destination 10.43.0.33:9000 | |
| -A KUBE-SEP-G7IE2QENOPPDVAYI -s 10.41.0.44/32 -m comment --comment "default/hecate:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-G7IE2QENOPPDVAYI -p tcp -m comment --comment "default/hecate:uwsgi" -m tcp -j DNAT --to-destination 10.41.0.44:9000 | |
| -A KUBE-SEP-GCG7CW6SEC65GFSS -s 10.43.0.22/32 -m comment --comment "default/hecate:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-GCG7CW6SEC65GFSS -p tcp -m comment --comment "default/hecate:uwsgi" -m tcp -j DNAT --to-destination 10.43.0.22:9000 | |
| -A KUBE-SEP-GFXEAZECXKCHX564 -s 10.41.0.5/32 -m comment --comment "default/hermes:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-GFXEAZECXKCHX564 -p tcp -m comment --comment "default/hermes:uwsgi" -m tcp -j DNAT --to-destination 10.41.0.5:9000 | |
| -A KUBE-SEP-GUIKSO726UDZ76I7 -s 10.33.0.5/32 -m comment --comment "default/hecate:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-GUIKSO726UDZ76I7 -p tcp -m comment --comment "default/hecate:uwsgi" -m tcp -j DNAT --to-destination 10.33.0.5:9000 | |
| -A KUBE-SEP-HD256TR25FCNCQXZ -s 10.41.0.14/32 -m comment --comment "default/rabbitmq-rabbitmq-ha:http" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-HD256TR25FCNCQXZ -p tcp -m comment --comment "default/rabbitmq-rabbitmq-ha:http" -m tcp -j DNAT --to-destination 10.41.0.14:15672 | |
| -A KUBE-SEP-HOWHXCJGSYYWQN56 -s 10.32.0.5/32 -m comment --comment "default/rabbitmq-rabbitmq-ha:epmd" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-HOWHXCJGSYYWQN56 -p tcp -m comment --comment "default/rabbitmq-rabbitmq-ha:epmd" -m tcp -j DNAT --to-destination 10.32.0.5:4369 | |
| -A KUBE-SEP-HP66BR6I3WM7NJLB -s 10.38.0.1/32 -m comment --comment "default/prod-netdata-dashboard:" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-HP66BR6I3WM7NJLB -p tcp -m comment --comment "default/prod-netdata-dashboard:" -m tcp -j DNAT --to-destination 10.38.0.1:80 | |
| -A KUBE-SEP-HS4WO4WW7BIQMMNJ -s 10.46.0.12/32 -m comment --comment "default/hecate:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-HS4WO4WW7BIQMMNJ -p tcp -m comment --comment "default/hecate:uwsgi" -m tcp -j DNAT --to-destination 10.46.0.12:9000 | |
| -A KUBE-SEP-I5YLKS5AAJT7ZO7Y -s 10.41.0.13/32 -m comment --comment "default/prod-netdata-dashboard:" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-I5YLKS5AAJT7ZO7Y -p tcp -m comment --comment "default/prod-netdata-dashboard:" -m tcp -j DNAT --to-destination 10.41.0.13:80 | |
| -A KUBE-SEP-I6DWOAFD43V5GD7M -s 10.32.0.5/32 -m comment --comment "default/rabbitmq-rabbitmq-ha:http" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-I6DWOAFD43V5GD7M -p tcp -m comment --comment "default/rabbitmq-rabbitmq-ha:http" -m tcp -j DNAT --to-destination 10.32.0.5:15672 | |
| -A KUBE-SEP-IEZMQH3ZID45O77I -s 10.33.0.39/32 -m comment --comment "default/midas:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-IEZMQH3ZID45O77I -p tcp -m comment --comment "default/midas:uwsgi" -m tcp -j DNAT --to-destination 10.33.0.39:9000 | |
| -A KUBE-SEP-IKJYB5DCZZNIKN7K -s 10.33.0.9/32 -m comment --comment "default/rabbitmq-rabbitmq-ha:amqp" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-IKJYB5DCZZNIKN7K -p tcp -m comment --comment "default/rabbitmq-rabbitmq-ha:amqp" -m tcp -j DNAT --to-destination 10.33.0.9:5672 | |
| -A KUBE-SEP-IKQTLUXFHRYCMMOE -s 10.41.0.45/32 -m comment --comment "default/hecate:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-IKQTLUXFHRYCMMOE -p tcp -m comment --comment "default/hecate:uwsgi" -m tcp -j DNAT --to-destination 10.41.0.45:9000 | |
| -A KUBE-SEP-IS6DEF5OTL5CWGDH -s 10.41.0.23/32 -m comment --comment "default/hades:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-IS6DEF5OTL5CWGDH -p tcp -m comment --comment "default/hades:uwsgi" -m tcp -j DNAT --to-destination 10.41.0.23:9000 | |
| -A KUBE-SEP-IW7IUAPJTDZXRDMO -s 10.46.0.9/32 -m comment --comment "default/midas:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-IW7IUAPJTDZXRDMO -p tcp -m comment --comment "default/midas:uwsgi" -m tcp -j DNAT --to-destination 10.46.0.9:9000 | |
| -A KUBE-SEP-J7AYD26JUJ224NUV -s 10.33.0.37/32 -m comment --comment "default/midas:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-J7AYD26JUJ224NUV -p tcp -m comment --comment "default/midas:uwsgi" -m tcp -j DNAT --to-destination 10.33.0.37:9000 | |
| -A KUBE-SEP-J7O36QDEPUOJHTJB -s 10.41.0.10/32 -m comment --comment "default/graylog-elasticsearch:elasticsearch" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-J7O36QDEPUOJHTJB -p tcp -m comment --comment "default/graylog-elasticsearch:elasticsearch" -m tcp -j DNAT --to-destination 10.41.0.10:9200 | |
| -A KUBE-SEP-JE3SUB6G5LERMY2N -s 10.41.0.35/32 -m comment --comment "default/metis:nginx" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-JE3SUB6G5LERMY2N -p tcp -m comment --comment "default/metis:nginx" -m tcp -j DNAT --to-destination 10.41.0.35:9000 | |
| -A KUBE-SEP-JRU5FXM6KBF5P74Y -s 10.38.0.3/32 -m comment --comment "default/my360-redirect:http" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-JRU5FXM6KBF5P74Y -p tcp -m comment --comment "default/my360-redirect:http" -m tcp -j DNAT --to-destination 10.38.0.3:80 | |
| -A KUBE-SEP-K2R5UX7UEURKLVKF -s 10.43.0.3/32 -m comment --comment "default/sentry-sentry:sentry" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-K2R5UX7UEURKLVKF -p tcp -m comment --comment "default/sentry-sentry:sentry" -m tcp -j DNAT --to-destination 10.43.0.3:9000 | |
| -A KUBE-SEP-KKOOZIZDQASJSTOB -s 10.43.0.13/32 -m comment --comment "default/hermes:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-KKOOZIZDQASJSTOB -p tcp -m comment --comment "default/hermes:uwsgi" -m tcp -j DNAT --to-destination 10.43.0.13:9000 | |
| -A KUBE-SEP-LNNVLCCFQORZSAQE -s 10.46.0.0/32 -m comment --comment "kube-system/tiller-deploy:tiller" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-LNNVLCCFQORZSAQE -p tcp -m comment --comment "kube-system/tiller-deploy:tiller" -m tcp -j DNAT --to-destination 10.46.0.0:44134 | |
| -A KUBE-SEP-LQ2WTJAZ3REXHQP7 -s 10.46.0.7/32 -m comment --comment "default/hermes:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-LQ2WTJAZ3REXHQP7 -p tcp -m comment --comment "default/hermes:uwsgi" -m tcp -j DNAT --to-destination 10.46.0.7:9000 | |
| -A KUBE-SEP-LS7BC5LF4YRCJ676 -s 10.43.0.6/32 -m comment --comment "default/lethe:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-LS7BC5LF4YRCJ676 -p tcp -m comment --comment "default/lethe:uwsgi" -m tcp -j DNAT --to-destination 10.43.0.6:9000 | |
| -A KUBE-SEP-LWA2FK2CH2BUTGVL -s 10.43.0.26/32 -m comment --comment "default/zeus:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-LWA2FK2CH2BUTGVL -p tcp -m comment --comment "default/zeus:uwsgi" -m tcp -j DNAT --to-destination 10.43.0.26:9000 | |
| -A KUBE-SEP-LZFSZU4SAKE7CYEB -s 10.33.0.18/32 -m comment --comment "default/zeus:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-LZFSZU4SAKE7CYEB -p tcp -m comment --comment "default/zeus:uwsgi" -m tcp -j DNAT --to-destination 10.33.0.18:9000 | |
| -A KUBE-SEP-MDAOJ4DZ6E7EHC5W -s 10.32.0.21/32 -m comment --comment "default/midas:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-MDAOJ4DZ6E7EHC5W -p tcp -m comment --comment "default/midas:uwsgi" -m tcp -j DNAT --to-destination 10.32.0.21:9000 | |
| -A KUBE-SEP-MHAVQ2IHGFAMA342 -s 10.33.0.15/32 -m comment --comment "default/hades:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-MHAVQ2IHGFAMA342 -p tcp -m comment --comment "default/hades:uwsgi" -m tcp -j DNAT --to-destination 10.33.0.15:9000 | |
| -A KUBE-SEP-MHEZVDHJCT5RUNXX -s 10.32.0.15/32 -m comment --comment "default/hermes:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-MHEZVDHJCT5RUNXX -p tcp -m comment --comment "default/hermes:uwsgi" -m tcp -j DNAT --to-destination 10.32.0.15:9000 | |
| -A KUBE-SEP-MZNSYBCWA7WXMPRU -s 10.41.0.4/32 -m comment --comment "default/lethe:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-MZNSYBCWA7WXMPRU -p tcp -m comment --comment "default/lethe:uwsgi" -m tcp -j DNAT --to-destination 10.41.0.4:9000 | |
| -A KUBE-SEP-NU3C7BB2OGGXYUDR -s 10.43.0.36/32 -m comment --comment "default/midas:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-NU3C7BB2OGGXYUDR -p tcp -m comment --comment "default/midas:uwsgi" -m tcp -j DNAT --to-destination 10.43.0.36:9000 | |
| -A KUBE-SEP-O2LKIUCO6FSZB3LK -s 10.41.0.16/32 -m comment --comment "default/olympus-db-postgresql:postgresql" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-O2LKIUCO6FSZB3LK -p tcp -m comment --comment "default/olympus-db-postgresql:postgresql" -m tcp -j DNAT --to-destination 10.41.0.16:5432 | |
| -A KUBE-SEP-OES6J5L6TGOYSQA7 -s 10.32.0.9/32 -m comment --comment "kube-system/kube-dns:dns-tcp" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-OES6J5L6TGOYSQA7 -p tcp -m comment --comment "kube-system/kube-dns:dns-tcp" -m tcp -j DNAT --to-destination 10.32.0.9:53 | |
| -A KUBE-SEP-ONFRC47Q42TUVXMW -s 10.33.0.6/32 -m comment --comment "default/lethe:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-ONFRC47Q42TUVXMW -p tcp -m comment --comment "default/lethe:uwsgi" -m tcp -j DNAT --to-destination 10.33.0.6:9000 | |
| -A KUBE-SEP-OOF3M6MAX7HCZW7R -s 10.41.0.38/32 -m comment --comment "default/metis:nginx" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-OOF3M6MAX7HCZW7R -p tcp -m comment --comment "default/metis:nginx" -m tcp -j DNAT --to-destination 10.41.0.38:9000 | |
| -A KUBE-SEP-OXKDPTSATJVTDP7N -s 10.32.0.5/32 -m comment --comment "default/rabbitmq-rabbitmq-ha:amqp" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-OXKDPTSATJVTDP7N -p tcp -m comment --comment "default/rabbitmq-rabbitmq-ha:amqp" -m tcp -j DNAT --to-destination 10.32.0.5:5672 | |
| -A KUBE-SEP-OZC53AZUFDCKRRUO -s 10.43.0.25/32 -m comment --comment "default/zeus:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-OZC53AZUFDCKRRUO -p tcp -m comment --comment "default/zeus:uwsgi" -m tcp -j DNAT --to-destination 10.43.0.25:9000 | |
| -A KUBE-SEP-PKI3Q6UJVA5HQU5J -s 10.32.0.3/32 -m comment --comment "default/api-docs:nginx" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-PKI3Q6UJVA5HQU5J -p tcp -m comment --comment "default/api-docs:nginx" -m tcp -j DNAT --to-destination 10.32.0.3:80 | |
| -A KUBE-SEP-PLBDLG5RFRKTZ2DN -s 10.34.128.16/32 -m comment --comment "default/hermes:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-PLBDLG5RFRKTZ2DN -p tcp -m comment --comment "default/hermes:uwsgi" -m tcp -j DNAT --to-destination 10.34.128.16:9000 | |
| -A KUBE-SEP-PNXAUPIVQLGTG6Z7 -s 10.34.128.29/32 -m comment --comment "default/hecate:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-PNXAUPIVQLGTG6Z7 -p tcp -m comment --comment "default/hecate:uwsgi" -m tcp -j DNAT --to-destination 10.34.128.29:9000 | |
| -A KUBE-SEP-PP4FEOBKCYJWDVDM -s 10.32.0.26/32 -m comment --comment "default/midas:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-PP4FEOBKCYJWDVDM -p tcp -m comment --comment "default/midas:uwsgi" -m tcp -j DNAT --to-destination 10.32.0.26:9000 | |
| -A KUBE-SEP-PRUXSJU4XFED5EKL -s 10.41.0.2/32 -m comment --comment "default/my360-jeff:" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-PRUXSJU4XFED5EKL -p tcp -m comment --comment "default/my360-jeff:" -m tcp -j DNAT --to-destination 10.41.0.2:8080 | |
| -A KUBE-SEP-PT63DZL6DKU6BS76 -s 10.41.0.14/32 -m comment --comment "default/rabbitmq-rabbitmq-ha:epmd" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-PT63DZL6DKU6BS76 -p tcp -m comment --comment "default/rabbitmq-rabbitmq-ha:epmd" -m tcp -j DNAT --to-destination 10.41.0.14:4369 | |
| -A KUBE-SEP-QQLRQLFRRU2ZD7BH -s 10.34.128.1/32 -m comment --comment "default/metis:nginx" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-QQLRQLFRRU2ZD7BH -p tcp -m comment --comment "default/metis:nginx" -m tcp -j DNAT --to-destination 10.34.128.1:9000 | |
| -A KUBE-SEP-R6EDFS5QLTIZHEEM -s 10.38.0.0/32 -m comment --comment "ingress-nginx/ingress-nginx:http" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-R6EDFS5QLTIZHEEM -p tcp -m comment --comment "ingress-nginx/ingress-nginx:http" -m tcp -j DNAT --to-destination 10.38.0.0:80 | |
| -A KUBE-SEP-RGAQEXSE77WUAHKO -s 10.32.0.13/32 -m comment --comment "default/hades:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-RGAQEXSE77WUAHKO -p tcp -m comment --comment "default/hades:uwsgi" -m tcp -j DNAT --to-destination 10.32.0.13:9000 | |
| -A KUBE-SEP-RLQRMAVAKSMMHKMN -s 10.33.0.16/32 -m comment --comment "default/lethe:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-RLQRMAVAKSMMHKMN -p tcp -m comment --comment "default/lethe:uwsgi" -m tcp -j DNAT --to-destination 10.33.0.16:9000 | |
| -A KUBE-SEP-RSXJ5TTYMG4HP5MT -s 10.43.0.39/32 -m comment --comment "default/hecate:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-RSXJ5TTYMG4HP5MT -p tcp -m comment --comment "default/hecate:uwsgi" -m tcp -j DNAT --to-destination 10.43.0.39:9000 | |
| -A KUBE-SEP-RWAZQ6S4FEG3CEBD -s 10.43.0.32/32 -m comment --comment "default/metis:nginx" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-RWAZQ6S4FEG3CEBD -p tcp -m comment --comment "default/metis:nginx" -m tcp -j DNAT --to-destination 10.43.0.32:9000 | |
| -A KUBE-SEP-SLJ4MTANYKGWP7HU -s 10.41.0.22/32 -m comment --comment "default/hermes:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-SLJ4MTANYKGWP7HU -p tcp -m comment --comment "default/hermes:uwsgi" -m tcp -j DNAT --to-destination 10.41.0.22:9000 | |
| -A KUBE-SEP-T37MFVOPG7QYBQB5 -s 10.34.128.20/32 -m comment --comment "default/zeus:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-T37MFVOPG7QYBQB5 -p tcp -m comment --comment "default/zeus:uwsgi" -m tcp -j DNAT --to-destination 10.34.128.20:9000 | |
| -A KUBE-SEP-T7TQVXKNRZBKMFJ4 -s 10.41.0.19/32 -m comment --comment "default/hades:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-T7TQVXKNRZBKMFJ4 -p tcp -m comment --comment "default/hades:uwsgi" -m tcp -j DNAT --to-destination 10.41.0.19:9000 | |
| -A KUBE-SEP-TFELCJN3T4FY3XWW -s 10.43.0.10/32 -m comment --comment "kube-system/kube-dns:dns" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-TFELCJN3T4FY3XWW -p udp -m comment --comment "kube-system/kube-dns:dns" -m udp -j DNAT --to-destination 10.43.0.10:53 | |
| -A KUBE-SEP-TFJZ45TMWNDE3ZKY -s 10.33.0.2/32 -m comment --comment "default/lethe:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-TFJZ45TMWNDE3ZKY -p tcp -m comment --comment "default/lethe:uwsgi" -m tcp -j DNAT --to-destination 10.33.0.2:9000 | |
| -A KUBE-SEP-TPKNHQEGJNLRDV3V -s 10.41.0.3/32 -m comment --comment "default/lethe:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-TPKNHQEGJNLRDV3V -p tcp -m comment --comment "default/lethe:uwsgi" -m tcp -j DNAT --to-destination 10.41.0.3:9000 | |
| -A KUBE-SEP-U3ISNHNR3O37ULUV -s 10.2.2.5/32 -m comment --comment "default/kubernetes:https" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-U3ISNHNR3O37ULUV -p tcp -m comment --comment "default/kubernetes:https" -m recent --set --name KUBE-SEP-U3ISNHNR3O37ULUV --mask 255.255.255.255 --rsource -m tcp -j DNAT --to-destination 10.2.2.5:6443 | |
| -A KUBE-SEP-UEAKXORIEHKUONDL -s 10.32.0.9/32 -m comment --comment "kube-system/kube-dns:dns" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-UEAKXORIEHKUONDL -p udp -m comment --comment "kube-system/kube-dns:dns" -m udp -j DNAT --to-destination 10.32.0.9:53 | |
| -A KUBE-SEP-UHRVGQA3F5DHITMI -s 10.41.0.37/32 -m comment --comment "default/metis:nginx" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-UHRVGQA3F5DHITMI -p tcp -m comment --comment "default/metis:nginx" -m tcp -j DNAT --to-destination 10.41.0.37:9000 | |
| -A KUBE-SEP-UTRJ65UG43XGI27B -s 10.41.0.1/32 -m comment --comment "kube-system/metrics-server:" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-UTRJ65UG43XGI27B -p tcp -m comment --comment "kube-system/metrics-server:" -m tcp -j DNAT --to-destination 10.41.0.1:443 | |
| -A KUBE-SEP-UZIL2XX5P43F7KY7 -s 10.32.0.25/32 -m comment --comment "default/zeus:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-UZIL2XX5P43F7KY7 -p tcp -m comment --comment "default/zeus:uwsgi" -m tcp -j DNAT --to-destination 10.32.0.25:9000 | |
| -A KUBE-SEP-VA5PUEV67P4GKSXG -s 10.33.0.17/32 -m comment --comment "default/graylog-gelf-tcp:syslog-tcp" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-VA5PUEV67P4GKSXG -p tcp -m comment --comment "default/graylog-gelf-tcp:syslog-tcp" -m tcp -j DNAT --to-destination 10.33.0.17:32766 | |
| -A KUBE-SEP-VIR6SGLXYGK6BPEZ -s 10.34.128.2/32 -m comment --comment "default/my360-polymer-library:" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-VIR6SGLXYGK6BPEZ -p tcp -m comment --comment "default/my360-polymer-library:" -m tcp -j DNAT --to-destination 10.34.128.2:80 | |
| -A KUBE-SEP-VRWXI5AICRPOEXEW -s 10.43.0.20/32 -m comment --comment "default/hermes:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-VRWXI5AICRPOEXEW -p tcp -m comment --comment "default/hermes:uwsgi" -m tcp -j DNAT --to-destination 10.43.0.20:9000 | |
| -A KUBE-SEP-WDSOJXMMJCZPPSGX -s 10.32.0.23/32 -m comment --comment "default/hermes:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-WDSOJXMMJCZPPSGX -p tcp -m comment --comment "default/hermes:uwsgi" -m tcp -j DNAT --to-destination 10.32.0.23:9000 | |
| -A KUBE-SEP-XFIEG2SM5QU2MLWK -s 10.43.0.10/32 -m comment --comment "kube-system/kube-dns:dns-tcp" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-XFIEG2SM5QU2MLWK -p tcp -m comment --comment "kube-system/kube-dns:dns-tcp" -m tcp -j DNAT --to-destination 10.43.0.10:53 | |
| -A KUBE-SEP-XQOORX625CS65SV2 -s 10.33.0.1/32 -m comment --comment "default/my360-api-user:" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-XQOORX625CS65SV2 -p tcp -m comment --comment "default/my360-api-user:" -m tcp -j DNAT --to-destination 10.33.0.1:9000 | |
| -A KUBE-SEP-Y6QTZMVTKLDURPJE -s 10.33.0.17/32 -m comment --comment "default/graylog-graylog:graylog" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-Y6QTZMVTKLDURPJE -p tcp -m comment --comment "default/graylog-graylog:graylog" -m tcp -j DNAT --to-destination 10.33.0.17:9000 | |
| -A KUBE-SEP-YDXSCJK5GGYHGV3E -s 10.34.128.0/32 -m comment --comment "ingress-nginx/ingress-nginx:http" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-YDXSCJK5GGYHGV3E -p tcp -m comment --comment "ingress-nginx/ingress-nginx:http" -m tcp -j DNAT --to-destination 10.34.128.0:80 | |
| -A KUBE-SEP-YUNWZR2QI3LWJIVZ -s 10.33.0.9/32 -m comment --comment "default/rabbitmq-rabbitmq-ha:epmd" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-YUNWZR2QI3LWJIVZ -p tcp -m comment --comment "default/rabbitmq-rabbitmq-ha:epmd" -m tcp -j DNAT --to-destination 10.33.0.9:4369 | |
| -A KUBE-SEP-Z2SYITAKLEJVODWQ -s 10.33.0.19/32 -m comment --comment "default/hades:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-Z2SYITAKLEJVODWQ -p tcp -m comment --comment "default/hades:uwsgi" -m tcp -j DNAT --to-destination 10.33.0.19:9000 | |
| -A KUBE-SEP-ZBBBGPPGHBTZNNU2 -s 10.32.0.32/32 -m comment --comment "default/hecate:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-ZBBBGPPGHBTZNNU2 -p tcp -m comment --comment "default/hecate:uwsgi" -m tcp -j DNAT --to-destination 10.32.0.32:9000 | |
| -A KUBE-SEP-ZLDJB7BYW3KPLHIX -s 10.41.0.15/32 -m comment --comment "default/hades:uwsgi" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-ZLDJB7BYW3KPLHIX -p tcp -m comment --comment "default/hades:uwsgi" -m tcp -j DNAT --to-destination 10.41.0.15:9000 | |
| -A KUBE-SEP-ZWKTHVOSJXRAFACE -s 10.34.128.3/32 -m comment --comment "ingress-nginx/ingress-nginx:http" -j KUBE-MARK-MASQ | |
| -A KUBE-SEP-ZWKTHVOSJXRAFACE -p tcp -m comment --comment "ingress-nginx/ingress-nginx:http" -m tcp -j DNAT --to-destination 10.34.128.3:80 | |
| -A KUBE-SERVICES ! -s 10.32.0.0/12 -d 172.16.8.248/32 -p tcp -m comment --comment "default/graylog-elasticsearch:elasticsearch cluster IP" -m tcp --dport 9200 -j KUBE-MARK-MASQ | |
| -A KUBE-SERVICES -d 172.16.8.248/32 -p tcp -m comment --comment "default/graylog-elasticsearch:elasticsearch cluster IP" -m tcp --dport 9200 -j KUBE-SVC-IJ6MPYU2ZZ53H5XQ | |
| -A KUBE-SERVICES ! -s 10.32.0.0/12 -d 172.16.0.10/32 -p tcp -m comment --comment "kube-system/kube-dns:dns-tcp cluster IP" -m tcp --dport 53 -j KUBE-MARK-MASQ | |
| -A KUBE-SERVICES -d 172.16.0.10/32 -p tcp -m comment --comment "kube-system/kube-dns:dns-tcp cluster IP" -m tcp --dport 53 -j KUBE-SVC-ERIFXISQEP7F7OF4 | |
| -A KUBE-SERVICES ! -s 10.32.0.0/12 -d 172.16.12.20/32 -p tcp -m comment --comment "ingress-nginx/ingress-nginx:http cluster IP" -m tcp --dport 80 -j KUBE-MARK-MASQ | |
| -A KUBE-SERVICES -d 172.16.12.20/32 -p tcp -m comment --comment "ingress-nginx/ingress-nginx:http cluster IP" -m tcp --dport 80 -j KUBE-SVC-REQ4FPVT7WYF4VLA | |
| -A KUBE-SERVICES ! -s 10.32.0.0/12 -d 172.16.1.79/32 -p tcp -m comment --comment "default/rabbitmq-rabbitmq-ha:amqp cluster IP" -m tcp --dport 5672 -j KUBE-MARK-MASQ | |
| -A KUBE-SERVICES -d 172.16.1.79/32 -p tcp -m comment --comment "default/rabbitmq-rabbitmq-ha:amqp cluster IP" -m tcp --dport 5672 -j KUBE-SVC-NC5CRGHR4SBALHCS | |
| -A KUBE-SERVICES ! -s 10.32.0.0/12 -d 172.16.6.148/32 -p tcp -m comment --comment "default/my360-polymer-library: cluster IP" -m tcp --dport 80 -j KUBE-MARK-MASQ | |
| -A KUBE-SERVICES -d 172.16.6.148/32 -p tcp -m comment --comment "default/my360-polymer-library: cluster IP" -m tcp --dport 80 -j KUBE-SVC-VJKEPSJP3F5V7BDZ | |
| -A KUBE-SERVICES ! -s 10.32.0.0/12 -d 172.16.3.75/32 -p tcp -m comment --comment "default/midas:uwsgi cluster IP" -m tcp --dport 9000 -j KUBE-MARK-MASQ | |
| -A KUBE-SERVICES -d 172.16.3.75/32 -p tcp -m comment --comment "default/midas:uwsgi cluster IP" -m tcp --dport 9000 -j KUBE-SVC-676NMKB4LX3VXS6Q | |
| -A KUBE-SERVICES ! -s 10.32.0.0/12 -d 172.16.5.205/32 -p tcp -m comment --comment "default/my360-files:http cluster IP" -m tcp --dport 80 -j KUBE-MARK-MASQ | |
| -A KUBE-SERVICES -d 172.16.5.205/32 -p tcp -m comment --comment "default/my360-files:http cluster IP" -m tcp --dport 80 -j KUBE-SVC-N3AMT2X5V6XTDNV7 | |
| -A KUBE-SERVICES ! -s 10.32.0.0/12 -d 172.16.9.25/32 -p tcp -m comment --comment "default/olympus-db-postgresql:postgresql cluster IP" -m tcp --dport 5432 -j KUBE-MARK-MASQ | |
| -A KUBE-SERVICES -d 172.16.9.25/32 -p tcp -m comment --comment "default/olympus-db-postgresql:postgresql cluster IP" -m tcp --dport 5432 -j KUBE-SVC-33NWYKCWNIAPHUE7 | |
| -A KUBE-SERVICES ! -s 10.32.0.0/12 -d 172.16.3.87/32 -p tcp -m comment --comment "default/sentry-sentry:sentry cluster IP" -m tcp --dport 9000 -j KUBE-MARK-MASQ | |
| -A KUBE-SERVICES -d 172.16.3.87/32 -p tcp -m comment --comment "default/sentry-sentry:sentry cluster IP" -m tcp --dport 9000 -j KUBE-SVC-4RFZCZCEKORSOTRO | |
| -A KUBE-SERVICES ! -s 10.32.0.0/12 -d 172.16.1.79/32 -p tcp -m comment --comment "default/rabbitmq-rabbitmq-ha:epmd cluster IP" -m tcp --dport 4369 -j KUBE-MARK-MASQ | |
| -A KUBE-SERVICES -d 172.16.1.79/32 -p tcp -m comment --comment "default/rabbitmq-rabbitmq-ha:epmd cluster IP" -m tcp --dport 4369 -j KUBE-SVC-HFVSGUDEKZLWZEG5 | |
| -A KUBE-SERVICES ! -s 10.32.0.0/12 -d 172.16.15.180/32 -p tcp -m comment --comment "default/graylog-syslog-tcp:syslog-tcp cluster IP" -m tcp --dport 32767 -j KUBE-MARK-MASQ | |
| -A KUBE-SERVICES -d 172.16.15.180/32 -p tcp -m comment --comment "default/graylog-syslog-tcp:syslog-tcp cluster IP" -m tcp --dport 32767 -j KUBE-SVC-B7JLY2KJYDPHKXGY | |
| -A KUBE-SERVICES ! -s 10.32.0.0/12 -d 172.16.3.85/32 -p tcp -m comment --comment "default/graylog-graylog:graylog cluster IP" -m tcp --dport 9000 -j KUBE-MARK-MASQ | |
| -A KUBE-SERVICES -d 172.16.3.85/32 -p tcp -m comment --comment "default/graylog-graylog:graylog cluster IP" -m tcp --dport 9000 -j KUBE-SVC-ZUXUYYHGNKX5XZHV | |
| -A KUBE-SERVICES ! -s 10.32.0.0/12 -d 172.16.3.23/32 -p tcp -m comment --comment "default/prod-netdata-dashboard: cluster IP" -m tcp --dport 80 -j KUBE-MARK-MASQ | |
| -A KUBE-SERVICES -d 172.16.3.23/32 -p tcp -m comment --comment "default/prod-netdata-dashboard: cluster IP" -m tcp --dport 80 -j KUBE-SVC-GZS2473WDVDYWOSA | |
| -A KUBE-SERVICES ! -s 10.32.0.0/12 -d 172.16.0.200/32 -p udp -m comment --comment "default/graylog-gelf-udp:aphrodite-udp cluster IP" -m udp --dport 32765 -j KUBE-MARK-MASQ | |
| -A KUBE-SERVICES -d 172.16.0.200/32 -p udp -m comment --comment "default/graylog-gelf-udp:aphrodite-udp cluster IP" -m udp --dport 32765 -j KUBE-SVC-MEX75BADDJ5ASQ6C | |
| -A KUBE-SERVICES ! -s 10.32.0.0/12 -d 172.16.5.78/32 -p tcp -m comment --comment "default/hades:uwsgi cluster IP" -m tcp --dport 9000 -j KUBE-MARK-MASQ | |
| -A KUBE-SERVICES -d 172.16.5.78/32 -p tcp -m comment --comment "default/hades:uwsgi cluster IP" -m tcp --dport 9000 -j KUBE-SVC-LGLF3LQ6U7LJGNH7 | |
| -A KUBE-SERVICES ! -s 10.32.0.0/12 -d 172.16.2.154/32 -p tcp -m comment --comment "default/metis:nginx cluster IP" -m tcp --dport 9000 -j KUBE-MARK-MASQ | |
| -A KUBE-SERVICES -d 172.16.2.154/32 -p tcp -m comment --comment "default/metis:nginx cluster IP" -m tcp --dport 9000 -j KUBE-SVC-SFKBQOYF2BMSJKLL | |
| -A KUBE-SERVICES ! -s 10.32.0.0/12 -d 172.16.2.116/32 -p tcp -m comment --comment "kube-system/tiller-deploy:tiller cluster IP" -m tcp --dport 44134 -j KUBE-MARK-MASQ | |
| -A KUBE-SERVICES -d 172.16.2.116/32 -p tcp -m comment --comment "kube-system/tiller-deploy:tiller cluster IP" -m tcp --dport 44134 -j KUBE-SVC-K7J76NXP7AUZVFGS | |
| -A KUBE-SERVICES ! -s 10.32.0.0/12 -d 172.16.5.181/32 -p tcp -m comment --comment "default/sentry-redis:redis cluster IP" -m tcp --dport 6379 -j KUBE-MARK-MASQ | |
| -A KUBE-SERVICES -d 172.16.5.181/32 -p tcp -m comment --comment "default/sentry-redis:redis cluster IP" -m tcp --dport 6379 -j KUBE-SVC-2FGMBP2JGGZTMU6U | |
| -A KUBE-SERVICES ! -s 10.32.0.0/12 -d 172.16.14.217/32 -p tcp -m comment --comment "default/redis-slave:redis cluster IP" -m tcp --dport 6379 -j KUBE-MARK-MASQ | |
| -A KUBE-SERVICES -d 172.16.14.217/32 -p tcp -m comment --comment "default/redis-slave:redis cluster IP" -m tcp --dport 6379 -j KUBE-SVC-2VSVH4IVBJQG5O7Q | |
| -A KUBE-SERVICES ! -s 10.32.0.0/12 -d 172.16.5.133/32 -p tcp -m comment --comment "ingress-nginx/default-http-backend: cluster IP" -m tcp --dport 80 -j KUBE-MARK-MASQ | |
| -A KUBE-SERVICES -d 172.16.5.133/32 -p tcp -m comment --comment "ingress-nginx/default-http-backend: cluster IP" -m tcp --dport 80 -j KUBE-SVC-J4PGGZ6AUXZWNA2B | |
| -A KUBE-SERVICES ! -s 10.32.0.0/12 -d 172.16.1.79/32 -p tcp -m comment --comment "default/rabbitmq-rabbitmq-ha:http cluster IP" -m tcp --dport 15672 -j KUBE-MARK-MASQ | |
| -A KUBE-SERVICES -d 172.16.1.79/32 -p tcp -m comment --comment "default/rabbitmq-rabbitmq-ha:http cluster IP" -m tcp --dport 15672 -j KUBE-SVC-YZNT6P2AN4QFRK7C | |
| -A KUBE-SERVICES ! -s 10.32.0.0/12 -d 172.16.0.1/32 -p tcp -m comment --comment "default/kubernetes:https cluster IP" -m tcp --dport 443 -j KUBE-MARK-MASQ | |
| -A KUBE-SERVICES -d 172.16.0.1/32 -p tcp -m comment --comment "default/kubernetes:https cluster IP" -m tcp --dport 443 -j KUBE-SVC-NPX46M4PTMTKRN6Y | |
| -A KUBE-SERVICES ! -s 10.32.0.0/12 -d 172.16.14.87/32 -p tcp -m comment --comment "default/wordpress:wordpress cluster IP" -m tcp --dport 80 -j KUBE-MARK-MASQ | |
| -A KUBE-SERVICES -d 172.16.14.87/32 -p tcp -m comment --comment "default/wordpress:wordpress cluster IP" -m tcp --dport 80 -j KUBE-SVC-FR76EFT5JH3VYFCM | |
| -A KUBE-SERVICES ! -s 10.32.0.0/12 -d 172.16.0.182/32 -p tcp -m comment --comment "default/zeus:uwsgi cluster IP" -m tcp --dport 9000 -j KUBE-MARK-MASQ | |
| -A KUBE-SERVICES -d 172.16.0.182/32 -p tcp -m comment --comment "default/zeus:uwsgi cluster IP" -m tcp --dport 9000 -j KUBE-SVC-5DUUOMNUWS6IYFFO | |
| -A KUBE-SERVICES ! -s 10.32.0.0/12 -d 172.16.15.153/32 -p tcp -m comment --comment "default/my360-redirect:http cluster IP" -m tcp --dport 80 -j KUBE-MARK-MASQ | |
| -A KUBE-SERVICES -d 172.16.15.153/32 -p tcp -m comment --comment "default/my360-redirect:http cluster IP" -m tcp --dport 80 -j KUBE-SVC-MWVH77DHIMA4R3LZ | |
| -A KUBE-SERVICES ! -s 10.32.0.0/12 -d 172.16.12.57/32 -p tcp -m comment --comment "default/my360-api-user: cluster IP" -m tcp --dport 9000 -j KUBE-MARK-MASQ | |
| -A KUBE-SERVICES -d 172.16.12.57/32 -p tcp -m comment --comment "default/my360-api-user: cluster IP" -m tcp --dport 9000 -j KUBE-SVC-4W2RFG5RLJX34RCC | |
| -A KUBE-SERVICES ! -s 10.32.0.0/12 -d 172.16.15.28/32 -p tcp -m comment --comment "default/lethe:uwsgi cluster IP" -m tcp --dport 9000 -j KUBE-MARK-MASQ | |
| -A KUBE-SERVICES -d 172.16.15.28/32 -p tcp -m comment --comment "default/lethe:uwsgi cluster IP" -m tcp --dport 9000 -j KUBE-SVC-OOXZ4UPTJ6SI3OFX | |
| -A KUBE-SERVICES ! -s 10.32.0.0/12 -d 172.16.0.200/32 -p udp -m comment --comment "default/graylog-gelf-udp:docker-udp cluster IP" -m udp --dport 32766 -j KUBE-MARK-MASQ | |
| -A KUBE-SERVICES -d 172.16.0.200/32 -p udp -m comment --comment "default/graylog-gelf-udp:docker-udp cluster IP" -m udp --dport 32766 -j KUBE-SVC-LRZBKLYTWRGQ7WNB | |
| -A KUBE-SERVICES ! -s 10.32.0.0/12 -d 172.16.9.238/32 -p tcp -m comment --comment "default/graylog-gelf-tcp:syslog-tcp cluster IP" -m tcp --dport 32766 -j KUBE-MARK-MASQ | |
| -A KUBE-SERVICES -d 172.16.9.238/32 -p tcp -m comment --comment "default/graylog-gelf-tcp:syslog-tcp cluster IP" -m tcp --dport 32766 -j KUBE-SVC-HQST2FPEQ72D7VOL | |
| -A KUBE-SERVICES ! -s 10.32.0.0/12 -d 172.16.15.31/32 -p tcp -m comment --comment "default/hecate:uwsgi cluster IP" -m tcp --dport 9000 -j KUBE-MARK-MASQ | |
| -A KUBE-SERVICES -d 172.16.15.31/32 -p tcp -m comment --comment "default/hecate:uwsgi cluster IP" -m tcp --dport 9000 -j KUBE-SVC-2C35TQCS7S5PMMKX | |
| -A KUBE-SERVICES ! -s 10.32.0.0/12 -d 172.16.9.233/32 -p tcp -m comment --comment "default/sentry-postgresql:postgresql cluster IP" -m tcp --dport 5432 -j KUBE-MARK-MASQ | |
| -A KUBE-SERVICES -d 172.16.9.233/32 -p tcp -m comment --comment "default/sentry-postgresql:postgresql cluster IP" -m tcp --dport 5432 -j KUBE-SVC-7S3EAIQKNIL75FQR | |
| -A KUBE-SERVICES ! -s 10.32.0.0/12 -d 172.16.9.252/32 -p tcp -m comment --comment "default/my360-jeff: cluster IP" -m tcp --dport 8080 -j KUBE-MARK-MASQ | |
| -A KUBE-SERVICES -d 172.16.9.252/32 -p tcp -m comment --comment "default/my360-jeff: cluster IP" -m tcp --dport 8080 -j KUBE-SVC-T7RXRCCAUHPLG5NX | |
| -A KUBE-SERVICES ! -s 10.32.0.0/12 -d 172.16.13.81/32 -p tcp -m comment --comment "kube-system/metrics-server: cluster IP" -m tcp --dport 443 -j KUBE-MARK-MASQ | |
| -A KUBE-SERVICES -d 172.16.13.81/32 -p tcp -m comment --comment "kube-system/metrics-server: cluster IP" -m tcp --dport 443 -j KUBE-SVC-LC5QY66VUV2HJ6WZ | |
| -A KUBE-SERVICES ! -s 10.32.0.0/12 -d 172.16.3.112/32 -p tcp -m comment --comment "default/redis-master:redis cluster IP" -m tcp --dport 6379 -j KUBE-MARK-MASQ | |
| -A KUBE-SERVICES -d 172.16.3.112/32 -p tcp -m comment --comment "default/redis-master:redis cluster IP" -m tcp --dport 6379 -j KUBE-SVC-I7TGNIU6JERYTRFQ | |
| -A KUBE-SERVICES ! -s 10.32.0.0/12 -d 172.16.0.10/32 -p udp -m comment --comment "kube-system/kube-dns:dns cluster IP" -m udp --dport 53 -j KUBE-MARK-MASQ | |
| -A KUBE-SERVICES -d 172.16.0.10/32 -p udp -m comment --comment "kube-system/kube-dns:dns cluster IP" -m udp --dport 53 -j KUBE-SVC-TCOU7JCQXEZGVUNU | |
| -A KUBE-SERVICES ! -s 10.32.0.0/12 -d 172.16.8.36/32 -p tcp -m comment --comment "default/hermes:uwsgi cluster IP" -m tcp --dport 9000 -j KUBE-MARK-MASQ | |
| -A KUBE-SERVICES -d 172.16.8.36/32 -p tcp -m comment --comment "default/hermes:uwsgi cluster IP" -m tcp --dport 9000 -j KUBE-SVC-PHL2ULSQRA7QPP7L | |
| -A KUBE-SERVICES ! -s 10.32.0.0/12 -d 172.16.3.3/32 -p tcp -m comment --comment "default/api-docs:nginx cluster IP" -m tcp --dport 80 -j KUBE-MARK-MASQ | |
| -A KUBE-SERVICES -d 172.16.3.3/32 -p tcp -m comment --comment "default/api-docs:nginx cluster IP" -m tcp --dport 80 -j KUBE-SVC-ET43IMG646KQ4PJE | |
| -A KUBE-SERVICES ! -s 10.32.0.0/12 -d 172.16.13.83/32 -p tcp -m comment --comment "default/my360-api-rewards: cluster IP" -m tcp --dport 9000 -j KUBE-MARK-MASQ | |
| -A KUBE-SERVICES -d 172.16.13.83/32 -p tcp -m comment --comment "default/my360-api-rewards: cluster IP" -m tcp --dport 9000 -j KUBE-SVC-PP4WXCIFVG3XOVS5 | |
| -A KUBE-SERVICES -m comment --comment "kubernetes service nodeports; NOTE: this must be the last rule in this chain" -m addrtype --dst-type LOCAL -j KUBE-NODEPORTS | |
| -A KUBE-SVC-2C35TQCS7S5PMMKX -m comment --comment "default/hecate:uwsgi" -m statistic --mode random --probability 0.10000000009 -j KUBE-SEP-2FAT52RNT6X36RKC | |
| -A KUBE-SVC-2C35TQCS7S5PMMKX -m comment --comment "default/hecate:uwsgi" -m statistic --mode random --probability 0.11110999994 -j KUBE-SEP-ZBBBGPPGHBTZNNU2 | |
| -A KUBE-SVC-2C35TQCS7S5PMMKX -m comment --comment "default/hecate:uwsgi" -m statistic --mode random --probability 0.12500000000 -j KUBE-SEP-GUIKSO726UDZ76I7 | |
| -A KUBE-SVC-2C35TQCS7S5PMMKX -m comment --comment "default/hecate:uwsgi" -m statistic --mode random --probability 0.14286000002 -j KUBE-SEP-7MKTCGZVVOCDRRG4 | |
| -A KUBE-SVC-2C35TQCS7S5PMMKX -m comment --comment "default/hecate:uwsgi" -m statistic --mode random --probability 0.16667000018 -j KUBE-SEP-PNXAUPIVQLGTG6Z7 | |
| -A KUBE-SVC-2C35TQCS7S5PMMKX -m comment --comment "default/hecate:uwsgi" -m statistic --mode random --probability 0.20000000019 -j KUBE-SEP-G7IE2QENOPPDVAYI | |
| -A KUBE-SVC-2C35TQCS7S5PMMKX -m comment --comment "default/hecate:uwsgi" -m statistic --mode random --probability 0.25000000000 -j KUBE-SEP-IKQTLUXFHRYCMMOE | |
| -A KUBE-SVC-2C35TQCS7S5PMMKX -m comment --comment "default/hecate:uwsgi" -m statistic --mode random --probability 0.33332999982 -j KUBE-SEP-GCG7CW6SEC65GFSS | |
| -A KUBE-SVC-2C35TQCS7S5PMMKX -m comment --comment "default/hecate:uwsgi" -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-RSXJ5TTYMG4HP5MT | |
| -A KUBE-SVC-2C35TQCS7S5PMMKX -m comment --comment "default/hecate:uwsgi" -j KUBE-SEP-HS4WO4WW7BIQMMNJ | |
| -A KUBE-SVC-2FGMBP2JGGZTMU6U -m comment --comment "default/sentry-redis:redis" -j KUBE-SEP-64JP6TJDTAQBZDCQ | |
| -A KUBE-SVC-2VSVH4IVBJQG5O7Q -m comment --comment "default/redis-slave:redis" -j KUBE-SEP-2WW32B5QKIDLZ7VJ | |
| -A KUBE-SVC-33NWYKCWNIAPHUE7 -m comment --comment "default/olympus-db-postgresql:postgresql" -j KUBE-SEP-O2LKIUCO6FSZB3LK | |
| -A KUBE-SVC-4RFZCZCEKORSOTRO -m comment --comment "default/sentry-sentry:sentry" -j KUBE-SEP-K2R5UX7UEURKLVKF | |
| -A KUBE-SVC-4W2RFG5RLJX34RCC -m comment --comment "default/my360-api-user:" -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-XQOORX625CS65SV2 | |
| -A KUBE-SVC-4W2RFG5RLJX34RCC -m comment --comment "default/my360-api-user:" -j KUBE-SEP-2HQ5KOWWC52E2LLT | |
| -A KUBE-SVC-5DUUOMNUWS6IYFFO -m comment --comment "default/zeus:uwsgi" -m statistic --mode random --probability 0.10000000009 -j KUBE-SEP-57R634FT2Z2557SN | |
| -A KUBE-SVC-5DUUOMNUWS6IYFFO -m comment --comment "default/zeus:uwsgi" -m statistic --mode random --probability 0.11110999994 -j KUBE-SEP-UZIL2XX5P43F7KY7 | |
| -A KUBE-SVC-5DUUOMNUWS6IYFFO -m comment --comment "default/zeus:uwsgi" -m statistic --mode random --probability 0.12500000000 -j KUBE-SEP-LZFSZU4SAKE7CYEB | |
| -A KUBE-SVC-5DUUOMNUWS6IYFFO -m comment --comment "default/zeus:uwsgi" -m statistic --mode random --probability 0.14286000002 -j KUBE-SEP-EVZG2XZ2ETL264VG | |
| -A KUBE-SVC-5DUUOMNUWS6IYFFO -m comment --comment "default/zeus:uwsgi" -m statistic --mode random --probability 0.16667000018 -j KUBE-SEP-T37MFVOPG7QYBQB5 | |
| -A KUBE-SVC-5DUUOMNUWS6IYFFO -m comment --comment "default/zeus:uwsgi" -m statistic --mode random --probability 0.20000000019 -j KUBE-SEP-DVXTCFQO3QCIXYZU | |
| -A KUBE-SVC-5DUUOMNUWS6IYFFO -m comment --comment "default/zeus:uwsgi" -m statistic --mode random --probability 0.25000000000 -j KUBE-SEP-A6G4Z7LLNWMW5BAK | |
| -A KUBE-SVC-5DUUOMNUWS6IYFFO -m comment --comment "default/zeus:uwsgi" -m statistic --mode random --probability 0.33332999982 -j KUBE-SEP-EI65V2ILECVXWDW3 | |
| -A KUBE-SVC-5DUUOMNUWS6IYFFO -m comment --comment "default/zeus:uwsgi" -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-OZC53AZUFDCKRRUO | |
| -A KUBE-SVC-5DUUOMNUWS6IYFFO -m comment --comment "default/zeus:uwsgi" -j KUBE-SEP-LWA2FK2CH2BUTGVL | |
| -A KUBE-SVC-676NMKB4LX3VXS6Q -m comment --comment "default/midas:uwsgi" -m statistic --mode random --probability 0.10000000009 -j KUBE-SEP-MDAOJ4DZ6E7EHC5W | |
| -A KUBE-SVC-676NMKB4LX3VXS6Q -m comment --comment "default/midas:uwsgi" -m statistic --mode random --probability 0.11110999994 -j KUBE-SEP-PP4FEOBKCYJWDVDM | |
| -A KUBE-SVC-676NMKB4LX3VXS6Q -m comment --comment "default/midas:uwsgi" -m statistic --mode random --probability 0.12500000000 -j KUBE-SEP-65SRNQYIWZQJRIBW | |
| -A KUBE-SVC-676NMKB4LX3VXS6Q -m comment --comment "default/midas:uwsgi" -m statistic --mode random --probability 0.14286000002 -j KUBE-SEP-J7AYD26JUJ224NUV | |
| -A KUBE-SVC-676NMKB4LX3VXS6Q -m comment --comment "default/midas:uwsgi" -m statistic --mode random --probability 0.16667000018 -j KUBE-SEP-IEZMQH3ZID45O77I | |
| -A KUBE-SVC-676NMKB4LX3VXS6Q -m comment --comment "default/midas:uwsgi" -m statistic --mode random --probability 0.20000000019 -j KUBE-SEP-CYDJE7RPHEEQYYW6 | |
| -A KUBE-SVC-676NMKB4LX3VXS6Q -m comment --comment "default/midas:uwsgi" -m statistic --mode random --probability 0.25000000000 -j KUBE-SEP-B42FYSAUMMTDA52G | |
| -A KUBE-SVC-676NMKB4LX3VXS6Q -m comment --comment "default/midas:uwsgi" -m statistic --mode random --probability 0.33332999982 -j KUBE-SEP-NU3C7BB2OGGXYUDR | |
| -A KUBE-SVC-676NMKB4LX3VXS6Q -m comment --comment "default/midas:uwsgi" -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-CI6T5MFJDX44YH7M | |
| -A KUBE-SVC-676NMKB4LX3VXS6Q -m comment --comment "default/midas:uwsgi" -j KUBE-SEP-IW7IUAPJTDZXRDMO | |
| -A KUBE-SVC-7S3EAIQKNIL75FQR -m comment --comment "default/sentry-postgresql:postgresql" -j KUBE-SEP-A3OQWOZUGESQFUQG | |
| -A KUBE-SVC-B7JLY2KJYDPHKXGY -m comment --comment "default/graylog-syslog-tcp:syslog-tcp" -j KUBE-SEP-DD5COG25HKXKGLKQ | |
| -A KUBE-SVC-ERIFXISQEP7F7OF4 -m comment --comment "kube-system/kube-dns:dns-tcp" -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-OES6J5L6TGOYSQA7 | |
| -A KUBE-SVC-ERIFXISQEP7F7OF4 -m comment --comment "kube-system/kube-dns:dns-tcp" -j KUBE-SEP-XFIEG2SM5QU2MLWK | |
| -A KUBE-SVC-ET43IMG646KQ4PJE -m comment --comment "default/api-docs:nginx" -j KUBE-SEP-PKI3Q6UJVA5HQU5J | |
| -A KUBE-SVC-FR76EFT5JH3VYFCM -m comment --comment "default/wordpress:wordpress" -j KUBE-SEP-5ZRU6OOX4RSKQRYV | |
| -A KUBE-SVC-GZS2473WDVDYWOSA -m comment --comment "default/prod-netdata-dashboard:" -m statistic --mode random --probability 0.33332999982 -j KUBE-SEP-6L47JAL3LE3CTQBA | |
| -A KUBE-SVC-GZS2473WDVDYWOSA -m comment --comment "default/prod-netdata-dashboard:" -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-HP66BR6I3WM7NJLB | |
| -A KUBE-SVC-GZS2473WDVDYWOSA -m comment --comment "default/prod-netdata-dashboard:" -j KUBE-SEP-I5YLKS5AAJT7ZO7Y | |
| -A KUBE-SVC-HFVSGUDEKZLWZEG5 -m comment --comment "default/rabbitmq-rabbitmq-ha:epmd" -m statistic --mode random --probability 0.33332999982 -j KUBE-SEP-HOWHXCJGSYYWQN56 | |
| -A KUBE-SVC-HFVSGUDEKZLWZEG5 -m comment --comment "default/rabbitmq-rabbitmq-ha:epmd" -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-YUNWZR2QI3LWJIVZ | |
| -A KUBE-SVC-HFVSGUDEKZLWZEG5 -m comment --comment "default/rabbitmq-rabbitmq-ha:epmd" -j KUBE-SEP-PT63DZL6DKU6BS76 | |
| -A KUBE-SVC-HQST2FPEQ72D7VOL -m comment --comment "default/graylog-gelf-tcp:syslog-tcp" -j KUBE-SEP-VA5PUEV67P4GKSXG | |
| -A KUBE-SVC-I7TGNIU6JERYTRFQ -m comment --comment "default/redis-master:redis" -j KUBE-SEP-AMHKVZ7QN5Q5T6YR | |
| -A KUBE-SVC-IJ6MPYU2ZZ53H5XQ -m comment --comment "default/graylog-elasticsearch:elasticsearch" -j KUBE-SEP-J7O36QDEPUOJHTJB | |
| -A KUBE-SVC-J4PGGZ6AUXZWNA2B -m comment --comment "ingress-nginx/default-http-backend:" -j KUBE-SEP-E3H3UEPABPQYPO3H | |
| -A KUBE-SVC-K7J76NXP7AUZVFGS -m comment --comment "kube-system/tiller-deploy:tiller" -j KUBE-SEP-LNNVLCCFQORZSAQE | |
| -A KUBE-SVC-LC5QY66VUV2HJ6WZ -m comment --comment "kube-system/metrics-server:" -j KUBE-SEP-UTRJ65UG43XGI27B | |
| -A KUBE-SVC-LGLF3LQ6U7LJGNH7 -m comment --comment "default/hades:uwsgi" -m statistic --mode random --probability 0.10000000009 -j KUBE-SEP-RGAQEXSE77WUAHKO | |
| -A KUBE-SVC-LGLF3LQ6U7LJGNH7 -m comment --comment "default/hades:uwsgi" -m statistic --mode random --probability 0.11110999994 -j KUBE-SEP-566OMSFT5INV24CS | |
| -A KUBE-SVC-LGLF3LQ6U7LJGNH7 -m comment --comment "default/hades:uwsgi" -m statistic --mode random --probability 0.12500000000 -j KUBE-SEP-MHAVQ2IHGFAMA342 | |
| -A KUBE-SVC-LGLF3LQ6U7LJGNH7 -m comment --comment "default/hades:uwsgi" -m statistic --mode random --probability 0.14286000002 -j KUBE-SEP-Z2SYITAKLEJVODWQ | |
| -A KUBE-SVC-LGLF3LQ6U7LJGNH7 -m comment --comment "default/hades:uwsgi" -m statistic --mode random --probability 0.16667000018 -j KUBE-SEP-BSGJHHBN6RKTGYGF | |
| -A KUBE-SVC-LGLF3LQ6U7LJGNH7 -m comment --comment "default/hades:uwsgi" -m statistic --mode random --probability 0.20000000019 -j KUBE-SEP-ZLDJB7BYW3KPLHIX | |
| -A KUBE-SVC-LGLF3LQ6U7LJGNH7 -m comment --comment "default/hades:uwsgi" -m statistic --mode random --probability 0.25000000000 -j KUBE-SEP-T7TQVXKNRZBKMFJ4 | |
| -A KUBE-SVC-LGLF3LQ6U7LJGNH7 -m comment --comment "default/hades:uwsgi" -m statistic --mode random --probability 0.33332999982 -j KUBE-SEP-CCOA5AO7MFHYACD2 | |
| -A KUBE-SVC-LGLF3LQ6U7LJGNH7 -m comment --comment "default/hades:uwsgi" -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-IS6DEF5OTL5CWGDH | |
| -A KUBE-SVC-LGLF3LQ6U7LJGNH7 -m comment --comment "default/hades:uwsgi" -j KUBE-SEP-2CAZ3XBOSOXTHDUS | |
| -A KUBE-SVC-LRZBKLYTWRGQ7WNB -m comment --comment "default/graylog-gelf-udp:docker-udp" -j KUBE-SEP-CG3YGUUJJ72XNALU | |
| -A KUBE-SVC-MEX75BADDJ5ASQ6C -m comment --comment "default/graylog-gelf-udp:aphrodite-udp" -j KUBE-SEP-4ZOHBKWCX7YHNBUR | |
| -A KUBE-SVC-MWVH77DHIMA4R3LZ -m comment --comment "default/my360-redirect:http" -j KUBE-SEP-JRU5FXM6KBF5P74Y | |
| -A KUBE-SVC-N3AMT2X5V6XTDNV7 -m comment --comment "default/my360-files:http" -j KUBE-SEP-AJA3HF2KHT5E3FKM | |
| -A KUBE-SVC-NC5CRGHR4SBALHCS -m comment --comment "default/rabbitmq-rabbitmq-ha:amqp" -m statistic --mode random --probability 0.33332999982 -j KUBE-SEP-OXKDPTSATJVTDP7N | |
| -A KUBE-SVC-NC5CRGHR4SBALHCS -m comment --comment "default/rabbitmq-rabbitmq-ha:amqp" -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-IKJYB5DCZZNIKN7K | |
| -A KUBE-SVC-NC5CRGHR4SBALHCS -m comment --comment "default/rabbitmq-rabbitmq-ha:amqp" -j KUBE-SEP-6V2UNCHVFNQMMWCG | |
| -A KUBE-SVC-NPX46M4PTMTKRN6Y -m comment --comment "default/kubernetes:https" -m recent --rcheck --seconds 10800 --reap --name KUBE-SEP-U3ISNHNR3O37ULUV --mask 255.255.255.255 --rsource -j KUBE-SEP-U3ISNHNR3O37ULUV | |
| -A KUBE-SVC-NPX46M4PTMTKRN6Y -m comment --comment "default/kubernetes:https" -m recent --rcheck --seconds 10800 --reap --name KUBE-SEP-4N4WPX5E6VZ3W33P --mask 255.255.255.255 --rsource -j KUBE-SEP-4N4WPX5E6VZ3W33P | |
| -A KUBE-SVC-NPX46M4PTMTKRN6Y -m comment --comment "default/kubernetes:https" -m recent --rcheck --seconds 10800 --reap --name KUBE-SEP-CGOBHC6VQ6C6IT25 --mask 255.255.255.255 --rsource -j KUBE-SEP-CGOBHC6VQ6C6IT25 | |
| -A KUBE-SVC-NPX46M4PTMTKRN6Y -m comment --comment "default/kubernetes:https" -m statistic --mode random --probability 0.33332999982 -j KUBE-SEP-U3ISNHNR3O37ULUV | |
| -A KUBE-SVC-NPX46M4PTMTKRN6Y -m comment --comment "default/kubernetes:https" -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-4N4WPX5E6VZ3W33P | |
| -A KUBE-SVC-NPX46M4PTMTKRN6Y -m comment --comment "default/kubernetes:https" -j KUBE-SEP-CGOBHC6VQ6C6IT25 | |
| -A KUBE-SVC-OOXZ4UPTJ6SI3OFX -m comment --comment "default/lethe:uwsgi" -m statistic --mode random --probability 0.10000000009 -j KUBE-SEP-42SCO54T5R2TNJ6N | |
| -A KUBE-SVC-OOXZ4UPTJ6SI3OFX -m comment --comment "default/lethe:uwsgi" -m statistic --mode random --probability 0.11110999994 -j KUBE-SEP-4ENNMF5AUSUC4NC7 | |
| -A KUBE-SVC-OOXZ4UPTJ6SI3OFX -m comment --comment "default/lethe:uwsgi" -m statistic --mode random --probability 0.12500000000 -j KUBE-SEP-RLQRMAVAKSMMHKMN | |
| -A KUBE-SVC-OOXZ4UPTJ6SI3OFX -m comment --comment "default/lethe:uwsgi" -m statistic --mode random --probability 0.14286000002 -j KUBE-SEP-TFJZ45TMWNDE3ZKY | |
| -A KUBE-SVC-OOXZ4UPTJ6SI3OFX -m comment --comment "default/lethe:uwsgi" -m statistic --mode random --probability 0.16667000018 -j KUBE-SEP-ONFRC47Q42TUVXMW | |
| -A KUBE-SVC-OOXZ4UPTJ6SI3OFX -m comment --comment "default/lethe:uwsgi" -m statistic --mode random --probability 0.20000000019 -j KUBE-SEP-TPKNHQEGJNLRDV3V | |
| -A KUBE-SVC-OOXZ4UPTJ6SI3OFX -m comment --comment "default/lethe:uwsgi" -m statistic --mode random --probability 0.25000000000 -j KUBE-SEP-MZNSYBCWA7WXMPRU | |
| -A KUBE-SVC-OOXZ4UPTJ6SI3OFX -m comment --comment "default/lethe:uwsgi" -m statistic --mode random --probability 0.33332999982 -j KUBE-SEP-76PVWFX4JYWLDMN6 | |
| -A KUBE-SVC-OOXZ4UPTJ6SI3OFX -m comment --comment "default/lethe:uwsgi" -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-ANR76H4XIU2BIYBX | |
| -A KUBE-SVC-OOXZ4UPTJ6SI3OFX -m comment --comment "default/lethe:uwsgi" -j KUBE-SEP-LS7BC5LF4YRCJ676 | |
| -A KUBE-SVC-PHL2ULSQRA7QPP7L -m comment --comment "default/hermes:uwsgi" -m statistic --mode random --probability 0.10000000009 -j KUBE-SEP-MHEZVDHJCT5RUNXX | |
| -A KUBE-SVC-PHL2ULSQRA7QPP7L -m comment --comment "default/hermes:uwsgi" -m statistic --mode random --probability 0.11110999994 -j KUBE-SEP-WDSOJXMMJCZPPSGX | |
| -A KUBE-SVC-PHL2ULSQRA7QPP7L -m comment --comment "default/hermes:uwsgi" -m statistic --mode random --probability 0.12500000000 -j KUBE-SEP-BIIWN27ZF2DSVZ4S | |
| -A KUBE-SVC-PHL2ULSQRA7QPP7L -m comment --comment "default/hermes:uwsgi" -m statistic --mode random --probability 0.14286000002 -j KUBE-SEP-3W5QQUT5QGLCDCC7 | |
| -A KUBE-SVC-PHL2ULSQRA7QPP7L -m comment --comment "default/hermes:uwsgi" -m statistic --mode random --probability 0.16667000018 -j KUBE-SEP-PLBDLG5RFRKTZ2DN | |
| -A KUBE-SVC-PHL2ULSQRA7QPP7L -m comment --comment "default/hermes:uwsgi" -m statistic --mode random --probability 0.20000000019 -j KUBE-SEP-SLJ4MTANYKGWP7HU | |
| -A KUBE-SVC-PHL2ULSQRA7QPP7L -m comment --comment "default/hermes:uwsgi" -m statistic --mode random --probability 0.25000000000 -j KUBE-SEP-GFXEAZECXKCHX564 | |
| -A KUBE-SVC-PHL2ULSQRA7QPP7L -m comment --comment "default/hermes:uwsgi" -m statistic --mode random --probability 0.33332999982 -j KUBE-SEP-KKOOZIZDQASJSTOB | |
| -A KUBE-SVC-PHL2ULSQRA7QPP7L -m comment --comment "default/hermes:uwsgi" -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-VRWXI5AICRPOEXEW | |
| -A KUBE-SVC-PHL2ULSQRA7QPP7L -m comment --comment "default/hermes:uwsgi" -j KUBE-SEP-LQ2WTJAZ3REXHQP7 | |
| -A KUBE-SVC-PP4WXCIFVG3XOVS5 -m comment --comment "default/my360-api-rewards:" -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-6O3BAYJHCS6CSOWR | |
| -A KUBE-SVC-PP4WXCIFVG3XOVS5 -m comment --comment "default/my360-api-rewards:" -j KUBE-SEP-F4DKCVJUKCUE5KYM | |
| -A KUBE-SVC-REQ4FPVT7WYF4VLA -m comment --comment "ingress-nginx/ingress-nginx:http" -m statistic --mode random --probability 0.33332999982 -j KUBE-SEP-YDXSCJK5GGYHGV3E | |
| -A KUBE-SVC-REQ4FPVT7WYF4VLA -m comment --comment "ingress-nginx/ingress-nginx:http" -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-ZWKTHVOSJXRAFACE | |
| -A KUBE-SVC-REQ4FPVT7WYF4VLA -m comment --comment "ingress-nginx/ingress-nginx:http" -j KUBE-SEP-R6EDFS5QLTIZHEEM | |
| -A KUBE-SVC-SFKBQOYF2BMSJKLL -m comment --comment "default/metis:nginx" -m statistic --mode random --probability 0.10000000009 -j KUBE-SEP-23EM4XK5QT7GSZ2D | |
| -A KUBE-SVC-SFKBQOYF2BMSJKLL -m comment --comment "default/metis:nginx" -m statistic --mode random --probability 0.11110999994 -j KUBE-SEP-EIKDO5BV2MIU56TS | |
| -A KUBE-SVC-SFKBQOYF2BMSJKLL -m comment --comment "default/metis:nginx" -m statistic --mode random --probability 0.12500000000 -j KUBE-SEP-CBBOSMRS3B3SWUYB | |
| -A KUBE-SVC-SFKBQOYF2BMSJKLL -m comment --comment "default/metis:nginx" -m statistic --mode random --probability 0.14286000002 -j KUBE-SEP-QQLRQLFRRU2ZD7BH | |
| -A KUBE-SVC-SFKBQOYF2BMSJKLL -m comment --comment "default/metis:nginx" -m statistic --mode random --probability 0.16667000018 -j KUBE-SEP-JE3SUB6G5LERMY2N | |
| -A KUBE-SVC-SFKBQOYF2BMSJKLL -m comment --comment "default/metis:nginx" -m statistic --mode random --probability 0.20000000019 -j KUBE-SEP-UHRVGQA3F5DHITMI | |
| -A KUBE-SVC-SFKBQOYF2BMSJKLL -m comment --comment "default/metis:nginx" -m statistic --mode random --probability 0.25000000000 -j KUBE-SEP-OOF3M6MAX7HCZW7R | |
| -A KUBE-SVC-SFKBQOYF2BMSJKLL -m comment --comment "default/metis:nginx" -m statistic --mode random --probability 0.33332999982 -j KUBE-SEP-ESRCT6VSPUSFSEVY | |
| -A KUBE-SVC-SFKBQOYF2BMSJKLL -m comment --comment "default/metis:nginx" -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-RWAZQ6S4FEG3CEBD | |
| -A KUBE-SVC-SFKBQOYF2BMSJKLL -m comment --comment "default/metis:nginx" -j KUBE-SEP-FRL7NSX6AAGTZ645 | |
| -A KUBE-SVC-T7RXRCCAUHPLG5NX -m comment --comment "default/my360-jeff:" -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-PRUXSJU4XFED5EKL | |
| -A KUBE-SVC-T7RXRCCAUHPLG5NX -m comment --comment "default/my360-jeff:" -j KUBE-SEP-EU2SAOSV3VTCGEE3 | |
| -A KUBE-SVC-TCOU7JCQXEZGVUNU -m comment --comment "kube-system/kube-dns:dns" -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-UEAKXORIEHKUONDL | |
| -A KUBE-SVC-TCOU7JCQXEZGVUNU -m comment --comment "kube-system/kube-dns:dns" -j KUBE-SEP-TFELCJN3T4FY3XWW | |
| -A KUBE-SVC-VJKEPSJP3F5V7BDZ -m comment --comment "default/my360-polymer-library:" -j KUBE-SEP-VIR6SGLXYGK6BPEZ | |
| -A KUBE-SVC-YZNT6P2AN4QFRK7C -m comment --comment "default/rabbitmq-rabbitmq-ha:http" -m statistic --mode random --probability 0.33332999982 -j KUBE-SEP-I6DWOAFD43V5GD7M | |
| -A KUBE-SVC-YZNT6P2AN4QFRK7C -m comment --comment "default/rabbitmq-rabbitmq-ha:http" -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-5VCDBUZPBCYPOXB4 | |
| -A KUBE-SVC-YZNT6P2AN4QFRK7C -m comment --comment "default/rabbitmq-rabbitmq-ha:http" -j KUBE-SEP-HD256TR25FCNCQXZ | |
| -A KUBE-SVC-ZUXUYYHGNKX5XZHV -m comment --comment "default/graylog-graylog:graylog" -j KUBE-SEP-Y6QTZMVTKLDURPJE | |
| -A WEAVE -s 10.32.0.0/12 -d 224.0.0.0/4 -j RETURN | |
| -A WEAVE ! -s 10.32.0.0/12 -d 10.32.0.0/12 -j MASQUERADE | |
| -A WEAVE -s 10.32.0.0/12 ! -d 10.32.0.0/12 -j MASQUERADE | |
| COMMIT | |
| # Completed on Tue Jul 24 15:09:10 2018 | |
| # Generated by iptables-save v1.6.0 on Tue Jul 24 15:09:10 2018 | |
| *security | |
| :INPUT ACCEPT [400612:144247729] | |
| :FORWARD ACCEPT [716503:190928583] | |
| :OUTPUT ACCEPT [375698:115711504] | |
| -A OUTPUT -d 168.63.129.16/32 -p tcp -m owner --uid-owner 0 -j ACCEPT | |
| -A OUTPUT -d 168.63.129.16/32 -p tcp -m conntrack --ctstate INVALID,NEW -j DROP | |
| COMMIT | |
| # Completed on Tue Jul 24 15:09:10 2018 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment