pkts bytes target prot opt in out source destination 0 0 cali-fw-cali2cb5762c135 all -- cali2cb5762c135 * 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:XplCDECc3nXZm9FK */ 81937 5824K cali-from-wl-dispatch-3 all -- cali3+ * 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:dcYmiRG_QnYZGl2N */ 306K 34M cali-from-wl-dispatch-4 all -- cali4+ * 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:YFRFGGbC9jlxwF8O */ 226K 26M cali-from-wl-dispatch-5 all -- cali5+ * 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:RhR9vxV8iEL65r_j */ 1 60 cali-fw-cali69ac9a115a6 all -- cali69ac9a115a6 * 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:HAxKJ_0mGgStjpnY */ 206K 22M cali-from-wl-dispatch-9 all -- cali9+ * 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:8shFwIGMm9dVfGmO */ 0 0 cali-fw-calicbc78b24755 all -- calicbc78b24755 * 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:5FCiA4sj_5N9wL9L */ 202K 15M cali-from-wl-dispatch-d all -- calid+ * 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:k-S4UcvlxcxyZx_v */ 57176 11M cali-fw-calie202c6765a8 all -- calie202c6765a8 * 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:cGkRXK2SOgLLjxjc */ 203K 22M cali-from-wl-dispatch-f all -- calif+ * 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:fxRt_gz1s9FgpcRv */ 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:z3TT13MjiVy5R0nN */ /* Unknown interface */ Chain cali-from-wl-dispatch-3 (1 references) pkts bytes target prot opt in out source destination 0 0 cali-fw-cali33059c2963f all -- cali33059c2963f * 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:zuoFJSBANmyAVi6x */ 82131 5837K cali-fw-cali36ad473795a all -- cali36ad473795a * 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:uJEG1q3Ifr0G6--6 */ 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:TKgxN_jSPNX0wtSI */ /* Unknown interface */ Chain cali-from-wl-dispatch-4 (1 references) pkts bytes target prot opt in out source destination 306K 34M cali-fw-cali40ae69e5651 all -- cali40ae69e5651 * 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:NIB1OgBmvvRMJ5BC */ 0 0 cali-fw-cali40d37a929c7 all -- cali40d37a929c7 * 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:zK3QI3L3wdpATWQ9 */ 0 0 cali-fw-cali4231a5598e3 all -- cali4231a5598e3 * 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:bAWm6Cn2nm1GyMyC */ 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:adTdxZJgKbnOjEeC */ /* Unknown interface */ Chain cali-from-wl-dispatch-5 (1 references) pkts bytes target prot opt in out source destination 0 0 cali-fw-cali5b1c1e43ef2 all -- cali5b1c1e43ef2 * 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:W9CQQ6HTVUp4t0h3 */ 226K 26M cali-fw-cali5d631924808 all -- cali5d631924808 * 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:jCPGuOcvXguUrw1e */ 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:r5CYGTDXgXSz2L2l */ /* Unknown interface */ Chain cali-from-wl-dispatch-9 (1 references) pkts bytes target prot opt in out source destination 0 0 cali-fw-cali98f141cccf5 all -- cali98f141cccf5 * 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:qEx_nXo1zg_oeurS */ 203K 22M cali-fw-cali9ac249eb865 all -- cali9ac249eb865 * 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:dWLtoD-ZNmF4-B76 */ 3392 233K cali-fw-cali9fa309c6729 all -- cali9fa309c6729 * 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:j-NF_jUYF4-zhvWk */ 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:q2ioqkh9FKXMMlV0 */ /* Unknown interface */ Chain cali-from-wl-dispatch-d (1 references) pkts bytes target prot opt in out source destination 3400 234K cali-fw-calid4c180d745b all -- calid4c180d745b * 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:OVXAhT-AXC4tzRix */ 199K 15M cali-fw-calidaa45fc7df9 all -- calidaa45fc7df9 * 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:8VqDfjyjvC8ekq5T */ 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:oTZ68zvzWF8kBUV1 */ /* Unknown interface */ Chain cali-from-wl-dispatch-f (1 references) pkts bytes target prot opt in out source destination 203K 22M cali-fw-calif462c2579f7 all -- calif462c2579f7 * 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:3Ayvk_whruXt9BmV */ 0 0 cali-fw-calife98c0f065f all -- calife98c0f065f * 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:cQR-Tl2lUT2905Z- */ 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:WaTXDQjmsTtJqbp3 */ /* Unknown interface */ Chain cali-fw-cali2cb5762c135 (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:7ftwT_R6tkZFK6xC */ ctstate RELATED,ESTABLISHED 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:RhoiJu0fW1RE3aN6 */ ctstate INVALID 0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:YBosB2ULqHjgjrd_ */ MARK and 0xfffeffff 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:f9ttFtdFFA7SLl5m */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 0 0 DROP 4 -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:1QONcgVyZBZaoydz */ /* Drop IPinIP encapped packets originating in workloads */ 0 0 cali-pro-kns.devon-ai all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:SGIJVeK79ylhOvnz */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:ANmr_f5nEv8NexBv */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 cali-pro-_xvrVNcRSs7npepUK5H all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:Y5WDbuolfxJPdcIH */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:B90v5tB5HuzgDJDy */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:39pq5cam5MZBQupo */ /* Drop if no profiles matched */ Chain cali-fw-cali33059c2963f (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:bPv_xsZZCSOhZrDY */ ctstate RELATED,ESTABLISHED 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:ub3H2LFJHGNJFrCY */ ctstate INVALID 0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:fPxpNgLoLO9b0uOz */ MARK and 0xfffeffff 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:ziseGqN8QLn3D_FE */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 0 0 DROP 4 -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:2CRt8_qQZDjsZoQy */ /* Drop IPinIP encapped packets originating in workloads */ 0 0 cali-pro-kns.default all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:m5LdAAk2W-rGd2eN */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:eam6MQ0wawszldE1 */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 cali-pro-ksa.default.default all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:Rn4CZLpWnE41Nq_I */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:xXtf-C-iHDADxfdk */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:lLjw2M60otodTyv9 */ /* Drop if no profiles matched */ Chain cali-fw-cali36ad473795a (1 references) pkts bytes target prot opt in out source destination 82214 5847K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:B6NHEBuOc5X6j1_L */ ctstate RELATED,ESTABLISHED 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:d8qxiYrDNSXPnCOj */ ctstate INVALID 1 60 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:mNPoeHso6Z0XL-l_ */ MARK and 0xfffeffff 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:cWrlypVm26VxXIY1 */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 0 0 DROP 4 -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:kBUq9Q5lszgED0-k */ /* Drop IPinIP encapped packets originating in workloads */ 1 60 cali-pro-kns.kube-system all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:DDtKZdnvzBbxrNzu */ 1 60 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:V5TzQEd_tuZh_Uz9 */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 cali-pro-_PTRGc0U-L5Kz7V6ERW all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:-AN5GDt8_FJnwHTr */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:QugYqt5rQB4N6hB8 */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:0GQJnbhLvMk-917D */ /* Drop if no profiles matched */ Chain cali-fw-cali40ae69e5651 (1 references) pkts bytes target prot opt in out source destination 190K 24M ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:B2zgC2vgBucc8i4- */ ctstate RELATED,ESTABLISHED 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:JH4iTjPAHDmq46s4 */ ctstate INVALID 116K 11M MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:wEhKXaPueSmE0RkI */ MARK and 0xfffeffff 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:twm8Q-46w50O1QMm */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 0 0 DROP 4 -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:4IUIW50MCjcVjz2q */ /* Drop IPinIP encapped packets originating in workloads */ 116K 11M cali-pro-kns.cert-manager all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:K4wPE7lPbRh-Giw4 */ 116K 11M RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:ryO_o71dAlq9U3EA */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 cali-pro-_PgPzuEog6NthE7r2PG all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:2xpZtvZDaQ5Tdk5X */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:MA7Cr5cjAaDBvNSh */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:xYEXHWCnw5ZpFlJd */ /* Drop if no profiles matched */ Chain cali-fw-cali40d37a929c7 (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:doGdUcreKONJpmIl */ ctstate RELATED,ESTABLISHED 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:24rBgPVywk24h4aD */ ctstate INVALID 0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:brnM5pzU4j8B4qbQ */ MARK and 0xfffeffff 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:yuAGINX-7-TobTmz */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 0 0 DROP 4 -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:S4xKHpb7bmrr6hrQ */ /* Drop IPinIP encapped packets originating in workloads */ 0 0 cali-pro-kns.devon-ai all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:jp64b_mXPZ1nHs7K */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:o33uisHLCHamtQdB */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 cali-pro-_xvrVNcRSs7npepUK5H all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:XLxSL7l8LHI_mVNd */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:5EbDb7l2xcwYEljP */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:cKLVPzV4B_MXO2IV */ /* Drop if no profiles matched */ Chain cali-fw-cali4231a5598e3 (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:sekfXr0SfZsFjhkI */ ctstate RELATED,ESTABLISHED 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:ZpROnxG8WUAw68lH */ ctstate INVALID 0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:uu74xlqGKRnnhvyv */ MARK and 0xfffeffff 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:-MYjEvInXzLHlpbH */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 0 0 DROP 4 -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:Lg46fot8Yd-Bd970 */ /* Drop IPinIP encapped packets originating in workloads */ 0 0 cali-pro-kns.default all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:VBwMUVSuTzPj0SbT */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:_OrnrZ1L1qnaTDMB */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 cali-pro-ksa.default.default all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:KKkxNOgAclK0Wtx2 */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:-zpYdCHGhujVUD9e */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:feFtLC4koOe2L2bL */ /* Drop if no profiles matched */ Chain cali-fw-cali5b1c1e43ef2 (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:zihLk8EweBvKIppj */ ctstate RELATED,ESTABLISHED 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:-7ZVhC7PT-EOAN_7 */ ctstate INVALID 0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:IuMfdMpTSaEx01cK */ MARK and 0xfffeffff 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:meguPXcKzWr7wS23 */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 0 0 DROP 4 -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:amLywh1z6woESHPA */ /* Drop IPinIP encapped packets originating in workloads */ 0 0 cali-pro-kns.devon-ai all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:DML1AKBiqx0sR80o */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:uNQxUOVf4RPZbStH */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 cali-pro-_xvrVNcRSs7npepUK5H all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:H5CFIf4GPrcIXNO4 */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:Rl4Skz3Wt3SM56uZ */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:mhv-aKaarDHNPRPm */ /* Drop if no profiles matched */ Chain cali-fw-cali5d631924808 (1 references) pkts bytes target prot opt in out source destination 226K 26M ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:xZg0iL_HhImatj1g */ ctstate RELATED,ESTABLISHED 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:GKF1kDzreceCyTIC */ ctstate INVALID 1 60 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:DaugSmRIZ4zeyELc */ MARK and 0xfffeffff 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:3ccgmNrBA56lG02A */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 0 0 DROP 4 -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:PdTcgxhkScnsndrt */ /* Drop IPinIP encapped packets originating in workloads */ 1 60 cali-pro-kns.ingress-nginx all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:VOrMJaNBS-EMqLaK */ 1 60 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:cMAnpAIGZYJfAmsX */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 cali-pro-_WuAV8wMhwxuQO3vuFE all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:BP5EvmgpcCMxS65d */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:q6uODWZzMByCaQEC */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:9p2WDmOHjTX5BkOw */ /* Drop if no profiles matched */ Chain cali-fw-cali69ac9a115a6 (1 references) pkts bytes target prot opt in out source destination 1 60 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:WPoY706VRxcxQ3M1 */ ctstate RELATED,ESTABLISHED 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:rNpIEg4vJNEoICa_ */ ctstate INVALID 0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:lPVQxcqeQRtM-djM */ MARK and 0xfffeffff 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:QB_a8O_itWNLyo8B */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 0 0 DROP 4 -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:DAcqu5y8AkyRNMWU */ /* Drop IPinIP encapped packets originating in workloads */ 0 0 cali-pro-kns.default all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:C66lV_5Zji3RP60c */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:kKLT0AiiWz0vTBnZ */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 cali-pro-ksa.default.default all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:QHojVbvU1Av_DwG_ */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:KM-ggEeq0Ev8ympF */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:kyOyX2TXIn1CDDdI */ /* Drop if no profiles matched */ Chain cali-fw-cali98f141cccf5 (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:1UJNfOrS8YJlEtav */ ctstate RELATED,ESTABLISHED 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:UKRFWk7qR5zcajuk */ ctstate INVALID 0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:sXRrt6t1GPocjYBC */ MARK and 0xfffeffff 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:lAsHTPrOmgBYhHOc */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 0 0 DROP 4 -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:wDOEpwhqrYFPOcme */ /* Drop IPinIP encapped packets originating in workloads */ 0 0 cali-pro-kns.devon-ai all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:wEvdzyP1eojjvyGo */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:wWd9fstF_FVrqfoI */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 cali-pro-_xvrVNcRSs7npepUK5H all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:CIuMY3tGYd5T2hec */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:ZN0YwN7hQQSsE7xB */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:eskPxf0TvM5YWhP0 */ /* Drop if no profiles matched */ Chain cali-fw-cali9ac249eb865 (1 references) pkts bytes target prot opt in out source destination 196K 21M ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:cB4T3Y20ZhXZ-rcb */ ctstate RELATED,ESTABLISHED 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:CfODe2rNqyFAhXHl */ ctstate INVALID 7170 547K MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:fidf6Sq9I_BdgA_b */ MARK and 0xfffeffff 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:k67lME16i19PMd0a */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 0 0 DROP 4 -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:57Q93Z3EQGgtxbt_ */ /* Drop IPinIP encapped packets originating in workloads */ 7170 547K cali-pro-kns.kube-system all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:C6ASC4g6n4T7Xr0I */ 7170 547K RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:ueeRSVy-v0OOyix4 */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 cali-pro-_u2Tn2rSoAPffvE7JO6 all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:I-oDczEsXEg4gnuD */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:UTljf1o-7DpC3Lr3 */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:a-HMS-PpCJzirvB3 */ /* Drop if no profiles matched */ Chain cali-fw-cali9fa309c6729 (1 references) pkts bytes target prot opt in out source destination 6 438 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:eg-eCzJM9wuclajI */ ctstate RELATED,ESTABLISHED 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:xbcSua4vOxgs-8Sd */ ctstate INVALID 3394 233K MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:cwft1sDGjpgJ7J_f */ MARK and 0xfffeffff 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:pw0mV9zijOiBRQ3_ */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 0 0 DROP 4 -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:oqEtx7wI5_twPoOE */ /* Drop IPinIP encapped packets originating in workloads */ 3394 233K cali-pro-kns.devon-ai all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:uzySLrt0AuPwZ2CE */ 3394 233K RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:_oXqOXzfnHGHQHjP */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 cali-pro-_xvrVNcRSs7npepUK5H all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:32QhlTDI9qG4J-tv */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:f7IjhLePe_tztsBz */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:-hUIRGdQaSsybgt_ */ /* Drop if no profiles matched */ Chain cali-fw-calicbc78b24755 (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:x3xmjBE8f1xIPX6p */ ctstate RELATED,ESTABLISHED 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:WQ7maAy4CpFcDd4Z */ ctstate INVALID 0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:5HNEtcwuYlZgwgR- */ MARK and 0xfffeffff 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:OVoSOBzvcM9hSVLg */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 0 0 DROP 4 -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:UB9fbCpvG9YXa722 */ /* Drop IPinIP encapped packets originating in workloads */ 0 0 cali-pro-kns.default all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:HqzQuJiCAlDdpiZ_ */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:yjvQ3LWkaC1NbuCR */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 cali-pro-ksa.default.default all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:FTs66WZ2EqARJjm6 */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:GASX6lLZpFHQeBiS */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:XosXiClsL2Ik8UCd */ /* Drop if no profiles matched */ Chain cali-fw-calid4c180d745b (1 references) pkts bytes target prot opt in out source destination 1 72 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:egKW_tyT6dXJpSN_ */ ctstate RELATED,ESTABLISHED 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:9oCApyJgA0dfEqdQ */ ctstate INVALID 3399 234K MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:tP6FolH0VUTdhiOR */ MARK and 0xfffeffff 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:LYk966sPSQhDYgw8 */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 0 0 DROP 4 -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:GJDsLZorRphDrero */ /* Drop IPinIP encapped packets originating in workloads */ 3399 234K cali-pro-kns.devon-ai all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:wlAEjrSwVBV4UhrR */ 3399 234K RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:ZI-OXP6MmW0J-3NT */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 cali-pro-_xvrVNcRSs7npepUK5H all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:ujfeknjepODbQcG4 */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:G3uzjxQCrpJVtLMV */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:3s2l6xb0TqWDK0oD */ /* Drop if no profiles matched */ Chain cali-fw-calidaa45fc7df9 (1 references) pkts bytes target prot opt in out source destination 199K 15M ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:1dTgpFfh4emfAyhn */ ctstate RELATED,ESTABLISHED 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:3lp0Ls2L4Jhz3cNz */ ctstate INVALID 1 60 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:93dbPqf9FsvxbR1T */ MARK and 0xfffeffff 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:KcRmjgdPUGLrE-vN */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 0 0 DROP 4 -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:LJfn2GA7THssfyt4 */ /* Drop IPinIP encapped packets originating in workloads */ 1 60 cali-pro-kns.cert-manager all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:0sJWk_0R12Apxf1F */ 1 60 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:EwXvzvkWZooizTiD */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 cali-pro-_PfNIBb694QWVrNir-D all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:j8NHVbmKKhhyeEhS */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:SkfhPcza4oZhP6bA */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:0oG6DujiBc1Q-pb5 */ /* Drop if no profiles matched */ Chain cali-fw-calie202c6765a8 (1 references) pkts bytes target prot opt in out source destination 57282 11M ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:1udQdFtxhreztXnu */ ctstate RELATED,ESTABLISHED 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:DavWZLGZbfyLaaiF */ ctstate INVALID 1 60 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:d9TfO52oFs5RPSki */ MARK and 0xfffeffff 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:8M9PDLOv1l_G9pnZ */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 0 0 DROP 4 -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:X4OmQ5DGb2r72v3A */ /* Drop IPinIP encapped packets originating in workloads */ 1 60 cali-pro-kns.cert-manager all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:v_4nQwOsTUt3_eQ4 */ 1 60 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:UVEf1bDnKcR2eZkr */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 cali-pro-_zkO6GKYeniG6-oa73y all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:IVMeYt2n8-nr55KW */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:5GQOfohwSJBfYvrL */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:pLkqCp-mSwRZEahv */ /* Drop if no profiles matched */ Chain cali-fw-calif462c2579f7 (1 references) pkts bytes target prot opt in out source destination 196K 21M ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:kbN7TwHR9rilLPkr */ ctstate RELATED,ESTABLISHED 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:MTb0K_pRt4vlL7Yr */ ctstate INVALID 7254 553K MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:GkvvFVn-wqyZGcEN */ MARK and 0xfffeffff 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:1PqS6Yy9I8STXV9Y */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 0 0 DROP 4 -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:o5f-AroCQE9WCxv8 */ /* Drop IPinIP encapped packets originating in workloads */ 7254 553K cali-pro-kns.kube-system all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:gRaxLbETk5T0UQ8M */ 7254 553K RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:pLpIWYa0e7xxA3v6 */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 cali-pro-_u2Tn2rSoAPffvE7JO6 all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:gc6klhuPZ8SEuHUg */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:nG-7ZKFbpUqwXWL7 */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:1ROdh3gpxl0cHzIK */ /* Drop if no profiles matched */ Chain cali-fw-calife98c0f065f (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:VjdYTQAPEB3qOlD2 */ ctstate RELATED,ESTABLISHED 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:tN-N4KBrA739SDqK */ ctstate INVALID 0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:lXK1sq4QT_TSp0YP */ MARK and 0xfffeffff 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:D9D3B-p2GqHqv9Yb */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 0 0 DROP 4 -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:1DPOR8htjqY4Se3x */ /* Drop IPinIP encapped packets originating in workloads */ 0 0 cali-pro-kns.devon-ai all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:egftLpFzdLkEy_qd */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:Hv1KVOCah57tS32H */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 cali-pro-_xvrVNcRSs7npepUK5H all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:uf9lH7gUTMCRlZzR */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:agh7YI7GE5FZq-dq */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:q8kyLYmMCwDvS8Sr */ /* Drop if no profiles matched */ Chain cali-pri-_PTRGc0U-L5Kz7V6ERW (1 references) pkts bytes target prot opt in out source destination 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:g4z4yZxg6IEqYbOs */ /* Profile ksa.kube-system.calico-kube-controllers ingress */ Chain cali-pri-_PfNIBb694QWVrNir-D (1 references) pkts bytes target prot opt in out source destination 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:ORIxCWSU2rY3Pcdp */ /* Profile ksa.cert-manager.cert-manager-webhook ingress */ Chain cali-pri-_PgPzuEog6NthE7r2PG (1 references) pkts bytes target prot opt in out source destination 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:v8sVZpYGvImr5Bhw */ /* Profile ksa.cert-manager.cert-manager ingress */ Chain cali-pri-_WuAV8wMhwxuQO3vuFE (1 references) pkts bytes target prot opt in out source destination 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:v_wvZWiaEOjMs3ly */ /* Profile ksa.ingress-nginx.ingress-nginx ingress */ Chain cali-pri-_u2Tn2rSoAPffvE7JO6 (2 references) pkts bytes target prot opt in out source destination 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:WqgznqAQ-uYV0oBx */ /* Profile ksa.kube-system.coredns ingress */ Chain cali-pri-_xvrVNcRSs7npepUK5H (7 references) pkts bytes target prot opt in out source destination 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:8VDJ3hhSf2UVRkQO */ /* Profile ksa.devon-ai.default ingress */ Chain cali-pri-_zkO6GKYeniG6-oa73y (1 references) pkts bytes target prot opt in out source destination 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:v6Y3CdMQh7rEkFXX */ /* Profile ksa.cert-manager.cert-manager-cainjector ingress */ Chain cali-pri-kns.cert-manager (3 references) pkts bytes target prot opt in out source destination 0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:1Y6XkKTENQvkzLTP */ /* Profile kns.cert-manager ingress */ MARK or 0x10000 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:2LpoXxVyUfGENGbS */ mark match 0x10000/0x10000 Chain cali-pri-kns.default (4 references) pkts bytes target prot opt in out source destination 1 60 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:WMSw8BmYOknRHfsz */ /* Profile kns.default ingress */ MARK or 0x10000 1 60 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:z015TBt2tO4F28NC */ mark match 0x10000/0x10000 Chain cali-pri-kns.devon-ai (7 references) pkts bytes target prot opt in out source destination 0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:_7RuPA_ayosLeDpd */ /* Profile kns.devon-ai ingress */ MARK or 0x10000 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:WLgn-qzHKkHVPF49 */ mark match 0x10000/0x10000 Chain cali-pri-kns.ingress-nginx (1 references) pkts bytes target prot opt in out source destination 0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:gbVRyyjiyhHkpyKH */ /* Profile kns.ingress-nginx ingress */ MARK or 0x10000 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:h9qOXJdthg_rMYN5 */ mark match 0x10000/0x10000 Chain cali-pri-kns.kube-system (3 references) pkts bytes target prot opt in out source destination 110K 10M MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:J1TyxtHWd0qaBGK- */ /* Profile kns.kube-system ingress */ MARK or 0x10000 110K 10M RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:QIB6k7eEKdIg73Jp */ mark match 0x10000/0x10000 Chain cali-pri-ksa.default.default (4 references) pkts bytes target prot opt in out source destination 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:PrckJA84jX_kGp99 */ /* Profile ksa.default.default ingress */ Chain cali-pro-_PTRGc0U-L5Kz7V6ERW (1 references) pkts bytes target prot opt in out source destination 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:DR9-t6YJRvFY-IdZ */ /* Profile ksa.kube-system.calico-kube-controllers egress */ Chain cali-pro-_PfNIBb694QWVrNir-D (1 references) pkts bytes target prot opt in out source destination 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:xNAAOeSXwcTU2IRm */ /* Profile ksa.cert-manager.cert-manager-webhook egress */ Chain cali-pro-_PgPzuEog6NthE7r2PG (1 references) pkts bytes target prot opt in out source destination 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:Jj36ZbSgddW3YK5A */ /* Profile ksa.cert-manager.cert-manager egress */ Chain cali-pro-_WuAV8wMhwxuQO3vuFE (1 references) pkts bytes target prot opt in out source destination 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:EQD2q2n1iv7oL_7a */ /* Profile ksa.ingress-nginx.ingress-nginx egress */ Chain cali-pro-_u2Tn2rSoAPffvE7JO6 (2 references) pkts bytes target prot opt in out source destination 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:0-_UPh39dt5XfhmJ */ /* Profile ksa.kube-system.coredns egress */ Chain cali-pro-_xvrVNcRSs7npepUK5H (7 references) pkts bytes target prot opt in out source destination 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:mSnElI9mxEVsjW-S */ /* Profile ksa.devon-ai.default egress */ Chain cali-pro-_zkO6GKYeniG6-oa73y (1 references) pkts bytes target prot opt in out source destination 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:5jvP329gd0cha9s6 */ /* Profile ksa.cert-manager.cert-manager-cainjector egress */ Chain cali-pro-kns.cert-manager (3 references) pkts bytes target prot opt in out source destination 116K 11M MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:pboahNbAAGJ_Lilz */ /* Profile kns.cert-manager egress */ MARK or 0x10000 116K 11M RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:zTHGBGjzaAZcqPFY */ mark match 0x10000/0x10000 Chain cali-pro-kns.default (4 references) pkts bytes target prot opt in out source destination 0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:Vr81boRqq4V77Sg8 */ /* Profile kns.default egress */ MARK or 0x10000 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:2CkTlvGj1F9ZRYXl */ mark match 0x10000/0x10000 Chain cali-pro-kns.devon-ai (7 references) pkts bytes target prot opt in out source destination 6793 467K MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:SMlqpZLuFw4TPrf8 */ /* Profile kns.devon-ai egress */ MARK or 0x10000 6793 467K RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:dQC1AX-6d2_MCj3N */ mark match 0x10000/0x10000 Chain cali-pro-kns.ingress-nginx (1 references) pkts bytes target prot opt in out source destination 1 60 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:hHsDqH-8IwubWuZc */ /* Profile kns.ingress-nginx egress */ MARK or 0x10000 1 60 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:ewSE6gCHQIsXlBSR */ mark match 0x10000/0x10000 Chain cali-pro-kns.kube-system (3 references) pkts bytes target prot opt in out source destination 14425 1101K MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:tgOR2S8DVHZW3F1M */ /* Profile kns.kube-system egress */ MARK or 0x10000 14425 1101K RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:HVEEtYPJsiGRXCIt */ mark match 0x10000/0x10000 Chain cali-pro-ksa.default.default (4 references) pkts bytes target prot opt in out source destination 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:bUZzZcietq9v5Ybq */ /* Profile ksa.default.default egress */ Chain cali-to-hep-forward (1 references) pkts bytes target prot opt in out source destination Chain cali-to-host-endpoint (1 references) pkts bytes target prot opt in out source destination Chain cali-to-wl-dispatch (1 references) pkts bytes target prot opt in out source destination 0 0 cali-tw-cali2cb5762c135 all -- * cali2cb5762c135 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:ZgOaqfSeYxeJJBYP */ 0 0 cali-to-wl-dispatch-3 all -- * cali3+ 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:kwTwoj6B_y3MhOpd */ 0 0 cali-to-wl-dispatch-4 all -- * cali4+ 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:cSIHCkpOuEJ1GrR2 */ 0 0 cali-to-wl-dispatch-5 all -- * cali5+ 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:Lu2WftZUu3LPZ3OX */ 2 100 cali-tw-cali69ac9a115a6 all -- * cali69ac9a115a6 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:qtieQuXmYNxTgYva */ 62122 5994K cali-to-wl-dispatch-9 all -- * cali9+ 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:ocSCk_56gbHQS--Q */ 0 0 cali-tw-calicbc78b24755 all -- * calicbc78b24755 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:nqB8HP9ZcCFpp4Tr */ 0 0 cali-to-wl-dispatch-d all -- * calid+ 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:OcgrvfHGOXpsQ3PC */ 0 0 cali-tw-calie202c6765a8 all -- * calie202c6765a8 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:aHkmR2wJDdpZ8rZH */ 62393 6019K cali-to-wl-dispatch-f all -- * calif+ 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:AvLxt4Up2pVwFD-u */ 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:4ys5dH4j8BZowJDF */ /* Unknown interface */ Chain cali-to-wl-dispatch-3 (1 references) pkts bytes target prot opt in out source destination 0 0 cali-tw-cali33059c2963f all -- * cali33059c2963f 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:61rKzWwlhCaf0z5d */ 0 0 cali-tw-cali36ad473795a all -- * cali36ad473795a 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:EcZW5Zv5UDxY6pIr */ 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:EszRvZLRURCcn11f */ /* Unknown interface */ Chain cali-to-wl-dispatch-4 (1 references) pkts bytes target prot opt in out source destination 0 0 cali-tw-cali40ae69e5651 all -- * cali40ae69e5651 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:PaoFB2pmpiCOSS91 */ 0 0 cali-tw-cali40d37a929c7 all -- * cali40d37a929c7 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:Cy0OUdBkWUHEwU2E */ 0 0 cali-tw-cali4231a5598e3 all -- * cali4231a5598e3 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:feRFs_ZGBaLdx2NX */ 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:ymsQqc2EDX_IHGUl */ /* Unknown interface */ Chain cali-to-wl-dispatch-5 (1 references) pkts bytes target prot opt in out source destination 0 0 cali-tw-cali5b1c1e43ef2 all -- * cali5b1c1e43ef2 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:8L-MluoQXML6g7A9 */ 0 0 cali-tw-cali5d631924808 all -- * cali5d631924808 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:_doQ0xWgOdG3lz2B */ 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:C2KWxVxiM3S7wQVi */ /* Unknown interface */ Chain cali-to-wl-dispatch-9 (1 references) pkts bytes target prot opt in out source destination 0 0 cali-tw-cali98f141cccf5 all -- * cali98f141cccf5 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:L-uR6v-LPBtR0VZs */ 62122 5994K cali-tw-cali9ac249eb865 all -- * cali9ac249eb865 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:2ywWIYc9IrNEXSyt */ 0 0 cali-tw-cali9fa309c6729 all -- * cali9fa309c6729 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:CroqYiZRcTsmWjeq */ 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:ZNLwul1nvRME_oK6 */ /* Unknown interface */ Chain cali-to-wl-dispatch-d (1 references) pkts bytes target prot opt in out source destination 0 0 cali-tw-calid4c180d745b all -- * calid4c180d745b 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:iLoswjPCDWndfSrB */ 0 0 cali-tw-calidaa45fc7df9 all -- * calidaa45fc7df9 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:oZyAU11Ewge4W1JQ */ 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:ykLfcoeBBnhu8omI */ /* Unknown interface */ Chain cali-to-wl-dispatch-f (1 references) pkts bytes target prot opt in out source destination 62393 6019K cali-tw-calif462c2579f7 all -- * calif462c2579f7 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:19BzKO2ZFFObOYN6 */ 0 0 cali-tw-calife98c0f065f all -- * calife98c0f065f 0.0.0.0/0 0.0.0.0/0 [goto] /* cali:3i8y6g42i38Csma6 */ 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:kCh4lEjMr9itUAlw */ /* Unknown interface */ Chain cali-tw-cali2cb5762c135 (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:siLne6CKPzLGwl_9 */ ctstate RELATED,ESTABLISHED 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:8Iuej-kzt6mOJrNc */ ctstate INVALID 0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:wqnpcThc6JRV40Sq */ MARK and 0xfffeffff 0 0 cali-pri-kns.devon-ai all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:qlXtoMLe0Khv9QEI */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:uzWI4GJQQ_UWUcQK */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 cali-pri-_xvrVNcRSs7npepUK5H all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:31kCLPMp6H9zBXTr */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:l6TvgdVgOJyQDaj9 */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:jQmn1oBpQ4G4ncTv */ /* Drop if no profiles matched */ Chain cali-tw-cali33059c2963f (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:r9SHlbAnfbEKckR_ */ ctstate RELATED,ESTABLISHED 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:QAKRCsANsH0tdUo- */ ctstate INVALID 0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:HB9aLciaFPld8sia */ MARK and 0xfffeffff 0 0 cali-pri-kns.default all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:xhHM6efQBVyCwpBZ */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:_OWHA26SrbFuZLf7 */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 cali-pri-ksa.default.default all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:7xNtisijPRe2idI_ */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:9BH5WBmh6YVnFmIj */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:t0KcQhnomCZ6fqVe */ /* Drop if no profiles matched */ Chain cali-tw-cali36ad473795a (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:tx219Yd6lbsJSjFU */ ctstate RELATED,ESTABLISHED 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:acEfUmQathO_sjw4 */ ctstate INVALID 0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:pQmnwye-RUAO7kiZ */ MARK and 0xfffeffff 0 0 cali-pri-kns.kube-system all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:OKpLZDY-XO3UaZ4Y */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:sdr8qSDNMWvUe4wp */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 cali-pri-_PTRGc0U-L5Kz7V6ERW all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:YuccGSFTMMD0CMkD */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:q8FvIfHN_VrJiws6 */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:AqQgjQEs4kVaOeph */ /* Drop if no profiles matched */ Chain cali-tw-cali40ae69e5651 (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:8I50n5yeq5G03vY6 */ ctstate RELATED,ESTABLISHED 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:baw0GADvJQKOpUiH */ ctstate INVALID 0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:2gEjApL280nHNSqq */ MARK and 0xfffeffff 0 0 cali-pri-kns.cert-manager all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:1af-757ITnmlXIIj */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:Mtn6H38PcaoyTYzw */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 cali-pri-_PgPzuEog6NthE7r2PG all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:nXN4Xu-aBUHov2nF */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:4LtqV90RXRmSdd2Y */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:qiNUBS3DvNWBDxp- */ /* Drop if no profiles matched */ Chain cali-tw-cali40d37a929c7 (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:U037cOA1SlfVdxlp */ ctstate RELATED,ESTABLISHED 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:5beJmXk1PqgopBcB */ ctstate INVALID 0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:W2wGa-E0vZcgSxLi */ MARK and 0xfffeffff 0 0 cali-pri-kns.devon-ai all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:yIIbuboekQq_FqTw */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:kKq5vv-zhly46CVm */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 cali-pri-_xvrVNcRSs7npepUK5H all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:Qcny8y-ukBX9RrvM */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:4DNKjxwJGda3XoW8 */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:qtRe1l0TTnFoOqAf */ /* Drop if no profiles matched */ Chain cali-tw-cali4231a5598e3 (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:cqdPVzyrBWaq2gmw */ ctstate RELATED,ESTABLISHED 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:zNaMf71xPteCliI0 */ ctstate INVALID 0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:Yv4xdOnWWrknhh2x */ MARK and 0xfffeffff 0 0 cali-pri-kns.default all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:I_4GxM_cZMlADHuo */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:H4QQT12f1x49tEVD */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 cali-pri-ksa.default.default all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:BZteX3RnJB9QOCGs */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:IuBjc89M0NEPiTrX */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:TEAqEblPUc5rfPAk */ /* Drop if no profiles matched */ Chain cali-tw-cali5b1c1e43ef2 (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:PWBx8g10bf_iyVIv */ ctstate RELATED,ESTABLISHED 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:8hk_V2zYf3ROlVQc */ ctstate INVALID 0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:bO9Vcqwl0uKrkqKQ */ MARK and 0xfffeffff 0 0 cali-pri-kns.devon-ai all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:tfEe7WCJYJNajHSA */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:Fmx2pDfDtYulfrrJ */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 cali-pri-_xvrVNcRSs7npepUK5H all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:qFy15i1rq9hdGrlM */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:TgHISRWnbjQyxszF */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:n2jwLT0gt45QGczt */ /* Drop if no profiles matched */ Chain cali-tw-cali5d631924808 (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:iYiKxm1Fbfh_0yug */ ctstate RELATED,ESTABLISHED 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:emDsfu5S2NYT3PHX */ ctstate INVALID 0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:0MqXn-Uuc_JDVyZw */ MARK and 0xfffeffff 0 0 cali-pri-kns.ingress-nginx all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:iDsr8xH78d2-eo7a */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:2ZWLLhSLbn4JMPQx */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 cali-pri-_WuAV8wMhwxuQO3vuFE all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:kflyEIneWrQs8kPQ */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:QYqiIC4y60ypr1xb */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:HdmxJdaj0XR5B2py */ /* Drop if no profiles matched */ Chain cali-tw-cali69ac9a115a6 (1 references) pkts bytes target prot opt in out source destination 1 40 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:F2I3f40K8x41tZTW */ ctstate RELATED,ESTABLISHED 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:h0X_nh8IokfITOgF */ ctstate INVALID 1 60 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:K7VkMR05WQ_2O_7m */ MARK and 0xfffeffff 1 60 cali-pri-kns.default all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:C8KhAje1-EUlkGDK */ 1 60 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:jdO_7Kpn6ExJjYNw */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 cali-pri-ksa.default.default all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:EWaDzMqJcEnMwobk */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:AQ7lgYngpMaWukZC */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:xbCg7iTiSutGsxm5 */ /* Drop if no profiles matched */ Chain cali-tw-cali98f141cccf5 (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:pzg42LWOgpz4rqa1 */ ctstate RELATED,ESTABLISHED 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:PHSAxoucUh4x8P-p */ ctstate INVALID 0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:6IY0wGYTDpxroqe3 */ MARK and 0xfffeffff 0 0 cali-pri-kns.devon-ai all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:wCX3Z_I5RGk5Wk6e */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:SgWLadmL7dbazppk */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 cali-pri-_xvrVNcRSs7npepUK5H all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:sHgI8DJ60xmnS6xC */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:X9gm89dnLoGqrZnT */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:EVmmZi92d8g4gAei */ /* Drop if no profiles matched */ Chain cali-tw-cali9ac249eb865 (1 references) pkts bytes target prot opt in out source destination 7370 894K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:AJL_YB-LdK_KwHQW */ ctstate RELATED,ESTABLISHED 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:8Cpq35Up2GCKM1y- */ ctstate INVALID 54770 5103K MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:PI8wQ_d2ii8zqHvY */ MARK and 0xfffeffff 54770 5103K cali-pri-kns.kube-system all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:SgZu365NbC6wgZoD */ 54770 5103K RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:N_DFWuTSErqreiXo */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 cali-pri-_u2Tn2rSoAPffvE7JO6 all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:6Ur8b4P2MqH-hJS3 */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:Wh2sBe8s5kUx46mn */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:m1RFKrq75cWdnVoe */ /* Drop if no profiles matched */ Chain cali-tw-cali9fa309c6729 (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:z_vxCOuCgTBZcsSF */ ctstate RELATED,ESTABLISHED 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:I10f3P3UvnJkQS7f */ ctstate INVALID 0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:3DUzBYo4844x8hmj */ MARK and 0xfffeffff 0 0 cali-pri-kns.devon-ai all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:m2hKk_8sCrIRzBhT */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:oyvZPDShjnXhxp3w */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 cali-pri-_xvrVNcRSs7npepUK5H all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:k4ZzcReX4x0TUka2 */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:oH5z76eZCe2o6Hmi */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:fKJ6YQAic_kw0w4x */ /* Drop if no profiles matched */ Chain cali-tw-calicbc78b24755 (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:3z_hlsp32BaVByaM */ ctstate RELATED,ESTABLISHED 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:1VYS0K0PdsLof7Hy */ ctstate INVALID 0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:QVzhvy8dNuZQihXx */ MARK and 0xfffeffff 0 0 cali-pri-kns.default all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:eZQVsFMfqL7qD6Ql */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:IAvsS7I7ojzlrQJ4 */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 cali-pri-ksa.default.default all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:T6Isi_n_cxTdhDYP */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:y5gOjK0LqOK_lR8I */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:6CVj54-CMXOJDs5J */ /* Drop if no profiles matched */ Chain cali-tw-calid4c180d745b (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:HnjHC-bYfMsPbey6 */ ctstate RELATED,ESTABLISHED 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:DiNyeH0VhMta9ax8 */ ctstate INVALID 0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:3Lvd0uLvqqL4O_u1 */ MARK and 0xfffeffff 0 0 cali-pri-kns.devon-ai all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:IIqZsnUcc36B0vhw */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:DNmxbElzvqjMnliz */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 cali-pri-_xvrVNcRSs7npepUK5H all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:RcGjXif_3zPA4I8c */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:WP4keeoTqjI2lnlV */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:Qp6JC-9N8fDbvJQV */ /* Drop if no profiles matched */ Chain cali-tw-calidaa45fc7df9 (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:wN4lSoRB-C5veFAv */ ctstate RELATED,ESTABLISHED 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:7Q5hPLVDMs3IXiTe */ ctstate INVALID 0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:fasu-DfD7KzdQVbS */ MARK and 0xfffeffff 0 0 cali-pri-kns.cert-manager all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:YwLMn-_2kXKgbMdm */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:IjT4qU29TmsmbheM */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 cali-pri-_PfNIBb694QWVrNir-D all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:1PaAQGvAr-KZMGxe */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:G4YDPqpV3eeCeeas */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:wAptCCJxSr0yBKUR */ /* Drop if no profiles matched */ Chain cali-tw-calie202c6765a8 (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:4pOXgK-KMuAhvT_B */ ctstate RELATED,ESTABLISHED 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:of5TVhNXmDjTU6tH */ ctstate INVALID 0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:tyesBwLda-r2etaA */ MARK and 0xfffeffff 0 0 cali-pri-kns.cert-manager all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:Y3uP3y4_gcgCufV4 */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:QvEx5p_9lw0OFyQV */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 cali-pri-_zkO6GKYeniG6-oa73y all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:gYnbLGhmgtfEvEGX */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:JW-WyFHpqb8-Cpkp */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:7xu58waBD0EeuIz6 */ /* Drop if no profiles matched */ Chain cali-tw-calif462c2579f7 (1 references) pkts bytes target prot opt in out source destination 7412 899K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:XMqK-g7W68hT2oSu */ ctstate RELATED,ESTABLISHED 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:FfqsDBQ9yWoZu0WB */ ctstate INVALID 54998 5121K MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:Fg1WHEloVrv2kdPT */ MARK and 0xfffeffff 54998 5121K cali-pri-kns.kube-system all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:ZtbWCNwf9JjELH0o */ 54998 5121K RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:JK6lqpXuHd70lJpC */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 cali-pri-_u2Tn2rSoAPffvE7JO6 all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:uobv2OkqIE45eNpO */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:YEbeV_MLm4zy2qhU */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:nyLzooWPn0rskkSM */ /* Drop if no profiles matched */ Chain cali-tw-calife98c0f065f (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:ULW4MNyWAOYkRY5W */ ctstate RELATED,ESTABLISHED 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:TQiXVtH_FNUPM-5J */ ctstate INVALID 0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:4B5Ym77kJ2KsuXGs */ MARK and 0xfffeffff 0 0 cali-pri-kns.devon-ai all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:lENfYaRDHXFIGzOm */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:5CpJhGSOHj0NRtge */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 cali-pri-_xvrVNcRSs7npepUK5H all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:S0AKw_5E1u4sXPdH */ 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:42dakdUGzjUG3uCA */ /* Return if profile accepted */ mark match 0x10000/0x10000 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:UMvT2QMJSUwDvrBZ */ /* Drop if no profiles matched */ Chain cali-wl-to-host (1 references) pkts bytes target prot opt in out source destination 1048K 104M cali-from-wl-dispatch all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:Ee9Sbo10IpVujdIY */ 12887 773K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 /* cali:nSZbcOoG1xPONxb8 */ /* Configured DefaultEndpointToHostAction */ Chain ufw-after-forward (1 references) pkts bytes target prot opt in out source destination Chain ufw-after-input (1 references) pkts bytes target prot opt in out source destination 2 156 ufw-skip-to-policy-input udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:137 0 0 ufw-skip-to-policy-input udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:138 8 408 ufw-skip-to-policy-input tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:139 22 1108 ufw-skip-to-policy-input tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:445 0 0 ufw-skip-to-policy-input udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:67 0 0 ufw-skip-to-policy-input udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:68 0 0 ufw-skip-to-policy-input all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type BROADCAST Chain ufw-after-logging-forward (1 references) pkts bytes target prot opt in out source destination 4243 462K LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW BLOCK] " Chain ufw-after-logging-input (1 references) pkts bytes target prot opt in out source destination 2169 120K LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW BLOCK] " Chain ufw-after-logging-output (1 references) pkts bytes target prot opt in out source destination Chain ufw-after-output (1 references) pkts bytes target prot opt in out source destination Chain ufw-before-forward (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 3 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 11 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 12 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 8 81381 7421K ufw-user-forward all -- * * 0.0.0.0/0 0.0.0.0/0 Chain ufw-before-input (1 references) pkts bytes target prot opt in out source destination 15M 2528M ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 64538 5824K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED 0 0 ufw-logging-deny all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 3 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 11 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 12 872 64521 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 8 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:67 dpt:68 5114 589K ufw-not-local all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT udp -- * * 0.0.0.0/0 224.0.0.251 udp dpt:5353 0 0 ACCEPT udp -- * * 0.0.0.0/0 239.255.255.250 udp dpt:1900 5114 589K ufw-user-input all -- * * 0.0.0.0/0 0.0.0.0/0 Chain ufw-before-logging-forward (1 references) pkts bytes target prot opt in out source destination Chain ufw-before-logging-input (1 references) pkts bytes target prot opt in out source destination Chain ufw-before-logging-output (1 references) pkts bytes target prot opt in out source destination Chain ufw-before-output (1 references) pkts bytes target prot opt in out source destination 15M 2526M ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0 713K 126M ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED 88091 5333K ufw-user-output all -- * * 0.0.0.0/0 0.0.0.0/0 Chain ufw-logging-allow (0 references) pkts bytes target prot opt in out source destination 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW ALLOW] " Chain ufw-logging-deny (2 references) pkts bytes target prot opt in out source destination 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID limit: avg 3/min burst 10 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW BLOCK] " Chain ufw-not-local (1 references) pkts bytes target prot opt in out source destination 5098 587K RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type LOCAL 0 0 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type MULTICAST 16 1800 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type BROADCAST 0 0 ufw-logging-deny all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 3/min burst 10 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 Chain ufw-reject-forward (1 references) pkts bytes target prot opt in out source destination Chain ufw-reject-input (1 references) pkts bytes target prot opt in out source destination Chain ufw-reject-output (1 references) pkts bytes target prot opt in out source destination Chain ufw-skip-to-policy-forward (0 references) pkts bytes target prot opt in out source destination 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 Chain ufw-skip-to-policy-input (7 references) pkts bytes target prot opt in out source destination 32 1672 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 Chain ufw-skip-to-policy-output (0 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 Chain ufw-track-forward (1 references) pkts bytes target prot opt in out source destination Chain ufw-track-input (1 references) pkts bytes target prot opt in out source destination Chain ufw-track-output (1 references) pkts bytes target prot opt in out source destination 84711 5083K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 ctstate NEW 3379 250K ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 ctstate NEW Chain ufw-user-forward (1 references) pkts bytes target prot opt in out source destination Chain ufw-user-input (1 references) pkts bytes target prot opt in out source destination 16 856 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 /* 'dapp_OpenSSH' */ 5 264 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:6443 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:10250 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2379 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2380 1 40 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:179 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:4789 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:4789 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:30828 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:30799 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 64 3548 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 105 5476 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 22 1168 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8080 4 204 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:5432 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:3000 2547 448K ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:51820 16 1800 ACCEPT all -- * * 10.0.0.0/24 0.0.0.0/0 Chain ufw-user-limit (0 references) pkts bytes target prot opt in out source destination 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 3/min burst 5 LOG flags 0 level 4 prefix "[UFW LIMIT BLOCK] " 0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable Chain ufw-user-limit-accept (0 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 Chain ufw-user-logging-forward (0 references) pkts bytes target prot opt in out source destination Chain ufw-user-logging-input (0 references) pkts bytes target prot opt in out source destination Chain ufw-user-logging-output (0 references) pkts bytes target prot opt in out source destination Chain ufw-user-output (1 references) pkts bytes target prot opt in out source destination