Skip to content

Instantly share code, notes, and snippets.

@fmuyassarov

fmuyassarov/calico_4_16.09_0.txt

Created September 16, 2025 14:10
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save fmuyassarov/6336a24e6ab216b7a6a4d73aa7ccd8b5 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save fmuyassarov/6336a24e6ab216b7a6a4d73aa7ccd8b5 to your computer and use it in GitHub Desktop.
Download ZIP
NetworkPolicy is created
Raw
calico_4_16.09_0.txt
Chain INPUT (policy ACCEPT 952M packets, 309G bytes)
pkts bytes target prot opt in out source destination
130M 40G cali-INPUT all -- any any anywhere anywhere /* cali:Cz_u1IQiXIMmKD4c */
126M 39G KUBE-IPVS-FILTER all -- any any anywhere anywhere /* kubernetes ipvs access filter */
126M 39G KUBE-PROXY-FIREWALL all -- any any anywhere anywhere /* kube-proxy firewall rules */
126M 39G KUBE-NODE-PORT all -- any any anywhere anywhere /* kubernetes health check rules */
14M 833M KUBE-PROXY-FIREWALL all -- any any anywhere anywhere ctstate NEW /* kubernetes load balancer firewall */
952M 308G KUBE-NODEPORTS all -- any any anywhere anywhere /* kubernetes health check service ports */
14M 833M KUBE-EXTERNAL-SERVICES all -- any any anywhere anywhere ctstate NEW /* kubernetes externally-visible service portals */
952M 309G KUBE-FIREWALL all -- any any anywhere anywhere
Chain FORWARD (policy ACCEPT 2 packets, 181 bytes)
pkts bytes target prot opt in out source destination
46 5885 cali-FORWARD all -- any any anywhere anywhere /* cali:wUHhoiAYhphO9Mso */
16057 82M DOCKER-USER all -- any any anywhere anywhere
16057 82M DOCKER-FORWARD all -- any any anywhere anywhere
83 6844 KUBE-PROXY-FIREWALL all -- any any anywhere anywhere /* kube-proxy firewall rules */
817K 87M KUBE-PROXY-FIREWALL all -- any any anywhere anywhere ctstate NEW /* kubernetes load balancer firewall */
1164K 1940M KUBE-FORWARD all -- any any anywhere anywhere /* kubernetes forwarding rules */
817K 87M KUBE-SERVICES all -- any any anywhere anywhere ctstate NEW /* kubernetes service portals */
817K 87M KUBE-EXTERNAL-SERVICES all -- any any anywhere anywhere ctstate NEW /* kubernetes externally-visible service portals */
20 1634 ACCEPT all -- any any anywhere anywhere /* cali:S93hcgKJrXEqnTfs */ /* Policy explicitly accepted packet. */ mark match 0x10000/0x10000
0 0 MARK all -- any any anywhere anywhere /* cali:mp77cMpurHhyjLrM */ MARK or 0x10000
Chain OUTPUT (policy ACCEPT 1011M packets, 331G bytes)
pkts bytes target prot opt in out source destination
130M 38G cali-OUTPUT all -- any any anywhere anywhere /* cali:tVnHkvAo15HuiPy0 */
130M 38G KUBE-IPVS-OUT-FILTER all -- any any anywhere anywhere /* kubernetes ipvs access filter */
17M 1016M KUBE-PROXY-FIREWALL all -- any any anywhere anywhere ctstate NEW /* kubernetes load balancer firewall */
17M 1016M KUBE-SERVICES all -- any any anywhere anywhere ctstate NEW /* kubernetes service portals */
1011M 331G KUBE-FIREWALL all -- any any anywhere anywhere
Chain DOCKER (2 references)
pkts bytes target prot opt in out source destination
0 0 DROP all -- !br-bc18ce9c999c br-bc18ce9c999c anywhere anywhere
0 0 DROP all -- !docker0 docker0 anywhere anywhere
Chain DOCKER-BRIDGE (1 references)
pkts bytes target prot opt in out source destination
0 0 DOCKER all -- any br-bc18ce9c999c anywhere anywhere
0 0 DOCKER all -- any docker0 anywhere anywhere
Chain DOCKER-CT (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any br-bc18ce9c999c anywhere anywhere ctstate RELATED,ESTABLISHED
10330 81M ACCEPT all -- any docker0 anywhere anywhere ctstate RELATED,ESTABLISHED
Chain DOCKER-FORWARD (1 references)
pkts bytes target prot opt in out source destination
16057 82M DOCKER-CT all -- any any anywhere anywhere
5727 517K DOCKER-ISOLATION-STAGE-1 all -- any any anywhere anywhere
5727 517K DOCKER-BRIDGE all -- any any anywhere anywhere
0 0 ACCEPT all -- br-bc18ce9c999c any anywhere anywhere
5707 516K ACCEPT all -- docker0 any anywhere anywhere
Chain DOCKER-ISOLATION-STAGE-1 (1 references)
pkts bytes target prot opt in out source destination
0 0 DOCKER-ISOLATION-STAGE-2 all -- br-bc18ce9c999c !br-bc18ce9c999c anywhere anywhere
5707 516K DOCKER-ISOLATION-STAGE-2 all -- docker0 !docker0 anywhere anywhere
Chain DOCKER-ISOLATION-STAGE-2 (2 references)
pkts bytes target prot opt in out source destination
0 0 DROP all -- any docker0 anywhere anywhere
0 0 DROP all -- any br-bc18ce9c999c anywhere anywhere
Chain DOCKER-USER (1 references)
pkts bytes target prot opt in out source destination
833K 169M RETURN all -- any any anywhere anywhere
Chain KUBE-EXTERNAL-SERVICES (2 references)
pkts bytes target prot opt in out source destination
Chain KUBE-FIREWALL (2 references)
pkts bytes target prot opt in out source destination
0 0 DROP all -- any any !localhost/8 localhost/8 /* block incoming localnet connections */ ! ctstate RELATED,ESTABLISHED,DNAT
Chain KUBE-FORWARD (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* kubernetes forwarding rules */ mark match 0x4000/0x4000
0 0 ACCEPT all -- any any anywhere anywhere /* kubernetes forwarding conntrack rule */ ctstate RELATED,ESTABLISHED
Chain KUBE-IPVS-FILTER (1 references)
pkts bytes target prot opt in out source destination
0 0 RETURN all -- any any anywhere anywhere match-set KUBE-LOAD-BALANCER dst,dst
0 0 RETURN all -- any any anywhere anywhere match-set KUBE-CLUSTER-IP dst,dst
0 0 RETURN all -- any any anywhere anywhere match-set KUBE-EXTERNAL-IP dst,dst
0 0 RETURN all -- any any anywhere anywhere match-set KUBE-EXTERNAL-IP-LOCAL dst,dst
0 0 RETURN all -- any any anywhere anywhere match-set KUBE-HEALTH-CHECK-NODE-PORT dst
0 0 REJECT all -- any any anywhere anywhere ctstate NEW match-set KUBE-IPVS-IPS dst reject-with icmp-port-unreachable
Chain KUBE-IPVS-OUT-FILTER (1 references)
pkts bytes target prot opt in out source destination
Chain KUBE-KUBELET-CANARY (0 references)
pkts bytes target prot opt in out source destination
Chain KUBE-NODE-PORT (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* Kubernetes health check node port */ match-set KUBE-HEALTH-CHECK-NODE-PORT dst
Chain KUBE-NODEPORTS (1 references)
pkts bytes target prot opt in out source destination
Chain KUBE-PROXY-CANARY (0 references)
pkts bytes target prot opt in out source destination
Chain KUBE-PROXY-FIREWALL (5 references)
pkts bytes target prot opt in out source destination
Chain KUBE-SERVICES (2 references)
pkts bytes target prot opt in out source destination
Chain KUBE-SOURCE-RANGES-FIREWALL (0 references)
pkts bytes target prot opt in out source destination
0 0 DROP all -- any any anywhere anywhere
Chain cali-FORWARD (1 references)
pkts bytes target prot opt in out source destination
12 1638 MARK all -- any any anywhere anywhere /* cali:vjrMJCRpqwy5oRoX */ MARK and 0xfff1ffff
12 1638 cali-from-hep-forward all -- any any anywhere anywhere /* cali:A_sPAO0mcxbT9mOV */ mark match 0x0/0x10000
6 390 cali-from-wl-dispatch all -- cali+ any anywhere anywhere /* cali:8ZoYfO5HKXWbB3pk */
6 1248 cali-to-wl-dispatch all -- any cali+ anywhere anywhere /* cali:jdEuaPBe14V2hutn */
5 305 cali-to-hep-forward all -- any any anywhere anywhere /* cali:12bc6HljsMKsmfr- */
5 305 cali-cidr-block all -- any any anywhere anywhere /* cali:NOSxoaGx8OIstr1z */
Chain cali-INPUT (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT udp -- any any anywhere anywhere /* cali:J76FwxInZIsk7uKY */ /* Allow IPv4 VXLAN packets from allowed hosts */ multiport dports 4789 match-set cali40all-vxlan-net src ADDRTYPE match dst-type LOCAL
0 0 DROP udp -- any any anywhere anywhere /* cali:EDCNTTxYfggApx8C */ /* Drop IPv4 VXLAN packets from non-allowed hosts */ multiport dports 4789 ADDRTYPE match dst-type LOCAL
175K 159M MARK all -- any any anywhere anywhere /* cali:B_8fGLpLlTQcXZgh */ MARK and 0xfffff
175K 159M cali-forward-check all -- any any anywhere anywhere /* cali:AD1HGbXEph59_YyS */
58 5711 RETURN all -- any any anywhere anywhere /* cali:NmYAbfrd1o63cxNo */ mark match ! 0x0/0xfff00000
3562 898K cali-wl-to-host all -- cali+ any anywhere anywhere [goto] /* cali:O-dDeZL8fOcsUtUD */
0 0 ACCEPT all -- any any anywhere anywhere /* cali:ZI1yfOrOsD5YjTbe */ mark match 0x10000/0x10000
171K 158M MARK all -- any any anywhere anywhere /* cali:XxqbC-iTL5WaS8eO */ MARK and 0xfff0ffff
171K 158M cali-from-host-endpoint all -- any any anywhere anywhere /* cali:IZ5RzzpDkgrPBLwh */
0 0 ACCEPT all -- any any anywhere anywhere /* cali:jUXk5Q3mXlNarOhs */ /* Host endpoint policy accepted packet. */ mark match 0x10000/0x10000
Chain cali-OUTPUT (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:Mq1_rAdXXH3YkrzW */ mark match 0x10000/0x10000
0 0 cali-forward-endpoint-mark all -- any any anywhere anywhere [goto] /* cali:5Z67OUUpTOM7Xa1a */ mark match ! 0x0/0xfff00000
3463 2899K RETURN all -- any cali+ anywhere anywhere /* cali:M2Wf0OehNdig8MHR */
0 0 ACCEPT udp -- any any anywhere anywhere /* cali:ClE20y3NCwgoEuMI */ /* Allow IPv4 VXLAN packets to other allowed hosts */ multiport dports 4789 ADDRTYPE match src-type LOCAL match-set cali40all-vxlan-net dst
167K 66M MARK all -- any any anywhere anywhere /* cali:aMcwcA5f79hQPBgR */ MARK and 0xfff0ffff
167K 66M cali-to-host-endpoint all -- any any anywhere anywhere /* cali:n_vqcKl8u9NdpYmx */ ! ctstate DNAT
0 0 ACCEPT all -- any any anywhere anywhere /* cali:979hsn7wL9UDIMMj */ /* Host endpoint policy accepted packet. */ mark match 0x10000/0x10000
Chain cali-cidr-block (1 references)
pkts bytes target prot opt in out source destination
Chain cali-failsafe-in (3 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:wWFQM43tJU7wwnFZ */ multiport dports ssh
0 0 ACCEPT udp -- any any anywhere anywhere /* cali:LwNV--R8MjeUYacw */ multiport dports bootpc
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:QOO5NUOqOSS1_Iw0 */ multiport dports bgp
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:cwZWoBSwVeIAZmVN */ multiport dports 2379
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:7FbNXT91kugE_upR */ multiport dports 2380
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:8Ftbkk2dRH2eEeq1 */ multiport dports 5473
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:-JoRSaAQZPJAegMo */ multiport dports 6443
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:PUKij4Rn9njHfVTi */ multiport dports 6666
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:vSprVE-4rient0wc */ multiport dports ircd
Chain cali-failsafe-out (3 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT udp -- any any anywhere anywhere /* cali:82hjfji-wChFhAqL */ multiport dports domain
0 0 ACCEPT udp -- any any anywhere anywhere /* cali:TNM3RfEjbNr72hgH */ multiport dports bootps
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:ycxKitIl4u3dK0HR */ multiport dports bgp
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:hxjEWyxdkXXkdvut */ multiport dports 2379
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:cA_GLtruuvG88KiO */ multiport dports 2380
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:ALz4foMyfue7vaqK */ multiport dports 5473
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:zvCXe1uOiQ8adzhn */ multiport dports 6443
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:Lppo9JuKR7AyZoWQ */ multiport dports 6666
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:EoOkKdH0fekirfk8 */ multiport dports ircd
Chain cali-fh-adummy0 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:KfSIATvjGaK4zGj1 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:9P1i-1Uq2VzBO2PV */ ctstate INVALID
0 0 cali-failsafe-in all -- any any anywhere anywhere /* cali:9fTcLBxw7RpWzYcn */
0 0 MARK all -- any any anywhere anywhere /* cali:FBSa7pCs1mUiQqM8 */ MARK and 0xfffcffff
0 0 DROP all -- any any anywhere anywhere /* cali:ej0Jv-1dernW3FtU */ /* Drop if no profiles matched */
Chain cali-fh-adummy1 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:v4M9QFls4ZPiyZy7 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:3AmWDyZULYQY9GjN */ ctstate INVALID
0 0 cali-failsafe-in all -- any any anywhere anywhere /* cali:2dVDormZdB8Q6KsH */
0 0 MARK all -- any any anywhere anywhere /* cali:4rttKZJ47f19c54X */ MARK and 0xfffcffff
0 0 DROP all -- any any anywhere anywhere /* cali:ia5YyI-UpdNlph1r */ /* Drop if no profiles matched */
Chain cali-fh-cdummy0 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:wQNdFSotavCSO0VD */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:ogjBiTOJ3F4yQM1k */ ctstate INVALID
0 0 cali-failsafe-in all -- any any anywhere anywhere /* cali:8ojDI8KR9JE8GIyT */
0 0 MARK all -- any any anywhere anywhere /* cali:WUrm0g_vABO1YJkM */ MARK and 0xfffcffff
0 0 DROP all -- any any anywhere anywhere /* cali:yVj5AbsxwzgfpDWR */ /* Drop if no profiles matched */
Chain cali-fhfw-adummy0 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:p6N3xKLkWCAfIBz7 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:SO8c1B0UTbPSuOJi */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:ecJjlnMA_3gt3VhD */ MARK and 0xfffcffff
0 0 MARK all -- any any anywhere anywhere /* cali:u_FsQ3kZMBA2R1aA */ /* Allow forwarded traffic by default */ MARK or 0x10000
0 0 RETURN all -- any any anywhere anywhere /* cali:ZQ7qVaUNIUtO9rA9 */ /* Return for accepted forward traffic */
Chain cali-fhfw-adummy1 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:iyFDpZ3GCaODXV8_ */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:R7ttpJi85eXZRhhh */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:mFNHOTYjHonv6NUc */ MARK and 0xfffcffff
0 0 MARK all -- any any anywhere anywhere /* cali:v1NCCt3EkuqkogCs */ /* Allow forwarded traffic by default */ MARK or 0x10000
0 0 RETURN all -- any any anywhere anywhere /* cali:-_4UngRn6sG-pB7C */ /* Return for accepted forward traffic */
Chain cali-fhfw-cdummy0 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:8iH-8Pj5FbqTCEEY */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:witZtAzEZxdUFJMA */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:Z-NR55r2UW9m72x9 */ MARK and 0xfffcffff
0 0 MARK all -- any any anywhere anywhere /* cali:zPyQulz6xiDgtoZp */ /* Allow forwarded traffic by default */ MARK or 0x10000
0 0 RETURN all -- any any anywhere anywhere /* cali:m6E3DrPjujVLLpOR */ /* Return for accepted forward traffic */
Chain cali-forward-check (1 references)
pkts bytes target prot opt in out source destination
128M 39G RETURN all -- any any anywhere anywhere /* cali:Pbldlb4FaULvpdD8 */ ctstate RELATED,ESTABLISHED
0 0 cali-set-endpoint-mark tcp -- any any anywhere anywhere [goto] /* cali:ZD-6UxuUtGW-xtzg */ /* To kubernetes NodePort service */ multiport dports 30000:32767 match-set cali40this-host dst
0 0 cali-set-endpoint-mark udp -- any any anywhere anywhere [goto] /* cali:CbPfUajQ2bFVnDq4 */ /* To kubernetes NodePort service */ multiport dports 30000:32767 match-set cali40this-host dst
15166 1758K cali-set-endpoint-mark all -- any any anywhere anywhere /* cali:jmhU0ODogX-Zfe5g */ /* To kubernetes service */ ! match-set cali40this-host dst
Chain cali-forward-endpoint-mark (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-from-endpoint-mark all -- any any anywhere anywhere /* cali:O0SmFDrnm7KggWqW */ mark match ! 0x100000/0xfff00000
0 0 cali-to-wl-dispatch all -- any cali+ anywhere anywhere /* cali:aFl0WFKRxDqj8oA6 */
0 0 cali-to-hep-forward all -- any any anywhere anywhere /* cali:AZKVrO3i_8cLai5f */
0 0 MARK all -- any any anywhere anywhere /* cali:96HaP1sFtb-NYoYA */ MARK and 0xfffff
0 0 ACCEPT all -- any any anywhere anywhere /* cali:VxO6hyNWz62YEtul */ /* Policy explicitly accepted packet. */ mark match 0x10000/0x10000
Chain cali-from-endpoint-mark (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-fw-cali031f9ab8df4 all -- any any anywhere anywhere [goto] /* cali:eb2eN-D9brVNc-mK */ mark match 0x5a800000/0xfff00000
0 0 cali-fw-cali06e0754073b all -- any any anywhere anywhere [goto] /* cali:i2x0LVRYZzy_-RCz */ mark match 0xc1700000/0xfff00000
0 0 cali-fw-cali139b01927da all -- any any anywhere anywhere [goto] /* cali:LdX2YuVOoQTiudS4 */ mark match 0xbb100000/0xfff00000
0 0 cali-fw-cali1421f384600 all -- any any anywhere anywhere [goto] /* cali:golx3tKG-N_TOLxi */ mark match 0xba500000/0xfff00000
0 0 cali-fw-cali15c0a154d90 all -- any any anywhere anywhere [goto] /* cali:Z8kndYdy7OLNagk7 */ mark match 0x3d900000/0xfff00000
0 0 cali-fw-cali1842a58cab8 all -- any any anywhere anywhere [goto] /* cali:Cva-yHPxOC9wxqEq */ mark match 0xde800000/0xfff00000
0 0 cali-fw-cali19ea483d497 all -- any any anywhere anywhere [goto] /* cali:i_MN0fgKUt5jEYur */ mark match 0x32b00000/0xfff00000
0 0 cali-fw-cali2683511f9e7 all -- any any anywhere anywhere [goto] /* cali:4yhpl-OgiUSxS-Ol */ mark match 0x64900000/0xfff00000
0 0 cali-fw-cali280037a81c5 all -- any any anywhere anywhere [goto] /* cali:90EE06OkCvFy-GuQ */ mark match 0xe5800000/0xfff00000
0 0 cali-fw-cali299f39e782d all -- any any anywhere anywhere [goto] /* cali:d7emr8M2WhTcYkP4 */ mark match 0x73400000/0xfff00000
0 0 cali-fw-cali2cb65d6ee77 all -- any any anywhere anywhere [goto] /* cali:dxpzxWgq_yhfGj3m */ mark match 0x7b000000/0xfff00000
0 0 cali-fw-cali2fd699b7f33 all -- any any anywhere anywhere [goto] /* cali:lq7vliRULwAPzJ1q */ mark match 0xc8b00000/0xfff00000
0 0 cali-fw-cali34b4999a9f1 all -- any any anywhere anywhere [goto] /* cali:HdT2hr4SKT92aXHp */ mark match 0xe2f00000/0xfff00000
0 0 cali-fw-cali3503a55ff1b all -- any any anywhere anywhere [goto] /* cali:y4mX0r-Fexf372_S */ mark match 0x36f00000/0xfff00000
0 0 cali-fw-cali37bceb25357 all -- any any anywhere anywhere [goto] /* cali:B3WM5NehEWKDTvr5 */ mark match 0x2fc00000/0xfff00000
0 0 cali-fw-cali3862ba2b954 all -- any any anywhere anywhere [goto] /* cali:r1u1x8rHUXXytXox */ mark match 0x1a400000/0xfff00000
0 0 cali-fw-cali389b5b6a8ec all -- any any anywhere anywhere [goto] /* cali:Shhw5PdIfMx2lQub */ mark match 0x8ca00000/0xfff00000
0 0 cali-fw-cali3b35a85ca02 all -- any any anywhere anywhere [goto] /* cali:omp9PbGrhiz0UZoY */ mark match 0x95f00000/0xfff00000
0 0 cali-fw-cali3cefa8750a8 all -- any any anywhere anywhere [goto] /* cali:2Po1UWZkER26aolc */ mark match 0xde700000/0xfff00000
0 0 cali-fw-cali3f18645c168 all -- any any anywhere anywhere [goto] /* cali:5JyWClBcoyGdRDsc */ mark match 0xb4900000/0xfff00000
0 0 cali-fw-cali3fcd030fa13 all -- any any anywhere anywhere [goto] /* cali:X7SnFg_OTT8s7O7m */ mark match 0x27800000/0xfff00000
0 0 cali-fw-cali4000c1e54de all -- any any anywhere anywhere [goto] /* cali:MJ3Fon8JUlbbPO58 */ mark match 0xa0f00000/0xfff00000
0 0 cali-fw-cali4534e2246ed all -- any any anywhere anywhere [goto] /* cali:jF6CwCASJzOBbSA0 */ mark match 0xdc000000/0xfff00000
0 0 cali-fw-cali4b00c59f252 all -- any any anywhere anywhere [goto] /* cali:OTZyNB1ToM-VoFNH */ mark match 0x40a00000/0xfff00000
0 0 cali-fw-cali4c7d39d0d0e all -- any any anywhere anywhere [goto] /* cali:-n_egtBVavdvKyGo */ mark match 0xa3f00000/0xfff00000
0 0 cali-fw-cali51eec6e509b all -- any any anywhere anywhere [goto] /* cali:QRqXbTXkwvw03nNc */ mark match 0x41e00000/0xfff00000
0 0 cali-fw-cali5237e9928a0 all -- any any anywhere anywhere [goto] /* cali:lJL_A01NJX5BrtJS */ mark match 0x38b00000/0xfff00000
0 0 cali-fw-cali557158cd734 all -- any any anywhere anywhere [goto] /* cali:D0-9NFtwrkppl2BJ */ mark match 0x3ba00000/0xfff00000
0 0 cali-fw-cali590c7f9f7ee all -- any any anywhere anywhere [goto] /* cali:69Zb5BTjTAcZVjei */ mark match 0x5d400000/0xfff00000
0 0 cali-fw-cali5a521423b83 all -- any any anywhere anywhere [goto] /* cali:_ZwWY8Ftp4rcYIuj */ mark match 0xce00000/0xfff00000
0 0 cali-fw-cali65ec8e40f76 all -- any any anywhere anywhere [goto] /* cali:gENKl0vtNb6289Z5 */ mark match 0x71300000/0xfff00000
0 0 cali-fw-cali6b0bb2f1209 all -- any any anywhere anywhere [goto] /* cali:UnHi0CT3FxLGfhRD */ mark match 0xa9c00000/0xfff00000
0 0 cali-fw-cali6bfc27a619b all -- any any anywhere anywhere [goto] /* cali:obxGvAW6TvvSsgry */ mark match 0xecf00000/0xfff00000
0 0 cali-fw-cali701e7cc6c80 all -- any any anywhere anywhere [goto] /* cali:E249pOYdI5KwqSe_ */ mark match 0x83d00000/0xfff00000
0 0 cali-fw-cali74e504b7a66 all -- any any anywhere anywhere [goto] /* cali:kzlUeHAITN4_slbw */ mark match 0x87300000/0xfff00000
0 0 cali-fw-cali757295f6996 all -- any any anywhere anywhere [goto] /* cali:NGEFijx_mVav2RE7 */ mark match 0x6b00000/0xfff00000
0 0 cali-fw-cali7eccdecc2aa all -- any any anywhere anywhere [goto] /* cali:A7TDI3U7ZaE_qY_n */ mark match 0xa6300000/0xfff00000
0 0 cali-fw-cali84468d327cf all -- any any anywhere anywhere [goto] /* cali:dMBhpOpg9EGGUrb7 */ mark match 0x7f700000/0xfff00000
0 0 cali-fw-cali845db002918 all -- any any anywhere anywhere [goto] /* cali:xWOf_FU49KPvViou */ mark match 0x1cf00000/0xfff00000
0 0 cali-fw-cali852f1a9204c all -- any any anywhere anywhere [goto] /* cali:O-aYobq0ABkYz2EW */ mark match 0xb8d00000/0xfff00000
0 0 cali-fw-cali8e93fce84a6 all -- any any anywhere anywhere [goto] /* cali:x4gnUIY34zvnSiYz */ mark match 0xdf400000/0xfff00000
0 0 cali-fw-cali8f4065ff2b6 all -- any any anywhere anywhere [goto] /* cali:vfERoA4i3xDEUMhB */ mark match 0x26900000/0xfff00000
0 0 cali-fw-cali95291e7e018 all -- any any anywhere anywhere [goto] /* cali:jGM66-NeJHzNATzh */ mark match 0x6ea00000/0xfff00000
0 0 cali-fw-cali97a39b84c91 all -- any any anywhere anywhere [goto] /* cali:f4sohRve68yPuUUx */ mark match 0x71a00000/0xfff00000
0 0 cali-fw-cali9916e5e28e6 all -- any any anywhere anywhere [goto] /* cali:4CGFymhW6YF0204k */ mark match 0x200000/0xfff00000
0 0 cali-fw-calia358f09614c all -- any any anywhere anywhere [goto] /* cali:hdEljrARtPPm9wp5 */ mark match 0x4f600000/0xfff00000
0 0 cali-fw-calia5dea553aa7 all -- any any anywhere anywhere [goto] /* cali:ROiKcZZUuZU5e5d3 */ mark match 0x13a00000/0xfff00000
0 0 cali-fw-calia744e09c4ff all -- any any anywhere anywhere [goto] /* cali:MeyjEvNg-ff5OOmC */ mark match 0xd0500000/0xfff00000
0 0 cali-fw-calia9fcbc8adc2 all -- any any anywhere anywhere [goto] /* cali:xfMVu0Xm-x3SiU2z */ mark match 0xc7e00000/0xfff00000
0 0 cali-fw-calib70c771a1e5 all -- any any anywhere anywhere [goto] /* cali:P6K3FMf8Ei07glWY */ mark match 0xb9900000/0xfff00000
0 0 cali-fw-calic8e3b733162 all -- any any anywhere anywhere [goto] /* cali:4GN4hp2t2uOxnGMJ */ mark match 0x2700000/0xfff00000
0 0 cali-fw-calid270f41d225 all -- any any anywhere anywhere [goto] /* cali:YqDGl8mT6BQJSDWH */ mark match 0x78300000/0xfff00000
0 0 cali-fw-calid448a8d46e9 all -- any any anywhere anywhere [goto] /* cali:V0YrdPAypJGp1SPk */ mark match 0x14d00000/0xfff00000
0 0 cali-fw-calie19b99f3c2a all -- any any anywhere anywhere [goto] /* cali:0fmcf7RaaKYXUBl4 */ mark match 0x57400000/0xfff00000
0 0 cali-fw-calie20683acc3f all -- any any anywhere anywhere [goto] /* cali:yGqDMzugT3NurO24 */ mark match 0x6a800000/0xfff00000
0 0 cali-fw-calie4256464cbf all -- any any anywhere anywhere [goto] /* cali:3Dh6AgWApTFARoQ1 */ mark match 0xe5b00000/0xfff00000
0 0 cali-fw-caliefced439614 all -- any any anywhere anywhere [goto] /* cali:plAoZ0P3amVi310h */ mark match 0xb0a00000/0xfff00000
0 0 cali-fhfw-adummy0 all -- any any anywhere anywhere [goto] /* cali:SzdBBSGgI8BtJK5r */ mark match 0xdca00000/0xfff00000
0 0 cali-fhfw-adummy1 all -- any any anywhere anywhere [goto] /* cali:p_-DK-y3c-XYL7Zs */ mark match 0xdcb00000/0xfff00000
0 0 cali-fhfw-cdummy0 all -- any any anywhere anywhere [goto] /* cali:iFsmOb3Bninp9sNs */ mark match 0xd9800000/0xfff00000
0 0 DROP all -- any any anywhere anywhere /* cali:d4G4jAZZN_E_4-ru */ /* Unknown interface */
Chain cali-from-hep-forward (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-from-hep-forward-a all -- a+ any anywhere anywhere [goto] /* cali:Ikz-pJcHuTDXZIR7 */
0 0 cali-fhfw-cdummy0 all -- cdummy0 any anywhere anywhere [goto] /* cali:sXyCCCyNmRDYhzPV */
Chain cali-from-hep-forward-a (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-fhfw-adummy0 all -- adummy0 any anywhere anywhere [goto] /* cali:nJiCqwGkrZha99P7 */
0 0 cali-fhfw-adummy1 all -- adummy1 any anywhere anywhere [goto] /* cali:sznlNsCjbCsbw-fA */
Chain cali-from-host-endpoint (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-from-host-endpoint-a all -- a+ any anywhere anywhere [goto] /* cali:be6cZBwzbM-h2tOu */
0 0 cali-fh-cdummy0 all -- cdummy0 any anywhere anywhere [goto] /* cali:OqK0BcAUeKBJxH1t */
Chain cali-from-host-endpoint-a (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-fh-adummy0 all -- adummy0 any anywhere anywhere [goto] /* cali:ab36Uo9wuSe8vRcD */
0 0 cali-fh-adummy1 all -- adummy1 any anywhere anywhere [goto] /* cali:sX7ZaMdHppIMcBCd */
Chain cali-from-wl-dispatch (2 references)
pkts bytes target prot opt in out source destination
0 0 cali-from-wl-dispatch-0 all -- cali0+ any anywhere anywhere [goto] /* cali:eBnVcASLTvMFg9XV */
0 0 cali-from-wl-dispatch-1 all -- cali1+ any anywhere anywhere [goto] /* cali:MldUGW-Du40orI9- */
0 0 cali-from-wl-dispatch-2 all -- cali2+ any anywhere anywhere [goto] /* cali:kTdzpLxGrgPwdaCE */
12 914 cali-from-wl-dispatch-3 all -- cali3+ any anywhere anywhere [goto] /* cali:1wpgSoNgFrnUW5L_ */
14 1064 cali-from-wl-dispatch-4 all -- cali4+ any anywhere anywhere [goto] /* cali:C1kcCkbpZ9C-x7UN */
11 862 cali-from-wl-dispatch-5 all -- cali5+ any anywhere anywhere [goto] /* cali:-JggFlgCopDNNphU */
0 0 cali-from-wl-dispatch-6 all -- cali6+ any anywhere anywhere [goto] /* cali:P9qlG87slzIDom7X */
0 0 cali-from-wl-dispatch-7 all -- cali7+ any anywhere anywhere [goto] /* cali:ogUQK5OJhtKfE8td */
0 0 cali-from-wl-dispatch-8 all -- cali8+ any anywhere anywhere [goto] /* cali:vnSEs9iuDWFnCqIq */
0 0 cali-from-wl-dispatch-9 all -- cali9+ any anywhere anywhere [goto] /* cali:RCMki-GOYM2KRQew */
0 0 cali-from-wl-dispatch-a all -- calia+ any anywhere anywhere [goto] /* cali:oFnxW0Aai6DE7dnM */
0 0 cali-fw-calib70c771a1e5 all -- calib70c771a1e5 any anywhere anywhere [goto] /* cali:H5FdHg94fHtSSINW */
75 34428 cali-fw-calic8e3b733162 all -- calic8e3b733162 any anywhere anywhere [goto] /* cali:BjbwDSuUBHdpODYj */
0 0 cali-from-wl-dispatch-d all -- calid+ any anywhere anywhere [goto] /* cali:qxKqjO1rFxkn5_I5 */
0 0 cali-from-wl-dispatch-e all -- calie+ any anywhere anywhere [goto] /* cali:TfYLuIPEnem1C9aN */
0 0 DROP all -- any any anywhere anywhere /* cali:HnXrwYfEop03_TiM */ /* Unknown interface */
Chain cali-from-wl-dispatch-0 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-fw-cali031f9ab8df4 all -- cali031f9ab8df4 any anywhere anywhere [goto] /* cali:Wn27Bvx1qe8xIAZZ */
0 0 cali-fw-cali06e0754073b all -- cali06e0754073b any anywhere anywhere [goto] /* cali:9jjz8lQw331nocCC */
0 0 DROP all -- any any anywhere anywhere /* cali:p5r-Qs7z67xQZfS9 */ /* Unknown interface */
Chain cali-from-wl-dispatch-1 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-fw-cali139b01927da all -- cali139b01927da any anywhere anywhere [goto] /* cali:ApFbS4WNEcFmrmWr */
0 0 cali-fw-cali1421f384600 all -- cali1421f384600 any anywhere anywhere [goto] /* cali:cdTNM9SsPwvHejTR */
0 0 cali-fw-cali15c0a154d90 all -- cali15c0a154d90 any anywhere anywhere [goto] /* cali:ycj-7SadFuMEGK5b */
0 0 cali-fw-cali1842a58cab8 all -- cali1842a58cab8 any anywhere anywhere [goto] /* cali:Y2XP42F6NGA547rW */
0 0 cali-fw-cali19ea483d497 all -- cali19ea483d497 any anywhere anywhere [goto] /* cali:iGEVnqNJ9NV4N5aW */
0 0 DROP all -- any any anywhere anywhere /* cali:9k8xAMXr7_NA7cU3 */ /* Unknown interface */
Chain cali-from-wl-dispatch-2 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-fw-cali2683511f9e7 all -- cali2683511f9e7 any anywhere anywhere [goto] /* cali:rAhE3nOCR7oEVQxg */
0 0 cali-fw-cali280037a81c5 all -- cali280037a81c5 any anywhere anywhere [goto] /* cali:w42zlv-GSfJ88pHO */
0 0 cali-fw-cali299f39e782d all -- cali299f39e782d any anywhere anywhere [goto] /* cali:vVDbopTjdwCz5N5G */
0 0 cali-fw-cali2cb65d6ee77 all -- cali2cb65d6ee77 any anywhere anywhere [goto] /* cali:eRZdB7SsTPyCSJkg */
0 0 cali-fw-cali2fd699b7f33 all -- cali2fd699b7f33 any anywhere anywhere [goto] /* cali:yRRwYZWHkTPGIYLA */
0 0 DROP all -- any any anywhere anywhere /* cali:x4VlGxdytvVvvOHE */ /* Unknown interface */
Chain cali-from-wl-dispatch-3 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-fw-cali34b4999a9f1 all -- cali34b4999a9f1 any anywhere anywhere [goto] /* cali:zSOn8YVfe7bjvLeS */
0 0 cali-fw-cali3503a55ff1b all -- cali3503a55ff1b any anywhere anywhere [goto] /* cali:KNmlWE-vvjLN-RIi */
0 0 cali-fw-cali37bceb25357 all -- cali37bceb25357 any anywhere anywhere [goto] /* cali:XGF5RPN6kvL7533c */
12 914 cali-fw-cali3862ba2b954 all -- cali3862ba2b954 any anywhere anywhere [goto] /* cali:l8D246JVALMWffFp */
0 0 cali-fw-cali389b5b6a8ec all -- cali389b5b6a8ec any anywhere anywhere [goto] /* cali:zsaPxBCr12ESG2f7 */
0 0 cali-fw-cali3b35a85ca02 all -- cali3b35a85ca02 any anywhere anywhere [goto] /* cali:FVPCX1C5Oj4MXkPa */
0 0 cali-fw-cali3cefa8750a8 all -- cali3cefa8750a8 any anywhere anywhere [goto] /* cali:IPvgMVgwXfsUvVph */
0 0 cali-fw-cali3f18645c168 all -- cali3f18645c168 any anywhere anywhere [goto] /* cali:Ny94B2xt4waEEzp3 */
0 0 cali-fw-cali3fcd030fa13 all -- cali3fcd030fa13 any anywhere anywhere [goto] /* cali:pWOy7sTkFVGoU41e */
0 0 DROP all -- any any anywhere anywhere /* cali:CxiW73dhUjCAjuSD */ /* Unknown interface */
Chain cali-from-wl-dispatch-4 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-fw-cali4000c1e54de all -- cali4000c1e54de any anywhere anywhere [goto] /* cali:XMZt1rCxUA8OYRmX */
0 0 cali-fw-cali4534e2246ed all -- cali4534e2246ed any anywhere anywhere [goto] /* cali:3S7jfyFojH04Byrw */
60 4560 cali-fw-cali4b00c59f252 all -- cali4b00c59f252 any anywhere anywhere [goto] /* cali:mtgVIo75g-OBI0wY */
0 0 cali-fw-cali4c7d39d0d0e all -- cali4c7d39d0d0e any anywhere anywhere [goto] /* cali:dtZmAebqVhlsYMC5 */
0 0 DROP all -- any any anywhere anywhere /* cali:03yTI6pqUPuzaf4w */ /* Unknown interface */
Chain cali-from-wl-dispatch-5 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-fw-cali51eec6e509b all -- cali51eec6e509b any anywhere anywhere [goto] /* cali:kwfRORjO6peOYidP */
0 0 cali-fw-cali5237e9928a0 all -- cali5237e9928a0 any anywhere anywhere [goto] /* cali:SitdrJQvyevbQn_2 */
11 862 cali-fw-cali557158cd734 all -- cali557158cd734 any anywhere anywhere [goto] /* cali:J-F5yg1vk3qMuSOy */
0 0 cali-fw-cali590c7f9f7ee all -- cali590c7f9f7ee any anywhere anywhere [goto] /* cali:wJ1_jg4ksMwFT2xM */
0 0 cali-fw-cali5a521423b83 all -- cali5a521423b83 any anywhere anywhere [goto] /* cali:TBq4hUF2nS39W5SY */
0 0 DROP all -- any any anywhere anywhere /* cali:RpmGwwwTvMfy696N */ /* Unknown interface */
Chain cali-from-wl-dispatch-6 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-fw-cali65ec8e40f76 all -- cali65ec8e40f76 any anywhere anywhere [goto] /* cali:bUJrawZ7-ELSBNYu */
0 0 cali-fw-cali6b0bb2f1209 all -- cali6b0bb2f1209 any anywhere anywhere [goto] /* cali:QaZFP8btkKeMaqYZ */
0 0 cali-fw-cali6bfc27a619b all -- cali6bfc27a619b any anywhere anywhere [goto] /* cali:CptznCBDou5Dmwob */
0 0 DROP all -- any any anywhere anywhere /* cali:atH2fs-C-RabORfR */ /* Unknown interface */
Chain cali-from-wl-dispatch-7 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-fw-cali701e7cc6c80 all -- cali701e7cc6c80 any anywhere anywhere [goto] /* cali:ho3cxUKSJA-TP9q1 */
0 0 cali-fw-cali74e504b7a66 all -- cali74e504b7a66 any anywhere anywhere [goto] /* cali:XOQ02wucQ3u09KeL */
0 0 cali-fw-cali757295f6996 all -- cali757295f6996 any anywhere anywhere [goto] /* cali:OhBDuww_kHca5MOf */
0 0 cali-fw-cali7eccdecc2aa all -- cali7eccdecc2aa any anywhere anywhere [goto] /* cali:s3bleTI4HLLQ_SUz */
0 0 DROP all -- any any anywhere anywhere /* cali:Sm-E8O2dhAXwnyT3 */ /* Unknown interface */
Chain cali-from-wl-dispatch-8 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-fw-cali84468d327cf all -- cali84468d327cf any anywhere anywhere [goto] /* cali:qWV94Fgm2hqCYDgH */
0 0 cali-fw-cali845db002918 all -- cali845db002918 any anywhere anywhere [goto] /* cali:GSgn4n2EWwkW1DrP */
0 0 cali-fw-cali852f1a9204c all -- cali852f1a9204c any anywhere anywhere [goto] /* cali:m4ch3BuPRiEN-dRC */
0 0 cali-fw-cali8e93fce84a6 all -- cali8e93fce84a6 any anywhere anywhere [goto] /* cali:Y0YQfZi-mkXK_mXo */
0 0 cali-fw-cali8f4065ff2b6 all -- cali8f4065ff2b6 any anywhere anywhere [goto] /* cali:eQhSawwBq5MinteI */
0 0 DROP all -- any any anywhere anywhere /* cali:P4vzLdsaZBDA5GrD */ /* Unknown interface */
Chain cali-from-wl-dispatch-9 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-fw-cali95291e7e018 all -- cali95291e7e018 any anywhere anywhere [goto] /* cali:b8KV-hdhsht8DbZZ */
0 0 cali-fw-cali97a39b84c91 all -- cali97a39b84c91 any anywhere anywhere [goto] /* cali:ZHubzRbqFW2MHEkB */
0 0 cali-fw-cali9916e5e28e6 all -- cali9916e5e28e6 any anywhere anywhere [goto] /* cali:3vus7vrcb5R0Gfar */
0 0 DROP all -- any any anywhere anywhere /* cali:-eTwkbNngMeCuXpk */ /* Unknown interface */
Chain cali-from-wl-dispatch-a (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-fw-calia358f09614c all -- calia358f09614c any anywhere anywhere [goto] /* cali:bP1G54eSms7hvm-v */
0 0 cali-fw-calia5dea553aa7 all -- calia5dea553aa7 any anywhere anywhere [goto] /* cali:Wsq6h6q96sQCby-y */
0 0 cali-fw-calia744e09c4ff all -- calia744e09c4ff any anywhere anywhere [goto] /* cali:xWW8RctA3UGyNTeR */
0 0 cali-fw-calia9fcbc8adc2 all -- calia9fcbc8adc2 any anywhere anywhere [goto] /* cali:bonOLnrFNTXyTKa3 */
0 0 DROP all -- any any anywhere anywhere /* cali:bJdwZPqpzsXPwrlh */ /* Unknown interface */
Chain cali-from-wl-dispatch-d (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-fw-calid270f41d225 all -- calid270f41d225 any anywhere anywhere [goto] /* cali:ZzkYXGwEeL3VBg8R */
0 0 cali-fw-calid448a8d46e9 all -- calid448a8d46e9 any anywhere anywhere [goto] /* cali:EAsuKjmCMCIrisCt */
0 0 DROP all -- any any anywhere anywhere /* cali:-JkYvXL19UPuJgr0 */ /* Unknown interface */
Chain cali-from-wl-dispatch-e (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-fw-calie19b99f3c2a all -- calie19b99f3c2a any anywhere anywhere [goto] /* cali:EyP59yMk4tv3SteQ */
0 0 cali-fw-calie20683acc3f all -- calie20683acc3f any anywhere anywhere [goto] /* cali:KKQr8WTRkj4kJ2bw */
0 0 cali-fw-calie4256464cbf all -- calie4256464cbf any anywhere anywhere [goto] /* cali:XqOGEp8vN3loipUL */
0 0 cali-fw-caliefced439614 all -- caliefced439614 any anywhere anywhere [goto] /* cali:v3V9CAGMYPMoLG_a */
0 0 DROP all -- any any anywhere anywhere /* cali:Vj95k7IYLdfnkBoU */ /* Unknown interface */
Chain cali-fw-cali031f9ab8df4 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:IWJh0Dd046KTX1SQ */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:skLmGBFoeE2s7cze */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:UA_x4_YPE1oXgSM_ */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:A1gHOJy3Prp3vhg4 */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:x9_mqEJBK07gFUe6 */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:eDRALuOnci9nszM8 */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:eCwZHaJxqqmRvBnn */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:K5y8ggtsVearAbH2 */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:Dd0vzyNox-nNB9d5 */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:iPSsnCKLSLtR1XuY */
0 0 RETURN all -- any any anywhere anywhere /* cali:MR1kNjjUJzP-DSXQ */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:V5Zrnn7nKT8hu7BG */
0 0 RETURN all -- any any anywhere anywhere /* cali:4TmpkGEXIpyNp9Ch */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:8DLiuxwJsNORXG7N */ /* Drop if no profiles matched */
Chain cali-fw-cali06e0754073b (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:cczRaotZNhd5-0Ae */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:Fb8L1eVU3Jx4SxhK */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:kTlb844Q8HXFLeR6 */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:GUZanR9XpUT7oPU3 */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:lQKde4pHX7OSkd9H */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:SxxBfuK0Ly44odKr */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:tbHMiHSGwzwYqLRh */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:hTnNEPbauvXb-RnF */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:DCmftGRtkn7SdY4I */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:_Zy_IXhnA4GCI_tg */
0 0 RETURN all -- any any anywhere anywhere /* cali:2bMML2L8vOwWupa9 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:KcnMaf1z2GEQUfRJ */
0 0 RETURN all -- any any anywhere anywhere /* cali:_O0WyvXzLdNuGAF7 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:-apJmzfQiia5NLB1 */ /* Drop if no profiles matched */
Chain cali-fw-cali139b01927da (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:bXeDoFou9H_V8F5B */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:_G5yiDxENkTlHU4v */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:0uVTYLu93Fjn3o22 */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:5sC4ddTIxJ9O-sz4 */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:CFd3SkginMXmuHos */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:LW5x5D_S3qgifd0B */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:kPBTnaJJQRxjNdLF */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:00YhpzTTqL7WTQpv */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:5HaskNlrXhG6y6JO */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:xG9C_UrK93z49InU */
0 0 RETURN all -- any any anywhere anywhere /* cali:sQM4lIrjJpV28VKD */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:vkinOabYR34rDhin */
0 0 RETURN all -- any any anywhere anywhere /* cali:240xT5--pgWMaA10 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:Zgz4juo_bL0pWIOD */ /* Drop if no profiles matched */
Chain cali-fw-cali1421f384600 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:ZiyOKbxXM82y7YTb */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:vMOm-sD3c3bu6jWa */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:PYClPBcxdZwwqN82 */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:itbvNzbfhuuzIy1x */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:Z-VSQKvv3LEeF0MG */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:OHPKdWFvsIXF0n-g */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:K8l6Q-5-DFgaTKGM */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:pduHqJ9wgZ7c3RrK */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:PsfUoX7K5ZfDCo7x */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:aJgofi3hJzT2n8_a */
0 0 RETURN all -- any any anywhere anywhere /* cali:j857SBB3M2AUgl9u */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:YKFq8_Pb3YVepH4a */
0 0 RETURN all -- any any anywhere anywhere /* cali:tBz5c9OZ-Dgxb5SO */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:NqSO8moFQizZZwCr */ /* Drop if no profiles matched */
Chain cali-fw-cali15c0a154d90 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:KjE1CP_Za2O1as2G */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:-LJ29dFXpFUllIIc */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:Hj_09mmY8PMjgQe1 */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:f5BdJ828WCjWHV7F */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:uWcTKQY5mriyG5jN */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:2Bzy8AqBtynWcgGt */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:D5C0xwmStsPhkoXd */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:ieJeQ5HtYvoQkNT5 */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:avneqVs2TRV7vVlm */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:jOidTxm5s7B8DS5y */
0 0 RETURN all -- any any anywhere anywhere /* cali:kfcm-OAQ59DfpYno */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:GKzTWHRPxvXFIw5- */
0 0 RETURN all -- any any anywhere anywhere /* cali:pQT8wfNeEfK6vG7R */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:toR3JxAVxqatNIZb */ /* Drop if no profiles matched */
Chain cali-fw-cali1842a58cab8 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:nJ1vBetCvJrT0_UP */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:vv25vA2tzK4j3hqt */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:QwXJAnQvjYECrrJy */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:lwzpkFMgKdzH17_i */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:5loq4wPf7gZEJnpY */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:rVRTgLSwdZlEbnAe */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:ubVhyJH6NGZ6X-Jg */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:Rah73r7RvfRDiXQz */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:yZ7W7FPcbhCHVUzl */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:q40qg6GcKOmrsuc4 */
0 0 RETURN all -- any any anywhere anywhere /* cali:Nkm6a6DH944raq7r */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:4iCujugZkHzwoCsY */
0 0 RETURN all -- any any anywhere anywhere /* cali:aqY3KLIAZVnl38hc */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:FIxcmquUuIMicdgq */ /* Drop if no profiles matched */
Chain cali-fw-cali19ea483d497 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:49zA9NKu0i3cjX41 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:45-fGKYeeV_yH6qS */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:H319s78u1k0ieLu7 */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:pabHlUs33dlyaFXG */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:ql7khBSk2OURlHvm */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:BhldseB495LvdvVS */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:Vw20-KcZajlZ_v8K */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:HuKu2Xb7FXJeyh-I */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:6Bpmr0yfldHbBFqp */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:eG9JKBrm29FCNxh1 */
0 0 RETURN all -- any any anywhere anywhere /* cali:LkkmUBUR7Rf-l3PC */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:5CK1zRVeLQo4ikIU */
0 0 RETURN all -- any any anywhere anywhere /* cali:0xlH_YKe_svY4oIH */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:V_LNuFSmf7oDhaEI */ /* Drop if no profiles matched */
Chain cali-fw-cali2683511f9e7 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:faEw2UyaQxnMPACp */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:K6pY4dU3qlIgfbO_ */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:gd-v8CqQdgogbGPI */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:sqVjswt2_12M5gL6 */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:Tq4qTkFqJYXgXmAs */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:nWcVzwd5LWmeBfJN */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:8PmGoHoaAVXSwGDz */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:X3a-CRtKIZ-OjC39 */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:D4_d35K0omD7MGAc */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:2ewWkKIt-pLyrvmf */
0 0 RETURN all -- any any anywhere anywhere /* cali:1YOyf5BDz2ruVy5e */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:rIv9WdIe-sRxP4Vd */
0 0 RETURN all -- any any anywhere anywhere /* cali:AOAXZig4FyKKNh1l */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:Bmdcb1uN_uFZv-6x */ /* Drop if no profiles matched */
Chain cali-fw-cali280037a81c5 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:80rcL8auv0Zy9bTw */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:nQbXq7mdhQ8OjI_L */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:dpy_wIZmWour7nhL */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:8GCUtsIkrmxhEVwg */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:R7vZVwcJ469XTXSK */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:yDShQSacRc2N_WUh */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:l0DKGFpPiNOTrFGN */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:DRfQNElq4qq3CMD8 */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:vXW_eIBO-bXgB9K1 */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:FOKm9KRQeU0kviXG */
0 0 RETURN all -- any any anywhere anywhere /* cali:G0PIPIYBK5baRHW0 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:gD2WV_aOVyRc_Rkz */
0 0 RETURN all -- any any anywhere anywhere /* cali:uCxlsweuq1sGnle_ */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:RuWsa-Xp6D7VIZg0 */ /* Drop if no profiles matched */
Chain cali-fw-cali299f39e782d (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:GfJ_KkcBcCmrig7M */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:Lcfjx8EgU9U5lpzg */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:Qq-yrWJMnL-NJ6yg */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:VN6zjU4qYBWKXAIJ */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:ExS2b1c_UikuDiJS */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.calico-system all -- any any anywhere anywhere /* cali:StbcuTHOWLJJuLji */
0 0 RETURN all -- any any anywhere anywhere /* cali:NJ94Hz3y4R86fNdu */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-_ymJUz7yzI6NOKJhG2- all -- any any anywhere anywhere /* cali:mL5q2cB16W9VMRWa */
0 0 RETURN all -- any any anywhere anywhere /* cali:oA0rdzTCalEu-itf */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:CKOgE-ZFwlguJqfh */ /* Drop if no profiles matched */
Chain cali-fw-cali2cb65d6ee77 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:lGQy7VJ_FD1Kfiyn */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:YTmygKu2pnIonZZ2 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:Sczvwzanq5ISY-CN */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:bCsFQgWsddQarw75 */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:OL-Mpq7tkzCsPNjF */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:WAdNSJQecju1XkVi */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:Rn-kJ40dLX9AXH3s */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:cYr2qaKGyFpy-cf8 */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:_LeXyIYQf-VXGxKo */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:cP00IMjmv5auIeUN */
0 0 RETURN all -- any any anywhere anywhere /* cali:3W0fdizvsD8w4afO */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:sT48w7k2lOyTmQDo */
0 0 RETURN all -- any any anywhere anywhere /* cali:ExPuPQbTzm-WqOMW */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:uA_KQrWikqB8931d */ /* Drop if no profiles matched */
Chain cali-fw-cali2fd699b7f33 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:6p6A0SD3q1ed6183 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:AJpRu2TI4deLUM75 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:EU2Q_xyVe1Uwe6w1 */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:pr8YqqwojeXx1kzL */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:6m2rAcZfiYW02RM3 */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:yuO9iife0Sn16fpx */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:vD7Nj-QCM35MCwYr */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:gqFQgDppMZSjulIy */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:XfAWaVR6PdazNha9 */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:kQklZtQFjbdSrHfu */
0 0 RETURN all -- any any anywhere anywhere /* cali:W1wr1UV9frV2oLCn */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:FS06Yg8U7dBrvtv2 */
0 0 RETURN all -- any any anywhere anywhere /* cali:n_K31vwOcp8K91Tl */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:wre2R4g7V9uKMgvj */ /* Drop if no profiles matched */
Chain cali-fw-cali34b4999a9f1 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:IFaj7kcgyeiILSss */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:nFIXp7VFs2dsMQp6 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:ORYmpuVCXYbbSHqI */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:eOF-hw8O63l5HMhN */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:0s9TSkex1uG_yboL */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:Jafe4hIFwYKorzyp */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:i8_7Ubq8YEbWrp-5 */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:Tm5sgFNwM5oaEh76 */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:B_63hmRad4irkv7X */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:Z_ZKuf3hnl9pBjTH */
0 0 RETURN all -- any any anywhere anywhere /* cali:_waJ9rhvZL9FPOWw */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:fV73bCsw90xxtZ_8 */
0 0 RETURN all -- any any anywhere anywhere /* cali:QjvtdCksCUHYzwFG */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:VfjV1_JeupAgarBJ */ /* Drop if no profiles matched */
Chain cali-fw-cali3503a55ff1b (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:5smfJJtEJX7uXwwd */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:8adZ6vryr-CBNm-c */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:y3Xf7MJkiB7mWHLy */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:v_HFq-6ckqoFego6 */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:YDzRieF5fS5DholU */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:8AjYmMmV8NiygzGY */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:PZVtSuaOwgOW1wM9 */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:rqcq7hOcgbi1sGUr */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:r6kEKz8NsQdQqG6l */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:fyhOy5o8WPyfjIT8 */
0 0 RETURN all -- any any anywhere anywhere /* cali:WyBFZPWZ3NRBUIZ8 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:tHPXQezX3JG7Yq2C */
0 0 RETURN all -- any any anywhere anywhere /* cali:EiuRq7N2qHunqUGi */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:WUD4-PsjZVSPJVxV */ /* Drop if no profiles matched */
Chain cali-fw-cali37bceb25357 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:1bekhojd6gZ5ZPHB */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:VGhjnrEpaNZZ1ILA */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:1zbrOOtm1se1u4tG */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:NyyC-vgyYU_rGddf */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:PG-SjLqX5TrmmlWZ */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:O-ApCB1PUyUbeDJ5 */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:SN4ckxjCi5Dhp0DY */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:-uIFJEQV89-fBRAi */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:rqNrWyoIHPV43Npd */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:OCOq1Ht20w0us8tP */
0 0 RETURN all -- any any anywhere anywhere /* cali:D2qRFvTnXiS5ZKHl */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:yTP08u_QNHtklhz7 */
0 0 RETURN all -- any any anywhere anywhere /* cali:aU3GgFMMXh6Hca8o */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:gRClXsb60y0IM9VP */ /* Drop if no profiles matched */
Chain cali-fw-cali3862ba2b954 (2 references)
pkts bytes target prot opt in out source destination
431 35924 ACCEPT all -- any any anywhere anywhere /* cali:TsTF6nqXJRbVW-s8 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:4J4FJdJo5RVpuKoS */ ctstate INVALID
3 175 MARK all -- any any anywhere anywhere /* cali:qbxl-G3KLoj2CD9n */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:6b-pdaf5LEctV92_ */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:6dL1RnBv4DluifEG */ /* Drop IPinIP encapped packets originating in workloads */
3 175 cali-pro-kns.kube-system all -- any any anywhere anywhere /* cali:b89dS4Rf06STbmFh */
3 175 RETURN all -- any any anywhere anywhere /* cali:OQ461jeZDyj5jyhJ */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-_u2Tn2rSoAPffvE7JO6 all -- any any anywhere anywhere /* cali:3SNgmuFoaEYFPvl7 */
0 0 RETURN all -- any any anywhere anywhere /* cali:JNqIX6z5dhoZ5rqe */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:yX1fYxhkrSZpEhnK */ /* Drop if no profiles matched */
Chain cali-fw-cali389b5b6a8ec (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:TSQksZiTA3MJgv0m */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:44qr0-C9hiAd6nI4 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:KIJknglAL4R6asbu */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:jtfLiKfS99gGzz0- */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:JrKMhO3eIH0ueLPl */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:I9zRayaPEMF5lEIV */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:e2pZ9wKgoxPUmZYD */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:TjWJMPCOm_fFhMOR */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:jUyBzEelgfwk3aLk */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:QvG28ITbfT9gL5MQ */
0 0 RETURN all -- any any anywhere anywhere /* cali:iqzmPRW8L2dpGZDl */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:wNifLQSGLobyTKwo */
0 0 RETURN all -- any any anywhere anywhere /* cali:LyEwbU8-2NUCY7-2 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:Tr_I2xzrN4ZMxpM7 */ /* Drop if no profiles matched */
Chain cali-fw-cali3b35a85ca02 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:Xoz_cfbu8YMHyIXK */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:0RdeNTK-dKfpD9In */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:IWVHQHWPKhk-Fov3 */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:HjRYenDZpKIl1Bt6 */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:QZ4j8Meilxkt020x */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:_I9yOHNf9h-GhL8F */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:WI7TuRRoh9pwTZBy */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:D6WJGKCx2meGV2gS */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:0GO3FF8SbwwnV6CI */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:KqH0Hbq9A8_GTMNc */
0 0 RETURN all -- any any anywhere anywhere /* cali:Qgk--6ifQNG8N_fY */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:CyDTRd1bW5JIAx7A */
0 0 RETURN all -- any any anywhere anywhere /* cali:gHFTdBpA7c8uwRfP */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:BoxbR6CWJqPtMlF_ */ /* Drop if no profiles matched */
Chain cali-fw-cali3cefa8750a8 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:7p_leb9FkiwD4XGC */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:0NkTJ0Ar1nV6a-Ex */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:fbpM2u-EaYIwQOsM */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:1r_YAcdlVZy8hDCT */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:QEm-_J3BWilDhqqy */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:SsZYbUHqS92TVB84 */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:y0fwENKndN4outIe */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:-eGSk7F-POY4BGvt */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:DiDQzoJdXB-RL0Dw */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:UlygIwkbWXGsC5Go */
0 0 RETURN all -- any any anywhere anywhere /* cali:_9NzzRYHcq5zXyBd */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:zEdG9u85eOCvgWsw */
0 0 RETURN all -- any any anywhere anywhere /* cali:lrEyxRaNqD3aSYLz */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:1a39doqZ1ngRaZe1 */ /* Drop if no profiles matched */
Chain cali-fw-cali3f18645c168 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:MD2QjPJDGHAny5mC */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:Fi7SNWPeZI6r7N3d */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:MsiKUBLLDYHnCjkB */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:J3dYVdJodyzn-JcC */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:JgZ2gXLsBaI6Xjix */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:o5hhILoyuBDRYcNd */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:yd8t1T8H2qUDrpxm */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:A5WeoRhuNkFlQXQK */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:sn_JPqcY_Gs7cKwh */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:zW3xdWA_GakIBxOe */
0 0 RETURN all -- any any anywhere anywhere /* cali:17PJdqxtxhe8UGFh */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:86ILnTGjY3Qvvy5G */
0 0 RETURN all -- any any anywhere anywhere /* cali:fIFPZjwLOg_sP8jT */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:475n1hEElu6VAU4i */ /* Drop if no profiles matched */
Chain cali-fw-cali3fcd030fa13 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:XuwvKKGIdCyYfPH- */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:uaJP2Jk_3MfGY1kp */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:bi6P4tlAHdnR7cKB */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:4nqDEHUWn8hdnicq */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:whedsOuhyReE-IzX */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:s10xwKQ5BPPWjO1g */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:bre7myO7Wi8nv6sF */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:Vd3rKRzVDYmRl3u_ */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:Z6GD2KNkY628UohT */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:SufpRvAo18GF2G5N */
0 0 RETURN all -- any any anywhere anywhere /* cali:3Jw71HFUz7HGrpNK */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:tj4Yf3FAiUhXvkoi */
0 0 RETURN all -- any any anywhere anywhere /* cali:e7TKMDLPrVAksdyK */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:WQaNXuLVrJklnse8 */ /* Drop if no profiles matched */
Chain cali-fw-cali4000c1e54de (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:3dL83E5Fy64a2tzP */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:biS7YmNMpP2qXwXx */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:YsEGMTl8luROU77W */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:suBIWNqgbvBHKEm4 */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:SismQda5g0oXzyZZ */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:a7wif983hYJcifzL */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:s4GC_nSFsIJoZMYu */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:4DTaZwdU1j72dKHa */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:sO0ga-jezohuyqsy */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:ULFzMiWWHNcqhCEJ */
0 0 RETURN all -- any any anywhere anywhere /* cali:EpB2Zcc2ysuC_PO9 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:Tahc2hRnE5gM1EAh */
0 0 RETURN all -- any any anywhere anywhere /* cali:uxLC6mEp2dh-tfSG */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:WejUGDv16gDu8rHk */ /* Drop if no profiles matched */
Chain cali-fw-cali4534e2246ed (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:AmK5kIsEA3iGuK_G */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:ytH59mVOwBXiYdA7 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:g93Xl2onK5bkfl6- */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:iBPYJFnqJ72XpwNp */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:2c02OvseNuelfbw6 */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:2kvRcEOO3asbnZxG */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:6HLV05pwT5QLcYb- */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:HgVaAoPKIgjg6j8x */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:LdSNsCxJsbs_DO_d */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:FfSfiVu8sgdJfkoK */
0 0 RETURN all -- any any anywhere anywhere /* cali:JwQs7bgRE8WRa21x */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:AIOmV1PNmGa2Ckpr */
0 0 RETURN all -- any any anywhere anywhere /* cali:77WgN-F-CvgcA7A5 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:HSULpur37ho-54Kt */ /* Drop if no profiles matched */
Chain cali-fw-cali4b00c59f252 (2 references)
pkts bytes target prot opt in out source destination
996 102K ACCEPT all -- any any anywhere anywhere /* cali:A-nz0HbDBF-uA9n1 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:DjBAL8K61DHXhWmv */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:2DQe6ZlTVRUuxzr6 */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:XWbOs53I4rW0-xee */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:7W_JErkX4tfXugdw */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.calico-system all -- any any anywhere anywhere /* cali:Ec6rQQvqevXEPaC4 */
0 0 RETURN all -- any any anywhere anywhere /* cali:MUa19jR0uZ5I_UyD */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-_nzzjLvInId1gPHmQz_ all -- any any anywhere anywhere /* cali:vk3d7rETLit-dDaK */
0 0 RETURN all -- any any anywhere anywhere /* cali:0cH1q8LXBwJDoLzm */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:m0btgE0_BAckFQB0 */ /* Drop if no profiles matched */
Chain cali-fw-cali4c7d39d0d0e (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:qiC1ehoEDUJS1wbB */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:hpET2PaWqQ-88V_K */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:Q60yCxM9WKDjkjoh */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:lzYL9HXgF6ogEOTm */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:kEsNgZV6AIVYqPLA */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:tWQpHQ3Vk6IgxqJT */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:Yf_uDSbOLQkXw4DT */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:ejeIil4frL1EvEXl */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:RDJ8JKPT4Lp1h44v */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:4ShULbEpmx4fq9Eh */
0 0 RETURN all -- any any anywhere anywhere /* cali:rRJc4P0FLyo-vIVI */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:iv5GxVcze5yF84qa */
0 0 RETURN all -- any any anywhere anywhere /* cali:PbMOMn1aBTW6dWOF */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:A7-8uwwBKR4_2a-X */ /* Drop if no profiles matched */
Chain cali-fw-cali51eec6e509b (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:6_fE60WPCBTmg98Y */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:0bn2JZ-j0auJ2r1p */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:Dl7kmvXncblT7va1 */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:8ZYVHDCpCCOMjFOX */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:U_bQMasa6bJHYs3t */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:5xmx7nELwXZ9pg1H */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:tnXqBLY9N1dCltmA */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:jzntaM4kZxhjGjiM */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:_nv0kQotGo-Y28Zk */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:HvEwO0LT9UhitQcZ */
0 0 RETURN all -- any any anywhere anywhere /* cali:_vkQktg7BGb3oJ_J */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:atB1ndlt892zBWHX */
0 0 RETURN all -- any any anywhere anywhere /* cali:YVkAq8OZkXrLjhg2 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:wO6K5SR0JeYuoPbd */ /* Drop if no profiles matched */
Chain cali-fw-cali5237e9928a0 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:2QeUqDFiEVmuwG_m */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:jcvrdIJH4VUjtE7i */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:UIrpFGoJMH9wLhza */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:qFrJv3lwETFgtlW8 */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:saYwvsA2kupiYSRn */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:V89_Z0Lv5a46wA6V */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:Uz4XXJ_0KfIJzCxS */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:Pkh34eKlMBD4Z5hD */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:3ofZUMxLJ3ok87D2 */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:9O67j7lLaJbE64oQ */
0 0 RETURN all -- any any anywhere anywhere /* cali:5knOun4ofRlkUoVE */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:Pb4_009KEf2miCxc */
0 0 RETURN all -- any any anywhere anywhere /* cali:KnFlYF2RocutMqQE */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:OOXXk_kN2tT2U0Ln */ /* Drop if no profiles matched */
Chain cali-fw-cali557158cd734 (2 references)
pkts bytes target prot opt in out source destination
425 35467 ACCEPT all -- any any anywhere anywhere /* cali:d05E0SArDhDNKYOc */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:ufc3YceD-Tig1Kf1 */ ctstate INVALID
2 130 MARK all -- any any anywhere anywhere /* cali:t8hMNupRetn6neG2 */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:vNjGJhQxeZ2KPcdE */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:reWI3-s1qSutdfTJ */ /* Drop IPinIP encapped packets originating in workloads */
2 130 cali-pro-kns.kube-system all -- any any anywhere anywhere /* cali:t2K6_DDfHKWfs0rL */
2 130 RETURN all -- any any anywhere anywhere /* cali:zMFwpfABxm6v-Eim */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-_u2Tn2rSoAPffvE7JO6 all -- any any anywhere anywhere /* cali:CJW54OeeOqMfvif6 */
0 0 RETURN all -- any any anywhere anywhere /* cali:fUITJWI6asK7jzEJ */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:IYOI4IoVI1Hli1cW */ /* Drop if no profiles matched */
Chain cali-fw-cali590c7f9f7ee (2 references)
pkts bytes target prot opt in out source destination
424 73558 ACCEPT all -- any any anywhere anywhere /* cali:MFqVPM8C3ypwA3RX */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:7Ld_KLrH7rlyVw91 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:VJEOQU3Q1SKld6L_ */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:v1xD9be2TjwGpAFU */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:-cJtl1b0cTibF4kq */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-_kJqfZpgUe7r2t4A-14 all -- any any anywhere anywhere /* cali:6pN2edXf6_GGldeC */
0 0 RETURN all -- any any anywhere anywhere /* cali:ieV3z86lsOHE2byW */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-_4yi5_iSUAwsU8zMHTk all -- any any anywhere anywhere /* cali:PB2fBxL3VGZ5CpcX */
0 0 RETURN all -- any any anywhere anywhere /* cali:1v-2tGYDhvVtgMaY */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:K5v6BhtDdJvooGsx */ /* Drop if no profiles matched */
Chain cali-fw-cali5a521423b83 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:qXuLuAqQ8UScD7Ll */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:GgjC_DAWVhRJ1vZE */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:89m5TqrIIOaxqEr3 */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:jAQhYPjwjmCr7-lq */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:lwopdHtfekdjp73B */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:mDmsvNH8278m3t15 */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:zZCo0XV063GWn1WC */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:QBEbbadOba3S3mjF */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:i8PTXaMRxoU8H9B9 */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:OsCjZhiJfrTg5xzQ */
0 0 RETURN all -- any any anywhere anywhere /* cali:OrfGkAYiwZMWkUNk */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:PL3Wx5_pFZDQKOWT */
0 0 RETURN all -- any any anywhere anywhere /* cali:573inU602xcmbMht */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:i8xt0ZtPGF0zZ2AE */ /* Drop if no profiles matched */
Chain cali-fw-cali65ec8e40f76 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:Ur9TSXigqRUAGEq6 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:PVm-3ASl1bbFu08Q */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:xoPWdDqHZNGizzhn */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:bzyaTOZm6E_y8H91 */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:gF33DL8WBppcQmLw */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:AGHZdnsrAkVhb4BC */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:J47T2dcwDvKbE8Im */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:naOT7MmDNoGGws3Z */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:oRP7NPNvP4RlySrJ */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:WcvJNFxPEBeYREOb */
0 0 RETURN all -- any any anywhere anywhere /* cali:POcDbKMsLDARLsr1 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:toJ84M7vTTL91771 */
0 0 RETURN all -- any any anywhere anywhere /* cali:3XSC0yuHRe9UqTJU */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:v6O-JqrnCxRDxui9 */ /* Drop if no profiles matched */
Chain cali-fw-cali6b0bb2f1209 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:nvUjugNzVwfEyngq */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:S_JkzIPRAi51arJt */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:ZjN2cDgBwFxgp0vz */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:cp9UK-q8hxHijfCX */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:g9FtnMc0a2cbRdKf */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:sljKTXB-9FZZgDxz */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:dsE58gLNWfAEh8lo */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:jC3zs-i6JjXxNrbN */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:PtsAh7pO5Qi8r53- */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:a_60B8BVZY7p_F1G */
0 0 RETURN all -- any any anywhere anywhere /* cali:xxRCzPDXxBnVGYrf */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:9x8ys0gFDKodN2nT */
0 0 RETURN all -- any any anywhere anywhere /* cali:lQpIyvt3_RGp5c7b */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:lqz9Tx8n6QlILwiJ */ /* Drop if no profiles matched */
Chain cali-fw-cali6bfc27a619b (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:8JW9Oa9LKwVChrt1 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:LsLoBMJfSHjDin97 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:mPaFSi9R9jENdv74 */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:AVujBsKXDgMQk21j */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:fFgvFJ6MyjoSJUrF */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:VGpljQ8F7LaOl5CC */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:bHkUsBvbP80S-on0 */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:366gHLOOGTtd1rAk */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:JdZ1ndR_Jxn7HM4- */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:-kTZ-_OEdVktVoRU */
0 0 RETURN all -- any any anywhere anywhere /* cali:d-67b98oi_oDE6Cf */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:gGYontqWwVIW9xgT */
0 0 RETURN all -- any any anywhere anywhere /* cali:O0QiRqPwYQvAyEWP */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:idJc8BqqU6zbeQcI */ /* Drop if no profiles matched */
Chain cali-fw-cali701e7cc6c80 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:tTFsQ6gnLAkGMaNE */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:wLzclrhqL8YrInAU */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:9yp_Q0fV5nVV32ku */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:nE31_x9mHJOHajDn */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:IAfPzKemy_Gzcu96 */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:_qaqjftDnGwESn3m */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:FSavVi8pfllTz_-y */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:hwQdmFwScrTPg4mU */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:wDy6jSV9GSsYuJH3 */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:btfoiPHIGj-NGdhR */
0 0 RETURN all -- any any anywhere anywhere /* cali:6Y17QWqw-FrH-cz7 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:dx1KSrInald7O_e- */
0 0 RETURN all -- any any anywhere anywhere /* cali:h8BEZGeT6bafR5Qv */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:j4raVpQZyFDF4QMu */ /* Drop if no profiles matched */
Chain cali-fw-cali74e504b7a66 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:uSIeHDmxoamwmRvI */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:mi7QFScJqqn1fvGV */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:GBgFl0jiWCYIdX76 */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:kngTCrAGL_wM_sC8 */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:bllSam0oxis1mm8w */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:0YMRQRJbMjZQB2Cu */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:fgxGaWu1ysg_i_Wn */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:WBHUM9nhQhS56xcT */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:ni8IvRGgwV5BetWk */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:L6ZtmOf5tAy9fwbJ */
0 0 RETURN all -- any any anywhere anywhere /* cali:yVOrUqBC9l8rjb55 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:l8MJDJ38JdQhcAfI */
0 0 RETURN all -- any any anywhere anywhere /* cali:ECj_1NcUBKNdxPoB */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:Z1w3-q1bX3dS2Mh9 */ /* Drop if no profiles matched */
Chain cali-fw-cali757295f6996 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:tP8W0U6ss4IokBx6 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:tZyuGB4W8_LcEpmP */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:BovnMN7E0Xc-ZQcv */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:eQLZUyCDGW2X7SWx */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:z_5UCjpE174XmOR5 */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:qo3VSfF8K2Boarlh */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:gho2ObJoOp62thUe */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:F8baEH25M11nevYs */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:VURut-942Uq0mmB5 */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:WKKgxmEwbdaHicYk */
0 0 RETURN all -- any any anywhere anywhere /* cali:za-uRe-Nuu5ErL_Z */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:3JlQ46yMVre_l7wZ */
0 0 RETURN all -- any any anywhere anywhere /* cali:Ou0Eq4D17aIwMnZ7 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:oT8JG_TrA5YvGD_K */ /* Drop if no profiles matched */
Chain cali-fw-cali7eccdecc2aa (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:-yWh3riX1qCYyXh1 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:u24nEdlLDydi3G4V */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:y6wc5rcfO4PluZV- */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:hq2tYmq-kFM3yKDz */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:PlG0mfGzioyWYBlg */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:omG7ybuYr9FDoasP */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:IY0nO_P-yrSQWH1y */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:-3_ihD9rk-UB6C7V */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:kdf_Y23I7UNbSBvh */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:CsK9WNrLX0qdCLPl */
0 0 RETURN all -- any any anywhere anywhere /* cali:n2obRjhfGPrJsyps */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:jOMryt8Km_DO5tQ1 */
0 0 RETURN all -- any any anywhere anywhere /* cali:OieuVxsu-FwyUl75 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:DrJULEEtbwIytMs_ */ /* Drop if no profiles matched */
Chain cali-fw-cali84468d327cf (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:PoxDWUn7wAYoNh1Y */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:hEgliV-FJViVAX6I */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:qPW6fnFm-LvtP5KR */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:1X1sC1TnAmLe8ggM */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:aaNIYpNtCEiPl5qa */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:FWDokeMvhCyo_guS */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:E0JtpTFSeynY1jYS */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:zYDfvZ3edm2Sm8EU */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:Huv5Rhhl5LXnKPCf */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:NLmBWFwMAlEB4nz1 */
0 0 RETURN all -- any any anywhere anywhere /* cali:IzLvlRsas2ekgX-5 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:_A8gINxJeyCXWlkr */
0 0 RETURN all -- any any anywhere anywhere /* cali:2uw_fTWSHf1yvPfE */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:CpXFiSLUVr9690iU */ /* Drop if no profiles matched */
Chain cali-fw-cali845db002918 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:BX9E3_ILHaYu24Fg */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:BKI161BwQ3fdkORl */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:HoHwPf1T0zNrH03z */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:iRGMHcPApF2XbQtp */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:6Lx6mm-1LfZhdm2A */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:QrGVaiOZYQRofyzZ */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:Xc75KjRiLDfkPA8P */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:bpcLpnmhgkMqa1Z5 */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:52SkWJeWRxzwVNSs */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:MrL08l4hhgZ6f4Ag */
0 0 RETURN all -- any any anywhere anywhere /* cali:pRt0d_BNuZJCztFW */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:-wmPbm6SpdDJHzs4 */
0 0 RETURN all -- any any anywhere anywhere /* cali:lboDK9j3qiKzFAvY */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:vCak8RJgEugL15_h */ /* Drop if no profiles matched */
Chain cali-fw-cali852f1a9204c (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:lyh4M6ElVSry601s */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:oFLmGBpCdyOFpQo6 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:B4donZ6a6apt32uA */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:m5FaYy_gYVCr7vYX */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:HYG4LULnKJl4RVSk */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:d51MKU7mt74jENzr */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:zGXACOLeQcwENsmv */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:xv89vuv5OufwiroP */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:5sktg2JPHiayRd5r */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:kL9UKYxbQxXeg66Y */
0 0 RETURN all -- any any anywhere anywhere /* cali:2nICr5r20xxQ9izz */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:Qvx-UNPrnwRDrwMa */
0 0 RETURN all -- any any anywhere anywhere /* cali:0IJZAg4KzqLAcDy- */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:e-RI9OD-mQNA79Ww */ /* Drop if no profiles matched */
Chain cali-fw-cali8e93fce84a6 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:x_EAdfb3zidS7Dwm */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:kJZdOx8kIOp_VYq7 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:yOz77Zp5B9CrYcTS */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:aEbWwC44mG7xGpVy */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:dEeE5_dA4YkeNo7R */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:yLJ9bgFvttABbMqa */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:XfvcNtK4F_RsMpSG */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:to2S5oqspx5gW5NY */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:uIuZV4Z3he8HhOeL */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:w1Rje9e-ni1y2UMz */
0 0 RETURN all -- any any anywhere anywhere /* cali:UQEuy1bBPrvHVg__ */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:IvSsbSq5XjbKMhVx */
0 0 RETURN all -- any any anywhere anywhere /* cali:mG_FS2xd1p2CeFsh */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:9srvhvLDtGGNqGEg */ /* Drop if no profiles matched */
Chain cali-fw-cali8f4065ff2b6 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:r52__QhtGS2IVRdb */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:dF_e1_mwSOj7u4FG */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:0g3DTKeTeGgtCogz */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:PnVb-Iyt4Oo15-9S */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:DKKsY5OKdUa_aPXb */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:db6kPQGJiM6r0oZf */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:H7dJji5uQUvWfKrN */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:aLdFbqcoI7ejJ2ie */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:LzPdQ8Jp3mqgSuYt */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:1Ppa69xoif1sOiNu */
0 0 RETURN all -- any any anywhere anywhere /* cali:5QYDmsWNw2JfxhdX */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:v6e-iLmrqrWz4hyY */
0 0 RETURN all -- any any anywhere anywhere /* cali:SE38Tcebi_UHiGop */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:Gq1q2oyyq--WVoWs */ /* Drop if no profiles matched */
Chain cali-fw-cali95291e7e018 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:hEpLDceiLNuMYNCv */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:Jzd1pXqx6D7bm4E0 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:6ZY1jJclVsbaJQaS */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:giTWAJ9nnkLvnYmO */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:Hf3uBKS6pyA6l3S4 */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:dWosgWJPswISPGqD */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:U6D4Cnr8b78QXmTJ */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:Fxc7zdVANVai3lkj */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:12Qwz4wsaTfeuZLY */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:4yH-FMvziRrObW_O */
0 0 RETURN all -- any any anywhere anywhere /* cali:CvxfwDgfQQrmerMX */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:Wm0raDPfUwch4ukg */
0 0 RETURN all -- any any anywhere anywhere /* cali:Nz7y3aXJMh0aoXhc */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:HhH1yat55qYJCVUe */ /* Drop if no profiles matched */
Chain cali-fw-cali97a39b84c91 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:RhfpbZMsR6lNW1KG */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:2b6xIFPk587O5t75 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:ffXKYLncIH0HEF3v */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:I_qHKyU-2fuzE4vT */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:Tw3YEeANQP-hlN15 */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:zzm-Jh-6bAoNqZX0 */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:eWncQnETCgVDQvol */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:s8TbKclXU0ZrI7v8 */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:0k2HGjDhwA-yHY3W */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:U9tRhTRYOhcLoIu- */
0 0 RETURN all -- any any anywhere anywhere /* cali:fJPOvMbZrneewsF0 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:lsel73ZfCQTqyLDz */
0 0 RETURN all -- any any anywhere anywhere /* cali:X-DotBPX9kTei6_4 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:hf-W82RnaDPjo1wo */ /* Drop if no profiles matched */
Chain cali-fw-cali9916e5e28e6 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:1WuUhfCRVNfN6xo_ */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:Qr-NxHrz5wECubVu */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:E-IR53c6IaEGQjAt */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:guIgfvRiD55Izz6Q */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:38S7aPD__HNRIit8 */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:RL9H8s0h3vUcIzjR */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:I4DqTKWERlq2KM3N */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:F6xEsRvDY3u_glEp */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:KS8b_W0Ka8fjOUSy */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:XCrxrz_PbL7jpdKc */
0 0 RETURN all -- any any anywhere anywhere /* cali:BHIz2x9YayqZ8C_2 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:0gEGkz_S2TZWligC */
0 0 RETURN all -- any any anywhere anywhere /* cali:F4g0ZtceZ_svWyqr */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:d5WeAldoeH26bUd5 */ /* Drop if no profiles matched */
Chain cali-fw-calia358f09614c (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:r3M41Eunrrq-dHPx */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:H5Y0X95fN_wOpcDq */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:ZXsYb7i1HkKfcAEA */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:lG68MuSVPNR9Y-gY */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:DOIwartVQAm4UaOg */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:WR1S7I9Z5Yuw0P_G */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:SH3jh3BPmb6UdDm8 */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:zQ2FciB5QnRRdRs4 */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:Iqz23YmvyK6FIxoH */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:kWiZW_Filk4gIflS */
0 0 RETURN all -- any any anywhere anywhere /* cali:gJzFzwSFrQCZtTpG */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:YNjvsCC13_99AksD */
0 0 RETURN all -- any any anywhere anywhere /* cali:5c0PySqmO3r4ZVAV */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:oW-po8D_jgbpACf1 */ /* Drop if no profiles matched */
Chain cali-fw-calia5dea553aa7 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:iQZpm-ypS6YP4nbt */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:8xWJlyzoghLyY6Qq */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:SVUCIA1M7xpVKitE */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:s_YjjHRHWGN_67_9 */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:Dy3NQER6heCRZ_7R */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:1TE8Aq14QbgIQnId */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:b1RViSCqRtIWga8Y */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:vDLPHU99FcVjZnyV */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:0RQy1FDo-V7Mw-JS */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:UJnnFzkQiXW6z5yP */
0 0 RETURN all -- any any anywhere anywhere /* cali:t7U7tzEJvAMSW4mi */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:ujLwN5JMKUhXUQv1 */
0 0 RETURN all -- any any anywhere anywhere /* cali:CScjXRGGmEX1OPNZ */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:7TUKIw3pO04ocS0j */ /* Drop if no profiles matched */
Chain cali-fw-calia744e09c4ff (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:0czg5hvzvHhc4F9N */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:QYw1EVn3yvIr50Tl */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:Wo8JiM4K-abX_tba */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:eAQQrzv-yWcBr-pB */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:O9clitOtUuKQUkse */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:6ZU57TxNk9Y3lsSs */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:F3rhtyO0ryux-My0 */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:BX7Rqs5zFrj7qQCS */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:fX4zLO4u147DHf6C */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:Uq_BxC5_mvOYOf59 */
0 0 RETURN all -- any any anywhere anywhere /* cali:9jqKBTlu91LoiXLa */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:DzIm1Nd1wJuRJVBp */
0 0 RETURN all -- any any anywhere anywhere /* cali:a7HDFedl7Vapevv4 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:y4UiP_9OJi5feczm */ /* Drop if no profiles matched */
Chain cali-fw-calia9fcbc8adc2 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:uh62WXW3OWR2QCkq */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:kY_z_vU_r--ipVCR */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:kehJlvSEj2SGJrMx */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:FtB9jOe3Dg3PIyTf */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:ivFwNKymThImHmB_ */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:K1FIOikzartWnr6t */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:JvvA08gtRqm2qPMs */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:F6HIOsqEg2Xziojt */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:RJWoyQOl2lCP3MqG */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:S6g9p-mMtICO2vI4 */
0 0 RETURN all -- any any anywhere anywhere /* cali:8bmFix9pGzfgik5w */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:LLNJsQ4gvSrZgo4r */
0 0 RETURN all -- any any anywhere anywhere /* cali:uc0KC3oGMDIQbXrK */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:Flt73NYA1pYBvo-Q */ /* Drop if no profiles matched */
Chain cali-fw-calib70c771a1e5 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:hIpE1NcTuGJblCSX */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:0RQ2moMHwCJtDBTn */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:0w_K-fpHXoDhr8I2 */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:0R_Cac9ffBx4ikTg */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:3hLtAaRd_4q-x0Mh */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:kVTGBXPSR03LUcB5 */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:xZWB2jOV67fGgn3r */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:J5uPTmvs2jXJjxj1 */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:xDZRmX5VI5CzdYWX */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:wEbboMINGzHP1owx */
0 0 RETURN all -- any any anywhere anywhere /* cali:Jy071EehoYaTI2yr */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:625cNtZ6n0k5YMRa */
0 0 RETURN all -- any any anywhere anywhere /* cali:SGyCvR2eVdlVFhR3 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:me9Jr9gNF4lzvaSs */ /* Drop if no profiles matched */
Chain cali-fw-calic8e3b733162 (2 references)
pkts bytes target prot opt in out source destination
1287 651K ACCEPT all -- any any anywhere anywhere /* cali:ATespSLDLFkQhDxV */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:seYdOTcy3wTBSxyP */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:NKpEzfSGpZUloUsq */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:AqK81lewk0N1xnDc */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:3knxeG6vwfHb73EB */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-_kJqfZpgUe7r2t4A-14 all -- any any anywhere anywhere /* cali:hsA2c70b8dPq8Gu2 */
0 0 RETURN all -- any any anywhere anywhere /* cali:kdal5vR0ElgSdW1X */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-_4yi5_iSUAwsU8zMHTk all -- any any anywhere anywhere /* cali:qMK34UC7D5bg6n05 */
0 0 RETURN all -- any any anywhere anywhere /* cali:Z8Q-AkWd7OEVYatf */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:PqYtBhx3I_QLUFV9 */ /* Drop if no profiles matched */
Chain cali-fw-calid270f41d225 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:cpwHOPGVOLkrRMOx */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:s5KUsrPohXp9g7BR */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:umiP5kflVuVwftOS */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:crcT5hiK6O_w8ebf */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:4pWbTZEgBfypsluW */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:VBFFMBO0OnJpBFMS */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:Pe_DzbDfCiO9tZ7q */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:7KXwPDzlsceS1bki */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:GNdDTSjITs6WGo7Z */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:EzGa6OssqeTVvKar */
0 0 RETURN all -- any any anywhere anywhere /* cali:VPOT7bg03IB07Pz9 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:j1AwkteHyykZDd4a */
0 0 RETURN all -- any any anywhere anywhere /* cali:iIfwlftxYmEKrDPu */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:mq5pap6is8eqFXtX */ /* Drop if no profiles matched */
Chain cali-fw-calid448a8d46e9 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:BVukINRPcCvf7WTJ */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:QxuhxfhmsOyOf7fd */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:w7aHC0Kx74veo0c1 */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:csdvg-h_Oqc-obBy */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:XZ2CWNygU-xsncky */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:k9QpI-mh75dqbQQY */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:BbVqeVL0LPRmitT5 */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:0sTbfRTcJIWIr2V7 */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:wxMzMk6NeHK_HbdN */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:rsjlj4h0f2dHq6TQ */
0 0 RETURN all -- any any anywhere anywhere /* cali:7C5FX87d7Q4ZCm3Z */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:15qfDyoq4DPU1Wyd */
0 0 RETURN all -- any any anywhere anywhere /* cali:8wvm4hE1ihLSfmIE */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:8UvhrpltZxpN5hQW */ /* Drop if no profiles matched */
Chain cali-fw-calie19b99f3c2a (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:eHpnhnRhJEais995 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:xVrfT_4xK6Lxqcz_ */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:VI05QMKR_5qt9GiU */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:BODV9o12qCqwDKjg */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:LsfuNeVVu9rs3I2R */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:QiIbIY4z1Vlj1dU2 */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:806JgkLvd2ui3UmB */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:XbhWb5nlpOaMG5lA */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:NVS_jTK_r5eC5IhJ */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:8ZEr6nt6JsLbXZkz */
0 0 RETURN all -- any any anywhere anywhere /* cali:PSQ_ebLLKupe3CB3 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:kPC2oIyx4koIq2Hx */
0 0 RETURN all -- any any anywhere anywhere /* cali:Z-kUFRHxvTvxEVSw */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:dR1BgGQ9hWDNLa3t */ /* Drop if no profiles matched */
Chain cali-fw-calie20683acc3f (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:ZdDD4la8fEGx11V2 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:puq5fBxwuNFsbak3 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:9vD3ammp3_mRARb8 */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:YaoJbfJvAZUtVJMR */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:ZNwhBh-N8HEWltNe */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:WaQaip7BzqVJ6CBV */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:XbD8vD8yI-d0RCiG */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:v0qS10FBiJ2bN6Tb */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:MKQfiXhgmlE80q2X */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:iF0ncTDXCvq3gXMV */
0 0 RETURN all -- any any anywhere anywhere /* cali:yAuzU8NdLUVDd6MA */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:PqGAUKptxShrAViL */
0 0 RETURN all -- any any anywhere anywhere /* cali:h0M7TLGUBlD71hU_ */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:cY60mbS5_q28fp7y */ /* Drop if no profiles matched */
Chain cali-fw-calie4256464cbf (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:qv6RDLawlewiHrb9 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:-Ml1j9_s1jHGDDOB */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:snSWn-z9adbt3PH5 */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:8yXVS0UXn0RXj0uv */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:QrdXPYrebDY_M_IG */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:7-FYswFYcMjIhL5a */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:UI1p4x_UgkXJeKNS */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:FZOEdsth2du5Ur5s */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:f2BjkOB5xkL8vBfc */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:QKUsMAKPhEymUZgT */
0 0 RETURN all -- any any anywhere anywhere /* cali:MW_ruxigrB6cUWQn */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:xrP9yzcvO-k7ZK1U */
0 0 RETURN all -- any any anywhere anywhere /* cali:0UKrmFiWQ4e_UIVz */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:iuCYd697vMU8Pz_C */ /* Drop if no profiles matched */
Chain cali-fw-caliefced439614 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:WozaB39W7WJ86m7T */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:f57sBW-G6x28YRAk */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:ixnc1vmQCmmlsG6L */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:B5c5YHZqHTVk3Ovx */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:u3DLHE_8_p-NpyJk */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:2WAGHhgweykjaP8A */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:2JtX9x78yBIOTwJe */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:_ZvO8Bsh8_K6Ax6Q */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:deENdb0jZ5xe5ZUg */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:57CRYUmZYt0AyDWq */
0 0 RETURN all -- any any anywhere anywhere /* cali:zBbQlPau50gwdN1E */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:7hVxJvNkPF_1suhu */
0 0 RETURN all -- any any anywhere anywhere /* cali:azvNkfIRcwpiGziD */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:KXy1k_raBtt4fsnU */ /* Drop if no profiles matched */
Chain cali-pi-_FDiLImilezd09cpg5ci (2 references)
pkts bytes target prot opt in out source destination
0 0 MARK tcp -- any any anywhere anywhere /* cali:wH4Z-YLtazvrkIUi */ /* Policy calico-apiserver/knp.default.allow-apiserver ingress */ multiport dports 5443 MARK or 0x10000
Chain cali-po-_1xbqoPV7KLLL2JHnhzu (51 references)
pkts bytes target prot opt in out source destination
0 0 MARK tcp -- any any anywhere anywhere /* cali:mDdqkYpQ8XTfbAXB */ /* Policy test1/knp.default.testpol1 egress */ match-set cali40s:plW4xKCmcWmAicsFuKWtwx4 dst multiport dports http MARK or 0x10000
Chain cali-pri-_4yi5_iSUAwsU8zMHTk (2 references)
pkts bytes target prot opt in out source destination
0 0 all -- any any anywhere anywhere /* cali:ZYnaZZFwsSjfXO4C */ /* Profile ksa.calico-apiserver.calico-apiserver ingress */
Chain cali-pri-_kJqfZpgUe7r2t4A-14 (2 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:IQx0SzlDGn6BPv0A */ /* Profile kns.calico-apiserver ingress */ MARK or 0x10000
Chain cali-pri-_nzzjLvInId1gPHmQz_ (1 references)
pkts bytes target prot opt in out source destination
0 0 all -- any any anywhere anywhere /* cali:UQoEf2WCdU0bPTCb */ /* Profile ksa.calico-system.calico-kube-controllers ingress */
Chain cali-pri-_u2Tn2rSoAPffvE7JO6 (2 references)
pkts bytes target prot opt in out source destination
0 0 all -- any any anywhere anywhere /* cali:WqgznqAQ-uYV0oBx */ /* Profile ksa.kube-system.coredns ingress */
Chain cali-pri-_ymJUz7yzI6NOKJhG2- (1 references)
pkts bytes target prot opt in out source destination
0 0 all -- any any anywhere anywhere /* cali:52zm9tLYY65R0fSD */ /* Profile ksa.calico-system.csi-node-driver ingress */
Chain cali-pri-kns.calico-system (2 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:hLANj-OVIyT53h_j */ /* Profile kns.calico-system ingress */ MARK or 0x10000
Chain cali-pri-kns.kube-system (2 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:J1TyxtHWd0qaBGK- */ /* Profile kns.kube-system ingress */ MARK or 0x10000
Chain cali-pri-kns.test1 (51 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:JqCDFisbXDx5WOXd */ /* Profile kns.test1 ingress */ MARK or 0x10000
Chain cali-pri-ksa.test1.default (51 references)
pkts bytes target prot opt in out source destination
0 0 all -- any any anywhere anywhere /* cali:0vNS2XLcHWR92ENw */ /* Profile ksa.test1.default ingress */
Chain cali-pro-_4yi5_iSUAwsU8zMHTk (2 references)
pkts bytes target prot opt in out source destination
0 0 all -- any any anywhere anywhere /* cali:Pp_dQp2FeNabRhyi */ /* Profile ksa.calico-apiserver.calico-apiserver egress */
Chain cali-pro-_kJqfZpgUe7r2t4A-14 (2 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:_cFTxC141wwWRzyZ */ /* Profile kns.calico-apiserver egress */ MARK or 0x10000
Chain cali-pro-_nzzjLvInId1gPHmQz_ (1 references)
pkts bytes target prot opt in out source destination
0 0 all -- any any anywhere anywhere /* cali:5bHxBXLMkJKgC6dk */ /* Profile ksa.calico-system.calico-kube-controllers egress */
Chain cali-pro-_u2Tn2rSoAPffvE7JO6 (2 references)
pkts bytes target prot opt in out source destination
0 0 all -- any any anywhere anywhere /* cali:0-_UPh39dt5XfhmJ */ /* Profile ksa.kube-system.coredns egress */
Chain cali-pro-_ymJUz7yzI6NOKJhG2- (1 references)
pkts bytes target prot opt in out source destination
0 0 all -- any any anywhere anywhere /* cali:yuJvAdyU1LYltt-O */ /* Profile ksa.calico-system.csi-node-driver egress */
Chain cali-pro-kns.calico-system (2 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:gWxJzCZXxl31NR0P */ /* Profile kns.calico-system egress */ MARK or 0x10000
Chain cali-pro-kns.kube-system (2 references)
pkts bytes target prot opt in out source destination
5 305 MARK all -- any any anywhere anywhere /* cali:tgOR2S8DVHZW3F1M */ /* Profile kns.kube-system egress */ MARK or 0x10000
Chain cali-pro-kns.test1 (51 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:Ta4QHZbv1h3hFe9O */ /* Profile kns.test1 egress */ MARK or 0x10000
Chain cali-pro-ksa.test1.default (51 references)
pkts bytes target prot opt in out source destination
0 0 all -- any any anywhere anywhere /* cali:QuhddfYRcL-ihmo2 */ /* Profile ksa.test1.default egress */
Chain cali-set-endpoint-mark (3 references)
pkts bytes target prot opt in out source destination
0 0 cali-set-endpoint-mark-0 all -- cali0+ any anywhere anywhere [goto] /* cali:UsDHcHwRpNwwYlaM */
0 0 cali-set-endpoint-mark-1 all -- cali1+ any anywhere anywhere [goto] /* cali:TyIZV8TS2_K6WG15 */
0 0 cali-set-endpoint-mark-2 all -- cali2+ any anywhere anywhere [goto] /* cali:o8ssChHuhwuER1U6 */
0 0 cali-set-endpoint-mark-3 all -- cali3+ any anywhere anywhere [goto] /* cali:3uf05gs_oAKFSiUO */
0 0 cali-set-endpoint-mark-4 all -- cali4+ any anywhere anywhere [goto] /* cali:oA2JdvSY66BUMFHM */
0 0 cali-set-endpoint-mark-5 all -- cali5+ any anywhere anywhere [goto] /* cali:_CtLu9Y-YU2YANoM */
0 0 cali-set-endpoint-mark-6 all -- cali6+ any anywhere anywhere [goto] /* cali:6cBOETUFFznDQ3Xy */
0 0 cali-set-endpoint-mark-7 all -- cali7+ any anywhere anywhere [goto] /* cali:-U0DnBFYkv3wH__2 */
0 0 cali-set-endpoint-mark-8 all -- cali8+ any anywhere anywhere [goto] /* cali:yshtsR1UXXo3sErr */
0 0 cali-set-endpoint-mark-9 all -- cali9+ any anywhere anywhere [goto] /* cali:_F720ECM6ujloU3N */
0 0 cali-set-endpoint-mark-a all -- calia+ any anywhere anywhere [goto] /* cali:6_T1sAIb36Yg4cUG */
0 0 cali-sm-calib70c771a1e5 all -- calib70c771a1e5 any anywhere anywhere [goto] /* cali:9uddDdjF901jVt49 */
0 0 cali-sm-calic8e3b733162 all -- calic8e3b733162 any anywhere anywhere [goto] /* cali:o3pFlMe__bf4Bki7 */
0 0 cali-set-endpoint-mark-d all -- calid+ any anywhere anywhere [goto] /* cali:5X2Df5iA5bBBhNOp */
0 0 cali-set-endpoint-mark-e all -- calie+ any anywhere anywhere [goto] /* cali:xRTtQiBT1lXMUr2R */
0 0 cali-set-endpoint-mark-a all -- a+ any anywhere anywhere [goto] /* cali:J-hht0VFSePm88HR */
0 0 cali-sm-cdummy0 all -- cdummy0 any anywhere anywhere [goto] /* cali:0skCdI6kOC0HpSFO */
0 0 DROP all -- cali+ any anywhere anywhere /* cali:jX8T6Yx71Cp1e99f */ /* Unknown endpoint */
0 0 MARK all -- any any anywhere anywhere /* cali:kHNCIwjI5C6f9QT- */ /* Non-Cali endpoint mark */ MARK xset 0x100000/0xfff00000
Chain cali-set-endpoint-mark-0 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-sm-cali031f9ab8df4 all -- cali031f9ab8df4 any anywhere anywhere [goto] /* cali:9Fo7bp5MPjoDOdZk */
0 0 cali-sm-cali06e0754073b all -- cali06e0754073b any anywhere anywhere [goto] /* cali:yD0CQte3jCgtJ7PL */
Chain cali-set-endpoint-mark-1 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-sm-cali139b01927da all -- cali139b01927da any anywhere anywhere [goto] /* cali:PiZUMGUiCTymUONT */
0 0 cali-sm-cali1421f384600 all -- cali1421f384600 any anywhere anywhere [goto] /* cali:Du0LAx-AkfKCzW4s */
0 0 cali-sm-cali15c0a154d90 all -- cali15c0a154d90 any anywhere anywhere [goto] /* cali:HkjmAkCbJ6ps7Fdi */
0 0 cali-sm-cali1842a58cab8 all -- cali1842a58cab8 any anywhere anywhere [goto] /* cali:SadGeNKlTLg2XtLS */
0 0 cali-sm-cali19ea483d497 all -- cali19ea483d497 any anywhere anywhere [goto] /* cali:ekYFAj5g-9aP-6kQ */
Chain cali-set-endpoint-mark-2 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-sm-cali2683511f9e7 all -- cali2683511f9e7 any anywhere anywhere [goto] /* cali:owMdHMHmLmgsU8YK */
0 0 cali-sm-cali280037a81c5 all -- cali280037a81c5 any anywhere anywhere [goto] /* cali:EHwcZem2R1sfon0J */
0 0 cali-sm-cali299f39e782d all -- cali299f39e782d any anywhere anywhere [goto] /* cali:Ivzvz3-UIrEuZdxz */
0 0 cali-sm-cali2cb65d6ee77 all -- cali2cb65d6ee77 any anywhere anywhere [goto] /* cali:txEZ63t0HBp0ccTg */
0 0 cali-sm-cali2fd699b7f33 all -- cali2fd699b7f33 any anywhere anywhere [goto] /* cali:hZKlzYua-aNBK2T8 */
Chain cali-set-endpoint-mark-3 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-sm-cali34b4999a9f1 all -- cali34b4999a9f1 any anywhere anywhere [goto] /* cali:kZ1yv4993ZJ2vxdz */
0 0 cali-sm-cali3503a55ff1b all -- cali3503a55ff1b any anywhere anywhere [goto] /* cali:umFnJq2sgyXY6GyS */
0 0 cali-sm-cali37bceb25357 all -- cali37bceb25357 any anywhere anywhere [goto] /* cali:hNmePY2CqEMH47k2 */
0 0 cali-sm-cali3862ba2b954 all -- cali3862ba2b954 any anywhere anywhere [goto] /* cali:qGktAugmohmWOegV */
0 0 cali-sm-cali389b5b6a8ec all -- cali389b5b6a8ec any anywhere anywhere [goto] /* cali:Vi8B0XaUxmJU5rti */
0 0 cali-sm-cali3b35a85ca02 all -- cali3b35a85ca02 any anywhere anywhere [goto] /* cali:2_BTniFqDn8rwtxU */
0 0 cali-sm-cali3cefa8750a8 all -- cali3cefa8750a8 any anywhere anywhere [goto] /* cali:PyIHuGsdkDioUEuZ */
0 0 cali-sm-cali3f18645c168 all -- cali3f18645c168 any anywhere anywhere [goto] /* cali:GuD8iAns48-kj_8d */
0 0 cali-sm-cali3fcd030fa13 all -- cali3fcd030fa13 any anywhere anywhere [goto] /* cali:kBqcMVe0_TkrJIXA */
Chain cali-set-endpoint-mark-4 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-sm-cali4000c1e54de all -- cali4000c1e54de any anywhere anywhere [goto] /* cali:SdH9M4EKzcS7HQkd */
0 0 cali-sm-cali4534e2246ed all -- cali4534e2246ed any anywhere anywhere [goto] /* cali:iI_uVDeI7IQGh0cU */
0 0 cali-sm-cali4b00c59f252 all -- cali4b00c59f252 any anywhere anywhere [goto] /* cali:FZDWmwQCk40e49kJ */
0 0 cali-sm-cali4c7d39d0d0e all -- cali4c7d39d0d0e any anywhere anywhere [goto] /* cali:CWUgtmK8rS9ei89q */
Chain cali-set-endpoint-mark-5 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-sm-cali51eec6e509b all -- cali51eec6e509b any anywhere anywhere [goto] /* cali:JdTjihWg23roB49P */
0 0 cali-sm-cali5237e9928a0 all -- cali5237e9928a0 any anywhere anywhere [goto] /* cali:hmnlJjsmweqPHD-6 */
0 0 cali-sm-cali557158cd734 all -- cali557158cd734 any anywhere anywhere [goto] /* cali:9rfpDL_lU3SQARfh */
0 0 cali-sm-cali590c7f9f7ee all -- cali590c7f9f7ee any anywhere anywhere [goto] /* cali:HCKRcTHiPS6J83wH */
0 0 cali-sm-cali5a521423b83 all -- cali5a521423b83 any anywhere anywhere [goto] /* cali:krsEPcMu1SagS9HK */
Chain cali-set-endpoint-mark-6 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-sm-cali65ec8e40f76 all -- cali65ec8e40f76 any anywhere anywhere [goto] /* cali:ScsWi7nv-JlUqlM4 */
0 0 cali-sm-cali6b0bb2f1209 all -- cali6b0bb2f1209 any anywhere anywhere [goto] /* cali:-_QZY4HXis4ET7CP */
0 0 cali-sm-cali6bfc27a619b all -- cali6bfc27a619b any anywhere anywhere [goto] /* cali:amNYPkAwfUOWUZzy */
Chain cali-set-endpoint-mark-7 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-sm-cali701e7cc6c80 all -- cali701e7cc6c80 any anywhere anywhere [goto] /* cali:29oVXkydzhxoTdhc */
0 0 cali-sm-cali74e504b7a66 all -- cali74e504b7a66 any anywhere anywhere [goto] /* cali:pyPxmqjosFKN2grB */
0 0 cali-sm-cali757295f6996 all -- cali757295f6996 any anywhere anywhere [goto] /* cali:0jDzNTgfA_fPGzPu */
0 0 cali-sm-cali7eccdecc2aa all -- cali7eccdecc2aa any anywhere anywhere [goto] /* cali:CsoHAOJEhysR4o2F */
Chain cali-set-endpoint-mark-8 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-sm-cali84468d327cf all -- cali84468d327cf any anywhere anywhere [goto] /* cali:3TMZdwjGSRamyS5u */
0 0 cali-sm-cali845db002918 all -- cali845db002918 any anywhere anywhere [goto] /* cali:YNduzPqSwL7llXUm */
0 0 cali-sm-cali852f1a9204c all -- cali852f1a9204c any anywhere anywhere [goto] /* cali:EHk6Kao7YWSSmgd5 */
0 0 cali-sm-cali8e93fce84a6 all -- cali8e93fce84a6 any anywhere anywhere [goto] /* cali:4P7tyhOq1a47RGKs */
0 0 cali-sm-cali8f4065ff2b6 all -- cali8f4065ff2b6 any anywhere anywhere [goto] /* cali:PMghi0RSreHjWz8v */
Chain cali-set-endpoint-mark-9 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-sm-cali95291e7e018 all -- cali95291e7e018 any anywhere anywhere [goto] /* cali:tUaQyPWedwSYMeRI */
0 0 cali-sm-cali97a39b84c91 all -- cali97a39b84c91 any anywhere anywhere [goto] /* cali:9WmuADPFrouWJ-bK */
0 0 cali-sm-cali9916e5e28e6 all -- cali9916e5e28e6 any anywhere anywhere [goto] /* cali:sUvNaM_E5A4sijZ9 */
Chain cali-set-endpoint-mark-a (2 references)
pkts bytes target prot opt in out source destination
0 0 cali-sm-adummy0 all -- adummy0 any anywhere anywhere [goto] /* cali:B4z27dbzhbTeB7aD */
0 0 cali-sm-adummy1 all -- adummy1 any anywhere anywhere [goto] /* cali:ydTULeucDSDCSJYu */
Chain cali-set-endpoint-mark-d (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-sm-calid270f41d225 all -- calid270f41d225 any anywhere anywhere [goto] /* cali:zaBF8ODG3PYRGAic */
0 0 cali-sm-calid448a8d46e9 all -- calid448a8d46e9 any anywhere anywhere [goto] /* cali:TW9H_BiZyANlsOIN */
Chain cali-set-endpoint-mark-e (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-sm-calie19b99f3c2a all -- calie19b99f3c2a any anywhere anywhere [goto] /* cali:oVKx6uClJdDpdSHg */
0 0 cali-sm-calie20683acc3f all -- calie20683acc3f any anywhere anywhere [goto] /* cali:_3RegyAB81qn1NLs */
0 0 cali-sm-calie4256464cbf all -- calie4256464cbf any anywhere anywhere [goto] /* cali:K66aStiLcnboIese */
0 0 cali-sm-caliefced439614 all -- caliefced439614 any anywhere anywhere [goto] /* cali:qs_I7rs02VYQq56k */
Chain cali-sm-adummy0 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:uv8_v4N9vFGn86PK */ MARK xset 0xdca00000/0xfff00000
Chain cali-sm-adummy1 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:UHYOf5oQXTiZpsga */ MARK xset 0xdcb00000/0xfff00000
Chain cali-sm-cali031f9ab8df4 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:b2M82b6hqhYfqFEP */ MARK xset 0x5a800000/0xfff00000
Chain cali-sm-cali06e0754073b (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:5yVSnUQxet4HSIbf */ MARK xset 0xc1700000/0xfff00000
Chain cali-sm-cali139b01927da (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:7Dax0RBbkJPqCXYE */ MARK xset 0xbb100000/0xfff00000
Chain cali-sm-cali1421f384600 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:zxXKdxxrqHxLw51w */ MARK xset 0xba500000/0xfff00000
Chain cali-sm-cali15c0a154d90 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:Uf05cZy9JI8z8wOe */ MARK xset 0x3d900000/0xfff00000
Chain cali-sm-cali1842a58cab8 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:nYMgplODn1p9gsMF */ MARK xset 0xde800000/0xfff00000
Chain cali-sm-cali19ea483d497 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:R0Lo-Q23stCUr9cj */ MARK xset 0x32b00000/0xfff00000
Chain cali-sm-cali2683511f9e7 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:g6KEap29K_2mG0VV */ MARK xset 0x64900000/0xfff00000
Chain cali-sm-cali280037a81c5 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:ebCOyrsAkoPG1ftm */ MARK xset 0xe5800000/0xfff00000
Chain cali-sm-cali299f39e782d (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:PID4fSxyLV4-qgTS */ MARK xset 0x73400000/0xfff00000
Chain cali-sm-cali2cb65d6ee77 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:a_AKUr_OK1XJfVdx */ MARK xset 0x7b000000/0xfff00000
Chain cali-sm-cali2fd699b7f33 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:D-TXJCexL_As-Ycu */ MARK xset 0xc8b00000/0xfff00000
Chain cali-sm-cali34b4999a9f1 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:5hHgUQ0_eD6lfBXj */ MARK xset 0xe2f00000/0xfff00000
Chain cali-sm-cali3503a55ff1b (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:A_lEPXfY9yDLmVBV */ MARK xset 0x36f00000/0xfff00000
Chain cali-sm-cali37bceb25357 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:1N4z7734opygDAep */ MARK xset 0x2fc00000/0xfff00000
Chain cali-sm-cali3862ba2b954 (1 references)
pkts bytes target prot opt in out source destination
3 180 MARK all -- any any anywhere anywhere /* cali:FaySE6VnBbZaT2UA */ MARK xset 0x1a400000/0xfff00000
Chain cali-sm-cali389b5b6a8ec (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:nMUc8LMPe7js064V */ MARK xset 0x8ca00000/0xfff00000
Chain cali-sm-cali3b35a85ca02 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:eggGxu_HgBUGM012 */ MARK xset 0x95f00000/0xfff00000
Chain cali-sm-cali3cefa8750a8 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:aEUNf9DyRevtNL75 */ MARK xset 0xde700000/0xfff00000
Chain cali-sm-cali3f18645c168 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:teGlFlER7BFxWT1Z */ MARK xset 0xb4900000/0xfff00000
Chain cali-sm-cali3fcd030fa13 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:ox6FZfYmPELf-S0J */ MARK xset 0x27800000/0xfff00000
Chain cali-sm-cali4000c1e54de (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:5FEDZvmWE--P6jaq */ MARK xset 0xa0f00000/0xfff00000
Chain cali-sm-cali4534e2246ed (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:U-HWiwRt1NPRvMuh */ MARK xset 0xdc000000/0xfff00000
Chain cali-sm-cali4b00c59f252 (1 references)
pkts bytes target prot opt in out source destination
1 60 MARK all -- any any anywhere anywhere /* cali:rhqVrKf8kXeamF_x */ MARK xset 0x40a00000/0xfff00000
Chain cali-sm-cali4c7d39d0d0e (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:8gBrLiefFjHvpraW */ MARK xset 0xa3f00000/0xfff00000
Chain cali-sm-cali51eec6e509b (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:bJAfAY5tHjU19yaF */ MARK xset 0x41e00000/0xfff00000
Chain cali-sm-cali5237e9928a0 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:sZkSp9m6X_NTMeWr */ MARK xset 0x38b00000/0xfff00000
Chain cali-sm-cali557158cd734 (1 references)
pkts bytes target prot opt in out source destination
3 180 MARK all -- any any anywhere anywhere /* cali:jilUkdvIPYhEutVo */ MARK xset 0x3ba00000/0xfff00000
Chain cali-sm-cali590c7f9f7ee (1 references)
pkts bytes target prot opt in out source destination
1 60 MARK all -- any any anywhere anywhere /* cali:zcwx_xe5WeGO0IYU */ MARK xset 0x5d400000/0xfff00000
Chain cali-sm-cali5a521423b83 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:30ochB1ZqkksvTv4 */ MARK xset 0xce00000/0xfff00000
Chain cali-sm-cali65ec8e40f76 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:Jfgm9aOVS4Mt34Dm */ MARK xset 0x71300000/0xfff00000
Chain cali-sm-cali6b0bb2f1209 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:3J8eJZ0PCTmOzJ00 */ MARK xset 0xa9c00000/0xfff00000
Chain cali-sm-cali6bfc27a619b (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:UenArqjO_AOuwSNp */ MARK xset 0xecf00000/0xfff00000
Chain cali-sm-cali701e7cc6c80 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:rvY7EumkupOJSI_9 */ MARK xset 0x83d00000/0xfff00000
Chain cali-sm-cali74e504b7a66 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:26xk0Z22bERssUJN */ MARK xset 0x87300000/0xfff00000
Chain cali-sm-cali757295f6996 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:eE5xej6UG05DPFbv */ MARK xset 0x6b00000/0xfff00000
Chain cali-sm-cali7eccdecc2aa (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:qVRmq0bN-_uZZj3t */ MARK xset 0xa6300000/0xfff00000
Chain cali-sm-cali84468d327cf (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:k88MI6DbLMNpzFz4 */ MARK xset 0x7f700000/0xfff00000
Chain cali-sm-cali845db002918 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:f_U5o6giql4P818S */ MARK xset 0x1cf00000/0xfff00000
Chain cali-sm-cali852f1a9204c (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:syB0FwX9ioy6h6UB */ MARK xset 0xb8d00000/0xfff00000
Chain cali-sm-cali8e93fce84a6 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:STPjNOZz2WyvUQWi */ MARK xset 0xdf400000/0xfff00000
Chain cali-sm-cali8f4065ff2b6 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:orew8MYGn_uYOZsQ */ MARK xset 0x26900000/0xfff00000
Chain cali-sm-cali95291e7e018 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:E-Vx9-iHD_7rJVQi */ MARK xset 0x6ea00000/0xfff00000
Chain cali-sm-cali97a39b84c91 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:bAgDiMpVVLDsf-EL */ MARK xset 0x71a00000/0xfff00000
Chain cali-sm-cali9916e5e28e6 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:tW913MXP4TC6WPGa */ MARK xset 0x200000/0xfff00000
Chain cali-sm-calib70c771a1e5 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:L_-NjWNYsrsx4zfE */ MARK xset 0xb9900000/0xfff00000
Chain cali-sm-calic8e3b733162 (1 references)
pkts bytes target prot opt in out source destination
1 60 MARK all -- any any anywhere anywhere /* cali:El_otMJwE6PAEin5 */ MARK xset 0x2700000/0xfff00000
Chain cali-sm-calid270f41d225 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:BLyZSBOEQIz0b4qA */ MARK xset 0x78300000/0xfff00000
Chain cali-sm-calid448a8d46e9 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:W2Y-Y2-vsxKDELpB */ MARK xset 0x14d00000/0xfff00000
Chain cali-sm-calie19b99f3c2a (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:NeVxp1O2PzR_Zs2g */ MARK xset 0x57400000/0xfff00000
Chain cali-sm-calie20683acc3f (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:lkOpzMpKMy6FaVM5 */ MARK xset 0x6a800000/0xfff00000
Chain cali-sm-calie4256464cbf (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:lWNrPfzRscezn_Us */ MARK xset 0xe5b00000/0xfff00000
Chain cali-sm-caliefced439614 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:VxxpQdCYr1mU1uCq */ MARK xset 0xb0a00000/0xfff00000
Chain cali-sm-cdummy0 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:ZwULf2dF4dr3pqTX */ MARK xset 0xd9800000/0xfff00000
Chain cali-th-adummy0 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:RemHtnnkZ_tP2qZY */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:zgJEJky8gJTqeBQA */ ctstate INVALID
0 0 cali-failsafe-out all -- any any anywhere anywhere /* cali:f-HvcdIzxOG-Prhi */
0 0 MARK all -- any any anywhere anywhere /* cali:m3qtxNI_rHZoPMty */ MARK and 0xfffcffff
0 0 DROP all -- any any anywhere anywhere /* cali:-f0C_Xvn0NbjGwcw */ /* Drop if no profiles matched */
Chain cali-th-adummy1 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:OhTtyfaSwf8dTaed */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:Qtm2p1hC-6WwfAef */ ctstate INVALID
0 0 cali-failsafe-out all -- any any anywhere anywhere /* cali:USMrIQ3egVqQGryS */
0 0 MARK all -- any any anywhere anywhere /* cali:lZsuiSyg6uI-RXfq */ MARK and 0xfffcffff
0 0 DROP all -- any any anywhere anywhere /* cali:b3I6ClW5Xt9E_KKJ */ /* Drop if no profiles matched */
Chain cali-th-cdummy0 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:QzuEEDWY8Xiwvb9X */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:FZp1E-PdvWgtc9JW */ ctstate INVALID
0 0 cali-failsafe-out all -- any any anywhere anywhere /* cali:kh35v4JAbgMg7Xgi */
0 0 MARK all -- any any anywhere anywhere /* cali:E8saFumIo_iUGFfl */ MARK and 0xfffcffff
0 0 DROP all -- any any anywhere anywhere /* cali:W5H2gAyuYnYA1KTa */ /* Drop if no profiles matched */
Chain cali-thfw-adummy0 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:8wFrhXdE-GqEdKFr */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:1MMbujNjZybv5wGx */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:8R8NCbMvZsFLmyHo */ MARK and 0xfffcffff
0 0 MARK all -- any any anywhere anywhere /* cali:_xsgjMnUZANCY6ah */ /* Allow forwarded traffic by default */ MARK or 0x10000
0 0 RETURN all -- any any anywhere anywhere /* cali:_PhC01ND8LoeTtGm */ /* Return for accepted forward traffic */
Chain cali-thfw-adummy1 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:_2I8OrJC1BCwQ0Wz */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:kH3btOyc9CZzYkBM */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:-rHOAJsGvASgVB75 */ MARK and 0xfffcffff
0 0 MARK all -- any any anywhere anywhere /* cali:Pjp7Iw8wL3C3yfRm */ /* Allow forwarded traffic by default */ MARK or 0x10000
0 0 RETURN all -- any any anywhere anywhere /* cali:aM-L8Pi-hpVqBolw */ /* Return for accepted forward traffic */
Chain cali-thfw-cdummy0 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:1iyFU6O7KbqxqSD1 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:dhDIhxXRKVd8GHVi */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:Gr9ZlcO-xpLvPzoC */ MARK and 0xfffcffff
0 0 MARK all -- any any anywhere anywhere /* cali:QqENUUih4WSD80mv */ /* Allow forwarded traffic by default */ MARK or 0x10000
0 0 RETURN all -- any any anywhere anywhere /* cali:D1TDrzA526n8sWfw */ /* Return for accepted forward traffic */
Chain cali-to-hep-forward (2 references)
pkts bytes target prot opt in out source destination
0 0 cali-to-hep-forward-a all -- any a+ anywhere anywhere [goto] /* cali:DKrAUS8l8HpevH4J */
0 0 cali-thfw-cdummy0 all -- any cdummy0 anywhere anywhere [goto] /* cali:bmN8eojlwyC4fItt */
Chain cali-to-hep-forward-a (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-thfw-adummy0 all -- any adummy0 anywhere anywhere [goto] /* cali:PnfetEoWMPbI1Rj2 */
0 0 cali-thfw-adummy1 all -- any adummy1 anywhere anywhere [goto] /* cali:DEdw_D4Z95SdaAnb */
Chain cali-to-host-endpoint (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-to-host-endpoint-a all -- any a+ anywhere anywhere [goto] /* cali:syrsgbqRYMNcv4dN */
0 0 cali-th-cdummy0 all -- any cdummy0 anywhere anywhere [goto] /* cali:8j8l9MOJQpFaRP5T */
Chain cali-to-host-endpoint-a (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-th-adummy0 all -- any adummy0 anywhere anywhere [goto] /* cali:oBrv0idDiKmtIIpS */
0 0 cali-th-adummy1 all -- any adummy1 anywhere anywhere [goto] /* cali:XteHMO8qVnridlMi */
Chain cali-to-wl-dispatch (2 references)
pkts bytes target prot opt in out source destination
0 0 cali-to-wl-dispatch-0 all -- any cali0+ anywhere anywhere [goto] /* cali:dIkHjFD9PelLx7cm */
0 0 cali-to-wl-dispatch-1 all -- any cali1+ anywhere anywhere [goto] /* cali:cOtVr_jX21sbMubK */
0 0 cali-to-wl-dispatch-2 all -- any cali2+ anywhere anywhere [goto] /* cali:DzxtnY8HbTKkqBjq */
0 0 cali-to-wl-dispatch-3 all -- any cali3+ anywhere anywhere [goto] /* cali:6wt_eRgXjjBP9wBe */
0 0 cali-to-wl-dispatch-4 all -- any cali4+ anywhere anywhere [goto] /* cali:73LGgIpG-tOryEB0 */
0 0 cali-to-wl-dispatch-5 all -- any cali5+ anywhere anywhere [goto] /* cali:kQQ-CiiPsiZYEsNO */
0 0 cali-to-wl-dispatch-6 all -- any cali6+ anywhere anywhere [goto] /* cali:LSwCz3VfTxilxvEE */
0 0 cali-to-wl-dispatch-7 all -- any cali7+ anywhere anywhere [goto] /* cali:bTcXYhLNI-sThV3z */
0 0 cali-to-wl-dispatch-8 all -- any cali8+ anywhere anywhere [goto] /* cali:-MkByBoaPALpm-V6 */
0 0 cali-to-wl-dispatch-9 all -- any cali9+ anywhere anywhere [goto] /* cali:dQuEV1Vjxgak5rNY */
0 0 cali-to-wl-dispatch-a all -- any calia+ anywhere anywhere [goto] /* cali:mKp61Vge30C-pUfH */
0 0 cali-tw-calib70c771a1e5 all -- any calib70c771a1e5 anywhere anywhere [goto] /* cali:NGFnnsy0S7eUctcq */
0 0 cali-tw-calic8e3b733162 all -- any calic8e3b733162 anywhere anywhere [goto] /* cali:ADqBnjJcMFtymf8E */
0 0 cali-to-wl-dispatch-d all -- any calid+ anywhere anywhere [goto] /* cali:2Mta00W08UJpIw_- */
0 0 cali-to-wl-dispatch-e all -- any calie+ anywhere anywhere [goto] /* cali:IyyIIOzKSf_raZnH */
0 0 DROP all -- any any anywhere anywhere /* cali:UZ9KoRQUNfXMvadC */ /* Unknown interface */
Chain cali-to-wl-dispatch-0 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-tw-cali031f9ab8df4 all -- any cali031f9ab8df4 anywhere anywhere [goto] /* cali:n3Q2jjQpkQrkYU9Y */
0 0 cali-tw-cali06e0754073b all -- any cali06e0754073b anywhere anywhere [goto] /* cali:gfBiB_7abszez7n2 */
0 0 DROP all -- any any anywhere anywhere /* cali:ZPVI4oNnUplGWdyY */ /* Unknown interface */
Chain cali-to-wl-dispatch-1 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-tw-cali139b01927da all -- any cali139b01927da anywhere anywhere [goto] /* cali:ye2MGAxl-Lujsd1F */
0 0 cali-tw-cali1421f384600 all -- any cali1421f384600 anywhere anywhere [goto] /* cali:E3_KsGdh5ZpY9JfS */
0 0 cali-tw-cali15c0a154d90 all -- any cali15c0a154d90 anywhere anywhere [goto] /* cali:TCWWvLwXoZmiqvxp */
0 0 cali-tw-cali1842a58cab8 all -- any cali1842a58cab8 anywhere anywhere [goto] /* cali:qCPMDKhhTYSMbXVM */
0 0 cali-tw-cali19ea483d497 all -- any cali19ea483d497 anywhere anywhere [goto] /* cali:TSkygdCY7qqIr9Wf */
0 0 DROP all -- any any anywhere anywhere /* cali:VsqC6mV3CYM92yaX */ /* Unknown interface */
Chain cali-to-wl-dispatch-2 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-tw-cali2683511f9e7 all -- any cali2683511f9e7 anywhere anywhere [goto] /* cali:GK3vj3a2TvifTsPV */
0 0 cali-tw-cali280037a81c5 all -- any cali280037a81c5 anywhere anywhere [goto] /* cali:E-lc1VA1eVfmbrqY */
0 0 cali-tw-cali299f39e782d all -- any cali299f39e782d anywhere anywhere [goto] /* cali:KTmLf90dkmNhvonb */
0 0 cali-tw-cali2cb65d6ee77 all -- any cali2cb65d6ee77 anywhere anywhere [goto] /* cali:Xd215StfD7l7uPmh */
0 0 cali-tw-cali2fd699b7f33 all -- any cali2fd699b7f33 anywhere anywhere [goto] /* cali:EX3bEgVNIFqmIoNH */
0 0 DROP all -- any any anywhere anywhere /* cali:g52Yd_swmqLbd8GQ */ /* Unknown interface */
Chain cali-to-wl-dispatch-3 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-tw-cali34b4999a9f1 all -- any cali34b4999a9f1 anywhere anywhere [goto] /* cali:3nu4mrFhXA8NgTed */
0 0 cali-tw-cali3503a55ff1b all -- any cali3503a55ff1b anywhere anywhere [goto] /* cali:hl-pBoWXy-dD-_E- */
0 0 cali-tw-cali37bceb25357 all -- any cali37bceb25357 anywhere anywhere [goto] /* cali:K7NqW7NdbOl4kU-T */
0 0 cali-tw-cali3862ba2b954 all -- any cali3862ba2b954 anywhere anywhere [goto] /* cali:fyMJUizKqBvroVcb */
0 0 cali-tw-cali389b5b6a8ec all -- any cali389b5b6a8ec anywhere anywhere [goto] /* cali:D2hIsMjSJ26aa_Kn */
0 0 cali-tw-cali3b35a85ca02 all -- any cali3b35a85ca02 anywhere anywhere [goto] /* cali:6S-FZSOrmY6ha9UX */
0 0 cali-tw-cali3cefa8750a8 all -- any cali3cefa8750a8 anywhere anywhere [goto] /* cali:yzNsSZjRKlQVkFjF */
0 0 cali-tw-cali3f18645c168 all -- any cali3f18645c168 anywhere anywhere [goto] /* cali:19Xi6B1RUYJq-XjN */
0 0 cali-tw-cali3fcd030fa13 all -- any cali3fcd030fa13 anywhere anywhere [goto] /* cali:wUEtVNsOc7VFtrDL */
0 0 DROP all -- any any anywhere anywhere /* cali:h67AXCYLmMwEunww */ /* Unknown interface */
Chain cali-to-wl-dispatch-4 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-tw-cali4000c1e54de all -- any cali4000c1e54de anywhere anywhere [goto] /* cali:fsapvwRdSJZyjwW- */
0 0 cali-tw-cali4534e2246ed all -- any cali4534e2246ed anywhere anywhere [goto] /* cali:9vERvyK4yosroLs9 */
0 0 cali-tw-cali4b00c59f252 all -- any cali4b00c59f252 anywhere anywhere [goto] /* cali:VcmsAyfA6dqWHIHV */
0 0 cali-tw-cali4c7d39d0d0e all -- any cali4c7d39d0d0e anywhere anywhere [goto] /* cali:gtXsWExIJb_WNub5 */
0 0 DROP all -- any any anywhere anywhere /* cali:0ZrclcVUDEuXzKTS */ /* Unknown interface */
Chain cali-to-wl-dispatch-5 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-tw-cali51eec6e509b all -- any cali51eec6e509b anywhere anywhere [goto] /* cali:1haeL3TIenLKprpT */
0 0 cali-tw-cali5237e9928a0 all -- any cali5237e9928a0 anywhere anywhere [goto] /* cali:nXCO-GUgTmZ3Nr-o */
0 0 cali-tw-cali557158cd734 all -- any cali557158cd734 anywhere anywhere [goto] /* cali:9yTuvTPrfiIPhwgO */
0 0 cali-tw-cali590c7f9f7ee all -- any cali590c7f9f7ee anywhere anywhere [goto] /* cali:27TRO3rUTbNVgaMl */
0 0 cali-tw-cali5a521423b83 all -- any cali5a521423b83 anywhere anywhere [goto] /* cali:p6T78An1A4E7Dzdo */
0 0 DROP all -- any any anywhere anywhere /* cali:jbRFmDJg8kJ9wWvm */ /* Unknown interface */
Chain cali-to-wl-dispatch-6 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-tw-cali65ec8e40f76 all -- any cali65ec8e40f76 anywhere anywhere [goto] /* cali:t2t21_9MF_66jXZO */
0 0 cali-tw-cali6b0bb2f1209 all -- any cali6b0bb2f1209 anywhere anywhere [goto] /* cali:3CPZDVHq0bh347-P */
0 0 cali-tw-cali6bfc27a619b all -- any cali6bfc27a619b anywhere anywhere [goto] /* cali:tjjadgk7UxUoPEwW */
0 0 DROP all -- any any anywhere anywhere /* cali:kGDbRagz3izf1nt6 */ /* Unknown interface */
Chain cali-to-wl-dispatch-7 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-tw-cali701e7cc6c80 all -- any cali701e7cc6c80 anywhere anywhere [goto] /* cali:DID_kXdOz2kIqhfp */
0 0 cali-tw-cali74e504b7a66 all -- any cali74e504b7a66 anywhere anywhere [goto] /* cali:yL8pi8b0xsCIs22c */
0 0 cali-tw-cali757295f6996 all -- any cali757295f6996 anywhere anywhere [goto] /* cali:_kKa8DSJBn_hQ9hv */
0 0 cali-tw-cali7eccdecc2aa all -- any cali7eccdecc2aa anywhere anywhere [goto] /* cali:VjlrRV9Tt4XbtDkF */
0 0 DROP all -- any any anywhere anywhere /* cali:xYRzQ9u3gXDJzETh */ /* Unknown interface */
Chain cali-to-wl-dispatch-8 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-tw-cali84468d327cf all -- any cali84468d327cf anywhere anywhere [goto] /* cali:OhMpRWQviI7GIdGb */
0 0 cali-tw-cali845db002918 all -- any cali845db002918 anywhere anywhere [goto] /* cali:xp1aX-x7JbBb_Z-4 */
0 0 cali-tw-cali852f1a9204c all -- any cali852f1a9204c anywhere anywhere [goto] /* cali:6HcAWQR0elu0AfY5 */
0 0 cali-tw-cali8e93fce84a6 all -- any cali8e93fce84a6 anywhere anywhere [goto] /* cali:Diizb2ndhY3dAaPL */
0 0 cali-tw-cali8f4065ff2b6 all -- any cali8f4065ff2b6 anywhere anywhere [goto] /* cali:xHP2NeUKBz-oXFn7 */
0 0 DROP all -- any any anywhere anywhere /* cali:LoX0VoSMTvLdOyTo */ /* Unknown interface */
Chain cali-to-wl-dispatch-9 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-tw-cali95291e7e018 all -- any cali95291e7e018 anywhere anywhere [goto] /* cali:HpB-KYzc8OdDB3Cy */
0 0 cali-tw-cali97a39b84c91 all -- any cali97a39b84c91 anywhere anywhere [goto] /* cali:Oco3FTNmyN88PWsa */
0 0 cali-tw-cali9916e5e28e6 all -- any cali9916e5e28e6 anywhere anywhere [goto] /* cali:eb8gB6AyvtAY1fCD */
0 0 DROP all -- any any anywhere anywhere /* cali:5fomyJA1oLO0i5pT */ /* Unknown interface */
Chain cali-to-wl-dispatch-a (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-tw-calia358f09614c all -- any calia358f09614c anywhere anywhere [goto] /* cali:8KubOqLN8bjnN_hG */
0 0 cali-tw-calia5dea553aa7 all -- any calia5dea553aa7 anywhere anywhere [goto] /* cali:uf3VUeVLzSCTHxdv */
0 0 cali-tw-calia744e09c4ff all -- any calia744e09c4ff anywhere anywhere [goto] /* cali:DgHGh_DUgnNnDLTh */
0 0 cali-tw-calia9fcbc8adc2 all -- any calia9fcbc8adc2 anywhere anywhere [goto] /* cali:VFsU_H-Ca13pMrYi */
0 0 DROP all -- any any anywhere anywhere /* cali:B3efD0-TGlduljeM */ /* Unknown interface */
Chain cali-to-wl-dispatch-d (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-tw-calid270f41d225 all -- any calid270f41d225 anywhere anywhere [goto] /* cali:K5iCkRn7eYMrA9qF */
0 0 cali-tw-calid448a8d46e9 all -- any calid448a8d46e9 anywhere anywhere [goto] /* cali:ELbVNCnvvc8F0ya8 */
0 0 DROP all -- any any anywhere anywhere /* cali:xucjrsDLv3jdp5Mv */ /* Unknown interface */
Chain cali-to-wl-dispatch-e (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-tw-calie19b99f3c2a all -- any calie19b99f3c2a anywhere anywhere [goto] /* cali:zRJvl0KwZPY5yBLG */
0 0 cali-tw-calie20683acc3f all -- any calie20683acc3f anywhere anywhere [goto] /* cali:R549v5Q1h1K6Drvk */
0 0 cali-tw-calie4256464cbf all -- any calie4256464cbf anywhere anywhere [goto] /* cali:1XCqwgY3E736BpPe */
0 0 cali-tw-caliefced439614 all -- any caliefced439614 anywhere anywhere [goto] /* cali:n34uBU0jILenI69X */
0 0 DROP all -- any any anywhere anywhere /* cali:7wPZHM4qxk4vV-Rl */ /* Unknown interface */
Chain cali-tw-cali031f9ab8df4 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:tgmULiTwvbZcXnFg */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:WJl54hXe58HOLels */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:iSSJ4zljuO75bW8I */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:cM-Eq8tC1Tv3G6MZ */
0 0 RETURN all -- any any anywhere anywhere /* cali:RaMLDwIencbHI5xT */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:pWowTeB7hEwKLN6T */
0 0 RETURN all -- any any anywhere anywhere /* cali:Gz4qZnBW8Of--FFs */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:sXEC5gtWXiP0Gtc0 */ /* Drop if no profiles matched */
Chain cali-tw-cali06e0754073b (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:Ye05KHHulbCwuR04 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:9hZQdGLCz5G9ESOB */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:QK1dcUs1hI5NErGp */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:gIHoVBgsvha_CoGk */
0 0 RETURN all -- any any anywhere anywhere /* cali:XCEKkw9mmcUfB0Y6 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:NymjpZO8-44Q67U9 */
0 0 RETURN all -- any any anywhere anywhere /* cali:CUVkWug4WJAggjyX */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:06liRcU9ebygcZhA */ /* Drop if no profiles matched */
Chain cali-tw-cali139b01927da (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:_lCWpbbW6RLbXHhE */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:KXMwetMcNEceDIqm */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:VSvh0c6AjQJ7dEOB */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:gI8GHk7-4PPg1-ve */
0 0 RETURN all -- any any anywhere anywhere /* cali:a0t62zjZ328lktTF */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:qZqqAa3iAXIQVKea */
0 0 RETURN all -- any any anywhere anywhere /* cali:GLuY50BpWD2o_PQ9 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:y4XrVSpW6qRz7Evl */ /* Drop if no profiles matched */
Chain cali-tw-cali1421f384600 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:8Szc0mxbORVKxsbZ */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:PDCdtks9ubxYP9mC */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:pIN53734xIkEen6r */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:S7rmbPO8ejlxzzSn */
0 0 RETURN all -- any any anywhere anywhere /* cali:u7Hh6lGqrsahP-Qq */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:jmIjm5vusuVItTnW */
0 0 RETURN all -- any any anywhere anywhere /* cali:rEnerJh-ZVW5TOff */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:WfbcflSxMhD8qKlZ */ /* Drop if no profiles matched */
Chain cali-tw-cali15c0a154d90 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:30HQm8EtY2a91coo */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:WkO1p62D6B4g8QZy */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:6Ef-iDGQCRmGJziM */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:Sd_LqXa2uSYxUYGk */
0 0 RETURN all -- any any anywhere anywhere /* cali:hmp7HMa7fCHuVSKy */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:288u_h4K69pchOw8 */
0 0 RETURN all -- any any anywhere anywhere /* cali:Ez-q1AFBQHTC9JUQ */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:z0B1Il1iR23uCToC */ /* Drop if no profiles matched */
Chain cali-tw-cali1842a58cab8 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:Y7OHKKGvZM240u8K */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:wXMgb_BSiQKx1Rw7 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:TMG5WziJcbCyqOp9 */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:dHcp5dDngTnCnAk8 */
0 0 RETURN all -- any any anywhere anywhere /* cali:MtwKhF6cSV6g9WE4 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:WQOM8B3SplQu0ueB */
0 0 RETURN all -- any any anywhere anywhere /* cali:Qk7JDZKYJPya-Tzv */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:k_BKAbx7fp0gZSkR */ /* Drop if no profiles matched */
Chain cali-tw-cali19ea483d497 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:Qko-56F1UKfA4JrW */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:PAETEPbqAl9ZlSbW */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:F1_mXrQsfqoD6v_9 */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:sTbqlPkk65uJ8E0r */
0 0 RETURN all -- any any anywhere anywhere /* cali:Px2IQZtiMWTLtM0A */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:H3yq7bpC_hgYA6-N */
0 0 RETURN all -- any any anywhere anywhere /* cali:J3XvfIZvuAXHEgoW */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:ATilEibuG3YCCZ1c */ /* Drop if no profiles matched */
Chain cali-tw-cali2683511f9e7 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:5_4fLmegLJkk6toE */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:OUuyv60fgY3q4eUJ */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:ot997LdQ3ZkLNvUN */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:a0dMhsvwEdoCN68J */
0 0 RETURN all -- any any anywhere anywhere /* cali:jdk3QhlGGS-CdBeA */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:-pXezdSV8rsfBqLK */
0 0 RETURN all -- any any anywhere anywhere /* cali:QO6AaLdG1g5rZZ9o */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:YXYxgMLegjC2QNor */ /* Drop if no profiles matched */
Chain cali-tw-cali280037a81c5 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:QPBUB4puFpG1ol7Q */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:Mc0q9IuPNmcpiCLt */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:oAY9JOLB74LPRMGn */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:PZ2fXls3DlvfGVgi */
0 0 RETURN all -- any any anywhere anywhere /* cali:N4510xxaQjAYkn4f */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:eU16INr9zJU29tvE */
0 0 RETURN all -- any any anywhere anywhere /* cali:KK5S90h54u7qqvH6 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:Q2ViFcDvscULf7gE */ /* Drop if no profiles matched */
Chain cali-tw-cali299f39e782d (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:MlZBT1jcIWQg-WOP */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:MCwOdNjVUVPirdeH */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:SeOL57QCIYl1H0FA */ MARK and 0xfffcffff
0 0 cali-pri-kns.calico-system all -- any any anywhere anywhere /* cali:ZguooveXn9k3Ezew */
0 0 RETURN all -- any any anywhere anywhere /* cali:tUwtnXySqcwXeN0n */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-_ymJUz7yzI6NOKJhG2- all -- any any anywhere anywhere /* cali:C_esheQxiohzP7hB */
0 0 RETURN all -- any any anywhere anywhere /* cali:d_V878F70rjugU4F */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:Blkr1nswMgOl4ls6 */ /* Drop if no profiles matched */
Chain cali-tw-cali2cb65d6ee77 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:l_WhqyL00W6DIc43 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:_5foWu9AZv6QHFaW */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:VYoOZpLgBqNxf458 */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:E-7SO4jY9BIcWd2R */
0 0 RETURN all -- any any anywhere anywhere /* cali:7bGPpZPD9Bl3OcdZ */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:-he4WhllTnzjsfC3 */
0 0 RETURN all -- any any anywhere anywhere /* cali:aqrqx46fKEa_cEkJ */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:Is3eDJJXdsK0Xntu */ /* Drop if no profiles matched */
Chain cali-tw-cali2fd699b7f33 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:dyEiO5C4zvAL5sUB */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:Y5PGQvnIMqqyGdf3 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:aAwtK047OejCDnn9 */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:NgQvgudP5WPKf3xw */
0 0 RETURN all -- any any anywhere anywhere /* cali:m0-EoI2sY8fwnfiz */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:0cj19guXvzCZqm96 */
0 0 RETURN all -- any any anywhere anywhere /* cali:Nj6W8c7oUkkukFIe */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:R3hBZyjIFxSJaA7c */ /* Drop if no profiles matched */
Chain cali-tw-cali34b4999a9f1 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:BfM-KbuOovIzE5Q2 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:ACcgbjTHr7gOGjBL */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:jgVxa83SEIXT8UCr */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:T7Pr8eoCI28BmMP5 */
0 0 RETURN all -- any any anywhere anywhere /* cali:1-yyhPTWZwQwSKDo */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:92bBCdbeDIfjyfuT */
0 0 RETURN all -- any any anywhere anywhere /* cali:lfXgv3PtT3TSlIFD */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:v_qNj6HDXJcSN6M0 */ /* Drop if no profiles matched */
Chain cali-tw-cali3503a55ff1b (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:MGPrixXNQUI_V7S_ */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:ov21ufexwmrh7H4A */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:y-8KerxXT0BFs9B4 */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:IvZD4MQxg428xgj8 */
0 0 RETURN all -- any any anywhere anywhere /* cali:MMXPy-BNR4qE2CfD */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:VoJvPHnlb6eWRsVz */
0 0 RETURN all -- any any anywhere anywhere /* cali:CGyP4CGq-fcqG8WP */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:sTzTdsCkplYkhd_4 */ /* Drop if no profiles matched */
Chain cali-tw-cali37bceb25357 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:uJYkD4YCEgkTcd6F */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:dlkCw8kFwvSMOx0F */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:zql80jyE8tM1kF3T */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:-Ie-mbZmlvnLcDxD */
0 0 RETURN all -- any any anywhere anywhere /* cali:bCx2MjexZ5hL_sie */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:WruyCFQBXY2Ukm-q */
0 0 RETURN all -- any any anywhere anywhere /* cali:SAzTa33dn1sZscut */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:ziAJr5Sj9OZ-Y1vR */ /* Drop if no profiles matched */
Chain cali-tw-cali3862ba2b954 (1 references)
pkts bytes target prot opt in out source destination
4 832 ACCEPT all -- any any anywhere anywhere /* cali:S9Qu3IYaL6QfBTqQ */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:PSyApruPbOXUy5pN */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:f3wdOuwhk29zvRwY */ MARK and 0xfffcffff
0 0 cali-pri-kns.kube-system all -- any any anywhere anywhere /* cali:Q0WBaqWhhEumQzJh */
0 0 RETURN all -- any any anywhere anywhere /* cali:c-IGv_J0mzHUG1dg */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-_u2Tn2rSoAPffvE7JO6 all -- any any anywhere anywhere /* cali:zrnCGVV-PVl4O7fc */
0 0 RETURN all -- any any anywhere anywhere /* cali:-Qw8iKxdbpr3tNP4 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:8JnupwPiwJeFlLmB */ /* Drop if no profiles matched */
Chain cali-tw-cali389b5b6a8ec (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:uAxnBIE76IM3dERy */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:Plfqgb8L3k48wZJf */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:1nnuS6-GDhQSB-cJ */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:TJTFObqcC1LIgy1u */
0 0 RETURN all -- any any anywhere anywhere /* cali:pvIPZRgnBSf5vUAj */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:mTbVpxJGVcZ6k2MC */
0 0 RETURN all -- any any anywhere anywhere /* cali:Su1eAdC1-XCDlIAA */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:2ADcWGM-_R3jx-JH */ /* Drop if no profiles matched */
Chain cali-tw-cali3b35a85ca02 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:4FqHa-CzrRgl_DMn */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:Glm06BTlvTzKacmv */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:Z8N69lcx29AOD8u8 */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:GxkM3Rb1yO76DXQs */
0 0 RETURN all -- any any anywhere anywhere /* cali:ulRdyzEym0cKpbAn */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:uK96UsfWAbJKzMoe */
0 0 RETURN all -- any any anywhere anywhere /* cali:aD32cHEkmb4Sf4gB */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:f-nI0ayK8xnCFF_B */ /* Drop if no profiles matched */
Chain cali-tw-cali3cefa8750a8 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:PSl3X5Av2OFDzde5 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:uxasDPxYlGVnTV2g */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:fblpJlwA9OgS_3n2 */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:VQxQXOyu-pA0IG3X */
0 0 RETURN all -- any any anywhere anywhere /* cali:kPK1adekCvMgYvhq */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:MFRX4yxgAhoCdKxN */
0 0 RETURN all -- any any anywhere anywhere /* cali:YIa__BZ-cxLIrbHs */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:ZjWuH6jqCGvorMpp */ /* Drop if no profiles matched */
Chain cali-tw-cali3f18645c168 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:zAHIMj8wqjXAHxmP */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:ecvKoHOrlnImKnmP */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:2f8nxwAnn53VCYkT */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:WsX36f4_fttMf4pf */
0 0 RETURN all -- any any anywhere anywhere /* cali:HgBj2wTjqyyvt1P4 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:kb3_ax2TAjB1eAhG */
0 0 RETURN all -- any any anywhere anywhere /* cali:0QLMBmWVfVuepgDc */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:RPELak9o5oi4Q8Vp */ /* Drop if no profiles matched */
Chain cali-tw-cali3fcd030fa13 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:vZtXTxmDslUW2yKB */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:C0sveMa3ScUm6H0K */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:3Cxyo58AAqRCMNyx */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:aYZE6HdZMh_r9z6o */
0 0 RETURN all -- any any anywhere anywhere /* cali:n6L0QgnJdEzrR4kK */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:8Fkx20e3R498Y1xU */
0 0 RETURN all -- any any anywhere anywhere /* cali:MnKXc5WLQjgNrNKA */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:5E2NWaqLYhYg3-TK */ /* Drop if no profiles matched */
Chain cali-tw-cali4000c1e54de (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:1vxWCSdN7AFcaPbg */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:qSBNT1E6_VM_eFB- */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:TG68RRzle-FtpjMI */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:8kKl0wWso1Himpds */
0 0 RETURN all -- any any anywhere anywhere /* cali:ySnYRC346DAxg39e */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:4CqRBvxe6NqK3kRH */
0 0 RETURN all -- any any anywhere anywhere /* cali:YJErVY-7KiBfkP8O */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:zaZX42OlzY3KV9TJ */ /* Drop if no profiles matched */
Chain cali-tw-cali4534e2246ed (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:53ak3-IKsK4EImBA */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:zHttSggHOk3sRS8d */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:9Vy9pOAWZJt8qU3j */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:h8DnBTyZ-Nw1WeaU */
0 0 RETURN all -- any any anywhere anywhere /* cali:m2Qa-OoxPIYleSqq */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:U_W-xAqYINqiJOk7 */
0 0 RETURN all -- any any anywhere anywhere /* cali:Gv0aJf4ZwCwCNICA */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:Un-LvdebyyzcsX3k */ /* Drop if no profiles matched */
Chain cali-tw-cali4b00c59f252 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:p7GOoWN6z5d47d_N */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:I4VQOLN3QI3rsMki */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:06cvzxeLIpwmaRnT */ MARK and 0xfffcffff
0 0 cali-pri-kns.calico-system all -- any any anywhere anywhere /* cali:FDB2t7DCyAeOebA9 */
0 0 RETURN all -- any any anywhere anywhere /* cali:ihmtjsGdNjZZ_fl3 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-_nzzjLvInId1gPHmQz_ all -- any any anywhere anywhere /* cali:oKXGXMq7hZ94artF */
0 0 RETURN all -- any any anywhere anywhere /* cali:ChWcwIgauNJnZKv_ */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:iNsTFn_Z0abg5X-h */ /* Drop if no profiles matched */
Chain cali-tw-cali4c7d39d0d0e (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:STAWclH4gVlcYp5v */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:e5hPHpVwQvRQM_iQ */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:lNm7e4CG5pwD4MSg */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:Cn0m1rXQZ3xz8T3X */
0 0 RETURN all -- any any anywhere anywhere /* cali:xY6djHv1XItjHpIt */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:J-izUXyrJhLRsE3A */
0 0 RETURN all -- any any anywhere anywhere /* cali:SDXzLuWZgz5e46m9 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:TYgKqiMcx3SL_FHQ */ /* Drop if no profiles matched */
Chain cali-tw-cali51eec6e509b (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:evxsPtYPsU1YWHJv */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:x9jPjXFbJqnEzC3s */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:3CpZDn3H8WCteQYw */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:r_sBKhF3VPjHV9Ia */
0 0 RETURN all -- any any anywhere anywhere /* cali:rbItxx-YSH6ShqU0 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:Rw8rjQeZ-nzarwxc */
0 0 RETURN all -- any any anywhere anywhere /* cali:QxQGm9bfL9zDRQgp */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:0gu1CPSXX7ZEo_wy */ /* Drop if no profiles matched */
Chain cali-tw-cali5237e9928a0 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:4jJERD-PMp5jZ3iv */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:32xcOU6PjhrFL7mq */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:Fcjlx8N-9loXdtpl */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:9uuqKAhebLZGWyUL */
0 0 RETURN all -- any any anywhere anywhere /* cali:WJ8ghjqW5JW3j4Qm */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:f53yQ1ien9bBycNU */
0 0 RETURN all -- any any anywhere anywhere /* cali:Fdh-Ia4tCLC5lb0D */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:qJSzQ8MFkCLbuJ_v */ /* Drop if no profiles matched */
Chain cali-tw-cali557158cd734 (1 references)
pkts bytes target prot opt in out source destination
2 416 ACCEPT all -- any any anywhere anywhere /* cali:GdfmultSGHNY9xWA */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:gv-WV-8GrNk3FKl0 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:Dmwoe0XU8FmPP7Wi */ MARK and 0xfffcffff
0 0 cali-pri-kns.kube-system all -- any any anywhere anywhere /* cali:WaTEQdjwHmRfLumJ */
0 0 RETURN all -- any any anywhere anywhere /* cali:HCRsQ4WaA20aYo5q */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-_u2Tn2rSoAPffvE7JO6 all -- any any anywhere anywhere /* cali:VbOcE_mgOYSUBmSM */
0 0 RETURN all -- any any anywhere anywhere /* cali:JdBYx3gM0tCrpzsn */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:hnrGjAoxzOfWRgy4 */ /* Drop if no profiles matched */
Chain cali-tw-cali590c7f9f7ee (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:ZYzd4NhO9xLKTePq */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:hLIKD0TX8Y4k4UE- */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:_msXNeEoajV9GfnK */ MARK and 0xfffcffff
0 0 MARK all -- any any anywhere anywhere /* cali:NC1O5uA1f4NOQPWz */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-pi-_FDiLImilezd09cpg5ci all -- any any anywhere anywhere /* cali:ko9P4yQKpCd3cWum */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:zbbOfr3rgSdWpjCt */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:wMqu4oxS7AIHHXXE */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pri-_kJqfZpgUe7r2t4A-14 all -- any any anywhere anywhere /* cali:78qJJ00-GBTij9S0 */
0 0 RETURN all -- any any anywhere anywhere /* cali:HOJDzloY0-PN0-vy */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-_4yi5_iSUAwsU8zMHTk all -- any any anywhere anywhere /* cali:c3aEsUqKJc-cOXBu */
0 0 RETURN all -- any any anywhere anywhere /* cali:fVso_3LnhDgBRjag */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:lGopEvlEr8eMqz2l */ /* Drop if no profiles matched */
Chain cali-tw-cali5a521423b83 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:d1ZHLsEhTwI8eVFp */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:P7B0n3wlzAO6Narg */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:eioq6wm5rLVxo6vV */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:87g8JOnxC95jRTKL */
0 0 RETURN all -- any any anywhere anywhere /* cali:prElC_FsvZGWIe3u */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:c5sodWGNYxGljA_J */
0 0 RETURN all -- any any anywhere anywhere /* cali:a8d3Vf0SkFDS5K5G */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:1Q_V07f0LV9C_WEr */ /* Drop if no profiles matched */
Chain cali-tw-cali65ec8e40f76 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:dQV_tKdwEMaXKnY_ */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:RfyGm7O2ksXZfR36 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:Z8Rgn0lwdY7ajQUy */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:Q9nh9Gs5cbIh1wfP */
0 0 RETURN all -- any any anywhere anywhere /* cali:D-aDlevbWQ_e691t */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:NYd-dByj7WxpZygF */
0 0 RETURN all -- any any anywhere anywhere /* cali:NR_AXcO-uQSohB7e */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:ZCp1WR51Z5Y0kTfs */ /* Drop if no profiles matched */
Chain cali-tw-cali6b0bb2f1209 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:wpkPH4S41q24Wp2S */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:g7CflipWfVddHbdV */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:niir6BsU3SF25TXF */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:OkixXuUw2ml-WL9F */
0 0 RETURN all -- any any anywhere anywhere /* cali:_nZzi5kKyc9EZHyR */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:NqzuGmpITV1E7lp_ */
0 0 RETURN all -- any any anywhere anywhere /* cali:m9zvRkm5YxBcBmGp */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:RKPE7J942kHq0W4k */ /* Drop if no profiles matched */
Chain cali-tw-cali6bfc27a619b (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:DcXg-7KCl8W9flim */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:AzRvDIADvWTT-v_8 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:C9-bI2kNTdTODr6z */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:awh1IcLhs6yhUFeH */
0 0 RETURN all -- any any anywhere anywhere /* cali:oIqHqyn7J6NFq8YY */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:v8rqzKVHuvYTO0v1 */
0 0 RETURN all -- any any anywhere anywhere /* cali:JvPjKnj8HjkAo4mj */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:NAsibA5_IJWZkWnt */ /* Drop if no profiles matched */
Chain cali-tw-cali701e7cc6c80 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:QBBweUTQ3jtqy4z0 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:g19zmvKLdg9ucMZV */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:j70EzIVYK1nh072O */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:k8jWj3lJm4oByAHI */
0 0 RETURN all -- any any anywhere anywhere /* cali:A9F0Z5xaN4O9WkET */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:vqPtbFqiNN48bx0P */
0 0 RETURN all -- any any anywhere anywhere /* cali:2WonGd6cXzIDF3GW */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:ADbNbH-Gb8VDth5P */ /* Drop if no profiles matched */
Chain cali-tw-cali74e504b7a66 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:sfenP5eoeUX6_D7H */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:k0TBfOaAW_N_4L_A */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:u3qFQ5vf9MDozva9 */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:r_h65db2JFdwnC8G */
0 0 RETURN all -- any any anywhere anywhere /* cali:DxVRm1M9hKFOPUUU */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:EmGK7xbwbbrkAUg9 */
0 0 RETURN all -- any any anywhere anywhere /* cali:x1mnDIE9RRqj5iYb */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:A25QRej_K13wibX3 */ /* Drop if no profiles matched */
Chain cali-tw-cali757295f6996 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:KSNw-Mu3hGigSrPH */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:ICdebLEcSQNOrb8o */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:X3gJvcmrqsCiHque */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:48Z1aTXn5tO1Z8as */
0 0 RETURN all -- any any anywhere anywhere /* cali:BnnzcQYJ1eWQR28n */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:947rrPpFIXQZcqYK */
0 0 RETURN all -- any any anywhere anywhere /* cali:YmJwQ7psJX_gDCqo */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:7ZavfoQ-LuUKc85V */ /* Drop if no profiles matched */
Chain cali-tw-cali7eccdecc2aa (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:1iX9CyvgGSOLZbeu */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:2lSoHrZtiowhMqq4 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:1ujz9MZqDMJctXsE */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:UHQL-AXYO0g0jbVl */
0 0 RETURN all -- any any anywhere anywhere /* cali:QyuWUjcmtzgbQc7c */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:jmRNqq7Ly0xwG7mQ */
0 0 RETURN all -- any any anywhere anywhere /* cali:svlTyMCW-rtyumCh */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:6Deg_fN3b6gn3sOA */ /* Drop if no profiles matched */
Chain cali-tw-cali84468d327cf (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:jwiAs9Dp8wCzqJd0 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:hqW_CaoIEZMzUfph */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:RX9wyXb1JsS4VhO_ */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:cu0AWxQcYegFQEwR */
0 0 RETURN all -- any any anywhere anywhere /* cali:fFtqU_dOnxDhE-zy */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:JYP6PFJGkg0jdBoa */
0 0 RETURN all -- any any anywhere anywhere /* cali:zfVFSJggAE3Jn-0L */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:TXsbCd8lfyByfaNL */ /* Drop if no profiles matched */
Chain cali-tw-cali845db002918 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:KFbppEZgXjxrO0ZA */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:5ev_WrQxDaVeV83G */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:24Mnijdf7KLNFtCq */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:VmMcguZiEl-8-D2O */
0 0 RETURN all -- any any anywhere anywhere /* cali:VlDH7QHHC0b5jN0P */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:78SPUTd2ONgq4zEW */
0 0 RETURN all -- any any anywhere anywhere /* cali:6ZHteWub7FsSMXOe */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:iZcAlaAyvs3T-Yah */ /* Drop if no profiles matched */
Chain cali-tw-cali852f1a9204c (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:dfXFm5HBm8MuLMS- */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:klvmtsOozppWPsCf */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:144JjvbyRsSkCV5J */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:s87oC1AbgERo3k9Y */
0 0 RETURN all -- any any anywhere anywhere /* cali:fl8E5y1hfSW9WMaf */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:39GD0wn0n4M4x2oN */
0 0 RETURN all -- any any anywhere anywhere /* cali:aM30tXrYoWkccAm_ */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:8F8N-6xHeAImwk1h */ /* Drop if no profiles matched */
Chain cali-tw-cali8e93fce84a6 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:Zo4h6YH7fqWsJ-y1 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:JUgQUqPMXUaWUjm9 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:W18gTfdvR40F92HA */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:qQ5i8HoxLqoe7Pkh */
0 0 RETURN all -- any any anywhere anywhere /* cali:v0kP8TaMes_ExusX */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:v0Jf9VLeBJ1IcuDc */
0 0 RETURN all -- any any anywhere anywhere /* cali:S2GIEdRGhB-4rP3z */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:Z43Z5W31BxRNaxCT */ /* Drop if no profiles matched */
Chain cali-tw-cali8f4065ff2b6 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:7lrAZNji8uta5Nzo */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:mpiuEKC-CHo5mVkX */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:fcH4SH4Wn9jebGn6 */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:5uQZEy62zPv0TMxO */
0 0 RETURN all -- any any anywhere anywhere /* cali:M_KmzguDtrvfq7Qd */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:MmMk8ynL41vEYroD */
0 0 RETURN all -- any any anywhere anywhere /* cali:hdqY3yJIB_3RQCX1 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:ANEzm0ht8LXNJopw */ /* Drop if no profiles matched */
Chain cali-tw-cali95291e7e018 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:5p-GTZOLU6k37OWN */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:E5B1dRdsuFUrmBye */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:FiNlrTPtaFjQZ2jZ */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:-CbhtSn3f0VqC9A9 */
0 0 RETURN all -- any any anywhere anywhere /* cali:b6S937PuPjt1wr87 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:lInc098XQLRVYTFa */
0 0 RETURN all -- any any anywhere anywhere /* cali:bRpihV9U5xjyAQ-U */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:NUsTvkLINwPEmCNB */ /* Drop if no profiles matched */
Chain cali-tw-cali97a39b84c91 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:jAGfqHj6O9Se-9Ru */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:0RaYp3oI0mymAAgJ */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:YxW8vH3ehbjPWwh8 */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:VGb5aM0ggo4wbLuj */
0 0 RETURN all -- any any anywhere anywhere /* cali:97gP3bS162bSHD5o */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:rND8ZNNolkDmkhcQ */
0 0 RETURN all -- any any anywhere anywhere /* cali:ACc4vxsqVtRYPLa1 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:6Thb2S9agb40zaCo */ /* Drop if no profiles matched */
Chain cali-tw-cali9916e5e28e6 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:hEh7bj_NRgcR3TXv */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:GIXycF0EWMgU9lnC */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:2hxeF3Yivp-rf5nH */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:hD52t-VRhkgiDF1w */
0 0 RETURN all -- any any anywhere anywhere /* cali:Rmc4jUx7tHOqaTAL */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:MXefWDqEZnPi6-mT */
0 0 RETURN all -- any any anywhere anywhere /* cali:GrHG8CbzJD-uprK- */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:07ag-AmBwkNt_Nc5 */ /* Drop if no profiles matched */
Chain cali-tw-calia358f09614c (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:7SihR69MDKa07zOg */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:0EzqJG_tMd0wGs80 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:5esqxxdqOlRMJfgO */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:Jvi0rVfRRE7KJqQi */
0 0 RETURN all -- any any anywhere anywhere /* cali:xo0SCVbWry7svSAs */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:l_pLOft_OuYNJkZu */
0 0 RETURN all -- any any anywhere anywhere /* cali:BvLvf_1hg8DO7t_T */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:WUq5w5IVqnbBkUIl */ /* Drop if no profiles matched */
Chain cali-tw-calia5dea553aa7 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:gH06hNvxNOxp4mtT */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:MrkE8cIB_W6QLsYO */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:DzEqpF2kZuAeefSq */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:ppTnaRp1lg76P8a2 */
0 0 RETURN all -- any any anywhere anywhere /* cali:f3up0PGyz7GJydxd */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:ltl6FVPdj__Np57N */
0 0 RETURN all -- any any anywhere anywhere /* cali:424Tbn5zQTB0nvuN */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:mcQX2IlLAf5seRCo */ /* Drop if no profiles matched */
Chain cali-tw-calia744e09c4ff (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:6Tmer3ysQJy-VOkR */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:7b5WORMD1x2Rs-pV */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:243-e6Km_8-1iI20 */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:pDrp2cs6J-2Wj_M4 */
0 0 RETURN all -- any any anywhere anywhere /* cali:BrQsfBb23O2-nOeZ */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:9YRtCai5rC1z1V1V */
0 0 RETURN all -- any any anywhere anywhere /* cali:VQA6fOn1eaxLqEbr */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:9EkrafBlOrsDUHkV */ /* Drop if no profiles matched */
Chain cali-tw-calia9fcbc8adc2 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:ORp6EvJNgHJrr8Zp */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:q1JtdRQKoQQ6XY7b */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:duOz0VlRi3nXAGrn */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:t6l8rsgDQSFe7t8W */
0 0 RETURN all -- any any anywhere anywhere /* cali:Egbhu-f-rjaFlDiL */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:SwoKqQDccgtrM1Rb */
0 0 RETURN all -- any any anywhere anywhere /* cali:r_rDXNXOxbnJyi1r */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:1Pt2xLSlVMdSID6P */ /* Drop if no profiles matched */
Chain cali-tw-calib70c771a1e5 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:HubtTWRAKbo9xDbb */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:jUFHY713Ym5lwjCU */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:1yas2UtvsBB9yHLY */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:w-jyz5vpv3KMCuLJ */
0 0 RETURN all -- any any anywhere anywhere /* cali:958vy7eEXwzfz-EJ */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:juYi3TP_IVf1Q8YZ */
0 0 RETURN all -- any any anywhere anywhere /* cali:fWOHV-AQRInvy1I7 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:W7RUzB60WTpCZ1tA */ /* Drop if no profiles matched */
Chain cali-tw-calic8e3b733162 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:O7On6neBXBwtSg11 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:wxCgP1EyodTRoctp */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:0RkFflYtv-Xu1FfU */ MARK and 0xfffcffff
0 0 MARK all -- any any anywhere anywhere /* cali:dTCkyXwWpOVk5n4O */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-pi-_FDiLImilezd09cpg5ci all -- any any anywhere anywhere /* cali:SZTZsTsLWHcD_EXw */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:pPF4Ch5I1Iiut0tB */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:5dnCWHNYoh1FmWFd */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pri-_kJqfZpgUe7r2t4A-14 all -- any any anywhere anywhere /* cali:A8CGiMntiSNPkdvO */
0 0 RETURN all -- any any anywhere anywhere /* cali:iXdKpvgSC9wlJSSN */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-_4yi5_iSUAwsU8zMHTk all -- any any anywhere anywhere /* cali:cRN6CYlBiWbMXul2 */
0 0 RETURN all -- any any anywhere anywhere /* cali:HHHv0UXys13ILXBj */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:8Bj5Fsp_kmThZ5Ot */ /* Drop if no profiles matched */
Chain cali-tw-calid270f41d225 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:36bKQRDDeawFFIiO */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:xR4LiYWEenVMFtAo */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:ZsSbZ24OIsA_HBVp */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:X-VFcTVLSeEjo7QS */
0 0 RETURN all -- any any anywhere anywhere /* cali:1fji3kqN9tEOCv7M */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:-fEySl-tNzlFmpJF */
0 0 RETURN all -- any any anywhere anywhere /* cali:1Z1Y4BaadK00hodD */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:6x6KSHU5UUyVirey */ /* Drop if no profiles matched */
Chain cali-tw-calid448a8d46e9 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:w6DXWOE7Hcq_y671 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:tQsfRNJKUg0Q_oQw */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:X-PigHYIqRS4z_yO */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:Ze641pXRDvcYSZ_3 */
0 0 RETURN all -- any any anywhere anywhere /* cali:w5M9ih7yAd6QxyNs */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:m5sXGZRxKH7dsDGh */
0 0 RETURN all -- any any anywhere anywhere /* cali:3TxWCftHhRRfamd4 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:pwvGMZR5E2sK9NyT */ /* Drop if no profiles matched */
Chain cali-tw-calie19b99f3c2a (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:eN0L7VkTb-IEp7bG */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:r3fSSRApD4CT2PDB */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:MO4gs-zaf7jf5b2- */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:yu0EItGH_9KIs7Qh */
0 0 RETURN all -- any any anywhere anywhere /* cali:hVSQOYNh4JhcO9Qd */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:t8zr_UD5HiAlbLem */
0 0 RETURN all -- any any anywhere anywhere /* cali:w6RKeaKWQiFRaX0e */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:4ij49hkYp2qQVH0O */ /* Drop if no profiles matched */
Chain cali-tw-calie20683acc3f (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:8u362Oi5NdthPoqb */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:nLW7KxoP91oFI6yR */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:81kMi9PRU5L1qzQe */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:CcbwNrFR6wJbn4zn */
0 0 RETURN all -- any any anywhere anywhere /* cali:oJjQn_CV2wJLG_GA */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:bYP5UmssPKtOxyVz */
0 0 RETURN all -- any any anywhere anywhere /* cali:otVrvPDX7JJZ0N8r */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:8xWRBqE04GD-TG1Q */ /* Drop if no profiles matched */
Chain cali-tw-calie4256464cbf (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:qNIGOYgaDX_B7uwP */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:AeW25JAikUHZ9kcS */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:8Ks8kVdMRa1Zb4Ym */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:HeXP-ZVxs9Rm4BZL */
0 0 RETURN all -- any any anywhere anywhere /* cali:QvqFkydY9pfP09DE */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:xoFrmpjVD6lr5y3t */
0 0 RETURN all -- any any anywhere anywhere /* cali:1m6VPIHTQY9SdkKW */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:oD6LMOLCXWpispeQ */ /* Drop if no profiles matched */
Chain cali-tw-caliefced439614 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:Na_bvyysqKVdmUhW */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:Z9lmwo-MTbRkws8S */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:DyENrGrEolI6waJp */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:iOMGCadth7OCSux9 */
0 0 RETURN all -- any any anywhere anywhere /* cali:U10TgS4rrR-3u2Ko */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:Xe6qamS4HYraA8J5 */
0 0 RETURN all -- any any anywhere anywhere /* cali:G8i8oavigr5-5s24 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:7b_J_2ew9uWt0r06 */ /* Drop if no profiles matched */
Chain cali-wl-to-host (1 references)
pkts bytes target prot opt in out source destination
58M 10G cali-from-wl-dispatch all -- any any anywhere anywhere /* cali:Ee9Sbo10IpVujdIY */
32008 1920K ACCEPT all -- any any anywhere anywhere /* cali:nSZbcOoG1xPONxb8 */ /* Configured DefaultEndpointToHostAction */
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment