# Generated by ip6tables-save v1.8.8 on Fri Aug  1 19:23:38 2025
*raw
:PREROUTING ACCEPT [184853:16833386]
:OUTPUT ACCEPT [1540:271658]
:CILIUM_OUTPUT_raw - [0:0]
:CILIUM_PRE_raw - [0:0]
[184856:16833634] -A PREROUTING -m comment --comment "cilium-feeder: CILIUM_PRE_raw" -j CILIUM_PRE_raw
[1545:272138] -A OUTPUT -m comment --comment "cilium-feeder: CILIUM_OUTPUT_raw" -j CILIUM_OUTPUT_raw
[60:28558] -A CILIUM_OUTPUT_raw -o cilium_host -m mark --mark 0xa00/0xfffffeff -m comment --comment "cilium: NOTRACK for proxy return traffic" -j CT --notrack
[0:0] -A CILIUM_OUTPUT_raw -o lxc+ -m mark --mark 0xa00/0xfffffeff -m comment --comment "cilium: NOTRACK for proxy return traffic" -j CT --notrack
[500:153768] -A CILIUM_PRE_raw -m mark --mark 0xd00/0xf00 -m comment --comment "cilium-xfrm-notrack:" -j CT --notrack
[460:119955] -A CILIUM_PRE_raw -m mark --mark 0xe00/0xf00 -m comment --comment "cilium-xfrm-notrack:" -j CT --notrack
[42:3574] -A CILIUM_PRE_raw -m mark --mark 0x200/0xf00 -m comment --comment "cilium: NOTRACK for proxy traffic" -j CT --notrack
COMMIT
# Completed on Fri Aug  1 19:23:38 2025
# Generated by ip6tables-save v1.8.8 on Fri Aug  1 19:23:38 2025
*filter
:INPUT ACCEPT [40:3026]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [44:3387]
:CILIUM_FORWARD - [0:0]
:CILIUM_INPUT - [0:0]
:CILIUM_OUTPUT - [0:0]
:KUBE-EXTERNAL-SERVICES - [0:0]
:KUBE-FIREWALL - [0:0]
:KUBE-FORWARD - [0:0]
:KUBE-KUBELET-CANARY - [0:0]
:KUBE-NODEPORTS - [0:0]
:KUBE-PROXY-CANARY - [0:0]
:KUBE-PROXY-FIREWALL - [0:0]
:KUBE-SERVICES - [0:0]
[1434:262016] -A INPUT -m comment --comment "cilium-feeder: CILIUM_INPUT" -j CILIUM_INPUT
[783:71959] -A INPUT -j KUBE-FIREWALL
[52:4208] -A INPUT -m conntrack --ctstate NEW -m comment --comment "kubernetes load balancer firewall" -j KUBE-PROXY-FIREWALL
[785:72103] -A INPUT -m comment --comment "kubernetes health check service ports" -j KUBE-NODEPORTS
[52:4208] -A INPUT -m conntrack --ctstate NEW -m comment --comment "kubernetes externally-visible service portals" -j KUBE-EXTERNAL-SERVICES
[183358:16566206] -A FORWARD -m comment --comment "cilium-feeder: CILIUM_FORWARD" -j CILIUM_FORWARD
[7:560] -A FORWARD -m conntrack --ctstate NEW -m comment --comment "kubernetes load balancer firewall" -j KUBE-PROXY-FIREWALL
[84:23860] -A FORWARD -m comment --comment "kubernetes forwarding rules" -j KUBE-FORWARD
[0:0] -A FORWARD -m conntrack --ctstate NEW -m comment --comment "kubernetes service portals" -j KUBE-SERVICES
[0:0] -A FORWARD -m conntrack --ctstate NEW -m comment --comment "kubernetes externally-visible service portals" -j KUBE-EXTERNAL-SERVICES
[1545:272138] -A OUTPUT -m comment --comment "cilium-feeder: CILIUM_OUTPUT" -j CILIUM_OUTPUT
[950:77965] -A OUTPUT -j KUBE-FIREWALL
[88:6688] -A OUTPUT -m conntrack --ctstate NEW -m comment --comment "kubernetes load balancer firewall" -j KUBE-PROXY-FIREWALL
[88:6688] -A OUTPUT -m conntrack --ctstate NEW -m comment --comment "kubernetes service portals" -j KUBE-SERVICES
[0:0] -A CILIUM_FORWARD -m mark --mark 0xd00/0xf00 -m comment --comment "exclude xfrm marks from filter CILIUM_FORWARD chain" -j ACCEPT
[460:119955] -A CILIUM_FORWARD -m mark --mark 0xe00/0xf00 -m comment --comment "exclude xfrm marks from filter CILIUM_FORWARD chain" -j ACCEPT
[0:0] -A CILIUM_FORWARD -o cilium_host -m comment --comment "cilium: any->cluster on cilium_host forward accept" -j ACCEPT
[0:0] -A CILIUM_FORWARD -i cilium_host -m comment --comment "cilium: cluster->any on cilium_host forward accept (nodeport)" -j ACCEPT
[114683:10232386] -A CILIUM_FORWARD -i lxc+ -m comment --comment "cilium: cluster->any on lxc+ forward accept" -j ACCEPT
[549:180942] -A CILIUM_FORWARD -i cilium_net -m comment --comment "cilium: cluster->any on cilium_net forward accept (nodeport)" -j ACCEPT
[67582:6009063] -A CILIUM_FORWARD -o lxc+ -m comment --comment "cilium: any->cluster on lxc+ forward accept" -j ACCEPT
[0:0] -A CILIUM_FORWARD -i lxc+ -m comment --comment "cilium: cluster->any on lxc+ forward accept (nodeport)" -j ACCEPT
[156:36649] -A CILIUM_INPUT -m mark --mark 0x200/0xf00 -m comment --comment "cilium: ACCEPT for proxy traffic" -j ACCEPT
[500:153768] -A CILIUM_INPUT -m mark --mark 0xd00/0xf00 -m comment --comment "exclude xfrm marks from filter CILIUM_INPUT chain" -j ACCEPT
[0:0] -A CILIUM_INPUT -m mark --mark 0xe00/0xf00 -m comment --comment "exclude xfrm marks from filter CILIUM_INPUT chain" -j ACCEPT
[123:36501] -A CILIUM_OUTPUT -m mark --mark 0xa00/0xe00 -m comment --comment "cilium: ACCEPT for proxy traffic" -j ACCEPT
[0:0] -A CILIUM_OUTPUT -m mark --mark 0xd00/0xf00 -m comment --comment "exclude xfrm marks from filter CILIUM_OUTPUT chain" -j ACCEPT
[490:159300] -A CILIUM_OUTPUT -m mark --mark 0xe00/0xf00 -m comment --comment "exclude xfrm marks from filter CILIUM_OUTPUT chain" -j ACCEPT
[932:76337] -A CILIUM_OUTPUT -m mark ! --mark 0xe00/0xf00 -m mark ! --mark 0xd00/0xf00 -m mark ! --mark 0x400/0xf00 -m mark ! --mark 0xa00/0xe00 -m mark ! --mark 0x800/0xe00 -m mark ! --mark 0xf00/0xf00 -m comment --comment "cilium: host->any mark as from host" -j MARK --set-xmark 0xc00/0xf00
[0:0] -A KUBE-FORWARD -m conntrack --ctstate INVALID -j DROP
[0:0] -A KUBE-FORWARD -m comment --comment "kubernetes forwarding rules" -m mark --mark 0x4000/0x4000 -j ACCEPT
[0:0] -A KUBE-FORWARD -m comment --comment "kubernetes forwarding conntrack rule" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
COMMIT
# Completed on Fri Aug  1 19:23:38 2025
# Generated by ip6tables-save v1.8.8 on Fri Aug  1 19:23:38 2025
*mangle
:PREROUTING ACCEPT [182118:16102433]
:INPUT ACCEPT [642:79762]
:FORWARD ACCEPT [181466:16021807]
:OUTPUT ACCEPT [683:87485]
:POSTROUTING ACCEPT [182149:16109292]
:CILIUM_PRE_mangle - [0:0]
:KUBE-IPTABLES-HINT - [0:0]
:KUBE-KUBELET-CANARY - [0:0]
:KUBE-PROXY-CANARY - [0:0]
[184856:16833634] -A PREROUTING -m comment --comment "cilium-feeder: CILIUM_PRE_mangle" -j CILIUM_PRE_mangle
[141:35449] -A CILIUM_PRE_mangle ! -o lo -m socket --transparent -m mark ! --mark 0xe00/0xf00 -m mark ! --mark 0x800/0xf00 -m comment --comment "cilium: any->pod redirect proxied traffic to host proxy" -j MARK --set-xmark 0x200/0xffffffff
[0:0] -A CILIUM_PRE_mangle -p tcp -m mark --mark 0x51820200 -m comment --comment "cilium: TPROXY to host cilium-dns-egress proxy" -j TPROXY --on-port 33361 --on-ip ::1 --tproxy-mark 0x200/0xffffffff
[0:0] -A CILIUM_PRE_mangle -p udp -m mark --mark 0x51820200 -m comment --comment "cilium: TPROXY to host cilium-dns-egress proxy" -j TPROXY --on-port 33361 --on-ip ::1 --tproxy-mark 0x200/0xffffffff
[3:240] -A CILIUM_PRE_mangle -p tcp -m mark --mark 0xd44b0200 -m comment --comment "cilium: TPROXY to host cilium-http-egress proxy" -j TPROXY --on-port 19412 --on-ip ::1 --tproxy-mark 0x200/0xffffffff
[0:0] -A CILIUM_PRE_mangle -p udp -m mark --mark 0xd44b0200 -m comment --comment "cilium: TPROXY to host cilium-http-egress proxy" -j TPROXY --on-port 19412 --on-ip ::1 --tproxy-mark 0x200/0xffffffff
[12:960] -A CILIUM_PRE_mangle -p tcp -m mark --mark 0x29470200 -m comment --comment "cilium: TPROXY to host cilium-http-ingress proxy" -j TPROXY --on-port 18217 --on-ip ::1 --tproxy-mark 0x200/0xffffffff
[0:0] -A CILIUM_PRE_mangle -p udp -m mark --mark 0x29470200 -m comment --comment "cilium: TPROXY to host cilium-http-ingress proxy" -j TPROXY --on-port 18217 --on-ip ::1 --tproxy-mark 0x200/0xffffffff
[0:0] -A CILIUM_PRE_mangle -p tcp -m mark --mark 0xba4c0200 -m comment --comment "cilium: TPROXY to host cilium-proxylib-egress proxy" -j TPROXY --on-port 19642 --on-ip ::1 --tproxy-mark 0x200/0xffffffff
[0:0] -A CILIUM_PRE_mangle -p udp -m mark --mark 0xba4c0200 -m comment --comment "cilium: TPROXY to host cilium-proxylib-egress proxy" -j TPROXY --on-port 19642 --on-ip ::1 --tproxy-mark 0x200/0xffffffff
COMMIT
# Completed on Fri Aug  1 19:23:38 2025
# Generated by ip6tables-save v1.8.8 on Fri Aug  1 19:23:38 2025
*nat
:PREROUTING ACCEPT [2:152]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [7:544]
:POSTROUTING ACCEPT [9:696]
:CILIUM_POST_nat - [0:0]
:KUBE-EXT-27YWRMSW4RAVU3PK - [0:0]
:KUBE-EXT-2SJUF5GDC6NLARGO - [0:0]
:KUBE-EXT-3QM5IQ6QX7PPX5BT - [0:0]
:KUBE-EXT-BNUWD5A2AZOIN4Z2 - [0:0]
:KUBE-EXT-F4Q44K2SZKRK7TNH - [0:0]
:KUBE-EXT-FO3H5TAIBXYGQWVH - [0:0]
:KUBE-EXT-NI2E673P5HGXOBSN - [0:0]
:KUBE-EXT-U6JYEE6UBJSBLLKL - [0:0]
:KUBE-EXT-ULN7VW6DRN5PSKNW - [0:0]
:KUBE-EXT-WIJ434UCAZQUM5AL - [0:0]
:KUBE-KUBELET-CANARY - [0:0]
:KUBE-MARK-MASQ - [0:0]
:KUBE-NODEPORTS - [0:0]
:KUBE-POSTROUTING - [0:0]
:KUBE-PROXY-CANARY - [0:0]
:KUBE-SEP-B5TL4ARLARVCRCOB - [0:0]
:KUBE-SEP-GNMAFCWTFKD4J34J - [0:0]
:KUBE-SEP-GPWA4P5DSFQS7LU2 - [0:0]
:KUBE-SEP-K54ZPNTFGM4M7SF2 - [0:0]
:KUBE-SEP-LGLT4VFX7N3H3SB6 - [0:0]
:KUBE-SEP-PUMOXLT6VXK2FNTE - [0:0]
:KUBE-SEP-SRRTTU5W2P7RD7ZZ - [0:0]
:KUBE-SEP-TBC2776PUOW34Y2U - [0:0]
:KUBE-SEP-TJNUWGTRYUMJRCQ4 - [0:0]
:KUBE-SEP-VDOSDQPMOULGO5HY - [0:0]
:KUBE-SERVICES - [0:0]
:KUBE-SVC-27YWRMSW4RAVU3PK - [0:0]
:KUBE-SVC-2SJUF5GDC6NLARGO - [0:0]
:KUBE-SVC-3QM5IQ6QX7PPX5BT - [0:0]
:KUBE-SVC-BNUWD5A2AZOIN4Z2 - [0:0]
:KUBE-SVC-F4Q44K2SZKRK7TNH - [0:0]
:KUBE-SVC-FO3H5TAIBXYGQWVH - [0:0]
:KUBE-SVC-NI2E673P5HGXOBSN - [0:0]
:KUBE-SVC-U6JYEE6UBJSBLLKL - [0:0]
:KUBE-SVC-ULN7VW6DRN5PSKNW - [0:0]
:KUBE-SVC-WIJ434UCAZQUM5AL - [0:0]
[283:25151] -A PREROUTING -m comment --comment "kubernetes service portals" -j KUBE-SERVICES
[97:7600] -A OUTPUT -m comment --comment "kubernetes service portals" -j KUBE-SERVICES
[343:29711] -A POSTROUTING -m comment --comment "cilium-feeder: CILIUM_POST_nat" -j CILIUM_POST_nat
[317:27263] -A POSTROUTING -m comment --comment "kubernetes postrouting rules" -j KUBE-POSTROUTING
[0:0] -A CILIUM_POST_nat -m mark --mark 0xd00/0xf00 -m comment --comment "exclude xfrm marks from nat CILIUM_POST_nat chain" -j ACCEPT
[2:336] -A CILIUM_POST_nat -m mark --mark 0xe00/0xf00 -m comment --comment "exclude xfrm marks from nat CILIUM_POST_nat chain" -j ACCEPT
[12:1152] -A CILIUM_POST_nat -s fd00:10:244:3::/64 -m set --match-set cilium_node_set_v6 dst -m comment --comment "exclude traffic to cluster nodes from masquerade" -j ACCEPT
[0:0] -A CILIUM_POST_nat -s fd00:10:244:3::/64 ! -d fd00:10:244::/56 ! -o cilium_+ -m comment --comment "cilium masquerade non-cluster" -j MASQUERADE
[12:960] -A CILIUM_POST_nat -m mark --mark 0xa00/0xe00 -m comment --comment "exclude proxy return traffic from masquerade" -j ACCEPT
[0:0] -A CILIUM_POST_nat -s ::1/128 -o lxc+ -m comment --comment "cilium host->cluster from ::1 masquerade" -j SNAT --to-source fd00:10:244:3::e7e2
[0:0] -A KUBE-EXT-27YWRMSW4RAVU3PK -m comment --comment "masquerade traffic for cilium-test-1/echo-other-node:http external destinations" -j KUBE-MARK-MASQ
[0:0] -A KUBE-EXT-27YWRMSW4RAVU3PK -j KUBE-SVC-27YWRMSW4RAVU3PK
[0:0] -A KUBE-EXT-2SJUF5GDC6NLARGO -m comment --comment "masquerade traffic for cilium-test-2/echo-other-node:http external destinations" -j KUBE-MARK-MASQ
[0:0] -A KUBE-EXT-2SJUF5GDC6NLARGO -j KUBE-SVC-2SJUF5GDC6NLARGO
[3:240] -A KUBE-EXT-3QM5IQ6QX7PPX5BT -m comment --comment "masquerade traffic for cilium-test-3/echo-same-node:http external destinations" -j KUBE-MARK-MASQ
[3:240] -A KUBE-EXT-3QM5IQ6QX7PPX5BT -j KUBE-SVC-3QM5IQ6QX7PPX5BT
[1:80] -A KUBE-EXT-BNUWD5A2AZOIN4Z2 -m comment --comment "masquerade traffic for cilium-test-5/echo-same-node:http external destinations" -j KUBE-MARK-MASQ
[1:80] -A KUBE-EXT-BNUWD5A2AZOIN4Z2 -j KUBE-SVC-BNUWD5A2AZOIN4Z2
[0:0] -A KUBE-EXT-F4Q44K2SZKRK7TNH -m comment --comment "masquerade traffic for cilium-test-1/echo-same-node:http external destinations" -j KUBE-MARK-MASQ
[0:0] -A KUBE-EXT-F4Q44K2SZKRK7TNH -j KUBE-SVC-F4Q44K2SZKRK7TNH
[3:240] -A KUBE-EXT-FO3H5TAIBXYGQWVH -m comment --comment "masquerade traffic for cilium-test-3/echo-other-node:http external destinations" -j KUBE-MARK-MASQ
[3:240] -A KUBE-EXT-FO3H5TAIBXYGQWVH -j KUBE-SVC-FO3H5TAIBXYGQWVH
[0:0] -A KUBE-EXT-NI2E673P5HGXOBSN -m comment --comment "masquerade traffic for cilium-test-2/echo-same-node:http external destinations" -j KUBE-MARK-MASQ
[0:0] -A KUBE-EXT-NI2E673P5HGXOBSN -j KUBE-SVC-NI2E673P5HGXOBSN
[1:80] -A KUBE-EXT-U6JYEE6UBJSBLLKL -m comment --comment "masquerade traffic for cilium-test-5/echo-other-node:http external destinations" -j KUBE-MARK-MASQ
[1:80] -A KUBE-EXT-U6JYEE6UBJSBLLKL -j KUBE-SVC-U6JYEE6UBJSBLLKL
[2:160] -A KUBE-EXT-ULN7VW6DRN5PSKNW -m comment --comment "masquerade traffic for cilium-test-4/echo-other-node:http external destinations" -j KUBE-MARK-MASQ
[2:160] -A KUBE-EXT-ULN7VW6DRN5PSKNW -j KUBE-SVC-ULN7VW6DRN5PSKNW
[2:160] -A KUBE-EXT-WIJ434UCAZQUM5AL -m comment --comment "masquerade traffic for cilium-test-4/echo-same-node:http external destinations" -j KUBE-MARK-MASQ
[2:160] -A KUBE-EXT-WIJ434UCAZQUM5AL -j KUBE-SVC-WIJ434UCAZQUM5AL
[0:0] -A KUBE-MARK-MASQ -j MARK --set-xmark 0x4000/0x4000
[0:0] -A KUBE-NODEPORTS -p tcp -m comment --comment "cilium-test-1/echo-same-node:http" -m tcp --dport 31778 -j KUBE-EXT-F4Q44K2SZKRK7TNH
[0:0] -A KUBE-NODEPORTS -p tcp -m comment --comment "cilium-test-1/echo-other-node:http" -m tcp --dport 32028 -j KUBE-EXT-27YWRMSW4RAVU3PK
[0:0] -A KUBE-NODEPORTS -p tcp -m comment --comment "cilium-test-5/echo-same-node:http" -m tcp --dport 30566 -j KUBE-EXT-BNUWD5A2AZOIN4Z2
[0:0] -A KUBE-NODEPORTS -p tcp -m comment --comment "cilium-test-4/echo-other-node:http" -m tcp --dport 31157 -j KUBE-EXT-ULN7VW6DRN5PSKNW
[0:0] -A KUBE-NODEPORTS -p tcp -m comment --comment "cilium-test-5/echo-other-node:http" -m tcp --dport 31472 -j KUBE-EXT-U6JYEE6UBJSBLLKL
[0:0] -A KUBE-NODEPORTS -p tcp -m comment --comment "cilium-test-3/echo-other-node:http" -m tcp --dport 32270 -j KUBE-EXT-FO3H5TAIBXYGQWVH
[0:0] -A KUBE-NODEPORTS -p tcp -m comment --comment "cilium-test-2/echo-same-node:http" -m tcp --dport 32023 -j KUBE-EXT-NI2E673P5HGXOBSN
[0:0] -A KUBE-NODEPORTS -p tcp -m comment --comment "cilium-test-2/echo-other-node:http" -m tcp --dport 30474 -j KUBE-EXT-2SJUF5GDC6NLARGO
[0:0] -A KUBE-NODEPORTS -p tcp -m comment --comment "cilium-test-4/echo-same-node:http" -m tcp --dport 31649 -j KUBE-EXT-WIJ434UCAZQUM5AL
[0:0] -A KUBE-NODEPORTS -p tcp -m comment --comment "cilium-test-3/echo-same-node:http" -m tcp --dport 31905 -j KUBE-EXT-3QM5IQ6QX7PPX5BT
[9:696] -A KUBE-POSTROUTING -m mark ! --mark 0x4000/0x4000 -j RETURN
[0:0] -A KUBE-POSTROUTING -j MARK --set-xmark 0x4000/0x0
[0:0] -A KUBE-POSTROUTING -m comment --comment "kubernetes service traffic requiring SNAT" -j MASQUERADE --random-fully
[0:0] -A KUBE-SEP-B5TL4ARLARVCRCOB -s fd00:10:244:3::dbb3/128 -m comment --comment "cilium-test-5/echo-other-node:http" -j KUBE-MARK-MASQ
[1:80] -A KUBE-SEP-B5TL4ARLARVCRCOB -p tcp -m comment --comment "cilium-test-5/echo-other-node:http" -m tcp -j DNAT --to-destination [fd00:10:244:3::dbb3]:8080
[0:0] -A KUBE-SEP-GNMAFCWTFKD4J34J -s fd00:10:244:3::9490/128 -m comment --comment "cilium-test-4/echo-same-node:http" -j KUBE-MARK-MASQ
[2:160] -A KUBE-SEP-GNMAFCWTFKD4J34J -p tcp -m comment --comment "cilium-test-4/echo-same-node:http" -m tcp -j DNAT --to-destination [fd00:10:244:3::9490]:8080
[0:0] -A KUBE-SEP-GPWA4P5DSFQS7LU2 -s fd00:10:244:3::1c8f/128 -m comment --comment "cilium-test-1/echo-other-node:http" -j KUBE-MARK-MASQ
[0:0] -A KUBE-SEP-GPWA4P5DSFQS7LU2 -p tcp -m comment --comment "cilium-test-1/echo-other-node:http" -m tcp -j DNAT --to-destination [fd00:10:244:3::1c8f]:8080
[0:0] -A KUBE-SEP-K54ZPNTFGM4M7SF2 -s fd00:10:244:2::d366/128 -m comment --comment "cilium-test-1/echo-same-node:http" -j KUBE-MARK-MASQ
[0:0] -A KUBE-SEP-K54ZPNTFGM4M7SF2 -p tcp -m comment --comment "cilium-test-1/echo-same-node:http" -m tcp -j DNAT --to-destination [fd00:10:244:2::d366]:8080
[0:0] -A KUBE-SEP-LGLT4VFX7N3H3SB6 -s fd00:10:244::c16f/128 -m comment --comment "cilium-test-4/echo-other-node:http" -j KUBE-MARK-MASQ
[2:160] -A KUBE-SEP-LGLT4VFX7N3H3SB6 -p tcp -m comment --comment "cilium-test-4/echo-other-node:http" -m tcp -j DNAT --to-destination [fd00:10:244::c16f]:8080
[0:0] -A KUBE-SEP-PUMOXLT6VXK2FNTE -s fd00:10:244:2::937f/128 -m comment --comment "cilium-test-3/echo-other-node:http" -j KUBE-MARK-MASQ
[3:240] -A KUBE-SEP-PUMOXLT6VXK2FNTE -p tcp -m comment --comment "cilium-test-3/echo-other-node:http" -m tcp -j DNAT --to-destination [fd00:10:244:2::937f]:8080
[0:0] -A KUBE-SEP-SRRTTU5W2P7RD7ZZ -s fd00:10:244:3::7e15/128 -m comment --comment "cilium-test-2/echo-other-node:http" -j KUBE-MARK-MASQ
[0:0] -A KUBE-SEP-SRRTTU5W2P7RD7ZZ -p tcp -m comment --comment "cilium-test-2/echo-other-node:http" -m tcp -j DNAT --to-destination [fd00:10:244:3::7e15]:8080
[0:0] -A KUBE-SEP-TBC2776PUOW34Y2U -s fd00:10:244:2::c45/128 -m comment --comment "cilium-test-2/echo-same-node:http" -j KUBE-MARK-MASQ
[0:0] -A KUBE-SEP-TBC2776PUOW34Y2U -p tcp -m comment --comment "cilium-test-2/echo-same-node:http" -m tcp -j DNAT --to-destination [fd00:10:244:2::c45]:8080
[0:0] -A KUBE-SEP-TJNUWGTRYUMJRCQ4 -s fd00:10:244::450a/128 -m comment --comment "cilium-test-3/echo-same-node:http" -j KUBE-MARK-MASQ
[3:240] -A KUBE-SEP-TJNUWGTRYUMJRCQ4 -p tcp -m comment --comment "cilium-test-3/echo-same-node:http" -m tcp -j DNAT --to-destination [fd00:10:244::450a]:8080
[0:0] -A KUBE-SEP-VDOSDQPMOULGO5HY -s fd00:10:244:2::b832/128 -m comment --comment "cilium-test-5/echo-same-node:http" -j KUBE-MARK-MASQ
[1:80] -A KUBE-SEP-VDOSDQPMOULGO5HY -p tcp -m comment --comment "cilium-test-5/echo-same-node:http" -m tcp -j DNAT --to-destination [fd00:10:244:2::b832]:8080
[0:0] -A KUBE-SERVICES -d fd00:10:96::d292/128 -p tcp -m comment --comment "cilium-test-1/echo-same-node:http cluster IP" -m tcp --dport 8080 -j KUBE-SVC-F4Q44K2SZKRK7TNH
[0:0] -A KUBE-SERVICES -d fd00:10:96::c92a/128 -p tcp -m comment --comment "cilium-test-1/echo-other-node:http cluster IP" -m tcp --dport 8080 -j KUBE-SVC-27YWRMSW4RAVU3PK
[0:0] -A KUBE-SERVICES -d fd00:10:96::f03/128 -p tcp -m comment --comment "cilium-test-5/echo-same-node:http cluster IP" -m tcp --dport 8080 -j KUBE-SVC-BNUWD5A2AZOIN4Z2
[0:0] -A KUBE-SERVICES -d fd00:10:96::a60c/128 -p tcp -m comment --comment "cilium-test-4/echo-other-node:http cluster IP" -m tcp --dport 8080 -j KUBE-SVC-ULN7VW6DRN5PSKNW
[0:0] -A KUBE-SERVICES -d fd00:10:96::b68/128 -p tcp -m comment --comment "cilium-test-5/echo-other-node:http cluster IP" -m tcp --dport 8080 -j KUBE-SVC-U6JYEE6UBJSBLLKL
[0:0] -A KUBE-SERVICES -d fd00:10:96::e3bd/128 -p tcp -m comment --comment "cilium-test-3/echo-other-node:http cluster IP" -m tcp --dport 8080 -j KUBE-SVC-FO3H5TAIBXYGQWVH
[0:0] -A KUBE-SERVICES -d fd00:10:96::f883/128 -p tcp -m comment --comment "cilium-test-2/echo-same-node:http cluster IP" -m tcp --dport 8080 -j KUBE-SVC-NI2E673P5HGXOBSN
[0:0] -A KUBE-SERVICES -d fd00:10:96::7211/128 -p tcp -m comment --comment "cilium-test-2/echo-other-node:http cluster IP" -m tcp --dport 8080 -j KUBE-SVC-2SJUF5GDC6NLARGO
[0:0] -A KUBE-SERVICES -d fd00:10:96::2370/128 -p tcp -m comment --comment "cilium-test-4/echo-same-node:http cluster IP" -m tcp --dport 8080 -j KUBE-SVC-WIJ434UCAZQUM5AL
[0:0] -A KUBE-SERVICES -d fd00:10:96::f95c/128 -p tcp -m comment --comment "cilium-test-3/echo-same-node:http cluster IP" -m tcp --dport 8080 -j KUBE-SVC-3QM5IQ6QX7PPX5BT
[0:0] -A KUBE-SERVICES ! -d ::1/128 -m comment --comment "kubernetes service nodeports; NOTE: this must be the last rule in this chain" -m addrtype --dst-type LOCAL -j KUBE-NODEPORTS
[0:0] -A KUBE-SVC-27YWRMSW4RAVU3PK ! -s fd00:10:244::/56 -d fd00:10:96::c92a/128 -p tcp -m comment --comment "cilium-test-1/echo-other-node:http cluster IP" -m tcp --dport 8080 -j KUBE-MARK-MASQ
[0:0] -A KUBE-SVC-27YWRMSW4RAVU3PK -m comment --comment "cilium-test-1/echo-other-node:http -> [fd00:10:244:3::1c8f]:8080" -j KUBE-SEP-GPWA4P5DSFQS7LU2
[0:0] -A KUBE-SVC-2SJUF5GDC6NLARGO ! -s fd00:10:244::/56 -d fd00:10:96::7211/128 -p tcp -m comment --comment "cilium-test-2/echo-other-node:http cluster IP" -m tcp --dport 8080 -j KUBE-MARK-MASQ
[0:0] -A KUBE-SVC-2SJUF5GDC6NLARGO -m comment --comment "cilium-test-2/echo-other-node:http -> [fd00:10:244:3::7e15]:8080" -j KUBE-SEP-SRRTTU5W2P7RD7ZZ
[0:0] -A KUBE-SVC-3QM5IQ6QX7PPX5BT ! -s fd00:10:244::/56 -d fd00:10:96::f95c/128 -p tcp -m comment --comment "cilium-test-3/echo-same-node:http cluster IP" -m tcp --dport 8080 -j KUBE-MARK-MASQ
[3:240] -A KUBE-SVC-3QM5IQ6QX7PPX5BT -m comment --comment "cilium-test-3/echo-same-node:http -> [fd00:10:244::450a]:8080" -j KUBE-SEP-TJNUWGTRYUMJRCQ4
[0:0] -A KUBE-SVC-BNUWD5A2AZOIN4Z2 ! -s fd00:10:244::/56 -d fd00:10:96::f03/128 -p tcp -m comment --comment "cilium-test-5/echo-same-node:http cluster IP" -m tcp --dport 8080 -j KUBE-MARK-MASQ
[1:80] -A KUBE-SVC-BNUWD5A2AZOIN4Z2 -m comment --comment "cilium-test-5/echo-same-node:http -> [fd00:10:244:2::b832]:8080" -j KUBE-SEP-VDOSDQPMOULGO5HY
[0:0] -A KUBE-SVC-F4Q44K2SZKRK7TNH ! -s fd00:10:244::/56 -d fd00:10:96::d292/128 -p tcp -m comment --comment "cilium-test-1/echo-same-node:http cluster IP" -m tcp --dport 8080 -j KUBE-MARK-MASQ
[0:0] -A KUBE-SVC-F4Q44K2SZKRK7TNH -m comment --comment "cilium-test-1/echo-same-node:http -> [fd00:10:244:2::d366]:8080" -j KUBE-SEP-K54ZPNTFGM4M7SF2
[0:0] -A KUBE-SVC-FO3H5TAIBXYGQWVH ! -s fd00:10:244::/56 -d fd00:10:96::e3bd/128 -p tcp -m comment --comment "cilium-test-3/echo-other-node:http cluster IP" -m tcp --dport 8080 -j KUBE-MARK-MASQ
[3:240] -A KUBE-SVC-FO3H5TAIBXYGQWVH -m comment --comment "cilium-test-3/echo-other-node:http -> [fd00:10:244:2::937f]:8080" -j KUBE-SEP-PUMOXLT6VXK2FNTE
[0:0] -A KUBE-SVC-NI2E673P5HGXOBSN ! -s fd00:10:244::/56 -d fd00:10:96::f883/128 -p tcp -m comment --comment "cilium-test-2/echo-same-node:http cluster IP" -m tcp --dport 8080 -j KUBE-MARK-MASQ
[0:0] -A KUBE-SVC-NI2E673P5HGXOBSN -m comment --comment "cilium-test-2/echo-same-node:http -> [fd00:10:244:2::c45]:8080" -j KUBE-SEP-TBC2776PUOW34Y2U
[0:0] -A KUBE-SVC-U6JYEE6UBJSBLLKL ! -s fd00:10:244::/56 -d fd00:10:96::b68/128 -p tcp -m comment --comment "cilium-test-5/echo-other-node:http cluster IP" -m tcp --dport 8080 -j KUBE-MARK-MASQ
[1:80] -A KUBE-SVC-U6JYEE6UBJSBLLKL -m comment --comment "cilium-test-5/echo-other-node:http -> [fd00:10:244:3::dbb3]:8080" -j KUBE-SEP-B5TL4ARLARVCRCOB
[0:0] -A KUBE-SVC-ULN7VW6DRN5PSKNW ! -s fd00:10:244::/56 -d fd00:10:96::a60c/128 -p tcp -m comment --comment "cilium-test-4/echo-other-node:http cluster IP" -m tcp --dport 8080 -j KUBE-MARK-MASQ
[2:160] -A KUBE-SVC-ULN7VW6DRN5PSKNW -m comment --comment "cilium-test-4/echo-other-node:http -> [fd00:10:244::c16f]:8080" -j KUBE-SEP-LGLT4VFX7N3H3SB6
[0:0] -A KUBE-SVC-WIJ434UCAZQUM5AL ! -s fd00:10:244::/56 -d fd00:10:96::2370/128 -p tcp -m comment --comment "cilium-test-4/echo-same-node:http cluster IP" -m tcp --dport 8080 -j KUBE-MARK-MASQ
[2:160] -A KUBE-SVC-WIJ434UCAZQUM5AL -m comment --comment "cilium-test-4/echo-same-node:http -> [fd00:10:244:3::9490]:8080" -j KUBE-SEP-GNMAFCWTFKD4J34J
COMMIT
# Completed on Fri Aug  1 19:23:38 2025
