Skip to content

Instantly share code, notes, and snippets.

@j-zimnowoda

j-zimnowoda/kubernetes-iptables.yaml

Created September 10, 2019 12:46
Show Gist options
  • Save j-zimnowoda/24a42b4d2f76c7f48426d4751e0707b4 to your computer and use it in GitHub Desktop.
Save j-zimnowoda/24a42b4d2f76c7f48426d4751e0707b4 to your computer and use it in GitHub Desktop.
Download ZIP
assess
Raw
kubernetes-iptables.yaml
$ sudo iptables -nvL -t nat
Chain KUBE-SEP-ALILC42MQIXVGPDG (1 references)
pkts bytes target prot opt in out source destination
0 0 KUBE-MARK-MASQ all -- * * 10.36.2.7 0.0.0.0/0
0 0 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp to:10.36.2.7:8000
Chain KUBE-SEP-S7DRJLMEEYB5YVDU (1 references)
pkts bytes target prot opt in out source destination
0 0 KUBE-MARK-MASQ all -- * * 10.36.0.16 0.0.0.0/0
0 0 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp to:10.36.0.16:8000
2 120 KUBE-NODEPORTS all -- * * 0.0.0.0/0 0.0.0.0/0 /* kubernetes service nodeports; NOTE: this must be the last rule in this chain */ ADDRTYP
Chain KUBE-NODEPORTS (1 references)
pkts bytes target prot opt in out source destination
0 0 KUBE-MARK-MASQ tcp -- * * 0.0.0.0/0 0.0.0.0/0 /* kube-system/default-http-backend:http */ tcp dpt:32286
0 0 KUBE-SVC-XP4WJ6VSLGWALMW5 tcp -- * * 0.0.0.0/0 0.0.0.0/0 /* kube-system/default-http-backend:http */ tcp dpt:32286
0 0 KUBE-MARK-MASQ tcp -- * * 0.0.0.0/0 0.0.0.0/0 /* default/web: */ tcp dpt:32332
0 0 KUBE-SVC-BIJGBSD4RZCCZX5R tcp -- * * 0.0.0.0/0 0.0.0.0/0 /* default/web: */ tcp dpt:32332
Chain KUBE-SEP-G64NLURS7BZXKXBB (1 references)
pkts bytes target prot opt in out source destination
0 0 KUBE-MARK-MASQ all -- * * 10.36.1.3 0.0.0.0/0
0 0 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp to:10.36.1.3:53
Chain KUBE-SEP-HKWURG6FECQQ6PYR (1 references)
pkts bytes target prot opt in out source destination
0 0 KUBE-MARK-MASQ all -- * * 10.36.1.6 0.0.0.0/0
0 0 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp to:10.36.1.6:8080
Chain KUBE-SEP-S7DRJLMEEYB5YVDU (1 references)
pkts bytes target prot opt in out source destination
0 0 KUBE-MARK-MASQ all -- * * 10.36.0.16 0.0.0.0/0
0 0 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp to:10.36.0.16:8000
Chain KUBE-SVC-BIJGBSD4RZCCZX5R (2 references)
pkts bytes target prot opt in out source destination
0 0 KUBE-SEP-S7DRJLMEEYB5YVDU all -- * * 0.0.0.0/0 0.0.0.0/0 statistic mode random probability 0.50000000000
0 0 KUBE-SEP-ALILC42MQIXVGPDG all -- * * 0.0.0.0/0 0.0.0.0/0
Chain KUBE-SVC-BJM46V3U5RZHCFRZ (1 references)
pkts bytes target prot opt in out source destination
0 0 KUBE-SEP-IILPMWW7YJKDVEFF all -- * * 0.0.0.0/0 0.0.0.0/0
Chain KUBE-SVC-ERIFXISQEP7F7OF4 (1 references)
pkts bytes target prot opt in out source destination
0 0 KUBE-SEP-G64NLURS7BZXKXBB all -- * * 0.0.0.0/0 0.0.0.0/0 statistic mode random probability 0.50000000000
0 0 KUBE-SEP-UY7T4AIY6KH2EQIS all -- * * 0.0.0.0/0 0.0.0.0/0
Chain KUBE-SVC-LC5QY66VUV2HJ6WZ (1 references)
pkts bytes target prot opt in out source destination
0 0 KUBE-SEP-LAJ44V7NVPX7XUCZ all -- * * 0.0.0.0/0 0.0.0.0/0
Chain KUBE-SVC-NPX46M4PTMTKRN6Y (1 references)
pkts bytes target prot opt in out source destination
0 0 KUBE-SEP-MMFXG3GPDSETLKWF all -- * * 0.0.0.0/0 0.0.0.0/0
Chain KUBE-SVC-TCOU7JCQXEZGVUNU (1 references)
pkts bytes target prot opt in out source destination
0 0 KUBE-SEP-JSQIJF5SGOCX2SYY all -- * * 0.0.0.0/0 0.0.0.0/0 statistic mode random probability 0.50000000000
0 0 KUBE-SEP-T3Q6F44OUTJXPLK7 all -- * * 0.0.0.0/0 0.0.0.0/0
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment