Skip to content

Instantly share code, notes, and snippets.

@fmuyassarov

fmuyassarov/calico_3_16.09_0.txt

Created September 16, 2025 14:09
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save fmuyassarov/e074e50e30b7eb69b9ac3794dd22d64c to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save fmuyassarov/e074e50e30b7eb69b9ac3794dd22d64c to your computer and use it in GitHub Desktop.
Download ZIP
Pods created with Service object
Raw
calico_3_16.09_0.txt
Chain INPUT (policy ACCEPT 952M packets, 309G bytes)
pkts bytes target prot opt in out source destination
130M 40G cali-INPUT all -- any any anywhere anywhere /* cali:Cz_u1IQiXIMmKD4c */
126M 39G KUBE-IPVS-FILTER all -- any any anywhere anywhere /* kubernetes ipvs access filter */
126M 39G KUBE-PROXY-FIREWALL all -- any any anywhere anywhere /* kube-proxy firewall rules */
126M 39G KUBE-NODE-PORT all -- any any anywhere anywhere /* kubernetes health check rules */
14M 833M KUBE-PROXY-FIREWALL all -- any any anywhere anywhere ctstate NEW /* kubernetes load balancer firewall */
952M 308G KUBE-NODEPORTS all -- any any anywhere anywhere /* kubernetes health check service ports */
14M 833M KUBE-EXTERNAL-SERVICES all -- any any anywhere anywhere ctstate NEW /* kubernetes externally-visible service portals */
952M 308G KUBE-FIREWALL all -- any any anywhere anywhere
Chain FORWARD (policy ACCEPT 2 packets, 181 bytes)
pkts bytes target prot opt in out source destination
46 5885 cali-FORWARD all -- any any anywhere anywhere /* cali:wUHhoiAYhphO9Mso */
16057 82M DOCKER-USER all -- any any anywhere anywhere
16057 82M DOCKER-FORWARD all -- any any anywhere anywhere
83 6844 KUBE-PROXY-FIREWALL all -- any any anywhere anywhere /* kube-proxy firewall rules */
817K 87M KUBE-PROXY-FIREWALL all -- any any anywhere anywhere ctstate NEW /* kubernetes load balancer firewall */
1164K 1940M KUBE-FORWARD all -- any any anywhere anywhere /* kubernetes forwarding rules */
817K 87M KUBE-SERVICES all -- any any anywhere anywhere ctstate NEW /* kubernetes service portals */
817K 87M KUBE-EXTERNAL-SERVICES all -- any any anywhere anywhere ctstate NEW /* kubernetes externally-visible service portals */
20 1634 ACCEPT all -- any any anywhere anywhere /* cali:S93hcgKJrXEqnTfs */ /* Policy explicitly accepted packet. */ mark match 0x10000/0x10000
0 0 MARK all -- any any anywhere anywhere /* cali:mp77cMpurHhyjLrM */ MARK or 0x10000
Chain OUTPUT (policy ACCEPT 1011M packets, 331G bytes)
pkts bytes target prot opt in out source destination
130M 38G cali-OUTPUT all -- any any anywhere anywhere /* cali:tVnHkvAo15HuiPy0 */
130M 38G KUBE-IPVS-OUT-FILTER all -- any any anywhere anywhere /* kubernetes ipvs access filter */
17M 1016M KUBE-PROXY-FIREWALL all -- any any anywhere anywhere ctstate NEW /* kubernetes load balancer firewall */
17M 1016M KUBE-SERVICES all -- any any anywhere anywhere ctstate NEW /* kubernetes service portals */
1011M 331G KUBE-FIREWALL all -- any any anywhere anywhere
Chain DOCKER (2 references)
pkts bytes target prot opt in out source destination
0 0 DROP all -- !br-bc18ce9c999c br-bc18ce9c999c anywhere anywhere
0 0 DROP all -- !docker0 docker0 anywhere anywhere
Chain DOCKER-BRIDGE (1 references)
pkts bytes target prot opt in out source destination
0 0 DOCKER all -- any br-bc18ce9c999c anywhere anywhere
0 0 DOCKER all -- any docker0 anywhere anywhere
Chain DOCKER-CT (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any br-bc18ce9c999c anywhere anywhere ctstate RELATED,ESTABLISHED
10330 81M ACCEPT all -- any docker0 anywhere anywhere ctstate RELATED,ESTABLISHED
Chain DOCKER-FORWARD (1 references)
pkts bytes target prot opt in out source destination
16057 82M DOCKER-CT all -- any any anywhere anywhere
5727 517K DOCKER-ISOLATION-STAGE-1 all -- any any anywhere anywhere
5727 517K DOCKER-BRIDGE all -- any any anywhere anywhere
0 0 ACCEPT all -- br-bc18ce9c999c any anywhere anywhere
5707 516K ACCEPT all -- docker0 any anywhere anywhere
Chain DOCKER-ISOLATION-STAGE-1 (1 references)
pkts bytes target prot opt in out source destination
0 0 DOCKER-ISOLATION-STAGE-2 all -- br-bc18ce9c999c !br-bc18ce9c999c anywhere anywhere
5707 516K DOCKER-ISOLATION-STAGE-2 all -- docker0 !docker0 anywhere anywhere
Chain DOCKER-ISOLATION-STAGE-2 (2 references)
pkts bytes target prot opt in out source destination
0 0 DROP all -- any docker0 anywhere anywhere
0 0 DROP all -- any br-bc18ce9c999c anywhere anywhere
Chain DOCKER-USER (1 references)
pkts bytes target prot opt in out source destination
833K 169M RETURN all -- any any anywhere anywhere
Chain KUBE-EXTERNAL-SERVICES (2 references)
pkts bytes target prot opt in out source destination
Chain KUBE-FIREWALL (2 references)
pkts bytes target prot opt in out source destination
0 0 DROP all -- any any !localhost/8 localhost/8 /* block incoming localnet connections */ ! ctstate RELATED,ESTABLISHED,DNAT
Chain KUBE-FORWARD (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* kubernetes forwarding rules */ mark match 0x4000/0x4000
0 0 ACCEPT all -- any any anywhere anywhere /* kubernetes forwarding conntrack rule */ ctstate RELATED,ESTABLISHED
Chain KUBE-IPVS-FILTER (1 references)
pkts bytes target prot opt in out source destination
0 0 RETURN all -- any any anywhere anywhere match-set KUBE-LOAD-BALANCER dst,dst
0 0 RETURN all -- any any anywhere anywhere match-set KUBE-CLUSTER-IP dst,dst
0 0 RETURN all -- any any anywhere anywhere match-set KUBE-EXTERNAL-IP dst,dst
0 0 RETURN all -- any any anywhere anywhere match-set KUBE-EXTERNAL-IP-LOCAL dst,dst
0 0 RETURN all -- any any anywhere anywhere match-set KUBE-HEALTH-CHECK-NODE-PORT dst
0 0 REJECT all -- any any anywhere anywhere ctstate NEW match-set KUBE-IPVS-IPS dst reject-with icmp-port-unreachable
Chain KUBE-IPVS-OUT-FILTER (1 references)
pkts bytes target prot opt in out source destination
Chain KUBE-KUBELET-CANARY (0 references)
pkts bytes target prot opt in out source destination
Chain KUBE-NODE-PORT (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* Kubernetes health check node port */ match-set KUBE-HEALTH-CHECK-NODE-PORT dst
Chain KUBE-NODEPORTS (1 references)
pkts bytes target prot opt in out source destination
Chain KUBE-PROXY-CANARY (0 references)
pkts bytes target prot opt in out source destination
Chain KUBE-PROXY-FIREWALL (5 references)
pkts bytes target prot opt in out source destination
Chain KUBE-SERVICES (2 references)
pkts bytes target prot opt in out source destination
Chain KUBE-SOURCE-RANGES-FIREWALL (0 references)
pkts bytes target prot opt in out source destination
0 0 DROP all -- any any anywhere anywhere
Chain cali-FORWARD (1 references)
pkts bytes target prot opt in out source destination
12 1638 MARK all -- any any anywhere anywhere /* cali:vjrMJCRpqwy5oRoX */ MARK and 0xfff1ffff
12 1638 cali-from-hep-forward all -- any any anywhere anywhere /* cali:A_sPAO0mcxbT9mOV */ mark match 0x0/0x10000
6 390 cali-from-wl-dispatch all -- cali+ any anywhere anywhere /* cali:8ZoYfO5HKXWbB3pk */
6 1248 cali-to-wl-dispatch all -- any cali+ anywhere anywhere /* cali:jdEuaPBe14V2hutn */
5 305 cali-to-hep-forward all -- any any anywhere anywhere /* cali:12bc6HljsMKsmfr- */
5 305 cali-cidr-block all -- any any anywhere anywhere /* cali:NOSxoaGx8OIstr1z */
Chain cali-INPUT (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT udp -- any any anywhere anywhere /* cali:J76FwxInZIsk7uKY */ /* Allow IPv4 VXLAN packets from allowed hosts */ multiport dports 4789 match-set cali40all-vxlan-net src ADDRTYPE match dst-type LOCAL
0 0 DROP udp -- any any anywhere anywhere /* cali:EDCNTTxYfggApx8C */ /* Drop IPv4 VXLAN packets from non-allowed hosts */ multiport dports 4789 ADDRTYPE match dst-type LOCAL
163K 151M MARK all -- any any anywhere anywhere /* cali:B_8fGLpLlTQcXZgh */ MARK and 0xfffff
163K 151M cali-forward-check all -- any any anywhere anywhere /* cali:AD1HGbXEph59_YyS */
56 5553 RETURN all -- any any anywhere anywhere /* cali:NmYAbfrd1o63cxNo */ mark match ! 0x0/0xfff00000
3283 848K cali-wl-to-host all -- cali+ any anywhere anywhere [goto] /* cali:O-dDeZL8fOcsUtUD */
0 0 ACCEPT all -- any any anywhere anywhere /* cali:ZI1yfOrOsD5YjTbe */ mark match 0x10000/0x10000
160K 150M MARK all -- any any anywhere anywhere /* cali:XxqbC-iTL5WaS8eO */ MARK and 0xfff0ffff
160K 150M cali-from-host-endpoint all -- any any anywhere anywhere /* cali:IZ5RzzpDkgrPBLwh */
0 0 ACCEPT all -- any any anywhere anywhere /* cali:jUXk5Q3mXlNarOhs */ /* Host endpoint policy accepted packet. */ mark match 0x10000/0x10000
Chain cali-OUTPUT (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:Mq1_rAdXXH3YkrzW */ mark match 0x10000/0x10000
0 0 cali-forward-endpoint-mark all -- any any anywhere anywhere [goto] /* cali:5Z67OUUpTOM7Xa1a */ mark match ! 0x0/0xfff00000
3211 2221K RETURN all -- any cali+ anywhere anywhere /* cali:M2Wf0OehNdig8MHR */
0 0 ACCEPT udp -- any any anywhere anywhere /* cali:ClE20y3NCwgoEuMI */ /* Allow IPv4 VXLAN packets to other allowed hosts */ multiport dports 4789 ADDRTYPE match src-type LOCAL match-set cali40all-vxlan-net dst
156K 58M MARK all -- any any anywhere anywhere /* cali:aMcwcA5f79hQPBgR */ MARK and 0xfff0ffff
156K 58M cali-to-host-endpoint all -- any any anywhere anywhere /* cali:n_vqcKl8u9NdpYmx */ ! ctstate DNAT
0 0 ACCEPT all -- any any anywhere anywhere /* cali:979hsn7wL9UDIMMj */ /* Host endpoint policy accepted packet. */ mark match 0x10000/0x10000
Chain cali-cidr-block (1 references)
pkts bytes target prot opt in out source destination
Chain cali-failsafe-in (3 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:wWFQM43tJU7wwnFZ */ multiport dports ssh
0 0 ACCEPT udp -- any any anywhere anywhere /* cali:LwNV--R8MjeUYacw */ multiport dports bootpc
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:QOO5NUOqOSS1_Iw0 */ multiport dports bgp
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:cwZWoBSwVeIAZmVN */ multiport dports 2379
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:7FbNXT91kugE_upR */ multiport dports 2380
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:8Ftbkk2dRH2eEeq1 */ multiport dports 5473
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:-JoRSaAQZPJAegMo */ multiport dports 6443
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:PUKij4Rn9njHfVTi */ multiport dports 6666
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:vSprVE-4rient0wc */ multiport dports ircd
Chain cali-failsafe-out (3 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT udp -- any any anywhere anywhere /* cali:82hjfji-wChFhAqL */ multiport dports domain
0 0 ACCEPT udp -- any any anywhere anywhere /* cali:TNM3RfEjbNr72hgH */ multiport dports bootps
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:ycxKitIl4u3dK0HR */ multiport dports bgp
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:hxjEWyxdkXXkdvut */ multiport dports 2379
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:cA_GLtruuvG88KiO */ multiport dports 2380
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:ALz4foMyfue7vaqK */ multiport dports 5473
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:zvCXe1uOiQ8adzhn */ multiport dports 6443
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:Lppo9JuKR7AyZoWQ */ multiport dports 6666
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:EoOkKdH0fekirfk8 */ multiport dports ircd
Chain cali-fh-adummy0 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:KfSIATvjGaK4zGj1 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:9P1i-1Uq2VzBO2PV */ ctstate INVALID
0 0 cali-failsafe-in all -- any any anywhere anywhere /* cali:9fTcLBxw7RpWzYcn */
0 0 MARK all -- any any anywhere anywhere /* cali:FBSa7pCs1mUiQqM8 */ MARK and 0xfffcffff
0 0 DROP all -- any any anywhere anywhere /* cali:ej0Jv-1dernW3FtU */ /* Drop if no profiles matched */
Chain cali-fh-adummy1 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:v4M9QFls4ZPiyZy7 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:3AmWDyZULYQY9GjN */ ctstate INVALID
0 0 cali-failsafe-in all -- any any anywhere anywhere /* cali:2dVDormZdB8Q6KsH */
0 0 MARK all -- any any anywhere anywhere /* cali:4rttKZJ47f19c54X */ MARK and 0xfffcffff
0 0 DROP all -- any any anywhere anywhere /* cali:ia5YyI-UpdNlph1r */ /* Drop if no profiles matched */
Chain cali-fh-cdummy0 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:wQNdFSotavCSO0VD */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:ogjBiTOJ3F4yQM1k */ ctstate INVALID
0 0 cali-failsafe-in all -- any any anywhere anywhere /* cali:8ojDI8KR9JE8GIyT */
0 0 MARK all -- any any anywhere anywhere /* cali:WUrm0g_vABO1YJkM */ MARK and 0xfffcffff
0 0 DROP all -- any any anywhere anywhere /* cali:yVj5AbsxwzgfpDWR */ /* Drop if no profiles matched */
Chain cali-fhfw-adummy0 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:p6N3xKLkWCAfIBz7 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:SO8c1B0UTbPSuOJi */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:ecJjlnMA_3gt3VhD */ MARK and 0xfffcffff
0 0 MARK all -- any any anywhere anywhere /* cali:u_FsQ3kZMBA2R1aA */ /* Allow forwarded traffic by default */ MARK or 0x10000
0 0 RETURN all -- any any anywhere anywhere /* cali:ZQ7qVaUNIUtO9rA9 */ /* Return for accepted forward traffic */
Chain cali-fhfw-adummy1 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:iyFDpZ3GCaODXV8_ */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:R7ttpJi85eXZRhhh */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:mFNHOTYjHonv6NUc */ MARK and 0xfffcffff
0 0 MARK all -- any any anywhere anywhere /* cali:v1NCCt3EkuqkogCs */ /* Allow forwarded traffic by default */ MARK or 0x10000
0 0 RETURN all -- any any anywhere anywhere /* cali:-_4UngRn6sG-pB7C */ /* Return for accepted forward traffic */
Chain cali-fhfw-cdummy0 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:8iH-8Pj5FbqTCEEY */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:witZtAzEZxdUFJMA */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:Z-NR55r2UW9m72x9 */ MARK and 0xfffcffff
0 0 MARK all -- any any anywhere anywhere /* cali:zPyQulz6xiDgtoZp */ /* Allow forwarded traffic by default */ MARK or 0x10000
0 0 RETURN all -- any any anywhere anywhere /* cali:m6E3DrPjujVLLpOR */ /* Return for accepted forward traffic */
Chain cali-forward-check (1 references)
pkts bytes target prot opt in out source destination
128M 39G RETURN all -- any any anywhere anywhere /* cali:Pbldlb4FaULvpdD8 */ ctstate RELATED,ESTABLISHED
0 0 cali-set-endpoint-mark tcp -- any any anywhere anywhere [goto] /* cali:ZD-6UxuUtGW-xtzg */ /* To kubernetes NodePort service */ multiport dports 30000:32767 match-set cali40this-host dst
0 0 cali-set-endpoint-mark udp -- any any anywhere anywhere [goto] /* cali:CbPfUajQ2bFVnDq4 */ /* To kubernetes NodePort service */ multiport dports 30000:32767 match-set cali40this-host dst
15164 1758K cali-set-endpoint-mark all -- any any anywhere anywhere /* cali:jmhU0ODogX-Zfe5g */ /* To kubernetes service */ ! match-set cali40this-host dst
Chain cali-forward-endpoint-mark (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-from-endpoint-mark all -- any any anywhere anywhere /* cali:O0SmFDrnm7KggWqW */ mark match ! 0x100000/0xfff00000
0 0 cali-to-wl-dispatch all -- any cali+ anywhere anywhere /* cali:aFl0WFKRxDqj8oA6 */
0 0 cali-to-hep-forward all -- any any anywhere anywhere /* cali:AZKVrO3i_8cLai5f */
0 0 MARK all -- any any anywhere anywhere /* cali:96HaP1sFtb-NYoYA */ MARK and 0xfffff
0 0 ACCEPT all -- any any anywhere anywhere /* cali:VxO6hyNWz62YEtul */ /* Policy explicitly accepted packet. */ mark match 0x10000/0x10000
Chain cali-from-endpoint-mark (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-fw-cali031f9ab8df4 all -- any any anywhere anywhere [goto] /* cali:eb2eN-D9brVNc-mK */ mark match 0x5a800000/0xfff00000
0 0 cali-fw-cali139b01927da all -- any any anywhere anywhere [goto] /* cali:0lfUPioXU-Y9q7lR */ mark match 0xbb100000/0xfff00000
0 0 cali-fw-cali1421f384600 all -- any any anywhere anywhere [goto] /* cali:y6VqYLPK4cuWlyET */ mark match 0xba500000/0xfff00000
0 0 cali-fw-cali19ea483d497 all -- any any anywhere anywhere [goto] /* cali:3gnzo4Sz1PpHj972 */ mark match 0x32b00000/0xfff00000
0 0 cali-fw-cali299f39e782d all -- any any anywhere anywhere [goto] /* cali:3zCY9LThgdaDJjSm */ mark match 0x73400000/0xfff00000
0 0 cali-fw-cali37bceb25357 all -- any any anywhere anywhere [goto] /* cali:pcAxlY3ENIBv0Qrg */ mark match 0x2fc00000/0xfff00000
0 0 cali-fw-cali3862ba2b954 all -- any any anywhere anywhere [goto] /* cali:Hpr_K8gB102_-gIs */ mark match 0x1a400000/0xfff00000
0 0 cali-fw-cali389b5b6a8ec all -- any any anywhere anywhere [goto] /* cali:D_FLtFYmnc7BCtB7 */ mark match 0x8ca00000/0xfff00000
0 0 cali-fw-cali3fcd030fa13 all -- any any anywhere anywhere [goto] /* cali:5iKoRldnntnTgQ-6 */ mark match 0x27800000/0xfff00000
0 0 cali-fw-cali4b00c59f252 all -- any any anywhere anywhere [goto] /* cali:IQ1jYusAr48qULP1 */ mark match 0x40a00000/0xfff00000
0 0 cali-fw-cali4c7d39d0d0e all -- any any anywhere anywhere [goto] /* cali:z8GdSH7DC3hhqWqH */ mark match 0xa3f00000/0xfff00000
0 0 cali-fw-cali5237e9928a0 all -- any any anywhere anywhere [goto] /* cali:aydpau61nCXV7gNs */ mark match 0x38b00000/0xfff00000
0 0 cali-fw-cali557158cd734 all -- any any anywhere anywhere [goto] /* cali:2F2s58NyObuPOdH8 */ mark match 0x3ba00000/0xfff00000
0 0 cali-fw-cali590c7f9f7ee all -- any any anywhere anywhere [goto] /* cali:6LyZrlHlB4NTIeg4 */ mark match 0x5d400000/0xfff00000
0 0 cali-fw-cali65ec8e40f76 all -- any any anywhere anywhere [goto] /* cali:E7PBwjWb7fS-32Ki */ mark match 0x71300000/0xfff00000
0 0 cali-fw-cali6b0bb2f1209 all -- any any anywhere anywhere [goto] /* cali:mmPkpwaiFV4THQXW */ mark match 0xa9c00000/0xfff00000
0 0 cali-fw-cali6bfc27a619b all -- any any anywhere anywhere [goto] /* cali:GNJwOl21zYz2JbKH */ mark match 0xecf00000/0xfff00000
0 0 cali-fw-cali701e7cc6c80 all -- any any anywhere anywhere [goto] /* cali:abqCjgWhzBE1naK7 */ mark match 0x83d00000/0xfff00000
0 0 cali-fw-cali845db002918 all -- any any anywhere anywhere [goto] /* cali:VO1t7Amnb63iMxib */ mark match 0x1cf00000/0xfff00000
0 0 cali-fw-cali852f1a9204c all -- any any anywhere anywhere [goto] /* cali:F7Xtlo3qrG0bsDtg */ mark match 0xb8d00000/0xfff00000
0 0 cali-fw-cali8e93fce84a6 all -- any any anywhere anywhere [goto] /* cali:3kB--HrbxCEdZpNR */ mark match 0xdf400000/0xfff00000
0 0 cali-fw-cali8f4065ff2b6 all -- any any anywhere anywhere [goto] /* cali:QuIo_bepNUH8QFmP */ mark match 0x26900000/0xfff00000
0 0 cali-fw-cali97a39b84c91 all -- any any anywhere anywhere [goto] /* cali:3swb9HUrMkyPuRBz */ mark match 0x71a00000/0xfff00000
0 0 cali-fw-calia358f09614c all -- any any anywhere anywhere [goto] /* cali:Jgm49wr-UDFHXOd- */ mark match 0x4f600000/0xfff00000
0 0 cali-fw-calia5dea553aa7 all -- any any anywhere anywhere [goto] /* cali:RafG7DWC-MMzXXRy */ mark match 0x13a00000/0xfff00000
0 0 cali-fw-calia744e09c4ff all -- any any anywhere anywhere [goto] /* cali:fhHHZsDDnp8wSXDF */ mark match 0xd0500000/0xfff00000
0 0 cali-fw-calia9fcbc8adc2 all -- any any anywhere anywhere [goto] /* cali:ETnUYrsmuqbWmnrY */ mark match 0xc7e00000/0xfff00000
0 0 cali-fw-calic8e3b733162 all -- any any anywhere anywhere [goto] /* cali:rjva7YxmClg5-odv */ mark match 0x2700000/0xfff00000
0 0 cali-fw-calid270f41d225 all -- any any anywhere anywhere [goto] /* cali:cmQlXrMpksf4BnGl */ mark match 0x78300000/0xfff00000
0 0 cali-fw-calid448a8d46e9 all -- any any anywhere anywhere [goto] /* cali:FG8hU4en5hl_Whyi */ mark match 0x14d00000/0xfff00000
0 0 cali-fw-calie20683acc3f all -- any any anywhere anywhere [goto] /* cali:laBe8uAXm4bbriaP */ mark match 0x6a800000/0xfff00000
0 0 cali-fw-calie4256464cbf all -- any any anywhere anywhere [goto] /* cali:wJVZ_yJH8aXzuqif */ mark match 0xe5b00000/0xfff00000
0 0 cali-fhfw-adummy0 all -- any any anywhere anywhere [goto] /* cali:WiHpa2ofVvJTqehi */ mark match 0xdca00000/0xfff00000
0 0 cali-fhfw-adummy1 all -- any any anywhere anywhere [goto] /* cali:IBlJRsElLHoG0OOI */ mark match 0xdcb00000/0xfff00000
0 0 cali-fhfw-cdummy0 all -- any any anywhere anywhere [goto] /* cali:-5JL9XZzoKH9SDcs */ mark match 0xd9800000/0xfff00000
0 0 DROP all -- any any anywhere anywhere /* cali:dF0a7ETCLqiC-hK9 */ /* Unknown interface */
Chain cali-from-hep-forward (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-from-hep-forward-a all -- a+ any anywhere anywhere [goto] /* cali:Ikz-pJcHuTDXZIR7 */
0 0 cali-fhfw-cdummy0 all -- cdummy0 any anywhere anywhere [goto] /* cali:sXyCCCyNmRDYhzPV */
Chain cali-from-hep-forward-a (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-fhfw-adummy0 all -- adummy0 any anywhere anywhere [goto] /* cali:nJiCqwGkrZha99P7 */
0 0 cali-fhfw-adummy1 all -- adummy1 any anywhere anywhere [goto] /* cali:sznlNsCjbCsbw-fA */
Chain cali-from-host-endpoint (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-from-host-endpoint-a all -- a+ any anywhere anywhere [goto] /* cali:be6cZBwzbM-h2tOu */
0 0 cali-fh-cdummy0 all -- cdummy0 any anywhere anywhere [goto] /* cali:OqK0BcAUeKBJxH1t */
Chain cali-from-host-endpoint-a (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-fh-adummy0 all -- adummy0 any anywhere anywhere [goto] /* cali:ab36Uo9wuSe8vRcD */
0 0 cali-fh-adummy1 all -- adummy1 any anywhere anywhere [goto] /* cali:sX7ZaMdHppIMcBCd */
Chain cali-from-wl-dispatch (2 references)
pkts bytes target prot opt in out source destination
0 0 cali-fw-cali031f9ab8df4 all -- cali031f9ab8df4 any anywhere anywhere [goto] /* cali:JQIaoJo3hp0_XlOZ */
0 0 cali-from-wl-dispatch-1 all -- cali1+ any anywhere anywhere [goto] /* cali:fOBxA7QHcGXE2v4m */
0 0 cali-fw-cali299f39e782d all -- cali299f39e782d any anywhere anywhere [goto] /* cali:jjZ00XR8w4L9Gv8u */
0 0 cali-from-wl-dispatch-3 all -- cali3+ any anywhere anywhere [goto] /* cali:OfmGioeaxXx0LS3t */
6 456 cali-from-wl-dispatch-4 all -- cali4+ any anywhere anywhere [goto] /* cali:OYNM_f8JUXJBi2g4 */
0 0 cali-from-wl-dispatch-5 all -- cali5+ any anywhere anywhere [goto] /* cali:X54nRmvTwPQvIQDs */
0 0 cali-from-wl-dispatch-6 all -- cali6+ any anywhere anywhere [goto] /* cali:ncSqaxMMQ79ljpOQ */
0 0 cali-fw-cali701e7cc6c80 all -- cali701e7cc6c80 any anywhere anywhere [goto] /* cali:lNCR9Pg52kU1txcC */
0 0 cali-from-wl-dispatch-8 all -- cali8+ any anywhere anywhere [goto] /* cali:SZXudmiiupmvPTt0 */
0 0 cali-fw-cali97a39b84c91 all -- cali97a39b84c91 any anywhere anywhere [goto] /* cali:inAkdjTSp5jFgWWx */
0 0 cali-from-wl-dispatch-a all -- calia+ any anywhere anywhere [goto] /* cali:V-R4U5N7Z5s9k1aW */
0 0 cali-fw-calic8e3b733162 all -- calic8e3b733162 any anywhere anywhere [goto] /* cali:4rzUvNh-LXqsoG06 */
0 0 cali-from-wl-dispatch-d all -- calid+ any anywhere anywhere [goto] /* cali:xUsUgKCMiaDGiN8R */
0 0 cali-from-wl-dispatch-e all -- calie+ any anywhere anywhere [goto] /* cali:n18F4lH9Ssx4vju9 */
0 0 DROP all -- any any anywhere anywhere /* cali:iA4TmHA6sBBveAzY */ /* Unknown interface */
Chain cali-from-wl-dispatch-1 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-fw-cali139b01927da all -- cali139b01927da any anywhere anywhere [goto] /* cali:ApFbS4WNEcFmrmWr */
0 0 cali-fw-cali1421f384600 all -- cali1421f384600 any anywhere anywhere [goto] /* cali:cdTNM9SsPwvHejTR */
0 0 cali-fw-cali19ea483d497 all -- cali19ea483d497 any anywhere anywhere [goto] /* cali:6FSutEG7og6i67dv */
0 0 DROP all -- any any anywhere anywhere /* cali:SBVP6P49ZXKWY6ri */ /* Unknown interface */
Chain cali-from-wl-dispatch-3 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-fw-cali37bceb25357 all -- cali37bceb25357 any anywhere anywhere [goto] /* cali:VYAqj8eCP0sGEia1 */
0 0 cali-fw-cali3862ba2b954 all -- cali3862ba2b954 any anywhere anywhere [goto] /* cali:GgBFa_d_ky-guyaR */
0 0 cali-fw-cali389b5b6a8ec all -- cali389b5b6a8ec any anywhere anywhere [goto] /* cali:0fzExpR-qd1cSdXo */
0 0 cali-fw-cali3fcd030fa13 all -- cali3fcd030fa13 any anywhere anywhere [goto] /* cali:tAMmvNrrADJtmzVY */
0 0 DROP all -- any any anywhere anywhere /* cali:gnaNuyICBDlWcFhj */ /* Unknown interface */
Chain cali-from-wl-dispatch-4 (1 references)
pkts bytes target prot opt in out source destination
8 608 cali-fw-cali4b00c59f252 all -- cali4b00c59f252 any anywhere anywhere [goto] /* cali:1KfkoUP4HJ8rnqE8 */
0 0 cali-fw-cali4c7d39d0d0e all -- cali4c7d39d0d0e any anywhere anywhere [goto] /* cali:WYmus1phNkaRBVxm */
0 0 DROP all -- any any anywhere anywhere /* cali:BfA3BrjaYpaKRdU5 */ /* Unknown interface */
Chain cali-from-wl-dispatch-5 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-fw-cali5237e9928a0 all -- cali5237e9928a0 any anywhere anywhere [goto] /* cali:4JIa8Oo0I24XicHz */
6 492 cali-fw-cali557158cd734 all -- cali557158cd734 any anywhere anywhere [goto] /* cali:JRIPT2GofXLAeu9r */
3 274 cali-fw-cali590c7f9f7ee all -- cali590c7f9f7ee any anywhere anywhere [goto] /* cali:8lpYKzW2qmmZ_By0 */
0 0 DROP all -- any any anywhere anywhere /* cali:_8IPxNiBc6p5b4Le */ /* Unknown interface */
Chain cali-from-wl-dispatch-6 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-fw-cali65ec8e40f76 all -- cali65ec8e40f76 any anywhere anywhere [goto] /* cali:bUJrawZ7-ELSBNYu */
0 0 cali-fw-cali6b0bb2f1209 all -- cali6b0bb2f1209 any anywhere anywhere [goto] /* cali:QaZFP8btkKeMaqYZ */
0 0 cali-fw-cali6bfc27a619b all -- cali6bfc27a619b any anywhere anywhere [goto] /* cali:CptznCBDou5Dmwob */
0 0 DROP all -- any any anywhere anywhere /* cali:atH2fs-C-RabORfR */ /* Unknown interface */
Chain cali-from-wl-dispatch-8 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-fw-cali845db002918 all -- cali845db002918 any anywhere anywhere [goto] /* cali:8DaZPMT3aMyYdFKM */
0 0 cali-fw-cali852f1a9204c all -- cali852f1a9204c any anywhere anywhere [goto] /* cali:V5eCUH7FOlT_bdU0 */
0 0 cali-fw-cali8e93fce84a6 all -- cali8e93fce84a6 any anywhere anywhere [goto] /* cali:UVn4p80MHSrjCK1k */
0 0 cali-fw-cali8f4065ff2b6 all -- cali8f4065ff2b6 any anywhere anywhere [goto] /* cali:q5yTakwrPcP_VT6P */
0 0 DROP all -- any any anywhere anywhere /* cali:zckHXXqXtzQ_yDDA */ /* Unknown interface */
Chain cali-from-wl-dispatch-a (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-fw-calia358f09614c all -- calia358f09614c any anywhere anywhere [goto] /* cali:bP1G54eSms7hvm-v */
0 0 cali-fw-calia5dea553aa7 all -- calia5dea553aa7 any anywhere anywhere [goto] /* cali:Wsq6h6q96sQCby-y */
0 0 cali-fw-calia744e09c4ff all -- calia744e09c4ff any anywhere anywhere [goto] /* cali:xWW8RctA3UGyNTeR */
0 0 cali-fw-calia9fcbc8adc2 all -- calia9fcbc8adc2 any anywhere anywhere [goto] /* cali:bonOLnrFNTXyTKa3 */
0 0 DROP all -- any any anywhere anywhere /* cali:bJdwZPqpzsXPwrlh */ /* Unknown interface */
Chain cali-from-wl-dispatch-d (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-fw-calid270f41d225 all -- calid270f41d225 any anywhere anywhere [goto] /* cali:ZzkYXGwEeL3VBg8R */
0 0 cali-fw-calid448a8d46e9 all -- calid448a8d46e9 any anywhere anywhere [goto] /* cali:EAsuKjmCMCIrisCt */
0 0 DROP all -- any any anywhere anywhere /* cali:-JkYvXL19UPuJgr0 */ /* Unknown interface */
Chain cali-from-wl-dispatch-e (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-fw-calie20683acc3f all -- calie20683acc3f any anywhere anywhere [goto] /* cali:vbImp-ejJ2LpkvBa */
0 0 cali-fw-calie4256464cbf all -- calie4256464cbf any anywhere anywhere [goto] /* cali:eyWvRqwMT6KlJkP2 */
0 0 DROP all -- any any anywhere anywhere /* cali:BbvVBIXfVyf96M0F */ /* Unknown interface */
Chain cali-fw-cali031f9ab8df4 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:IWJh0Dd046KTX1SQ */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:skLmGBFoeE2s7cze */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:UA_x4_YPE1oXgSM_ */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:A1gHOJy3Prp3vhg4 */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:x9_mqEJBK07gFUe6 */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:_LZZxZtqs-IQMgnk */
0 0 RETURN all -- any any anywhere anywhere /* cali:stVLqkiKhkRlka8P */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:ykekIHT3oKc8FKPd */
0 0 RETURN all -- any any anywhere anywhere /* cali:EIzwOpVrMH1CJU_M */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:bEiOyV5LC0xDGm-p */ /* Drop if no profiles matched */
Chain cali-fw-cali139b01927da (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:bXeDoFou9H_V8F5B */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:_G5yiDxENkTlHU4v */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:0uVTYLu93Fjn3o22 */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:5sC4ddTIxJ9O-sz4 */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:CFd3SkginMXmuHos */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:NrHL_R41EPOWd-iI */
0 0 RETURN all -- any any anywhere anywhere /* cali:b7fqdHRta9umftYp */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:_wLeKg-wG2MN0cwG */
0 0 RETURN all -- any any anywhere anywhere /* cali:06ft13QDLONTU4Il */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:BThzhoyr-vzU-6kg */ /* Drop if no profiles matched */
Chain cali-fw-cali1421f384600 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:ZiyOKbxXM82y7YTb */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:vMOm-sD3c3bu6jWa */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:PYClPBcxdZwwqN82 */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:itbvNzbfhuuzIy1x */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:Z-VSQKvv3LEeF0MG */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:XJH2YRIlexEbKjjY */
0 0 RETURN all -- any any anywhere anywhere /* cali:SresR2eFQxQGqNZM */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:STM-ByA9IUIrqnT2 */
0 0 RETURN all -- any any anywhere anywhere /* cali:As5pFp12vE1TkwU_ */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:Qy2hl3PgkJlAy-mA */ /* Drop if no profiles matched */
Chain cali-fw-cali19ea483d497 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:49zA9NKu0i3cjX41 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:45-fGKYeeV_yH6qS */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:H319s78u1k0ieLu7 */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:pabHlUs33dlyaFXG */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:ql7khBSk2OURlHvm */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:6YURvUsIjZukQ78s */
0 0 RETURN all -- any any anywhere anywhere /* cali:ElbfLqsYqK9ecwRm */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:C6qmzUq5ah59E9LZ */
0 0 RETURN all -- any any anywhere anywhere /* cali:_2hphQTS-UUkPT_q */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:CRj6FnPeQqICXON- */ /* Drop if no profiles matched */
Chain cali-fw-cali299f39e782d (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:GfJ_KkcBcCmrig7M */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:Lcfjx8EgU9U5lpzg */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:Qq-yrWJMnL-NJ6yg */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:VN6zjU4qYBWKXAIJ */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:ExS2b1c_UikuDiJS */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.calico-system all -- any any anywhere anywhere /* cali:StbcuTHOWLJJuLji */
0 0 RETURN all -- any any anywhere anywhere /* cali:NJ94Hz3y4R86fNdu */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-_ymJUz7yzI6NOKJhG2- all -- any any anywhere anywhere /* cali:mL5q2cB16W9VMRWa */
0 0 RETURN all -- any any anywhere anywhere /* cali:oA0rdzTCalEu-itf */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:CKOgE-ZFwlguJqfh */ /* Drop if no profiles matched */
Chain cali-fw-cali37bceb25357 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:1bekhojd6gZ5ZPHB */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:VGhjnrEpaNZZ1ILA */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:1zbrOOtm1se1u4tG */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:NyyC-vgyYU_rGddf */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:PG-SjLqX5TrmmlWZ */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:N8j5-sm6yWZALJ39 */
0 0 RETURN all -- any any anywhere anywhere /* cali:aj6gmByTw6KDw5ZX */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:wSe1xS4ltkcpv3QI */
0 0 RETURN all -- any any anywhere anywhere /* cali:A8ZJdCwRDOntoZ-x */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:1SMSn8Sz-qR0OWJu */ /* Drop if no profiles matched */
Chain cali-fw-cali3862ba2b954 (2 references)
pkts bytes target prot opt in out source destination
419 35010 ACCEPT all -- any any anywhere anywhere /* cali:TsTF6nqXJRbVW-s8 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:4J4FJdJo5RVpuKoS */ ctstate INVALID
3 175 MARK all -- any any anywhere anywhere /* cali:qbxl-G3KLoj2CD9n */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:6b-pdaf5LEctV92_ */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:6dL1RnBv4DluifEG */ /* Drop IPinIP encapped packets originating in workloads */
3 175 cali-pro-kns.kube-system all -- any any anywhere anywhere /* cali:b89dS4Rf06STbmFh */
3 175 RETURN all -- any any anywhere anywhere /* cali:OQ461jeZDyj5jyhJ */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-_u2Tn2rSoAPffvE7JO6 all -- any any anywhere anywhere /* cali:3SNgmuFoaEYFPvl7 */
0 0 RETURN all -- any any anywhere anywhere /* cali:JNqIX6z5dhoZ5rqe */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:yX1fYxhkrSZpEhnK */ /* Drop if no profiles matched */
Chain cali-fw-cali389b5b6a8ec (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:TSQksZiTA3MJgv0m */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:44qr0-C9hiAd6nI4 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:KIJknglAL4R6asbu */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:jtfLiKfS99gGzz0- */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:JrKMhO3eIH0ueLPl */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:TE-QhI5k8kxTidHP */
0 0 RETURN all -- any any anywhere anywhere /* cali:uynwWlh0c7f1Tckz */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:GGHzmw5XDxIcR1p0 */
0 0 RETURN all -- any any anywhere anywhere /* cali:1hCvzP8h1PTIqG3g */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:RXVA9iv2hD7If7k_ */ /* Drop if no profiles matched */
Chain cali-fw-cali3fcd030fa13 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:XuwvKKGIdCyYfPH- */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:uaJP2Jk_3MfGY1kp */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:bi6P4tlAHdnR7cKB */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:4nqDEHUWn8hdnicq */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:whedsOuhyReE-IzX */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:GEjqbqFJlxNZZz0R */
0 0 RETURN all -- any any anywhere anywhere /* cali:yawQWjbWCr3B4H7c */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:wBNTF2VZr4dPKvkF */
0 0 RETURN all -- any any anywhere anywhere /* cali:3pk4XJ0Cj4loilgh */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:GVSF7hVUgDiGdo_9 */ /* Drop if no profiles matched */
Chain cali-fw-cali4b00c59f252 (2 references)
pkts bytes target prot opt in out source destination
824 88712 ACCEPT all -- any any anywhere anywhere /* cali:A-nz0HbDBF-uA9n1 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:DjBAL8K61DHXhWmv */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:2DQe6ZlTVRUuxzr6 */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:XWbOs53I4rW0-xee */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:7W_JErkX4tfXugdw */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.calico-system all -- any any anywhere anywhere /* cali:Ec6rQQvqevXEPaC4 */
0 0 RETURN all -- any any anywhere anywhere /* cali:MUa19jR0uZ5I_UyD */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-_nzzjLvInId1gPHmQz_ all -- any any anywhere anywhere /* cali:vk3d7rETLit-dDaK */
0 0 RETURN all -- any any anywhere anywhere /* cali:0cH1q8LXBwJDoLzm */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:m0btgE0_BAckFQB0 */ /* Drop if no profiles matched */
Chain cali-fw-cali4c7d39d0d0e (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:qiC1ehoEDUJS1wbB */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:hpET2PaWqQ-88V_K */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:Q60yCxM9WKDjkjoh */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:lzYL9HXgF6ogEOTm */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:kEsNgZV6AIVYqPLA */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:QI9zs9D7bcaL-Xag */
0 0 RETURN all -- any any anywhere anywhere /* cali:lxR4HTyxWnUDDNA4 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:2a4mS50pi46_s4Qp */
0 0 RETURN all -- any any anywhere anywhere /* cali:eJrq8TlH0FaGhjRk */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:xwr5zrajhfHUAZ7B */ /* Drop if no profiles matched */
Chain cali-fw-cali5237e9928a0 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:2QeUqDFiEVmuwG_m */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:jcvrdIJH4VUjtE7i */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:UIrpFGoJMH9wLhza */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:qFrJv3lwETFgtlW8 */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:saYwvsA2kupiYSRn */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:Z0REujQzeMlULu5o */
0 0 RETURN all -- any any anywhere anywhere /* cali:CzgZPwbu7b3IRnM7 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:pWUYtWjuR-buNNoo */
0 0 RETURN all -- any any anywhere anywhere /* cali:Il2GGxJZ3xy6gU1k */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:q9kc3fog5atnjZNo */ /* Drop if no profiles matched */
Chain cali-fw-cali557158cd734 (2 references)
pkts bytes target prot opt in out source destination
413 34553 ACCEPT all -- any any anywhere anywhere /* cali:d05E0SArDhDNKYOc */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:ufc3YceD-Tig1Kf1 */ ctstate INVALID
2 130 MARK all -- any any anywhere anywhere /* cali:t8hMNupRetn6neG2 */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:vNjGJhQxeZ2KPcdE */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:reWI3-s1qSutdfTJ */ /* Drop IPinIP encapped packets originating in workloads */
2 130 cali-pro-kns.kube-system all -- any any anywhere anywhere /* cali:t2K6_DDfHKWfs0rL */
2 130 RETURN all -- any any anywhere anywhere /* cali:zMFwpfABxm6v-Eim */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-_u2Tn2rSoAPffvE7JO6 all -- any any anywhere anywhere /* cali:CJW54OeeOqMfvif6 */
0 0 RETURN all -- any any anywhere anywhere /* cali:fUITJWI6asK7jzEJ */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:IYOI4IoVI1Hli1cW */ /* Drop if no profiles matched */
Chain cali-fw-cali590c7f9f7ee (2 references)
pkts bytes target prot opt in out source destination
424 73558 ACCEPT all -- any any anywhere anywhere /* cali:MFqVPM8C3ypwA3RX */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:7Ld_KLrH7rlyVw91 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:VJEOQU3Q1SKld6L_ */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:v1xD9be2TjwGpAFU */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:-cJtl1b0cTibF4kq */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-_kJqfZpgUe7r2t4A-14 all -- any any anywhere anywhere /* cali:6pN2edXf6_GGldeC */
0 0 RETURN all -- any any anywhere anywhere /* cali:ieV3z86lsOHE2byW */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-_4yi5_iSUAwsU8zMHTk all -- any any anywhere anywhere /* cali:PB2fBxL3VGZ5CpcX */
0 0 RETURN all -- any any anywhere anywhere /* cali:1v-2tGYDhvVtgMaY */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:K5v6BhtDdJvooGsx */ /* Drop if no profiles matched */
Chain cali-fw-cali65ec8e40f76 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:Ur9TSXigqRUAGEq6 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:PVm-3ASl1bbFu08Q */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:xoPWdDqHZNGizzhn */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:bzyaTOZm6E_y8H91 */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:gF33DL8WBppcQmLw */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:-B8xpnGeBnAalq-m */
0 0 RETURN all -- any any anywhere anywhere /* cali:SyUUeEwmrdP3qgxq */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:um_p68ADYqFSFVxs */
0 0 RETURN all -- any any anywhere anywhere /* cali:gGIUhIU23TuU3zJZ */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:RLDPQRYOn8W58uar */ /* Drop if no profiles matched */
Chain cali-fw-cali6b0bb2f1209 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:nvUjugNzVwfEyngq */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:S_JkzIPRAi51arJt */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:ZjN2cDgBwFxgp0vz */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:cp9UK-q8hxHijfCX */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:g9FtnMc0a2cbRdKf */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:WXKkX_khx-6LH7ZH */
0 0 RETURN all -- any any anywhere anywhere /* cali:Jgrn1EMDGqJfnmmP */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:i-wL80JR7hWmFTA3 */
0 0 RETURN all -- any any anywhere anywhere /* cali:33WsaOF3I49MPxWT */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:L7l-G6QQcxaCdJv7 */ /* Drop if no profiles matched */
Chain cali-fw-cali6bfc27a619b (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:8JW9Oa9LKwVChrt1 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:LsLoBMJfSHjDin97 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:mPaFSi9R9jENdv74 */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:AVujBsKXDgMQk21j */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:fFgvFJ6MyjoSJUrF */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:RlXTkAfD4Ul8JMJH */
0 0 RETURN all -- any any anywhere anywhere /* cali:WYN-NweRTXi-6daS */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:FI7UBJblsyRudIaw */
0 0 RETURN all -- any any anywhere anywhere /* cali:t-ymwj2VgfHLNSgY */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:cZI6qMyD2ukfdT38 */ /* Drop if no profiles matched */
Chain cali-fw-cali701e7cc6c80 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:tTFsQ6gnLAkGMaNE */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:wLzclrhqL8YrInAU */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:9yp_Q0fV5nVV32ku */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:nE31_x9mHJOHajDn */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:IAfPzKemy_Gzcu96 */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:1PXdT8jz0PfIdzEG */
0 0 RETURN all -- any any anywhere anywhere /* cali:HgGlVY2RWIx7C7yn */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:vKyi1t3pGWfQ8H8- */
0 0 RETURN all -- any any anywhere anywhere /* cali:YEPg99hQshQH7CdI */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:p2dHN2iiYyxlfR4Z */ /* Drop if no profiles matched */
Chain cali-fw-cali845db002918 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:BX9E3_ILHaYu24Fg */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:BKI161BwQ3fdkORl */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:HoHwPf1T0zNrH03z */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:iRGMHcPApF2XbQtp */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:6Lx6mm-1LfZhdm2A */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:BjQ8dXrgeEr6TE8U */
0 0 RETURN all -- any any anywhere anywhere /* cali:K6AZVfIqVRfPNuHt */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:1MdiWXj5YBJzO8LF */
0 0 RETURN all -- any any anywhere anywhere /* cali:ij7tI8XfLUERQV1a */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:Rfb429xtdIMto8df */ /* Drop if no profiles matched */
Chain cali-fw-cali852f1a9204c (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:lyh4M6ElVSry601s */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:oFLmGBpCdyOFpQo6 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:B4donZ6a6apt32uA */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:m5FaYy_gYVCr7vYX */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:HYG4LULnKJl4RVSk */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:VQPrwNkM6ytuU964 */
0 0 RETURN all -- any any anywhere anywhere /* cali:niGoV4fyfELl70lE */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:eusgjg4ImUGPsPyr */
0 0 RETURN all -- any any anywhere anywhere /* cali:bxXlLDPzfjzSJUTx */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:D1wVVPPZoSQX384c */ /* Drop if no profiles matched */
Chain cali-fw-cali8e93fce84a6 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:x_EAdfb3zidS7Dwm */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:kJZdOx8kIOp_VYq7 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:yOz77Zp5B9CrYcTS */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:aEbWwC44mG7xGpVy */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:dEeE5_dA4YkeNo7R */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:pUQ6276lFAv9iHVs */
0 0 RETURN all -- any any anywhere anywhere /* cali:jDVYhxENqPfMS8OM */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:3-ol6k7PGDNgMJ8n */
0 0 RETURN all -- any any anywhere anywhere /* cali:5MH7mppQxtVsp_CN */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:y6-3qCeIuoaxzE6V */ /* Drop if no profiles matched */
Chain cali-fw-cali8f4065ff2b6 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:r52__QhtGS2IVRdb */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:dF_e1_mwSOj7u4FG */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:0g3DTKeTeGgtCogz */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:PnVb-Iyt4Oo15-9S */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:DKKsY5OKdUa_aPXb */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:ZtahBR0V9qwE8bSx */
0 0 RETURN all -- any any anywhere anywhere /* cali:qFlpSfnsHxwzTdkk */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:zJq7n10Zh-dyOeZx */
0 0 RETURN all -- any any anywhere anywhere /* cali:SPN6EfBf2EcwDFyx */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:Bak1Wjl5gzUFr6PP */ /* Drop if no profiles matched */
Chain cali-fw-cali97a39b84c91 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:RhfpbZMsR6lNW1KG */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:2b6xIFPk587O5t75 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:ffXKYLncIH0HEF3v */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:I_qHKyU-2fuzE4vT */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:Tw3YEeANQP-hlN15 */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:BKVPgJ89BEZ3npYp */
0 0 RETURN all -- any any anywhere anywhere /* cali:dX-WK_Y344kNmKpY */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:YW1tfW-fHOSTDbDp */
0 0 RETURN all -- any any anywhere anywhere /* cali:38IWd02w4NQYmu0D */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:QvG9iF_uzTYILbHO */ /* Drop if no profiles matched */
Chain cali-fw-calia358f09614c (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:r3M41Eunrrq-dHPx */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:H5Y0X95fN_wOpcDq */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:ZXsYb7i1HkKfcAEA */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:lG68MuSVPNR9Y-gY */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:DOIwartVQAm4UaOg */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:hCt9NhkdLYJ0_2rd */
0 0 RETURN all -- any any anywhere anywhere /* cali:Ou0M6weGQGnsAt4p */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:kSLvHJnrTsEpBt2A */
0 0 RETURN all -- any any anywhere anywhere /* cali:G3EF0hnKFe8FsnSQ */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:lNRZ3oBdFr7ud8ia */ /* Drop if no profiles matched */
Chain cali-fw-calia5dea553aa7 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:iQZpm-ypS6YP4nbt */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:8xWJlyzoghLyY6Qq */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:SVUCIA1M7xpVKitE */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:s_YjjHRHWGN_67_9 */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:Dy3NQER6heCRZ_7R */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:IJvL9A4FGq7pjmsT */
0 0 RETURN all -- any any anywhere anywhere /* cali:7g1UfhTJBa1qswDc */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:KCRTXiGuwou2VvHz */
0 0 RETURN all -- any any anywhere anywhere /* cali:AT0uA-t5c0UkvMEe */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:6hLS_njwTjLFzclV */ /* Drop if no profiles matched */
Chain cali-fw-calia744e09c4ff (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:0czg5hvzvHhc4F9N */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:QYw1EVn3yvIr50Tl */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:Wo8JiM4K-abX_tba */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:eAQQrzv-yWcBr-pB */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:O9clitOtUuKQUkse */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:t9uwVRS03yLI1vNz */
0 0 RETURN all -- any any anywhere anywhere /* cali:Wsre8QcNDfDpLXGo */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:7LN7MvZO8etEvlos */
0 0 RETURN all -- any any anywhere anywhere /* cali:_vy-Z43V6qCArFjO */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:0Xgd3ziZj5No-6UM */ /* Drop if no profiles matched */
Chain cali-fw-calia9fcbc8adc2 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:uh62WXW3OWR2QCkq */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:kY_z_vU_r--ipVCR */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:kehJlvSEj2SGJrMx */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:FtB9jOe3Dg3PIyTf */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:ivFwNKymThImHmB_ */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:6zgD9e3LOgk_Dbka */
0 0 RETURN all -- any any anywhere anywhere /* cali:07iNhDGyOtQttst3 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:ZDE3xira4rYH4Fx4 */
0 0 RETURN all -- any any anywhere anywhere /* cali:ZR-B0gfZrq6Kjs9B */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:A4pqEAU310KINsXX */ /* Drop if no profiles matched */
Chain cali-fw-calic8e3b733162 (2 references)
pkts bytes target prot opt in out source destination
1204 616K ACCEPT all -- any any anywhere anywhere /* cali:ATespSLDLFkQhDxV */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:seYdOTcy3wTBSxyP */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:NKpEzfSGpZUloUsq */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:AqK81lewk0N1xnDc */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:3knxeG6vwfHb73EB */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-_kJqfZpgUe7r2t4A-14 all -- any any anywhere anywhere /* cali:hsA2c70b8dPq8Gu2 */
0 0 RETURN all -- any any anywhere anywhere /* cali:kdal5vR0ElgSdW1X */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-_4yi5_iSUAwsU8zMHTk all -- any any anywhere anywhere /* cali:qMK34UC7D5bg6n05 */
0 0 RETURN all -- any any anywhere anywhere /* cali:Z8Q-AkWd7OEVYatf */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:PqYtBhx3I_QLUFV9 */ /* Drop if no profiles matched */
Chain cali-fw-calid270f41d225 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:cpwHOPGVOLkrRMOx */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:s5KUsrPohXp9g7BR */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:umiP5kflVuVwftOS */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:crcT5hiK6O_w8ebf */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:4pWbTZEgBfypsluW */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:LpsEzwUDGaiXZ003 */
0 0 RETURN all -- any any anywhere anywhere /* cali:-pARCtAOV9I1jtWI */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:SH8TfCHAxe6lco1P */
0 0 RETURN all -- any any anywhere anywhere /* cali:Bvm4s8gu5WP2Csr8 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:uTL2WxU873zed0Xd */ /* Drop if no profiles matched */
Chain cali-fw-calid448a8d46e9 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:BVukINRPcCvf7WTJ */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:QxuhxfhmsOyOf7fd */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:w7aHC0Kx74veo0c1 */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:csdvg-h_Oqc-obBy */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:XZ2CWNygU-xsncky */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:BV5m-KeGGyqgSiI3 */
0 0 RETURN all -- any any anywhere anywhere /* cali:IXTEH8WQkLcOm2q_ */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:8sBZgppH-91mhZRH */
0 0 RETURN all -- any any anywhere anywhere /* cali:eipym2RDZIOgzppE */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:7j20meH5L3ypdZc4 */ /* Drop if no profiles matched */
Chain cali-fw-calie20683acc3f (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:ZdDD4la8fEGx11V2 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:puq5fBxwuNFsbak3 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:9vD3ammp3_mRARb8 */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:YaoJbfJvAZUtVJMR */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:ZNwhBh-N8HEWltNe */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:vfa-b8tl7yGxY5Lj */
0 0 RETURN all -- any any anywhere anywhere /* cali:3IM7qAOZHsnq1kG- */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:Loa-1HXYBqMnEumE */
0 0 RETURN all -- any any anywhere anywhere /* cali:mz8RTgaaTjTPzKvs */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:4OAcEUQWTIUtcj3- */ /* Drop if no profiles matched */
Chain cali-fw-calie4256464cbf (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:qv6RDLawlewiHrb9 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:-Ml1j9_s1jHGDDOB */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:snSWn-z9adbt3PH5 */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:8yXVS0UXn0RXj0uv */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:QrdXPYrebDY_M_IG */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:2Q_tz5l6BnK1N1Qy */
0 0 RETURN all -- any any anywhere anywhere /* cali:u6WeDUxDM0PqRvJ9 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:JySlXIj6lAjAYPOI */
0 0 RETURN all -- any any anywhere anywhere /* cali:7QBTfs6qzkWYhg8J */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:qhRhFb8Dc1MrWfP6 */ /* Drop if no profiles matched */
Chain cali-pi-_FDiLImilezd09cpg5ci (2 references)
pkts bytes target prot opt in out source destination
0 0 MARK tcp -- any any anywhere anywhere /* cali:wH4Z-YLtazvrkIUi */ /* Policy calico-apiserver/knp.default.allow-apiserver ingress */ multiport dports 5443 MARK or 0x10000
Chain cali-pri-_4yi5_iSUAwsU8zMHTk (2 references)
pkts bytes target prot opt in out source destination
0 0 all -- any any anywhere anywhere /* cali:ZYnaZZFwsSjfXO4C */ /* Profile ksa.calico-apiserver.calico-apiserver ingress */
Chain cali-pri-_kJqfZpgUe7r2t4A-14 (2 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:IQx0SzlDGn6BPv0A */ /* Profile kns.calico-apiserver ingress */ MARK or 0x10000
Chain cali-pri-_nzzjLvInId1gPHmQz_ (1 references)
pkts bytes target prot opt in out source destination
0 0 all -- any any anywhere anywhere /* cali:UQoEf2WCdU0bPTCb */ /* Profile ksa.calico-system.calico-kube-controllers ingress */
Chain cali-pri-_u2Tn2rSoAPffvE7JO6 (2 references)
pkts bytes target prot opt in out source destination
0 0 all -- any any anywhere anywhere /* cali:WqgznqAQ-uYV0oBx */ /* Profile ksa.kube-system.coredns ingress */
Chain cali-pri-_ymJUz7yzI6NOKJhG2- (1 references)
pkts bytes target prot opt in out source destination
0 0 all -- any any anywhere anywhere /* cali:52zm9tLYY65R0fSD */ /* Profile ksa.calico-system.csi-node-driver ingress */
Chain cali-pri-kns.calico-system (2 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:hLANj-OVIyT53h_j */ /* Profile kns.calico-system ingress */ MARK or 0x10000
Chain cali-pri-kns.kube-system (2 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:J1TyxtHWd0qaBGK- */ /* Profile kns.kube-system ingress */ MARK or 0x10000
Chain cali-pri-kns.test1 (26 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:JqCDFisbXDx5WOXd */ /* Profile kns.test1 ingress */ MARK or 0x10000
Chain cali-pri-ksa.test1.default (26 references)
pkts bytes target prot opt in out source destination
0 0 all -- any any anywhere anywhere /* cali:0vNS2XLcHWR92ENw */ /* Profile ksa.test1.default ingress */
Chain cali-pro-_4yi5_iSUAwsU8zMHTk (2 references)
pkts bytes target prot opt in out source destination
0 0 all -- any any anywhere anywhere /* cali:Pp_dQp2FeNabRhyi */ /* Profile ksa.calico-apiserver.calico-apiserver egress */
Chain cali-pro-_kJqfZpgUe7r2t4A-14 (2 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:_cFTxC141wwWRzyZ */ /* Profile kns.calico-apiserver egress */ MARK or 0x10000
Chain cali-pro-_nzzjLvInId1gPHmQz_ (1 references)
pkts bytes target prot opt in out source destination
0 0 all -- any any anywhere anywhere /* cali:5bHxBXLMkJKgC6dk */ /* Profile ksa.calico-system.calico-kube-controllers egress */
Chain cali-pro-_u2Tn2rSoAPffvE7JO6 (2 references)
pkts bytes target prot opt in out source destination
0 0 all -- any any anywhere anywhere /* cali:0-_UPh39dt5XfhmJ */ /* Profile ksa.kube-system.coredns egress */
Chain cali-pro-_ymJUz7yzI6NOKJhG2- (1 references)
pkts bytes target prot opt in out source destination
0 0 all -- any any anywhere anywhere /* cali:yuJvAdyU1LYltt-O */ /* Profile ksa.calico-system.csi-node-driver egress */
Chain cali-pro-kns.calico-system (2 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:gWxJzCZXxl31NR0P */ /* Profile kns.calico-system egress */ MARK or 0x10000
Chain cali-pro-kns.kube-system (2 references)
pkts bytes target prot opt in out source destination
5 305 MARK all -- any any anywhere anywhere /* cali:tgOR2S8DVHZW3F1M */ /* Profile kns.kube-system egress */ MARK or 0x10000
Chain cali-pro-kns.test1 (26 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:Ta4QHZbv1h3hFe9O */ /* Profile kns.test1 egress */ MARK or 0x10000
Chain cali-pro-ksa.test1.default (26 references)
pkts bytes target prot opt in out source destination
0 0 all -- any any anywhere anywhere /* cali:QuhddfYRcL-ihmo2 */ /* Profile ksa.test1.default egress */
Chain cali-set-endpoint-mark (3 references)
pkts bytes target prot opt in out source destination
0 0 cali-sm-cali031f9ab8df4 all -- cali031f9ab8df4 any anywhere anywhere [goto] /* cali:IZFbi3ByzpQ4r9sj */
0 0 cali-set-endpoint-mark-1 all -- cali1+ any anywhere anywhere [goto] /* cali:O5I6voPcTXO9J23M */
0 0 cali-sm-cali299f39e782d all -- cali299f39e782d any anywhere anywhere [goto] /* cali:MUEGH2XtCSUadR7k */
0 0 cali-set-endpoint-mark-3 all -- cali3+ any anywhere anywhere [goto] /* cali:cZUxUeDyAbCppk_D */
0 0 cali-set-endpoint-mark-4 all -- cali4+ any anywhere anywhere [goto] /* cali:jj_-TauQ7zPuo5sH */
0 0 cali-set-endpoint-mark-5 all -- cali5+ any anywhere anywhere [goto] /* cali:I1Va56j37SOqZNt9 */
0 0 cali-set-endpoint-mark-6 all -- cali6+ any anywhere anywhere [goto] /* cali:beP7q2-DW-oa1EUx */
0 0 cali-sm-cali701e7cc6c80 all -- cali701e7cc6c80 any anywhere anywhere [goto] /* cali:acltgLfHG18SbSB- */
0 0 cali-set-endpoint-mark-8 all -- cali8+ any anywhere anywhere [goto] /* cali:HpHaaO0AbRb5phZg */
0 0 cali-sm-cali97a39b84c91 all -- cali97a39b84c91 any anywhere anywhere [goto] /* cali:eFBgOUqu2pN6gVyr */
0 0 cali-set-endpoint-mark-a all -- calia+ any anywhere anywhere [goto] /* cali:asSzwx09j85CZTkD */
0 0 cali-sm-calic8e3b733162 all -- calic8e3b733162 any anywhere anywhere [goto] /* cali:r3fJJTUBWqMdxlv9 */
0 0 cali-set-endpoint-mark-d all -- calid+ any anywhere anywhere [goto] /* cali:HcQlX-R5kXXozg9f */
0 0 cali-set-endpoint-mark-e all -- calie+ any anywhere anywhere [goto] /* cali:uis91lBR-tMmk4K8 */
0 0 cali-set-endpoint-mark-a all -- a+ any anywhere anywhere [goto] /* cali:-zXhGVsAlo9PXy9x */
0 0 cali-sm-cdummy0 all -- cdummy0 any anywhere anywhere [goto] /* cali:uf7hLKfFZWmSbXHR */
0 0 DROP all -- cali+ any anywhere anywhere /* cali:jtoWQLXV-64c2bMv */ /* Unknown endpoint */
0 0 MARK all -- any any anywhere anywhere /* cali:AWaR0te2i2_8R0wH */ /* Non-Cali endpoint mark */ MARK xset 0x100000/0xfff00000
Chain cali-set-endpoint-mark-1 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-sm-cali139b01927da all -- cali139b01927da any anywhere anywhere [goto] /* cali:PiZUMGUiCTymUONT */
0 0 cali-sm-cali1421f384600 all -- cali1421f384600 any anywhere anywhere [goto] /* cali:Du0LAx-AkfKCzW4s */
0 0 cali-sm-cali19ea483d497 all -- cali19ea483d497 any anywhere anywhere [goto] /* cali:gKMwWvUgYgzgkeTd */
Chain cali-set-endpoint-mark-3 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-sm-cali37bceb25357 all -- cali37bceb25357 any anywhere anywhere [goto] /* cali:4WxpZpbD1ah91BPd */
0 0 cali-sm-cali3862ba2b954 all -- cali3862ba2b954 any anywhere anywhere [goto] /* cali:uDlNXmJ2GPueoPJs */
0 0 cali-sm-cali389b5b6a8ec all -- cali389b5b6a8ec any anywhere anywhere [goto] /* cali:1U5tRxocFZHXiVVB */
0 0 cali-sm-cali3fcd030fa13 all -- cali3fcd030fa13 any anywhere anywhere [goto] /* cali:H_Zi7oY5tqrNgAq4 */
Chain cali-set-endpoint-mark-4 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-sm-cali4b00c59f252 all -- cali4b00c59f252 any anywhere anywhere [goto] /* cali:1wTZxwOkMPDViSFK */
0 0 cali-sm-cali4c7d39d0d0e all -- cali4c7d39d0d0e any anywhere anywhere [goto] /* cali:6Y67B0rhxX2QhJpA */
Chain cali-set-endpoint-mark-5 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-sm-cali5237e9928a0 all -- cali5237e9928a0 any anywhere anywhere [goto] /* cali:ieqWorJ8moS8LJNy */
0 0 cali-sm-cali557158cd734 all -- cali557158cd734 any anywhere anywhere [goto] /* cali:GqQqs95CKLSqOfyO */
0 0 cali-sm-cali590c7f9f7ee all -- cali590c7f9f7ee any anywhere anywhere [goto] /* cali:U0d5GzDnvbYPoOW1 */
Chain cali-set-endpoint-mark-6 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-sm-cali65ec8e40f76 all -- cali65ec8e40f76 any anywhere anywhere [goto] /* cali:ScsWi7nv-JlUqlM4 */
0 0 cali-sm-cali6b0bb2f1209 all -- cali6b0bb2f1209 any anywhere anywhere [goto] /* cali:-_QZY4HXis4ET7CP */
0 0 cali-sm-cali6bfc27a619b all -- cali6bfc27a619b any anywhere anywhere [goto] /* cali:amNYPkAwfUOWUZzy */
Chain cali-set-endpoint-mark-8 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-sm-cali845db002918 all -- cali845db002918 any anywhere anywhere [goto] /* cali:J8UyAuTh1-Td29oH */
0 0 cali-sm-cali852f1a9204c all -- cali852f1a9204c any anywhere anywhere [goto] /* cali:fWMM1UucsRKbhTef */
0 0 cali-sm-cali8e93fce84a6 all -- cali8e93fce84a6 any anywhere anywhere [goto] /* cali:iFDFxzTgqndR_YCS */
0 0 cali-sm-cali8f4065ff2b6 all -- cali8f4065ff2b6 any anywhere anywhere [goto] /* cali:G1nwnwFRsTIWFHQZ */
Chain cali-set-endpoint-mark-a (2 references)
pkts bytes target prot opt in out source destination
0 0 cali-sm-adummy0 all -- adummy0 any anywhere anywhere [goto] /* cali:B4z27dbzhbTeB7aD */
0 0 cali-sm-adummy1 all -- adummy1 any anywhere anywhere [goto] /* cali:ydTULeucDSDCSJYu */
Chain cali-set-endpoint-mark-d (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-sm-calid270f41d225 all -- calid270f41d225 any anywhere anywhere [goto] /* cali:zaBF8ODG3PYRGAic */
0 0 cali-sm-calid448a8d46e9 all -- calid448a8d46e9 any anywhere anywhere [goto] /* cali:TW9H_BiZyANlsOIN */
Chain cali-set-endpoint-mark-e (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-sm-calie20683acc3f all -- calie20683acc3f any anywhere anywhere [goto] /* cali:SZYqnOKjirsPSZKE */
0 0 cali-sm-calie4256464cbf all -- calie4256464cbf any anywhere anywhere [goto] /* cali:k3MbJGNivFCezoJq */
Chain cali-sm-adummy0 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:uv8_v4N9vFGn86PK */ MARK xset 0xdca00000/0xfff00000
Chain cali-sm-adummy1 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:UHYOf5oQXTiZpsga */ MARK xset 0xdcb00000/0xfff00000
Chain cali-sm-cali031f9ab8df4 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:b2M82b6hqhYfqFEP */ MARK xset 0x5a800000/0xfff00000
Chain cali-sm-cali139b01927da (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:7Dax0RBbkJPqCXYE */ MARK xset 0xbb100000/0xfff00000
Chain cali-sm-cali1421f384600 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:zxXKdxxrqHxLw51w */ MARK xset 0xba500000/0xfff00000
Chain cali-sm-cali19ea483d497 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:R0Lo-Q23stCUr9cj */ MARK xset 0x32b00000/0xfff00000
Chain cali-sm-cali299f39e782d (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:PID4fSxyLV4-qgTS */ MARK xset 0x73400000/0xfff00000
Chain cali-sm-cali37bceb25357 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:1N4z7734opygDAep */ MARK xset 0x2fc00000/0xfff00000
Chain cali-sm-cali3862ba2b954 (1 references)
pkts bytes target prot opt in out source destination
3 180 MARK all -- any any anywhere anywhere /* cali:FaySE6VnBbZaT2UA */ MARK xset 0x1a400000/0xfff00000
Chain cali-sm-cali389b5b6a8ec (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:nMUc8LMPe7js064V */ MARK xset 0x8ca00000/0xfff00000
Chain cali-sm-cali3fcd030fa13 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:ox6FZfYmPELf-S0J */ MARK xset 0x27800000/0xfff00000
Chain cali-sm-cali4b00c59f252 (1 references)
pkts bytes target prot opt in out source destination
1 60 MARK all -- any any anywhere anywhere /* cali:rhqVrKf8kXeamF_x */ MARK xset 0x40a00000/0xfff00000
Chain cali-sm-cali4c7d39d0d0e (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:8gBrLiefFjHvpraW */ MARK xset 0xa3f00000/0xfff00000
Chain cali-sm-cali5237e9928a0 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:sZkSp9m6X_NTMeWr */ MARK xset 0x38b00000/0xfff00000
Chain cali-sm-cali557158cd734 (1 references)
pkts bytes target prot opt in out source destination
3 180 MARK all -- any any anywhere anywhere /* cali:jilUkdvIPYhEutVo */ MARK xset 0x3ba00000/0xfff00000
Chain cali-sm-cali590c7f9f7ee (1 references)
pkts bytes target prot opt in out source destination
1 60 MARK all -- any any anywhere anywhere /* cali:zcwx_xe5WeGO0IYU */ MARK xset 0x5d400000/0xfff00000
Chain cali-sm-cali65ec8e40f76 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:Jfgm9aOVS4Mt34Dm */ MARK xset 0x71300000/0xfff00000
Chain cali-sm-cali6b0bb2f1209 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:3J8eJZ0PCTmOzJ00 */ MARK xset 0xa9c00000/0xfff00000
Chain cali-sm-cali6bfc27a619b (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:UenArqjO_AOuwSNp */ MARK xset 0xecf00000/0xfff00000
Chain cali-sm-cali701e7cc6c80 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:rvY7EumkupOJSI_9 */ MARK xset 0x83d00000/0xfff00000
Chain cali-sm-cali845db002918 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:f_U5o6giql4P818S */ MARK xset 0x1cf00000/0xfff00000
Chain cali-sm-cali852f1a9204c (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:syB0FwX9ioy6h6UB */ MARK xset 0xb8d00000/0xfff00000
Chain cali-sm-cali8e93fce84a6 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:STPjNOZz2WyvUQWi */ MARK xset 0xdf400000/0xfff00000
Chain cali-sm-cali8f4065ff2b6 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:orew8MYGn_uYOZsQ */ MARK xset 0x26900000/0xfff00000
Chain cali-sm-cali97a39b84c91 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:bAgDiMpVVLDsf-EL */ MARK xset 0x71a00000/0xfff00000
Chain cali-sm-calic8e3b733162 (1 references)
pkts bytes target prot opt in out source destination
1 60 MARK all -- any any anywhere anywhere /* cali:El_otMJwE6PAEin5 */ MARK xset 0x2700000/0xfff00000
Chain cali-sm-calid270f41d225 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:BLyZSBOEQIz0b4qA */ MARK xset 0x78300000/0xfff00000
Chain cali-sm-calid448a8d46e9 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:W2Y-Y2-vsxKDELpB */ MARK xset 0x14d00000/0xfff00000
Chain cali-sm-calie20683acc3f (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:lkOpzMpKMy6FaVM5 */ MARK xset 0x6a800000/0xfff00000
Chain cali-sm-calie4256464cbf (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:lWNrPfzRscezn_Us */ MARK xset 0xe5b00000/0xfff00000
Chain cali-sm-cdummy0 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:ZwULf2dF4dr3pqTX */ MARK xset 0xd9800000/0xfff00000
Chain cali-th-adummy0 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:RemHtnnkZ_tP2qZY */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:zgJEJky8gJTqeBQA */ ctstate INVALID
0 0 cali-failsafe-out all -- any any anywhere anywhere /* cali:f-HvcdIzxOG-Prhi */
0 0 MARK all -- any any anywhere anywhere /* cali:m3qtxNI_rHZoPMty */ MARK and 0xfffcffff
0 0 DROP all -- any any anywhere anywhere /* cali:-f0C_Xvn0NbjGwcw */ /* Drop if no profiles matched */
Chain cali-th-adummy1 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:OhTtyfaSwf8dTaed */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:Qtm2p1hC-6WwfAef */ ctstate INVALID
0 0 cali-failsafe-out all -- any any anywhere anywhere /* cali:USMrIQ3egVqQGryS */
0 0 MARK all -- any any anywhere anywhere /* cali:lZsuiSyg6uI-RXfq */ MARK and 0xfffcffff
0 0 DROP all -- any any anywhere anywhere /* cali:b3I6ClW5Xt9E_KKJ */ /* Drop if no profiles matched */
Chain cali-th-cdummy0 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:QzuEEDWY8Xiwvb9X */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:FZp1E-PdvWgtc9JW */ ctstate INVALID
0 0 cali-failsafe-out all -- any any anywhere anywhere /* cali:kh35v4JAbgMg7Xgi */
0 0 MARK all -- any any anywhere anywhere /* cali:E8saFumIo_iUGFfl */ MARK and 0xfffcffff
0 0 DROP all -- any any anywhere anywhere /* cali:W5H2gAyuYnYA1KTa */ /* Drop if no profiles matched */
Chain cali-thfw-adummy0 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:8wFrhXdE-GqEdKFr */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:1MMbujNjZybv5wGx */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:8R8NCbMvZsFLmyHo */ MARK and 0xfffcffff
0 0 MARK all -- any any anywhere anywhere /* cali:_xsgjMnUZANCY6ah */ /* Allow forwarded traffic by default */ MARK or 0x10000
0 0 RETURN all -- any any anywhere anywhere /* cali:_PhC01ND8LoeTtGm */ /* Return for accepted forward traffic */
Chain cali-thfw-adummy1 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:_2I8OrJC1BCwQ0Wz */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:kH3btOyc9CZzYkBM */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:-rHOAJsGvASgVB75 */ MARK and 0xfffcffff
0 0 MARK all -- any any anywhere anywhere /* cali:Pjp7Iw8wL3C3yfRm */ /* Allow forwarded traffic by default */ MARK or 0x10000
0 0 RETURN all -- any any anywhere anywhere /* cali:aM-L8Pi-hpVqBolw */ /* Return for accepted forward traffic */
Chain cali-thfw-cdummy0 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:1iyFU6O7KbqxqSD1 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:dhDIhxXRKVd8GHVi */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:Gr9ZlcO-xpLvPzoC */ MARK and 0xfffcffff
0 0 MARK all -- any any anywhere anywhere /* cali:QqENUUih4WSD80mv */ /* Allow forwarded traffic by default */ MARK or 0x10000
0 0 RETURN all -- any any anywhere anywhere /* cali:D1TDrzA526n8sWfw */ /* Return for accepted forward traffic */
Chain cali-to-hep-forward (2 references)
pkts bytes target prot opt in out source destination
0 0 cali-to-hep-forward-a all -- any a+ anywhere anywhere [goto] /* cali:DKrAUS8l8HpevH4J */
0 0 cali-thfw-cdummy0 all -- any cdummy0 anywhere anywhere [goto] /* cali:bmN8eojlwyC4fItt */
Chain cali-to-hep-forward-a (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-thfw-adummy0 all -- any adummy0 anywhere anywhere [goto] /* cali:PnfetEoWMPbI1Rj2 */
0 0 cali-thfw-adummy1 all -- any adummy1 anywhere anywhere [goto] /* cali:DEdw_D4Z95SdaAnb */
Chain cali-to-host-endpoint (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-to-host-endpoint-a all -- any a+ anywhere anywhere [goto] /* cali:syrsgbqRYMNcv4dN */
0 0 cali-th-cdummy0 all -- any cdummy0 anywhere anywhere [goto] /* cali:8j8l9MOJQpFaRP5T */
Chain cali-to-host-endpoint-a (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-th-adummy0 all -- any adummy0 anywhere anywhere [goto] /* cali:oBrv0idDiKmtIIpS */
0 0 cali-th-adummy1 all -- any adummy1 anywhere anywhere [goto] /* cali:XteHMO8qVnridlMi */
Chain cali-to-wl-dispatch (2 references)
pkts bytes target prot opt in out source destination
0 0 cali-tw-cali031f9ab8df4 all -- any cali031f9ab8df4 anywhere anywhere [goto] /* cali:qeS4Nk6qZEqKmGiN */
0 0 cali-to-wl-dispatch-1 all -- any cali1+ anywhere anywhere [goto] /* cali:YMMhGGZzhI6DyXuP */
0 0 cali-tw-cali299f39e782d all -- any cali299f39e782d anywhere anywhere [goto] /* cali:kHXb9nd54GuMxdrv */
0 0 cali-to-wl-dispatch-3 all -- any cali3+ anywhere anywhere [goto] /* cali:kBCq_59FxCntn-uU */
0 0 cali-to-wl-dispatch-4 all -- any cali4+ anywhere anywhere [goto] /* cali:wYzm_yC47nE7zaQv */
0 0 cali-to-wl-dispatch-5 all -- any cali5+ anywhere anywhere [goto] /* cali:s96uF9WPOgOeL7i- */
0 0 cali-to-wl-dispatch-6 all -- any cali6+ anywhere anywhere [goto] /* cali:KF7_61FkneHa0Tyv */
0 0 cali-tw-cali701e7cc6c80 all -- any cali701e7cc6c80 anywhere anywhere [goto] /* cali:QtuQu9ywyJZKN40w */
0 0 cali-to-wl-dispatch-8 all -- any cali8+ anywhere anywhere [goto] /* cali:Fo4E9MNrdIFaAUt9 */
0 0 cali-tw-cali97a39b84c91 all -- any cali97a39b84c91 anywhere anywhere [goto] /* cali:6_7-9GvOjyA_m1xk */
0 0 cali-to-wl-dispatch-a all -- any calia+ anywhere anywhere [goto] /* cali:3erwbfyxO61YDCsx */
0 0 cali-tw-calic8e3b733162 all -- any calic8e3b733162 anywhere anywhere [goto] /* cali:Y8EpeJExhjcDsUCM */
0 0 cali-to-wl-dispatch-d all -- any calid+ anywhere anywhere [goto] /* cali:BeqRsGPxChU6Q7D8 */
0 0 cali-to-wl-dispatch-e all -- any calie+ anywhere anywhere [goto] /* cali:pkb8Opg_NR2y-CPf */
0 0 DROP all -- any any anywhere anywhere /* cali:U2PIKJRLY-MtPAi3 */ /* Unknown interface */
Chain cali-to-wl-dispatch-1 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-tw-cali139b01927da all -- any cali139b01927da anywhere anywhere [goto] /* cali:ye2MGAxl-Lujsd1F */
0 0 cali-tw-cali1421f384600 all -- any cali1421f384600 anywhere anywhere [goto] /* cali:E3_KsGdh5ZpY9JfS */
0 0 cali-tw-cali19ea483d497 all -- any cali19ea483d497 anywhere anywhere [goto] /* cali:KnlB5_HkwAw4HGYT */
0 0 DROP all -- any any anywhere anywhere /* cali:-dnUZnqf-l6RVqoD */ /* Unknown interface */
Chain cali-to-wl-dispatch-3 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-tw-cali37bceb25357 all -- any cali37bceb25357 anywhere anywhere [goto] /* cali:wAgg42krJ-1qLKz3 */
0 0 cali-tw-cali3862ba2b954 all -- any cali3862ba2b954 anywhere anywhere [goto] /* cali:REg383WSNsZE7k17 */
0 0 cali-tw-cali389b5b6a8ec all -- any cali389b5b6a8ec anywhere anywhere [goto] /* cali:IoBy5N1uu_aj5pEK */
0 0 cali-tw-cali3fcd030fa13 all -- any cali3fcd030fa13 anywhere anywhere [goto] /* cali:akUmfcoCXdpP8fn4 */
0 0 DROP all -- any any anywhere anywhere /* cali:GzjKzQOFL9Seml6Q */ /* Unknown interface */
Chain cali-to-wl-dispatch-4 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-tw-cali4b00c59f252 all -- any cali4b00c59f252 anywhere anywhere [goto] /* cali:dhLAVK81m3JKR2nt */
0 0 cali-tw-cali4c7d39d0d0e all -- any cali4c7d39d0d0e anywhere anywhere [goto] /* cali:5X7KcvL8FJNEVxFF */
0 0 DROP all -- any any anywhere anywhere /* cali:8OL4WdLVbK4uQ588 */ /* Unknown interface */
Chain cali-to-wl-dispatch-5 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-tw-cali5237e9928a0 all -- any cali5237e9928a0 anywhere anywhere [goto] /* cali:E0BMM3unvKW5xQKw */
0 0 cali-tw-cali557158cd734 all -- any cali557158cd734 anywhere anywhere [goto] /* cali:RxpDlwdl5Vd66wCe */
0 0 cali-tw-cali590c7f9f7ee all -- any cali590c7f9f7ee anywhere anywhere [goto] /* cali:SrW8ncpUtoshAVBu */
0 0 DROP all -- any any anywhere anywhere /* cali:gQ86it4ExJyFCuxD */ /* Unknown interface */
Chain cali-to-wl-dispatch-6 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-tw-cali65ec8e40f76 all -- any cali65ec8e40f76 anywhere anywhere [goto] /* cali:t2t21_9MF_66jXZO */
0 0 cali-tw-cali6b0bb2f1209 all -- any cali6b0bb2f1209 anywhere anywhere [goto] /* cali:3CPZDVHq0bh347-P */
0 0 cali-tw-cali6bfc27a619b all -- any cali6bfc27a619b anywhere anywhere [goto] /* cali:tjjadgk7UxUoPEwW */
0 0 DROP all -- any any anywhere anywhere /* cali:kGDbRagz3izf1nt6 */ /* Unknown interface */
Chain cali-to-wl-dispatch-8 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-tw-cali845db002918 all -- any cali845db002918 anywhere anywhere [goto] /* cali:39oddD1-TmmraiTr */
0 0 cali-tw-cali852f1a9204c all -- any cali852f1a9204c anywhere anywhere [goto] /* cali:VpSryYjZmb9YC69j */
0 0 cali-tw-cali8e93fce84a6 all -- any cali8e93fce84a6 anywhere anywhere [goto] /* cali:QxO1E3v0aI1GMMAI */
0 0 cali-tw-cali8f4065ff2b6 all -- any cali8f4065ff2b6 anywhere anywhere [goto] /* cali:YqoktEafYBZZt5-R */
0 0 DROP all -- any any anywhere anywhere /* cali:SLve6HB4jw39J3xd */ /* Unknown interface */
Chain cali-to-wl-dispatch-a (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-tw-calia358f09614c all -- any calia358f09614c anywhere anywhere [goto] /* cali:8KubOqLN8bjnN_hG */
0 0 cali-tw-calia5dea553aa7 all -- any calia5dea553aa7 anywhere anywhere [goto] /* cali:uf3VUeVLzSCTHxdv */
0 0 cali-tw-calia744e09c4ff all -- any calia744e09c4ff anywhere anywhere [goto] /* cali:DgHGh_DUgnNnDLTh */
0 0 cali-tw-calia9fcbc8adc2 all -- any calia9fcbc8adc2 anywhere anywhere [goto] /* cali:VFsU_H-Ca13pMrYi */
0 0 DROP all -- any any anywhere anywhere /* cali:B3efD0-TGlduljeM */ /* Unknown interface */
Chain cali-to-wl-dispatch-d (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-tw-calid270f41d225 all -- any calid270f41d225 anywhere anywhere [goto] /* cali:K5iCkRn7eYMrA9qF */
0 0 cali-tw-calid448a8d46e9 all -- any calid448a8d46e9 anywhere anywhere [goto] /* cali:ELbVNCnvvc8F0ya8 */
0 0 DROP all -- any any anywhere anywhere /* cali:xucjrsDLv3jdp5Mv */ /* Unknown interface */
Chain cali-to-wl-dispatch-e (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-tw-calie20683acc3f all -- any calie20683acc3f anywhere anywhere [goto] /* cali:LVRs_U77wjF1WIGw */
0 0 cali-tw-calie4256464cbf all -- any calie4256464cbf anywhere anywhere [goto] /* cali:GxvKhp6m-8WkYK7r */
0 0 DROP all -- any any anywhere anywhere /* cali:Sd1_pppmcfYEUWWc */ /* Unknown interface */
Chain cali-tw-cali031f9ab8df4 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:tgmULiTwvbZcXnFg */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:WJl54hXe58HOLels */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:iSSJ4zljuO75bW8I */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:cM-Eq8tC1Tv3G6MZ */
0 0 RETURN all -- any any anywhere anywhere /* cali:RaMLDwIencbHI5xT */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:pWowTeB7hEwKLN6T */
0 0 RETURN all -- any any anywhere anywhere /* cali:Gz4qZnBW8Of--FFs */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:sXEC5gtWXiP0Gtc0 */ /* Drop if no profiles matched */
Chain cali-tw-cali139b01927da (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:_lCWpbbW6RLbXHhE */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:KXMwetMcNEceDIqm */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:VSvh0c6AjQJ7dEOB */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:gI8GHk7-4PPg1-ve */
0 0 RETURN all -- any any anywhere anywhere /* cali:a0t62zjZ328lktTF */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:qZqqAa3iAXIQVKea */
0 0 RETURN all -- any any anywhere anywhere /* cali:GLuY50BpWD2o_PQ9 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:y4XrVSpW6qRz7Evl */ /* Drop if no profiles matched */
Chain cali-tw-cali1421f384600 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:8Szc0mxbORVKxsbZ */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:PDCdtks9ubxYP9mC */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:pIN53734xIkEen6r */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:S7rmbPO8ejlxzzSn */
0 0 RETURN all -- any any anywhere anywhere /* cali:u7Hh6lGqrsahP-Qq */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:jmIjm5vusuVItTnW */
0 0 RETURN all -- any any anywhere anywhere /* cali:rEnerJh-ZVW5TOff */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:WfbcflSxMhD8qKlZ */ /* Drop if no profiles matched */
Chain cali-tw-cali19ea483d497 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:Qko-56F1UKfA4JrW */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:PAETEPbqAl9ZlSbW */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:F1_mXrQsfqoD6v_9 */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:sTbqlPkk65uJ8E0r */
0 0 RETURN all -- any any anywhere anywhere /* cali:Px2IQZtiMWTLtM0A */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:H3yq7bpC_hgYA6-N */
0 0 RETURN all -- any any anywhere anywhere /* cali:J3XvfIZvuAXHEgoW */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:ATilEibuG3YCCZ1c */ /* Drop if no profiles matched */
Chain cali-tw-cali299f39e782d (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:MlZBT1jcIWQg-WOP */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:MCwOdNjVUVPirdeH */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:SeOL57QCIYl1H0FA */ MARK and 0xfffcffff
0 0 cali-pri-kns.calico-system all -- any any anywhere anywhere /* cali:ZguooveXn9k3Ezew */
0 0 RETURN all -- any any anywhere anywhere /* cali:tUwtnXySqcwXeN0n */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-_ymJUz7yzI6NOKJhG2- all -- any any anywhere anywhere /* cali:C_esheQxiohzP7hB */
0 0 RETURN all -- any any anywhere anywhere /* cali:d_V878F70rjugU4F */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:Blkr1nswMgOl4ls6 */ /* Drop if no profiles matched */
Chain cali-tw-cali37bceb25357 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:uJYkD4YCEgkTcd6F */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:dlkCw8kFwvSMOx0F */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:zql80jyE8tM1kF3T */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:-Ie-mbZmlvnLcDxD */
0 0 RETURN all -- any any anywhere anywhere /* cali:bCx2MjexZ5hL_sie */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:WruyCFQBXY2Ukm-q */
0 0 RETURN all -- any any anywhere anywhere /* cali:SAzTa33dn1sZscut */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:ziAJr5Sj9OZ-Y1vR */ /* Drop if no profiles matched */
Chain cali-tw-cali3862ba2b954 (1 references)
pkts bytes target prot opt in out source destination
4 832 ACCEPT all -- any any anywhere anywhere /* cali:S9Qu3IYaL6QfBTqQ */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:PSyApruPbOXUy5pN */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:f3wdOuwhk29zvRwY */ MARK and 0xfffcffff
0 0 cali-pri-kns.kube-system all -- any any anywhere anywhere /* cali:Q0WBaqWhhEumQzJh */
0 0 RETURN all -- any any anywhere anywhere /* cali:c-IGv_J0mzHUG1dg */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-_u2Tn2rSoAPffvE7JO6 all -- any any anywhere anywhere /* cali:zrnCGVV-PVl4O7fc */
0 0 RETURN all -- any any anywhere anywhere /* cali:-Qw8iKxdbpr3tNP4 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:8JnupwPiwJeFlLmB */ /* Drop if no profiles matched */
Chain cali-tw-cali389b5b6a8ec (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:uAxnBIE76IM3dERy */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:Plfqgb8L3k48wZJf */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:1nnuS6-GDhQSB-cJ */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:TJTFObqcC1LIgy1u */
0 0 RETURN all -- any any anywhere anywhere /* cali:pvIPZRgnBSf5vUAj */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:mTbVpxJGVcZ6k2MC */
0 0 RETURN all -- any any anywhere anywhere /* cali:Su1eAdC1-XCDlIAA */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:2ADcWGM-_R3jx-JH */ /* Drop if no profiles matched */
Chain cali-tw-cali3fcd030fa13 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:vZtXTxmDslUW2yKB */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:C0sveMa3ScUm6H0K */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:3Cxyo58AAqRCMNyx */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:aYZE6HdZMh_r9z6o */
0 0 RETURN all -- any any anywhere anywhere /* cali:n6L0QgnJdEzrR4kK */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:8Fkx20e3R498Y1xU */
0 0 RETURN all -- any any anywhere anywhere /* cali:MnKXc5WLQjgNrNKA */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:5E2NWaqLYhYg3-TK */ /* Drop if no profiles matched */
Chain cali-tw-cali4b00c59f252 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:p7GOoWN6z5d47d_N */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:I4VQOLN3QI3rsMki */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:06cvzxeLIpwmaRnT */ MARK and 0xfffcffff
0 0 cali-pri-kns.calico-system all -- any any anywhere anywhere /* cali:FDB2t7DCyAeOebA9 */
0 0 RETURN all -- any any anywhere anywhere /* cali:ihmtjsGdNjZZ_fl3 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-_nzzjLvInId1gPHmQz_ all -- any any anywhere anywhere /* cali:oKXGXMq7hZ94artF */
0 0 RETURN all -- any any anywhere anywhere /* cali:ChWcwIgauNJnZKv_ */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:iNsTFn_Z0abg5X-h */ /* Drop if no profiles matched */
Chain cali-tw-cali4c7d39d0d0e (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:STAWclH4gVlcYp5v */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:e5hPHpVwQvRQM_iQ */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:lNm7e4CG5pwD4MSg */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:Cn0m1rXQZ3xz8T3X */
0 0 RETURN all -- any any anywhere anywhere /* cali:xY6djHv1XItjHpIt */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:J-izUXyrJhLRsE3A */
0 0 RETURN all -- any any anywhere anywhere /* cali:SDXzLuWZgz5e46m9 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:TYgKqiMcx3SL_FHQ */ /* Drop if no profiles matched */
Chain cali-tw-cali5237e9928a0 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:4jJERD-PMp5jZ3iv */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:32xcOU6PjhrFL7mq */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:Fcjlx8N-9loXdtpl */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:9uuqKAhebLZGWyUL */
0 0 RETURN all -- any any anywhere anywhere /* cali:WJ8ghjqW5JW3j4Qm */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:f53yQ1ien9bBycNU */
0 0 RETURN all -- any any anywhere anywhere /* cali:Fdh-Ia4tCLC5lb0D */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:qJSzQ8MFkCLbuJ_v */ /* Drop if no profiles matched */
Chain cali-tw-cali557158cd734 (1 references)
pkts bytes target prot opt in out source destination
2 416 ACCEPT all -- any any anywhere anywhere /* cali:GdfmultSGHNY9xWA */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:gv-WV-8GrNk3FKl0 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:Dmwoe0XU8FmPP7Wi */ MARK and 0xfffcffff
0 0 cali-pri-kns.kube-system all -- any any anywhere anywhere /* cali:WaTEQdjwHmRfLumJ */
0 0 RETURN all -- any any anywhere anywhere /* cali:HCRsQ4WaA20aYo5q */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-_u2Tn2rSoAPffvE7JO6 all -- any any anywhere anywhere /* cali:VbOcE_mgOYSUBmSM */
0 0 RETURN all -- any any anywhere anywhere /* cali:JdBYx3gM0tCrpzsn */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:hnrGjAoxzOfWRgy4 */ /* Drop if no profiles matched */
Chain cali-tw-cali590c7f9f7ee (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:ZYzd4NhO9xLKTePq */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:hLIKD0TX8Y4k4UE- */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:_msXNeEoajV9GfnK */ MARK and 0xfffcffff
0 0 MARK all -- any any anywhere anywhere /* cali:NC1O5uA1f4NOQPWz */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-pi-_FDiLImilezd09cpg5ci all -- any any anywhere anywhere /* cali:ko9P4yQKpCd3cWum */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:zbbOfr3rgSdWpjCt */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:wMqu4oxS7AIHHXXE */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pri-_kJqfZpgUe7r2t4A-14 all -- any any anywhere anywhere /* cali:78qJJ00-GBTij9S0 */
0 0 RETURN all -- any any anywhere anywhere /* cali:HOJDzloY0-PN0-vy */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-_4yi5_iSUAwsU8zMHTk all -- any any anywhere anywhere /* cali:c3aEsUqKJc-cOXBu */
0 0 RETURN all -- any any anywhere anywhere /* cali:fVso_3LnhDgBRjag */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:lGopEvlEr8eMqz2l */ /* Drop if no profiles matched */
Chain cali-tw-cali65ec8e40f76 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:dQV_tKdwEMaXKnY_ */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:RfyGm7O2ksXZfR36 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:Z8Rgn0lwdY7ajQUy */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:Q9nh9Gs5cbIh1wfP */
0 0 RETURN all -- any any anywhere anywhere /* cali:D-aDlevbWQ_e691t */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:NYd-dByj7WxpZygF */
0 0 RETURN all -- any any anywhere anywhere /* cali:NR_AXcO-uQSohB7e */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:ZCp1WR51Z5Y0kTfs */ /* Drop if no profiles matched */
Chain cali-tw-cali6b0bb2f1209 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:wpkPH4S41q24Wp2S */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:g7CflipWfVddHbdV */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:niir6BsU3SF25TXF */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:OkixXuUw2ml-WL9F */
0 0 RETURN all -- any any anywhere anywhere /* cali:_nZzi5kKyc9EZHyR */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:NqzuGmpITV1E7lp_ */
0 0 RETURN all -- any any anywhere anywhere /* cali:m9zvRkm5YxBcBmGp */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:RKPE7J942kHq0W4k */ /* Drop if no profiles matched */
Chain cali-tw-cali6bfc27a619b (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:DcXg-7KCl8W9flim */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:AzRvDIADvWTT-v_8 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:C9-bI2kNTdTODr6z */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:awh1IcLhs6yhUFeH */
0 0 RETURN all -- any any anywhere anywhere /* cali:oIqHqyn7J6NFq8YY */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:v8rqzKVHuvYTO0v1 */
0 0 RETURN all -- any any anywhere anywhere /* cali:JvPjKnj8HjkAo4mj */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:NAsibA5_IJWZkWnt */ /* Drop if no profiles matched */
Chain cali-tw-cali701e7cc6c80 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:QBBweUTQ3jtqy4z0 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:g19zmvKLdg9ucMZV */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:j70EzIVYK1nh072O */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:k8jWj3lJm4oByAHI */
0 0 RETURN all -- any any anywhere anywhere /* cali:A9F0Z5xaN4O9WkET */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:vqPtbFqiNN48bx0P */
0 0 RETURN all -- any any anywhere anywhere /* cali:2WonGd6cXzIDF3GW */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:ADbNbH-Gb8VDth5P */ /* Drop if no profiles matched */
Chain cali-tw-cali845db002918 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:KFbppEZgXjxrO0ZA */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:5ev_WrQxDaVeV83G */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:24Mnijdf7KLNFtCq */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:VmMcguZiEl-8-D2O */
0 0 RETURN all -- any any anywhere anywhere /* cali:VlDH7QHHC0b5jN0P */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:78SPUTd2ONgq4zEW */
0 0 RETURN all -- any any anywhere anywhere /* cali:6ZHteWub7FsSMXOe */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:iZcAlaAyvs3T-Yah */ /* Drop if no profiles matched */
Chain cali-tw-cali852f1a9204c (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:dfXFm5HBm8MuLMS- */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:klvmtsOozppWPsCf */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:144JjvbyRsSkCV5J */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:s87oC1AbgERo3k9Y */
0 0 RETURN all -- any any anywhere anywhere /* cali:fl8E5y1hfSW9WMaf */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:39GD0wn0n4M4x2oN */
0 0 RETURN all -- any any anywhere anywhere /* cali:aM30tXrYoWkccAm_ */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:8F8N-6xHeAImwk1h */ /* Drop if no profiles matched */
Chain cali-tw-cali8e93fce84a6 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:Zo4h6YH7fqWsJ-y1 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:JUgQUqPMXUaWUjm9 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:W18gTfdvR40F92HA */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:qQ5i8HoxLqoe7Pkh */
0 0 RETURN all -- any any anywhere anywhere /* cali:v0kP8TaMes_ExusX */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:v0Jf9VLeBJ1IcuDc */
0 0 RETURN all -- any any anywhere anywhere /* cali:S2GIEdRGhB-4rP3z */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:Z43Z5W31BxRNaxCT */ /* Drop if no profiles matched */
Chain cali-tw-cali8f4065ff2b6 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:7lrAZNji8uta5Nzo */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:mpiuEKC-CHo5mVkX */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:fcH4SH4Wn9jebGn6 */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:5uQZEy62zPv0TMxO */
0 0 RETURN all -- any any anywhere anywhere /* cali:M_KmzguDtrvfq7Qd */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:MmMk8ynL41vEYroD */
0 0 RETURN all -- any any anywhere anywhere /* cali:hdqY3yJIB_3RQCX1 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:ANEzm0ht8LXNJopw */ /* Drop if no profiles matched */
Chain cali-tw-cali97a39b84c91 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:jAGfqHj6O9Se-9Ru */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:0RaYp3oI0mymAAgJ */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:YxW8vH3ehbjPWwh8 */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:VGb5aM0ggo4wbLuj */
0 0 RETURN all -- any any anywhere anywhere /* cali:97gP3bS162bSHD5o */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:rND8ZNNolkDmkhcQ */
0 0 RETURN all -- any any anywhere anywhere /* cali:ACc4vxsqVtRYPLa1 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:6Thb2S9agb40zaCo */ /* Drop if no profiles matched */
Chain cali-tw-calia358f09614c (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:7SihR69MDKa07zOg */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:0EzqJG_tMd0wGs80 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:5esqxxdqOlRMJfgO */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:Jvi0rVfRRE7KJqQi */
0 0 RETURN all -- any any anywhere anywhere /* cali:xo0SCVbWry7svSAs */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:l_pLOft_OuYNJkZu */
0 0 RETURN all -- any any anywhere anywhere /* cali:BvLvf_1hg8DO7t_T */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:WUq5w5IVqnbBkUIl */ /* Drop if no profiles matched */
Chain cali-tw-calia5dea553aa7 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:gH06hNvxNOxp4mtT */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:MrkE8cIB_W6QLsYO */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:DzEqpF2kZuAeefSq */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:ppTnaRp1lg76P8a2 */
0 0 RETURN all -- any any anywhere anywhere /* cali:f3up0PGyz7GJydxd */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:ltl6FVPdj__Np57N */
0 0 RETURN all -- any any anywhere anywhere /* cali:424Tbn5zQTB0nvuN */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:mcQX2IlLAf5seRCo */ /* Drop if no profiles matched */
Chain cali-tw-calia744e09c4ff (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:6Tmer3ysQJy-VOkR */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:7b5WORMD1x2Rs-pV */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:243-e6Km_8-1iI20 */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:pDrp2cs6J-2Wj_M4 */
0 0 RETURN all -- any any anywhere anywhere /* cali:BrQsfBb23O2-nOeZ */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:9YRtCai5rC1z1V1V */
0 0 RETURN all -- any any anywhere anywhere /* cali:VQA6fOn1eaxLqEbr */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:9EkrafBlOrsDUHkV */ /* Drop if no profiles matched */
Chain cali-tw-calia9fcbc8adc2 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:ORp6EvJNgHJrr8Zp */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:q1JtdRQKoQQ6XY7b */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:duOz0VlRi3nXAGrn */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:t6l8rsgDQSFe7t8W */
0 0 RETURN all -- any any anywhere anywhere /* cali:Egbhu-f-rjaFlDiL */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:SwoKqQDccgtrM1Rb */
0 0 RETURN all -- any any anywhere anywhere /* cali:r_rDXNXOxbnJyi1r */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:1Pt2xLSlVMdSID6P */ /* Drop if no profiles matched */
Chain cali-tw-calic8e3b733162 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:O7On6neBXBwtSg11 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:wxCgP1EyodTRoctp */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:0RkFflYtv-Xu1FfU */ MARK and 0xfffcffff
0 0 MARK all -- any any anywhere anywhere /* cali:dTCkyXwWpOVk5n4O */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-pi-_FDiLImilezd09cpg5ci all -- any any anywhere anywhere /* cali:SZTZsTsLWHcD_EXw */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:pPF4Ch5I1Iiut0tB */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:5dnCWHNYoh1FmWFd */ /* Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pri-_kJqfZpgUe7r2t4A-14 all -- any any anywhere anywhere /* cali:A8CGiMntiSNPkdvO */
0 0 RETURN all -- any any anywhere anywhere /* cali:iXdKpvgSC9wlJSSN */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-_4yi5_iSUAwsU8zMHTk all -- any any anywhere anywhere /* cali:cRN6CYlBiWbMXul2 */
0 0 RETURN all -- any any anywhere anywhere /* cali:HHHv0UXys13ILXBj */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:8Bj5Fsp_kmThZ5Ot */ /* Drop if no profiles matched */
Chain cali-tw-calid270f41d225 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:36bKQRDDeawFFIiO */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:xR4LiYWEenVMFtAo */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:ZsSbZ24OIsA_HBVp */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:X-VFcTVLSeEjo7QS */
0 0 RETURN all -- any any anywhere anywhere /* cali:1fji3kqN9tEOCv7M */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:-fEySl-tNzlFmpJF */
0 0 RETURN all -- any any anywhere anywhere /* cali:1Z1Y4BaadK00hodD */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:6x6KSHU5UUyVirey */ /* Drop if no profiles matched */
Chain cali-tw-calid448a8d46e9 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:w6DXWOE7Hcq_y671 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:tQsfRNJKUg0Q_oQw */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:X-PigHYIqRS4z_yO */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:Ze641pXRDvcYSZ_3 */
0 0 RETURN all -- any any anywhere anywhere /* cali:w5M9ih7yAd6QxyNs */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:m5sXGZRxKH7dsDGh */
0 0 RETURN all -- any any anywhere anywhere /* cali:3TxWCftHhRRfamd4 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:pwvGMZR5E2sK9NyT */ /* Drop if no profiles matched */
Chain cali-tw-calie20683acc3f (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:8u362Oi5NdthPoqb */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:nLW7KxoP91oFI6yR */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:81kMi9PRU5L1qzQe */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:CcbwNrFR6wJbn4zn */
0 0 RETURN all -- any any anywhere anywhere /* cali:oJjQn_CV2wJLG_GA */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:bYP5UmssPKtOxyVz */
0 0 RETURN all -- any any anywhere anywhere /* cali:otVrvPDX7JJZ0N8r */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:8xWRBqE04GD-TG1Q */ /* Drop if no profiles matched */
Chain cali-tw-calie4256464cbf (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:qNIGOYgaDX_B7uwP */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:AeW25JAikUHZ9kcS */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:8Ks8kVdMRa1Zb4Ym */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:HeXP-ZVxs9Rm4BZL */
0 0 RETURN all -- any any anywhere anywhere /* cali:QvqFkydY9pfP09DE */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:xoFrmpjVD6lr5y3t */
0 0 RETURN all -- any any anywhere anywhere /* cali:1m6VPIHTQY9SdkKW */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 DROP all -- any any anywhere anywhere /* cali:oD6LMOLCXWpispeQ */ /* Drop if no profiles matched */
Chain cali-wl-to-host (1 references)
pkts bytes target prot opt in out source destination
58M 10G cali-from-wl-dispatch all -- any any anywhere anywhere /* cali:Ee9Sbo10IpVujdIY */
32008 1920K ACCEPT all -- any any anywhere anywhere /* cali:nSZbcOoG1xPONxb8 */ /* Configured DefaultEndpointToHostAction */
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment