[root@k8s-master docker]# iptables -S -t nat -P PREROUTING ACCEPT -P INPUT ACCEPT -P OUTPUT ACCEPT -P POSTROUTING ACCEPT -N DOCKER -N KUBE-MARK-DROP -N KUBE-MARK-MASQ -N KUBE-NODEPORTS -N KUBE-POSTROUTING -N KUBE-SEP-2CJALHN5HAPMFVFM -N KUBE-SEP-3QOD56XRRTRNMI4S -N KUBE-SEP-3X6M2GG4X3N36IQA -N KUBE-SEP-6RY3QQ3YQNDBU2CZ -N KUBE-SEP-AEMGHOWJJQQ6DW26 -N KUBE-SEP-BC63JWUGOONNVHNT -N KUBE-SEP-BCVCU7V3EIX5BN4S -N KUBE-SEP-CGJF5R3NNJHCGPEK -N KUBE-SEP-G3JRP3XNFD7YGTUJ -N KUBE-SEP-H42VNUUEL5O4AAFI -N KUBE-SEP-HG7PFXMXH4IYMXCJ -N KUBE-SEP-IIXIK7NP4UOTPTZC -N KUBE-SEP-JJKYWETUMLOGZNLA -N KUBE-SEP-LA63KJE232Q4S4XZ -N KUBE-SEP-NCZW263VPMBAMV3L -N KUBE-SEP-NMTLTMLQM7BV424T -N KUBE-SEP-R2UL2U7DM3EZVPZU -N KUBE-SEP-SU6YQEXJP5F5D45Y -N KUBE-SEP-TX2P555UVXYQK7MW -N KUBE-SEP-UHJEFCADESHAO3K5 -N KUBE-SEP-VBEQKURN5NGDPWTO -N KUBE-SEP-VSE5GAZF5D4P52XN -N KUBE-SEP-VVR4V5MV2O32XZUS -N KUBE-SEP-WEWRT3MINZEYGOXF -N KUBE-SERVICES -N KUBE-SVC-3QDDWNGGGXWDZXKH -N KUBE-SVC-4TRGGDIJATWMT3XV -N KUBE-SVC-5DFX6SEOQCUDMA5P -N KUBE-SVC-E4R4KXTYIBVHUVNR -N KUBE-SVC-ERIFXISQEP7F7OF4 -N KUBE-SVC-FNBEX7OB3JFWIMAV -N KUBE-SVC-GGEEQVOYTMCTP2XY -N KUBE-SVC-GR3EPOOIGWVVJSKN -N KUBE-SVC-IHCLMTGLNNGRIKYP -N KUBE-SVC-KLKESZFIHQ5XX6FZ -N KUBE-SVC-LWWB2LJOQT3EJTNI -N KUBE-SVC-NDI7DJ6D7ATLKECA -N KUBE-SVC-NPX46M4PTMTKRN6Y -N KUBE-SVC-OWPGV4C2CWC7LC2V -N KUBE-SVC-TCOU7JCQXEZGVUNU -N KUBE-SVC-XUQUPYZJOC34BVRR -A PREROUTING -m comment --comment "kubernetes service portals" -j KUBE-SERVICES -A PREROUTING -m addrtype --dst-type LOCAL -j DOCKER -A OUTPUT -m comment --comment "kubernetes service portals" -j KUBE-SERVICES -A OUTPUT ! -d 127.0.0.0/8 -m addrtype --dst-type LOCAL -j DOCKER -A POSTROUTING -m comment --comment "kubernetes postrouting rules" -j KUBE-POSTROUTING -A POSTROUTING -s 172.17.0.0/16 ! -o docker0 -j MASQUERADE -A POSTROUTING -s 192.168.122.0/24 -d 224.0.0.0/24 -j RETURN -A POSTROUTING -s 192.168.122.0/24 -d 255.255.255.255/32 -j RETURN -A POSTROUTING -s 192.168.122.0/24 ! -d 192.168.122.0/24 -p tcp -j MASQUERADE --to-ports 1024-65535 -A POSTROUTING -s 192.168.122.0/24 ! -d 192.168.122.0/24 -p udp -j MASQUERADE --to-ports 1024-65535 -A POSTROUTING -s 192.168.122.0/24 ! -d 192.168.122.0/24 -j MASQUERADE -A POSTROUTING -s 10.244.0.0/16 -d 10.244.0.0/16 -j RETURN -A POSTROUTING -s 10.244.0.0/16 ! -d 224.0.0.0/4 -j MASQUERADE -A POSTROUTING ! -s 10.244.0.0/16 -d 10.244.0.0/24 -j RETURN -A POSTROUTING ! -s 10.244.0.0/16 -d 10.244.0.0/16 -j MASQUERADE -A DOCKER -i docker0 -j RETURN -A KUBE-MARK-DROP -j MARK --set-xmark 0x8000/0x8000 -A KUBE-MARK-MASQ -j MARK --set-xmark 0x4000/0x4000 -A KUBE-NODEPORTS -p tcp -m comment --comment "default/prometheus-prometheus-oper-prometheus:web" -m tcp --dport 30006 -j KUBE-MARK-MASQ -A KUBE-NODEPORTS -p tcp -m comment --comment "default/prometheus-prometheus-oper-prometheus:web" -m tcp --dport 30006 -j KUBE-SVC-OWPGV4C2CWC7LC2V -A KUBE-NODEPORTS -p tcp -m comment --comment "default/prometheus-grafana:service" -m tcp --dport 30005 -j KUBE-MARK-MASQ -A KUBE-NODEPORTS -p tcp -m comment --comment "default/prometheus-grafana:service" -m tcp --dport 30005 -j KUBE-SVC-5DFX6SEOQCUDMA5P -A KUBE-NODEPORTS -p tcp -m comment --comment "kube-system/node-exporter:http" -m tcp --dport 31672 -j KUBE-MARK-MASQ -A KUBE-NODEPORTS -p tcp -m comment --comment "kube-system/node-exporter:http" -m tcp --dport 31672 -j KUBE-SVC-XUQUPYZJOC34BVRR -A KUBE-NODEPORTS -p tcp -m comment --comment "kube-system/grafana:" -m tcp --dport 31111 -j KUBE-MARK-MASQ -A KUBE-NODEPORTS -p tcp -m comment --comment "kube-system/grafana:" -m tcp --dport 31111 -j KUBE-SVC-3QDDWNGGGXWDZXKH -A KUBE-NODEPORTS -p tcp -m comment --comment "kube-system/prometheus:" -m tcp --dport 32222 -j KUBE-MARK-MASQ -A KUBE-NODEPORTS -p tcp -m comment --comment "kube-system/prometheus:" -m tcp --dport 32222 -j KUBE-SVC-LWWB2LJOQT3EJTNI -A KUBE-NODEPORTS -p tcp -m comment --comment "jenkins/jenkins:http" -m tcp --dport 31000 -j KUBE-MARK-MASQ -A KUBE-NODEPORTS -p tcp -m comment --comment "jenkins/jenkins:http" -m tcp --dport 31000 -j KUBE-SVC-KLKESZFIHQ5XX6FZ -A KUBE-NODEPORTS -p tcp -m comment --comment "default/helloworld-nodejs:http" -m tcp --dport 30001 -j KUBE-MARK-MASQ -A KUBE-NODEPORTS -p tcp -m comment --comment "default/helloworld-nodejs:http" -m tcp --dport 30001 -j KUBE-SVC-FNBEX7OB3JFWIMAV -A KUBE-POSTROUTING -m comment --comment "kubernetes service traffic requiring SNAT" -m mark --mark 0x4000/0x4000 -j MASQUERADE -A KUBE-SEP-2CJALHN5HAPMFVFM -s 10.244.0.44/32 -j KUBE-MARK-MASQ -A KUBE-SEP-2CJALHN5HAPMFVFM -p tcp -m tcp -j DNAT --to-destination 10.244.0.44:9090 -A KUBE-SEP-3QOD56XRRTRNMI4S -s 10.244.1.56/32 -j KUBE-MARK-MASQ -A KUBE-SEP-3QOD56XRRTRNMI4S -p tcp -m tcp -j DNAT --to-destination 10.244.1.56:3000 -A KUBE-SEP-3X6M2GG4X3N36IQA -s 10.244.2.45/32 -j KUBE-MARK-MASQ -A KUBE-SEP-3X6M2GG4X3N36IQA -p tcp -m tcp -j DNAT --to-destination 10.244.2.45:9100 -A KUBE-SEP-6RY3QQ3YQNDBU2CZ -s 10.244.2.47/32 -j KUBE-MARK-MASQ -A KUBE-SEP-6RY3QQ3YQNDBU2CZ -p tcp -m tcp -j DNAT --to-destination 10.244.2.47:8080 -A KUBE-SEP-AEMGHOWJJQQ6DW26 -s 10.244.0.45/32 -j KUBE-MARK-MASQ -A KUBE-SEP-AEMGHOWJJQQ6DW26 -p tcp -m tcp -j DNAT --to-destination 10.244.0.45:53 -A KUBE-SEP-BC63JWUGOONNVHNT -s 192.168.1.19/32 -j KUBE-MARK-MASQ -A KUBE-SEP-BC63JWUGOONNVHNT -p tcp -m tcp -j DNAT --to-destination 192.168.1.19:6443 -A KUBE-SEP-BCVCU7V3EIX5BN4S -s 10.244.1.57/32 -j KUBE-MARK-MASQ -A KUBE-SEP-BCVCU7V3EIX5BN4S -p tcp -m tcp -j DNAT --to-destination 10.244.1.57:9090 -A KUBE-SEP-CGJF5R3NNJHCGPEK -s 192.168.1.21/32 -j KUBE-MARK-MASQ -A KUBE-SEP-CGJF5R3NNJHCGPEK -p tcp -m tcp -j DNAT --to-destination 192.168.1.21:9100 -A KUBE-SEP-G3JRP3XNFD7YGTUJ -s 10.244.1.60/32 -j KUBE-MARK-MASQ -A KUBE-SEP-G3JRP3XNFD7YGTUJ -p tcp -m tcp -j DNAT --to-destination 10.244.1.60:9100 -A KUBE-SEP-H42VNUUEL5O4AAFI -s 10.244.0.47/32 -j KUBE-MARK-MASQ -A KUBE-SEP-H42VNUUEL5O4AAFI -p udp -m udp -j DNAT --to-destination 10.244.0.47:53 -A KUBE-SEP-HG7PFXMXH4IYMXCJ -s 10.244.1.58/32 -j KUBE-MARK-MASQ -A KUBE-SEP-HG7PFXMXH4IYMXCJ -p tcp -m tcp -j DNAT --to-destination 10.244.1.58:8080 -A KUBE-SEP-IIXIK7NP4UOTPTZC -s 192.168.1.22/32 -j KUBE-MARK-MASQ -A KUBE-SEP-IIXIK7NP4UOTPTZC -p tcp -m tcp -j DNAT --to-destination 192.168.1.22:9100 -A KUBE-SEP-JJKYWETUMLOGZNLA -s 10.244.2.46/32 -j KUBE-MARK-MASQ -A KUBE-SEP-JJKYWETUMLOGZNLA -p tcp -m tcp -j DNAT --to-destination 10.244.2.46:8080 -A KUBE-SEP-LA63KJE232Q4S4XZ -s 10.244.1.61/32 -j KUBE-MARK-MASQ -A KUBE-SEP-LA63KJE232Q4S4XZ -p tcp -m tcp -j DNAT --to-destination 10.244.1.61:8080 -A KUBE-SEP-NCZW263VPMBAMV3L -s 10.244.2.48/32 -j KUBE-MARK-MASQ -A KUBE-SEP-NCZW263VPMBAMV3L -p tcp -m tcp -j DNAT --to-destination 10.244.2.48:8080 -A KUBE-SEP-NMTLTMLQM7BV424T -s 10.244.2.48/32 -j KUBE-MARK-MASQ -A KUBE-SEP-NMTLTMLQM7BV424T -p tcp -m tcp -j DNAT --to-destination 10.244.2.48:50000 -A KUBE-SEP-R2UL2U7DM3EZVPZU -s 192.168.1.19/32 -j KUBE-MARK-MASQ -A KUBE-SEP-R2UL2U7DM3EZVPZU -p tcp -m tcp -j DNAT --to-destination 192.168.1.19:9100 -A KUBE-SEP-SU6YQEXJP5F5D45Y -s 10.244.0.45/32 -j KUBE-MARK-MASQ -A KUBE-SEP-SU6YQEXJP5F5D45Y -p udp -m udp -j DNAT --to-destination 10.244.0.45:53 -A KUBE-SEP-TX2P555UVXYQK7MW -s 10.244.2.47/32 -j KUBE-MARK-MASQ -A KUBE-SEP-TX2P555UVXYQK7MW -p tcp -m tcp -j DNAT --to-destination 10.244.2.47:8443 -A KUBE-SEP-UHJEFCADESHAO3K5 -s 10.244.0.46/32 -j KUBE-MARK-MASQ -A KUBE-SEP-UHJEFCADESHAO3K5 -p tcp -m tcp -j DNAT --to-destination 10.244.0.46:8080 -A KUBE-SEP-VBEQKURN5NGDPWTO -s 10.244.1.59/32 -j KUBE-MARK-MASQ -A KUBE-SEP-VBEQKURN5NGDPWTO -p tcp -m tcp -j DNAT --to-destination 10.244.1.59:9093 -A KUBE-SEP-VSE5GAZF5D4P52XN -s 10.244.0.43/32 -j KUBE-MARK-MASQ -A KUBE-SEP-VSE5GAZF5D4P52XN -p tcp -m tcp -j DNAT --to-destination 10.244.0.43:9100 -A KUBE-SEP-VVR4V5MV2O32XZUS -s 10.244.2.44/32 -j KUBE-MARK-MASQ -A KUBE-SEP-VVR4V5MV2O32XZUS -p tcp -m tcp -j DNAT --to-destination 10.244.2.44:3000 -A KUBE-SEP-WEWRT3MINZEYGOXF -s 10.244.0.47/32 -j KUBE-MARK-MASQ -A KUBE-SEP-WEWRT3MINZEYGOXF -p tcp -m tcp -j DNAT --to-destination 10.244.0.47:53 -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.1.51.129/32 -p tcp -m comment --comment "default/prometheus-prometheus-oper-prometheus:web cluster IP" -m tcp --dport 9090 -j KUBE-MARK-MASQ -A KUBE-SERVICES -d 10.1.51.129/32 -p tcp -m comment --comment "default/prometheus-prometheus-oper-prometheus:web cluster IP" -m tcp --dport 9090 -j KUBE-SVC-OWPGV4C2CWC7LC2V -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.1.110.192/32 -p tcp -m comment --comment "default/prometheus-grafana:service cluster IP" -m tcp --dport 80 -j KUBE-MARK-MASQ -A KUBE-SERVICES -d 10.1.110.192/32 -p tcp -m comment --comment "default/prometheus-grafana:service cluster IP" -m tcp --dport 80 -j KUBE-SVC-5DFX6SEOQCUDMA5P -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.1.0.1/32 -p tcp -m comment --comment "default/kubernetes:https cluster IP" -m tcp --dport 443 -j KUBE-MARK-MASQ -A KUBE-SERVICES -d 10.1.0.1/32 -p tcp -m comment --comment "default/kubernetes:https cluster IP" -m tcp --dport 443 -j KUBE-SVC-NPX46M4PTMTKRN6Y -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.1.10.173/32 -p tcp -m comment --comment "default/prometheus-prometheus-oper-operator:https cluster IP" -m tcp --dport 443 -j KUBE-MARK-MASQ -A KUBE-SERVICES -d 10.1.10.173/32 -p tcp -m comment --comment "default/prometheus-prometheus-oper-operator:https cluster IP" -m tcp --dport 443 -j KUBE-SVC-IHCLMTGLNNGRIKYP -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.1.64.249/32 -p tcp -m comment --comment "kube-system/node-exporter:http cluster IP" -m tcp --dport 9100 -j KUBE-MARK-MASQ -A KUBE-SERVICES -d 10.1.64.249/32 -p tcp -m comment --comment "kube-system/node-exporter:http cluster IP" -m tcp --dport 9100 -j KUBE-SVC-XUQUPYZJOC34BVRR -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.1.67.44/32 -p tcp -m comment --comment "default/prometheus-prometheus-node-exporter:metrics cluster IP" -m tcp --dport 9100 -j KUBE-MARK-MASQ -A KUBE-SERVICES -d 10.1.67.44/32 -p tcp -m comment --comment "default/prometheus-prometheus-node-exporter:metrics cluster IP" -m tcp --dport 9100 -j KUBE-SVC-GGEEQVOYTMCTP2XY -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.1.183.15/32 -p tcp -m comment --comment "kube-system/grafana: cluster IP" -m tcp --dport 3000 -j KUBE-MARK-MASQ -A KUBE-SERVICES -d 10.1.183.15/32 -p tcp -m comment --comment "kube-system/grafana: cluster IP" -m tcp --dport 3000 -j KUBE-SVC-3QDDWNGGGXWDZXKH -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.1.123.5/32 -p tcp -m comment --comment "default/prometheus-prometheus-oper-alertmanager:web cluster IP" -m tcp --dport 9093 -j KUBE-MARK-MASQ -A KUBE-SERVICES -d 10.1.123.5/32 -p tcp -m comment --comment "default/prometheus-prometheus-oper-alertmanager:web cluster IP" -m tcp --dport 9093 -j KUBE-SVC-4TRGGDIJATWMT3XV -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.1.130.12/32 -p tcp -m comment --comment "kube-system/prometheus: cluster IP" -m tcp --dport 9090 -j KUBE-MARK-MASQ -A KUBE-SERVICES -d 10.1.130.12/32 -p tcp -m comment --comment "kube-system/prometheus: cluster IP" -m tcp --dport 9090 -j KUBE-SVC-LWWB2LJOQT3EJTNI -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.1.196.152/32 -p tcp -m comment --comment "jenkins/jenkins:http cluster IP" -m tcp --dport 8080 -j KUBE-MARK-MASQ -A KUBE-SERVICES -d 10.1.196.152/32 -p tcp -m comment --comment "jenkins/jenkins:http cluster IP" -m tcp --dport 8080 -j KUBE-SVC-KLKESZFIHQ5XX6FZ -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.1.0.10/32 -p tcp -m comment --comment "kube-system/kube-dns:dns-tcp cluster IP" -m tcp --dport 53 -j KUBE-MARK-MASQ -A KUBE-SERVICES -d 10.1.0.10/32 -p tcp -m comment --comment "kube-system/kube-dns:dns-tcp cluster IP" -m tcp --dport 53 -j KUBE-SVC-ERIFXISQEP7F7OF4 -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.1.0.10/32 -p udp -m comment --comment "kube-system/kube-dns:dns cluster IP" -m udp --dport 53 -j KUBE-MARK-MASQ -A KUBE-SERVICES -d 10.1.0.10/32 -p udp -m comment --comment "kube-system/kube-dns:dns cluster IP" -m udp --dport 53 -j KUBE-SVC-TCOU7JCQXEZGVUNU -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.1.10.173/32 -p tcp -m comment --comment "default/prometheus-prometheus-oper-operator:http cluster IP" -m tcp --dport 8080 -j KUBE-MARK-MASQ -A KUBE-SERVICES -d 10.1.10.173/32 -p tcp -m comment --comment "default/prometheus-prometheus-oper-operator:http cluster IP" -m tcp --dport 8080 -j KUBE-SVC-GR3EPOOIGWVVJSKN -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.1.64.103/32 -p tcp -m comment --comment "default/prometheus-kube-state-metrics:http cluster IP" -m tcp --dport 8080 -j KUBE-MARK-MASQ -A KUBE-SERVICES -d 10.1.64.103/32 -p tcp -m comment --comment "default/prometheus-kube-state-metrics:http cluster IP" -m tcp --dport 8080 -j KUBE-SVC-E4R4KXTYIBVHUVNR -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.1.22.94/32 -p tcp -m comment --comment "jenkins/jenkins-agent:agent-listener cluster IP" -m tcp --dport 50000 -j KUBE-MARK-MASQ -A KUBE-SERVICES -d 10.1.22.94/32 -p tcp -m comment --comment "jenkins/jenkins-agent:agent-listener cluster IP" -m tcp --dport 50000 -j KUBE-SVC-NDI7DJ6D7ATLKECA -A KUBE-SERVICES ! -s 10.244.0.0/16 -d 10.1.182.191/32 -p tcp -m comment --comment "default/helloworld-nodejs:http cluster IP" -m tcp --dport 80 -j KUBE-MARK-MASQ -A KUBE-SERVICES -d 10.1.182.191/32 -p tcp -m comment --comment "default/helloworld-nodejs:http cluster IP" -m tcp --dport 80 -j KUBE-SVC-FNBEX7OB3JFWIMAV -A KUBE-SERVICES -m comment --comment "kubernetes service nodeports; NOTE: this must be the last rule in this chain" -m addrtype --dst-type LOCAL -j KUBE-NODEPORTS -A KUBE-SVC-3QDDWNGGGXWDZXKH -j KUBE-SEP-VVR4V5MV2O32XZUS -A KUBE-SVC-4TRGGDIJATWMT3XV -j KUBE-SEP-VBEQKURN5NGDPWTO -A KUBE-SVC-5DFX6SEOQCUDMA5P -j KUBE-SEP-3QOD56XRRTRNMI4S -A KUBE-SVC-E4R4KXTYIBVHUVNR -j KUBE-SEP-HG7PFXMXH4IYMXCJ -A KUBE-SVC-ERIFXISQEP7F7OF4 -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-AEMGHOWJJQQ6DW26 -A KUBE-SVC-ERIFXISQEP7F7OF4 -j KUBE-SEP-WEWRT3MINZEYGOXF -A KUBE-SVC-FNBEX7OB3JFWIMAV -m statistic --mode random --probability 0.33332999982 -j KUBE-SEP-UHJEFCADESHAO3K5 -A KUBE-SVC-FNBEX7OB3JFWIMAV -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-LA63KJE232Q4S4XZ -A KUBE-SVC-FNBEX7OB3JFWIMAV -j KUBE-SEP-JJKYWETUMLOGZNLA -A KUBE-SVC-GGEEQVOYTMCTP2XY -m statistic --mode random --probability 0.33332999982 -j KUBE-SEP-R2UL2U7DM3EZVPZU -A KUBE-SVC-GGEEQVOYTMCTP2XY -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-CGJF5R3NNJHCGPEK -A KUBE-SVC-GGEEQVOYTMCTP2XY -j KUBE-SEP-IIXIK7NP4UOTPTZC -A KUBE-SVC-GR3EPOOIGWVVJSKN -j KUBE-SEP-6RY3QQ3YQNDBU2CZ -A KUBE-SVC-IHCLMTGLNNGRIKYP -j KUBE-SEP-TX2P555UVXYQK7MW -A KUBE-SVC-KLKESZFIHQ5XX6FZ -j KUBE-SEP-NCZW263VPMBAMV3L -A KUBE-SVC-LWWB2LJOQT3EJTNI -j KUBE-SEP-BCVCU7V3EIX5BN4S -A KUBE-SVC-NDI7DJ6D7ATLKECA -j KUBE-SEP-NMTLTMLQM7BV424T -A KUBE-SVC-NPX46M4PTMTKRN6Y -j KUBE-SEP-BC63JWUGOONNVHNT -A KUBE-SVC-OWPGV4C2CWC7LC2V -j KUBE-SEP-2CJALHN5HAPMFVFM -A KUBE-SVC-TCOU7JCQXEZGVUNU -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-SU6YQEXJP5F5D45Y -A KUBE-SVC-TCOU7JCQXEZGVUNU -j KUBE-SEP-H42VNUUEL5O4AAFI -A KUBE-SVC-XUQUPYZJOC34BVRR -m statistic --mode random --probability 0.33332999982 -j KUBE-SEP-VSE5GAZF5D4P52XN -A KUBE-SVC-XUQUPYZJOC34BVRR -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-G3JRP3XNFD7YGTUJ -A KUBE-SVC-XUQUPYZJOC34BVRR -j KUBE-SEP-3X6M2GG4X3N36IQA [root@k8s-master docker]#
