-P INPUT ACCEPT
-P FORWARD ACCEPT
-P OUTPUT ACCEPT
-N DOCKER
-N DOCKER-ISOLATION-STAGE-1
-N DOCKER-ISOLATION-STAGE-2
-N DOCKER-USER
-N KUBE-FIREWALL
-N KUBE-FORWARD
-N KUBE-KUBELET-CANARY
-N KUBE-NODE-PORT
-N cali-FORWARD
-N cali-INPUT
-N cali-OUTPUT
-N cali-cidr-block
-N cali-forward-check
-N cali-forward-endpoint-mark
-N cali-from-endpoint-mark
-N cali-from-hep-forward
-N cali-from-host-endpoint
-N cali-from-wl-dispatch
-N cali-from-wl-dispatch-0
-N cali-from-wl-dispatch-7
-N cali-from-wl-dispatch-b
-N cali-fw-cali0c3167183c0
-N cali-fw-cali0d9b53ecdd5
-N cali-fw-cali13785fc872e
-N cali-fw-cali4f61634d253
-N cali-fw-cali7242e1d9cee
-N cali-fw-cali7b8f2446a02
-N cali-fw-calib3e415d31f4
-N cali-fw-calibbba98dcad2
-N cali-fw-calidb6680f211e
-N cali-pri-_epG8IGhtHjVk-L4I_A
-N cali-pri-_hBY0ZKx5QFvbMdaVEt
-N cali-pri-_hNSGmJYNT8uLIzxesP
-N cali-pri-_mluTlJXg3OLaEFjyzh
-N cali-pri-kns.airs
-N cali-pri-kns.airs-system
-N cali-pri-kns.kube-system
-N cali-pri-kns.logging
-N cali-pri-kns.monitoring
-N cali-pri-ksa.airs.default
-N cali-pro-_epG8IGhtHjVk-L4I_A
-N cali-pro-_hBY0ZKx5QFvbMdaVEt
-N cali-pro-_hNSGmJYNT8uLIzxesP
-N cali-pro-_mluTlJXg3OLaEFjyzh
-N cali-pro-kns.airs
-N cali-pro-kns.airs-system
-N cali-pro-kns.kube-system
-N cali-pro-kns.logging
-N cali-pro-kns.monitoring
-N cali-pro-ksa.airs.default
-N cali-set-endpoint-mark
-N cali-set-endpoint-mark-0
-N cali-set-endpoint-mark-7
-N cali-set-endpoint-mark-b
-N cali-sm-cali0c3167183c0
-N cali-sm-cali0d9b53ecdd5
-N cali-sm-cali13785fc872e
-N cali-sm-cali4f61634d253
-N cali-sm-cali7242e1d9cee
-N cali-sm-cali7b8f2446a02
-N cali-sm-calib3e415d31f4
-N cali-sm-calibbba98dcad2
-N cali-sm-calidb6680f211e
-N cali-to-hep-forward
-N cali-to-host-endpoint
-N cali-to-wl-dispatch
-N cali-to-wl-dispatch-0
-N cali-to-wl-dispatch-7
-N cali-to-wl-dispatch-b
-N cali-tw-cali0c3167183c0
-N cali-tw-cali0d9b53ecdd5
-N cali-tw-cali13785fc872e
-N cali-tw-cali4f61634d253
-N cali-tw-cali7242e1d9cee
-N cali-tw-cali7b8f2446a02
-N cali-tw-calib3e415d31f4
-N cali-tw-calibbba98dcad2
-N cali-tw-calidb6680f211e
-N cali-wl-to-host
-A INPUT -m comment --comment "cali:Cz_u1IQiXIMmKD4c" -j cali-INPUT
-A INPUT -d 169.254.0.10/32 -p udp -m udp --dport 53 -j ACCEPT
-A INPUT -d 169.254.0.10/32 -p tcp -m tcp --dport 53 -j ACCEPT
-A INPUT -m comment --comment "kubernetes health check rules" -j KUBE-NODE-PORT
-A INPUT -j KUBE-FIREWALL
-A FORWARD -m comment --comment "cali:wUHhoiAYhphO9Mso" -j cali-FORWARD
-A FORWARD -j DOCKER-USER
-A FORWARD -j DOCKER-ISOLATION-STAGE-1
-A FORWARD -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -o docker0 -j DOCKER
-A FORWARD -i docker0 ! -o docker0 -j ACCEPT
-A FORWARD -i docker0 -o docker0 -j ACCEPT
-A FORWARD -m comment --comment "kubernetes forwarding rules" -j KUBE-FORWARD
-A FORWARD -m comment --comment "cali:S93hcgKJrXEqnTfs" -m comment --comment "Policy explicitly accepted packet." -m mark --mark 0x10000/0x10000 -j ACCEPT
-A FORWARD -m comment --comment "cali:mp77cMpurHhyjLrM" -j MARK --set-xmark 0x10000/0x10000
-A OUTPUT -m comment --comment "cali:tVnHkvAo15HuiPy0" -j cali-OUTPUT
-A OUTPUT -s 169.254.0.10/32 -p udp -m udp --sport 53 -j ACCEPT
-A OUTPUT -s 169.254.0.10/32 -p tcp -m tcp --sport 53 -j ACCEPT
-A OUTPUT -j KUBE-FIREWALL
-A DOCKER-ISOLATION-STAGE-1 -i docker0 ! -o docker0 -j DOCKER-ISOLATION-STAGE-2
-A DOCKER-ISOLATION-STAGE-1 -j RETURN
-A DOCKER-ISOLATION-STAGE-2 -o docker0 -j DROP
-A DOCKER-ISOLATION-STAGE-2 -j RETURN
-A DOCKER-USER -j RETURN
-A KUBE-FIREWALL -m comment --comment "kubernetes firewall for dropping marked packets" -m mark --mark 0x8000/0x8000 -j DROP
-A KUBE-FIREWALL ! -s 127.0.0.0/8 -d 127.0.0.0/8 -m comment --comment "block incoming localnet connections" -m conntrack ! --ctstate RELATED,ESTABLISHED,DNAT -j DROP
-A KUBE-FORWARD -m comment --comment "kubernetes forwarding rules" -m mark --mark 0x4000/0x4000 -j ACCEPT
-A KUBE-FORWARD -m comment --comment "kubernetes forwarding conntrack rule" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A KUBE-NODE-PORT -m comment --comment "Kubernetes health check node port" -m set --match-set KUBE-HEALTH-CHECK-NODE-PORT dst -j ACCEPT
-A cali-FORWARD -m comment --comment "cali:vjrMJCRpqwy5oRoX" -j MARK --set-xmark 0x0/0xe0000
-A cali-FORWARD -m comment --comment "cali:A_sPAO0mcxbT9mOV" -m mark --mark 0x0/0x10000 -j cali-from-hep-forward
-A cali-FORWARD -i cali+ -m comment --comment "cali:8ZoYfO5HKXWbB3pk" -j cali-from-wl-dispatch
-A cali-FORWARD -o cali+ -m comment --comment "cali:jdEuaPBe14V2hutn" -j cali-to-wl-dispatch
-A cali-FORWARD -m comment --comment "cali:12bc6HljsMKsmfr-" -j cali-to-hep-forward
-A cali-FORWARD -m comment --comment "cali:NOSxoaGx8OIstr1z" -j cali-cidr-block
-A cali-INPUT -p ipencap -m comment --comment "cali:PajejrV4aFdkZojI" -m comment --comment "Allow IPIP packets from Calico hosts" -m set --match-set cali40all-hosts-net src -m addrtype --dst-type LOCAL -j ACCEPT
-A cali-INPUT -p ipencap -m comment --comment "cali:_wjq-Yrma8Ly1Svo" -m comment --comment "Drop IPIP packets from non-Calico hosts" -j DROP
-A cali-INPUT -m comment --comment "cali:ss8lEMQsXi-s6qYT" -j MARK --set-xmark 0x0/0xfff00000
-A cali-INPUT -m comment --comment "cali:PgIW-V0nEjwPhF_8" -j cali-forward-check
-A cali-INPUT -m comment --comment "cali:QMJlDwlS0OjHyfMN" -m mark ! --mark 0x0/0xfff00000 -j RETURN
-A cali-INPUT -i cali+ -m comment --comment "cali:nDRe73txrna-aZjG" -g cali-wl-to-host
-A cali-INPUT -m comment --comment "cali:iX2AYvqGXaVqwkro" -m mark --mark 0x10000/0x10000 -j ACCEPT
-A cali-INPUT -m comment --comment "cali:bhpnxD5IRtBP8KW0" -j MARK --set-xmark 0x0/0xf0000
-A cali-INPUT -m comment --comment "cali:H5_bccAbHV0sooVy" -j cali-from-host-endpoint
-A cali-INPUT -m comment --comment "cali:inBL01YlfurT0dbI" -m comment --comment "Host endpoint policy accepted packet." -m mark --mark 0x10000/0x10000 -j ACCEPT
-A cali-OUTPUT -m comment --comment "cali:Mq1_rAdXXH3YkrzW" -m mark --mark 0x10000/0x10000 -j ACCEPT
-A cali-OUTPUT -m comment --comment "cali:5Z67OUUpTOM7Xa1a" -m mark ! --mark 0x0/0xfff00000 -g cali-forward-endpoint-mark
-A cali-OUTPUT -o cali+ -m comment --comment "cali:M2Wf0OehNdig8MHR" -j RETURN
-A cali-OUTPUT -p ipencap -m comment --comment "cali:AJBkLho_0Qd8LNr3" -m comment --comment "Allow IPIP packets to other Calico hosts" -m set --match-set cali40all-hosts-net dst -m addrtype --src-type LOCAL -j ACCEPT
-A cali-OUTPUT -m comment --comment "cali:iz2RWXlXJDUfsLpe" -j MARK --set-xmark 0x0/0xf0000
-A cali-OUTPUT -m comment --comment "cali:xQqLi8S0sxbiyvjR" -m conntrack ! --ctstate DNAT -j cali-to-host-endpoint
-A cali-OUTPUT -m comment --comment "cali:aSnsxZdmhxm_ilRZ" -m comment --comment "Host endpoint policy accepted packet." -m mark --mark 0x10000/0x10000 -j ACCEPT
-A cali-forward-check -m comment --comment "cali:Pbldlb4FaULvpdD8" -m conntrack --ctstate RELATED,ESTABLISHED -j RETURN
-A cali-forward-check -p tcp -m comment --comment "cali:ZD-6UxuUtGW-xtzg" -m comment --comment "To kubernetes NodePort service" -m multiport --dports 30000:32767 -m set --match-set cali40this-host dst -g cali-set-endpoint-mark
-A cali-forward-check -p udp -m comment --comment "cali:CbPfUajQ2bFVnDq4" -m comment --comment "To kubernetes NodePort service" -m multiport --dports 30000:32767 -m set --match-set cali40this-host dst -g cali-set-endpoint-mark
-A cali-forward-check -m comment --comment "cali:jmhU0ODogX-Zfe5g" -m comment --comment "To kubernetes service" -m set ! --match-set cali40this-host dst -j cali-set-endpoint-mark
-A cali-forward-endpoint-mark -m comment --comment "cali:O0SmFDrnm7KggWqW" -m mark ! --mark 0x100000/0xfff00000 -j cali-from-endpoint-mark
-A cali-forward-endpoint-mark -o cali+ -m comment --comment "cali:aFl0WFKRxDqj8oA6" -j cali-to-wl-dispatch
-A cali-forward-endpoint-mark -m comment --comment "cali:AZKVrO3i_8cLai5f" -j cali-to-hep-forward
-A cali-forward-endpoint-mark -m comment --comment "cali:96HaP1sFtb-NYoYA" -j MARK --set-xmark 0x0/0xfff00000
-A cali-forward-endpoint-mark -m comment --comment "cali:VxO6hyNWz62YEtul" -m comment --comment "Policy explicitly accepted packet." -m mark --mark 0x10000/0x10000 -j ACCEPT
-A cali-from-endpoint-mark -m comment --comment "cali:EGXfA55vLmlWbXS-" -m mark --mark 0xe0900000/0xfff00000 -g cali-fw-cali0c3167183c0
-A cali-from-endpoint-mark -m comment --comment "cali:eAqyMvVP8ytUEb-M" -m mark --mark 0x9f200000/0xfff00000 -g cali-fw-cali0d9b53ecdd5
-A cali-from-endpoint-mark -m comment --comment "cali:ZC5W3OnOaAISifUl" -m mark --mark 0xbdf00000/0xfff00000 -g cali-fw-cali13785fc872e
-A cali-from-endpoint-mark -m comment --comment "cali:lT6DqE8UIrfqcQpS" -m mark --mark 0x85600000/0xfff00000 -g cali-fw-cali4f61634d253
-A cali-from-endpoint-mark -m comment --comment "cali:kyFpkHnlRXEikVUt" -m mark --mark 0xcf00000/0xfff00000 -g cali-fw-cali7242e1d9cee
-A cali-from-endpoint-mark -m comment --comment "cali:UdgTCTbtILMuS5Kw" -m mark --mark 0x63c00000/0xfff00000 -g cali-fw-cali7b8f2446a02
-A cali-from-endpoint-mark -m comment --comment "cali:MDUxEeA-x30Y9UT8" -m mark --mark 0x38a00000/0xfff00000 -g cali-fw-calib3e415d31f4
-A cali-from-endpoint-mark -m comment --comment "cali:X6xthmjKTlwg4C2U" -m mark --mark 0x89200000/0xfff00000 -g cali-fw-calibbba98dcad2
-A cali-from-endpoint-mark -m comment --comment "cali:bnfgQsoghUlEUq2Q" -m mark --mark 0xda100000/0xfff00000 -g cali-fw-calidb6680f211e
-A cali-from-endpoint-mark -m comment --comment "cali:YDFQ_a7wwK_7pE-0" -m comment --comment "Unknown interface" -j DROP
-A cali-from-wl-dispatch -i cali0+ -m comment --comment "cali:eBnVcASLTvMFg9XV" -g cali-from-wl-dispatch-0
-A cali-from-wl-dispatch -i cali13785fc872e -m comment --comment "cali:x_xFRs5DKTTbCXk6" -g cali-fw-cali13785fc872e
-A cali-from-wl-dispatch -i cali4f61634d253 -m comment --comment "cali:UkeKfoen-MbkAvaP" -g cali-fw-cali4f61634d253
-A cali-from-wl-dispatch -i cali7+ -m comment --comment "cali:oa_Y2IahWCEKcqVD" -g cali-from-wl-dispatch-7
-A cali-from-wl-dispatch -i calib+ -m comment --comment "cali:PXxzxNb72wDYIsGL" -g cali-from-wl-dispatch-b
-A cali-from-wl-dispatch -i calidb6680f211e -m comment --comment "cali:r0at8TV42jSZ27S7" -g cali-fw-calidb6680f211e
-A cali-from-wl-dispatch -m comment --comment "cali:2k_i4Z1YEQ1Cmqls" -m comment --comment "Unknown interface" -j DROP
-A cali-from-wl-dispatch-0 -i cali0c3167183c0 -m comment --comment "cali:DOZ5CVxNv5UWGpuG" -g cali-fw-cali0c3167183c0
-A cali-from-wl-dispatch-0 -i cali0d9b53ecdd5 -m comment --comment "cali:ZTg7QIkJMDmviUpj" -g cali-fw-cali0d9b53ecdd5
-A cali-from-wl-dispatch-0 -m comment --comment "cali:uy9JtrDdpqS4ej2n" -m comment --comment "Unknown interface" -j DROP
-A cali-from-wl-dispatch-7 -i cali7242e1d9cee -m comment --comment "cali:JQl6clf-TwBg9LpT" -g cali-fw-cali7242e1d9cee
-A cali-from-wl-dispatch-7 -i cali7b8f2446a02 -m comment --comment "cali:MxcB5AaLk0EPbObg" -g cali-fw-cali7b8f2446a02
-A cali-from-wl-dispatch-7 -m comment --comment "cali:fT2gYkkOigZglRij" -m comment --comment "Unknown interface" -j DROP
-A cali-from-wl-dispatch-b -i calib3e415d31f4 -m comment --comment "cali:t4tQWTi8NSqnSf8P" -g cali-fw-calib3e415d31f4
-A cali-from-wl-dispatch-b -i calibbba98dcad2 -m comment --comment "cali:gxyQ0ew8jiM-oCfn" -g cali-fw-calibbba98dcad2
-A cali-from-wl-dispatch-b -m comment --comment "cali:t0uN46H1SVqMnSIu" -m comment --comment "Unknown interface" -j DROP
-A cali-fw-cali0c3167183c0 -m comment --comment "cali:j6nHHB2GI-phgpTN" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A cali-fw-cali0c3167183c0 -m comment --comment "cali:tatk8E9C4A62PvQo" -m conntrack --ctstate INVALID -j DROP
-A cali-fw-cali0c3167183c0 -m comment --comment "cali:qeiAfCpFiCET0FxS" -j MARK --set-xmark 0x0/0x10000
-A cali-fw-cali0c3167183c0 -p udp -m comment --comment "cali:G3F5dJd-oI1XQRU9" -m comment --comment "Drop VXLAN encapped packets originating in workloads" -m multiport --dports 4789 -j DROP
-A cali-fw-cali0c3167183c0 -p ipencap -m comment --comment "cali:cFyE3axLVoUmCeCc" -m comment --comment "Drop IPinIP encapped packets originating in workloads" -j DROP
-A cali-fw-cali0c3167183c0 -m comment --comment "cali:tIDw7KySimx1JlYJ" -j cali-pro-kns.logging
-A cali-fw-cali0c3167183c0 -m comment --comment "cali:GjAk6RLbBfOa-49G" -m comment --comment "Return if profile accepted" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-fw-cali0c3167183c0 -m comment --comment "cali:uzkf8_saVTL-IIUv" -j cali-pro-_hBY0ZKx5QFvbMdaVEt
-A cali-fw-cali0c3167183c0 -m comment --comment "cali:I_v57vq3qWjrsxfx" -m comment --comment "Return if profile accepted" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-fw-cali0c3167183c0 -m comment --comment "cali:N34ySnJnRo-dtsxw" -m comment --comment "Drop if no profiles matched" -j DROP
-A cali-fw-cali0d9b53ecdd5 -m comment --comment "cali:RhEscrq7sZ4PDbmF" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A cali-fw-cali0d9b53ecdd5 -m comment --comment "cali:ENKxKzsAE673TsDQ" -m conntrack --ctstate INVALID -j DROP
-A cali-fw-cali0d9b53ecdd5 -m comment --comment "cali:qs7yUQOtwM2y3nvm" -j MARK --set-xmark 0x0/0x10000
-A cali-fw-cali0d9b53ecdd5 -p udp -m comment --comment "cali:YP8Cx8f1xOO6gw5u" -m comment --comment "Drop VXLAN encapped packets originating in workloads" -m multiport --dports 4789 -j DROP
-A cali-fw-cali0d9b53ecdd5 -p ipencap -m comment --comment "cali:kf9idFT-KPpoWfY_" -m comment --comment "Drop IPinIP encapped packets originating in workloads" -j DROP
-A cali-fw-cali0d9b53ecdd5 -m comment --comment "cali:sL2LrgGbvxs9Cgyi" -j cali-pro-kns.monitoring
-A cali-fw-cali0d9b53ecdd5 -m comment --comment "cali:s_U3JyxIHx5s_SLu" -m comment --comment "Return if profile accepted" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-fw-cali0d9b53ecdd5 -m comment --comment "cali:QT8XtAXL4JD5vGIA" -j cali-pro-_epG8IGhtHjVk-L4I_A
-A cali-fw-cali0d9b53ecdd5 -m comment --comment "cali:c3POkqfa1u5zEzYp" -m comment --comment "Return if profile accepted" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-fw-cali0d9b53ecdd5 -m comment --comment "cali:nCGQeif75UMfYZ_f" -m comment --comment "Drop if no profiles matched" -j DROP
-A cali-fw-cali13785fc872e -m comment --comment "cali:6xlQWhiNwvQAWYGz" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A cali-fw-cali13785fc872e -m comment --comment "cali:zvMh7YgryZ6vOT-B" -m conntrack --ctstate INVALID -j DROP
-A cali-fw-cali13785fc872e -m comment --comment "cali:VRVOTFrBsN0Ou5Ie" -j MARK --set-xmark 0x0/0x10000
-A cali-fw-cali13785fc872e -p udp -m comment --comment "cali:Ld5ntt2gFhIX810N" -m comment --comment "Drop VXLAN encapped packets originating in workloads" -m multiport --dports 4789 -j DROP
-A cali-fw-cali13785fc872e -p ipencap -m comment --comment "cali:pqn9RVELZf6GI_iN" -m comment --comment "Drop IPinIP encapped packets originating in workloads" -j DROP
-A cali-fw-cali13785fc872e -m comment --comment "cali:GkTlohPHcCscOlNS" -j cali-pro-kns.airs
-A cali-fw-cali13785fc872e -m comment --comment "cali:hWBw6qLC9rBUGnBf" -m comment --comment "Return if profile accepted" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-fw-cali13785fc872e -m comment --comment "cali:9QiuuUUeTJQKrCAE" -j cali-pro-ksa.airs.default
-A cali-fw-cali13785fc872e -m comment --comment "cali:4kklWJES7bE6Pgc_" -m comment --comment "Return if profile accepted" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-fw-cali13785fc872e -m comment --comment "cali:NIt1jBb0in8euNJ3" -m comment --comment "Drop if no profiles matched" -j DROP
-A cali-fw-cali4f61634d253 -m comment --comment "cali:1ouYoY_2B5vybInm" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A cali-fw-cali4f61634d253 -m comment --comment "cali:2cW4KmFMVnz84FF-" -m conntrack --ctstate INVALID -j DROP
-A cali-fw-cali4f61634d253 -m comment --comment "cali:Dd3ozxjW8A4YZEKg" -j MARK --set-xmark 0x0/0x10000
-A cali-fw-cali4f61634d253 -p udp -m comment --comment "cali:UkUvXJIbwH7axw9L" -m comment --comment "Drop VXLAN encapped packets originating in workloads" -m multiport --dports 4789 -j DROP
-A cali-fw-cali4f61634d253 -p ipencap -m comment --comment "cali:3YAXTbMgu3ItlbnD" -m comment --comment "Drop IPinIP encapped packets originating in workloads" -j DROP
-A cali-fw-cali4f61634d253 -m comment --comment "cali:LN2Ez2nzz_vhHNKt" -j cali-pro-kns.airs
-A cali-fw-cali4f61634d253 -m comment --comment "cali:dfE0iC0SDcd32PjQ" -m comment --comment "Return if profile accepted" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-fw-cali4f61634d253 -m comment --comment "cali:uoGtCnu3wRbhJsp-" -j cali-pro-ksa.airs.default
-A cali-fw-cali4f61634d253 -m comment --comment "cali:yIej_EjjsIzIAR8K" -m comment --comment "Return if profile accepted" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-fw-cali4f61634d253 -m comment --comment "cali:GJKCOUuB0cWRgj0t" -m comment --comment "Drop if no profiles matched" -j DROP
-A cali-fw-cali7242e1d9cee -m comment --comment "cali:WrBlKPx5vKzQ6Dl9" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A cali-fw-cali7242e1d9cee -m comment --comment "cali:VMr0NXeqAGPRhmqI" -m conntrack --ctstate INVALID -j DROP
-A cali-fw-cali7242e1d9cee -m comment --comment "cali:jEYYiRTqCPSwMfOm" -j MARK --set-xmark 0x0/0x10000
-A cali-fw-cali7242e1d9cee -p udp -m comment --comment "cali:e8N4tRclf-ygcAUJ" -m comment --comment "Drop VXLAN encapped packets originating in workloads" -m multiport --dports 4789 -j DROP
-A cali-fw-cali7242e1d9cee -p ipencap -m comment --comment "cali:d3KtNHtLtNlfWmcV" -m comment --comment "Drop IPinIP encapped packets originating in workloads" -j DROP
-A cali-fw-cali7242e1d9cee -m comment --comment "cali:vKtiVryhT3clS0Rq" -j cali-pro-kns.airs
-A cali-fw-cali7242e1d9cee -m comment --comment "cali:nMX1TgQbSfXx0NbE" -m comment --comment "Return if profile accepted" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-fw-cali7242e1d9cee -m comment --comment "cali:izkkM5hqAZ3AJyjj" -j cali-pro-ksa.airs.default
-A cali-fw-cali7242e1d9cee -m comment --comment "cali:MaznspSjxq2UX_pU" -m comment --comment "Return if profile accepted" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-fw-cali7242e1d9cee -m comment --comment "cali:pqKAksxAODFfWQ_h" -m comment --comment "Drop if no profiles matched" -j DROP
-A cali-fw-cali7b8f2446a02 -m comment --comment "cali:CtxSpUmDYeNdXwZV" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A cali-fw-cali7b8f2446a02 -m comment --comment "cali:kO4zMBGH2PuKgCY6" -m conntrack --ctstate INVALID -j DROP
-A cali-fw-cali7b8f2446a02 -m comment --comment "cali:gP0UiNnT5l_lUBcC" -j MARK --set-xmark 0x0/0x10000
-A cali-fw-cali7b8f2446a02 -p udp -m comment --comment "cali:_aprCniGBr9jJ6Qg" -m comment --comment "Drop VXLAN encapped packets originating in workloads" -m multiport --dports 4789 -j DROP
-A cali-fw-cali7b8f2446a02 -p ipencap -m comment --comment "cali:8KDMC33XOrhMMZdw" -m comment --comment "Drop IPinIP encapped packets originating in workloads" -j DROP
-A cali-fw-cali7b8f2446a02 -m comment --comment "cali:WpepScB1kG97VzfZ" -j cali-pro-kns.airs-system
-A cali-fw-cali7b8f2446a02 -m comment --comment "cali:38JfMkMN-5_0-aiQ" -m comment --comment "Return if profile accepted" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-fw-cali7b8f2446a02 -m comment --comment "cali:DXlj8J3kgg82RSBB" -j cali-pro-_mluTlJXg3OLaEFjyzh
-A cali-fw-cali7b8f2446a02 -m comment --comment "cali:wqX51pnM8AiR8AOu" -m comment --comment "Return if profile accepted" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-fw-cali7b8f2446a02 -m comment --comment "cali:K-r4oc08Z0slrE9H" -m comment --comment "Drop if no profiles matched" -j DROP
-A cali-fw-calib3e415d31f4 -m comment --comment "cali:gQKC9oyXPaJK6Y65" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A cali-fw-calib3e415d31f4 -m comment --comment "cali:SottGl820XBl2C6l" -m conntrack --ctstate INVALID -j DROP
-A cali-fw-calib3e415d31f4 -m comment --comment "cali:YP8IwaCaUl2O2PYZ" -j MARK --set-xmark 0x0/0x10000
-A cali-fw-calib3e415d31f4 -p udp -m comment --comment "cali:t111HRNSgocF5S_S" -m comment --comment "Drop VXLAN encapped packets originating in workloads" -m multiport --dports 4789 -j DROP
-A cali-fw-calib3e415d31f4 -p ipencap -m comment --comment "cali:_x0qyG84GpAEIzhY" -m comment --comment "Drop IPinIP encapped packets originating in workloads" -j DROP
-A cali-fw-calib3e415d31f4 -m comment --comment "cali:Tnt-QB3b2NAcgl3G" -j cali-pro-kns.airs
-A cali-fw-calib3e415d31f4 -m comment --comment "cali:SEhpAlQOMO724DUU" -m comment --comment "Return if profile accepted" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-fw-calib3e415d31f4 -m comment --comment "cali:P5io1H8a5ERrBmtJ" -j cali-pro-ksa.airs.default
-A cali-fw-calib3e415d31f4 -m comment --comment "cali:foBaMCT6Hk7YqgNw" -m comment --comment "Return if profile accepted" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-fw-calib3e415d31f4 -m comment --comment "cali:msEdo7rxv9glIZE-" -m comment --comment "Drop if no profiles matched" -j DROP
-A cali-fw-calibbba98dcad2 -m comment --comment "cali:1gl53CTrLs2-LDQn" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A cali-fw-calibbba98dcad2 -m comment --comment "cali:e5f7iwu7c0urv1KW" -m conntrack --ctstate INVALID -j DROP
-A cali-fw-calibbba98dcad2 -m comment --comment "cali:jZbXUQ_rg_a0I_3k" -j MARK --set-xmark 0x0/0x10000
-A cali-fw-calibbba98dcad2 -p udp -m comment --comment "cali:QTFTnYFyd-OrCZCy" -m comment --comment "Drop VXLAN encapped packets originating in workloads" -m multiport --dports 4789 -j DROP
-A cali-fw-calibbba98dcad2 -p ipencap -m comment --comment "cali:DbwNgRegNuN77lKk" -m comment --comment "Drop IPinIP encapped packets originating in workloads" -j DROP
-A cali-fw-calibbba98dcad2 -m comment --comment "cali:iNqNtDdAaPCtw7Ja" -j cali-pro-kns.kube-system
-A cali-fw-calibbba98dcad2 -m comment --comment "cali:nO-wMge-0e7OeKkl" -m comment --comment "Return if profile accepted" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-fw-calibbba98dcad2 -m comment --comment "cali:ietfq1no8WnjaNKY" -j cali-pro-_hNSGmJYNT8uLIzxesP
-A cali-fw-calibbba98dcad2 -m comment --comment "cali:2d9aSwW7gsw7eoA5" -m comment --comment "Return if profile accepted" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-fw-calibbba98dcad2 -m comment --comment "cali:vPY1YPtEX1RdjwEq" -m comment --comment "Drop if no profiles matched" -j DROP
-A cali-fw-calidb6680f211e -m comment --comment "cali:-mX2QAtsSJLgsclk" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A cali-fw-calidb6680f211e -m comment --comment "cali:3AAHpAIOJDUWCxD1" -m conntrack --ctstate INVALID -j DROP
-A cali-fw-calidb6680f211e -m comment --comment "cali:SDBOpJjvBZyDOSGj" -j MARK --set-xmark 0x0/0x10000
-A cali-fw-calidb6680f211e -p udp -m comment --comment "cali:xsm3BYWReTri_kT_" -m comment --comment "Drop VXLAN encapped packets originating in workloads" -m multiport --dports 4789 -j DROP
-A cali-fw-calidb6680f211e -p ipencap -m comment --comment "cali:-V0m1URS_zqJs2zL" -m comment --comment "Drop IPinIP encapped packets originating in workloads" -j DROP
-A cali-fw-calidb6680f211e -m comment --comment "cali:hLydUryg4aV0gOPC" -j cali-pro-kns.airs
-A cali-fw-calidb6680f211e -m comment --comment "cali:qgYNhS8rl6M35pXc" -m comment --comment "Return if profile accepted" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-fw-calidb6680f211e -m comment --comment "cali:gw_Uw5dJ9h8riRdu" -j cali-pro-ksa.airs.default
-A cali-fw-calidb6680f211e -m comment --comment "cali:4gEX3yQaPj60KIb_" -m comment --comment "Return if profile accepted" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-fw-calidb6680f211e -m comment --comment "cali:Kz-veVv409lQayg5" -m comment --comment "Drop if no profiles matched" -j DROP
-A cali-pri-_epG8IGhtHjVk-L4I_A -m comment --comment "cali:HySIGzK0qTgimC_e" -m comment --comment "Profile ksa.monitoring.nvidia-gpu-exporter-dcgm-exporter ingress" 
-A cali-pri-_hBY0ZKx5QFvbMdaVEt -m comment --comment "cali:u1HO3nou2aNZhSb6" -m comment --comment "Profile ksa.logging.promtail ingress" 
-A cali-pri-_hNSGmJYNT8uLIzxesP -m comment --comment "cali:k9ZghIA0HRR2xDY1" -m comment --comment "Profile ksa.kube-system.default ingress" 
-A cali-pri-_mluTlJXg3OLaEFjyzh -m comment --comment "cali:EHrn7ovWJt46W8yg" -m comment --comment "Profile ksa.airs-system.airs-admission ingress" 
-A cali-pri-kns.airs -m comment --comment "cali:_GKgLjcxgL9A39m7" -m comment --comment "Profile kns.airs ingress" -j MARK --set-xmark 0x10000/0x10000
-A cali-pri-kns.airs -m comment --comment "cali:qXnJ_YoFVAN7bHCC" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-pri-kns.airs-system -m comment --comment "cali:5FAHr8j7QS4RG_ev" -m comment --comment "Profile kns.airs-system ingress" -j MARK --set-xmark 0x10000/0x10000
-A cali-pri-kns.airs-system -m comment --comment "cali:zK0Y7bEFbETj_0AL" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-pri-kns.kube-system -m comment --comment "cali:J1TyxtHWd0qaBGK-" -m comment --comment "Profile kns.kube-system ingress" -j MARK --set-xmark 0x10000/0x10000
-A cali-pri-kns.kube-system -m comment --comment "cali:QIB6k7eEKdIg73Jp" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-pri-kns.logging -m comment --comment "cali:RRoZJh9k655JIpCR" -m comment --comment "Profile kns.logging ingress" -j MARK --set-xmark 0x10000/0x10000
-A cali-pri-kns.logging -m comment --comment "cali:lJxXER129E6H6OhF" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-pri-kns.monitoring -m comment --comment "cali:8KqDknV2-J2WfWUC" -m comment --comment "Profile kns.monitoring ingress" -j MARK --set-xmark 0x10000/0x10000
-A cali-pri-kns.monitoring -m comment --comment "cali:vKijXjWSweCRBHID" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-pri-ksa.airs.default -m comment --comment "cali:5ol1Lo0reyB7U9Kr" -m comment --comment "Profile ksa.airs.default ingress" 
-A cali-pro-_epG8IGhtHjVk-L4I_A -m comment --comment "cali:h3zE1ites1n7fqVM" -m comment --comment "Profile ksa.monitoring.nvidia-gpu-exporter-dcgm-exporter egress" 
-A cali-pro-_hBY0ZKx5QFvbMdaVEt -m comment --comment "cali:AXaLjd5tNnPgnC5D" -m comment --comment "Profile ksa.logging.promtail egress" 
-A cali-pro-_hNSGmJYNT8uLIzxesP -m comment --comment "cali:WHw0aH5lHwGz91dL" -m comment --comment "Profile ksa.kube-system.default egress" 
-A cali-pro-_mluTlJXg3OLaEFjyzh -m comment --comment "cali:Iq2OSApSsMdQnTXe" -m comment --comment "Profile ksa.airs-system.airs-admission egress" 
-A cali-pro-kns.airs -m comment --comment "cali:O-VuDJTro-AD7z1-" -m comment --comment "Profile kns.airs egress" -j MARK --set-xmark 0x10000/0x10000
-A cali-pro-kns.airs -m comment --comment "cali:V8GWU-6g46HbqBMR" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-pro-kns.airs-system -m comment --comment "cali:hEDlKAwxZgjIk_78" -m comment --comment "Profile kns.airs-system egress" -j MARK --set-xmark 0x10000/0x10000
-A cali-pro-kns.airs-system -m comment --comment "cali:oMTBo3Jc27VekHwd" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-pro-kns.kube-system -m comment --comment "cali:tgOR2S8DVHZW3F1M" -m comment --comment "Profile kns.kube-system egress" -j MARK --set-xmark 0x10000/0x10000
-A cali-pro-kns.kube-system -m comment --comment "cali:HVEEtYPJsiGRXCIt" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-pro-kns.logging -m comment --comment "cali:Nsfe6SHmhjL4prTz" -m comment --comment "Profile kns.logging egress" -j MARK --set-xmark 0x10000/0x10000
-A cali-pro-kns.logging -m comment --comment "cali:FEPRRqbwcxgxZArC" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-pro-kns.monitoring -m comment --comment "cali:9-CsW4Hj4yBZ5bel" -m comment --comment "Profile kns.monitoring egress" -j MARK --set-xmark 0x10000/0x10000
-A cali-pro-kns.monitoring -m comment --comment "cali:KJrntAjpycMiCZe4" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-pro-ksa.airs.default -m comment --comment "cali:_MsUTaRFQFPTR88H" -m comment --comment "Profile ksa.airs.default egress" 
-A cali-set-endpoint-mark -i cali0+ -m comment --comment "cali:UsDHcHwRpNwwYlaM" -g cali-set-endpoint-mark-0
-A cali-set-endpoint-mark -i cali13785fc872e -m comment --comment "cali:2tZM-YLTeaRRYLVT" -g cali-sm-cali13785fc872e
-A cali-set-endpoint-mark -i cali4f61634d253 -m comment --comment "cali:OMyLjG5zD1xw1Tit" -g cali-sm-cali4f61634d253
-A cali-set-endpoint-mark -i cali7+ -m comment --comment "cali:_3Vg6bnUrXylmItQ" -g cali-set-endpoint-mark-7
-A cali-set-endpoint-mark -i calib+ -m comment --comment "cali:jLMei_qN4uxv8fw9" -g cali-set-endpoint-mark-b
-A cali-set-endpoint-mark -i calidb6680f211e -m comment --comment "cali:iQCvre9Bn0ry34gw" -g cali-sm-calidb6680f211e
-A cali-set-endpoint-mark -i cali+ -m comment --comment "cali:tHIfaH_QuvEwebzC" -m comment --comment "Unknown endpoint" -j DROP
-A cali-set-endpoint-mark -m comment --comment "cali:nEn-UA-jg2-YynmK" -m comment --comment "Non-Cali endpoint mark" -j MARK --set-xmark 0x100000/0xfff00000
-A cali-set-endpoint-mark-0 -i cali0c3167183c0 -m comment --comment "cali:MykCZaWjboZkITL_" -g cali-sm-cali0c3167183c0
-A cali-set-endpoint-mark-0 -i cali0d9b53ecdd5 -m comment --comment "cali:Csa7Yq1rBIenzsd9" -g cali-sm-cali0d9b53ecdd5
-A cali-set-endpoint-mark-7 -i cali7242e1d9cee -m comment --comment "cali:OVvCmRFNQWELVl0Q" -g cali-sm-cali7242e1d9cee
-A cali-set-endpoint-mark-7 -i cali7b8f2446a02 -m comment --comment "cali:7yp3hMIRfa2zk6AH" -g cali-sm-cali7b8f2446a02
-A cali-set-endpoint-mark-b -i calib3e415d31f4 -m comment --comment "cali:o3h1ZSWODmUF51pI" -g cali-sm-calib3e415d31f4
-A cali-set-endpoint-mark-b -i calibbba98dcad2 -m comment --comment "cali:8InIiAg_Opajsimv" -g cali-sm-calibbba98dcad2
-A cali-sm-cali0c3167183c0 -m comment --comment "cali:gQMekGcGAQszLLw3" -j MARK --set-xmark 0xe0900000/0xfff00000
-A cali-sm-cali0d9b53ecdd5 -m comment --comment "cali:oYsC-lUDzYXX3xcT" -j MARK --set-xmark 0x9f200000/0xfff00000
-A cali-sm-cali13785fc872e -m comment --comment "cali:ZtuChBq6XyVS-b0A" -j MARK --set-xmark 0xbdf00000/0xfff00000
-A cali-sm-cali4f61634d253 -m comment --comment "cali:5Yr0mGb7HqgfDdsp" -j MARK --set-xmark 0x85600000/0xfff00000
-A cali-sm-cali7242e1d9cee -m comment --comment "cali:xkp08dRHFtJ-KV4P" -j MARK --set-xmark 0xcf00000/0xfff00000
-A cali-sm-cali7b8f2446a02 -m comment --comment "cali:4gg04LwnfW8Yz4XQ" -j MARK --set-xmark 0x63c00000/0xfff00000
-A cali-sm-calib3e415d31f4 -m comment --comment "cali:pwlSbc21Az-Wwa1j" -j MARK --set-xmark 0x38a00000/0xfff00000
-A cali-sm-calibbba98dcad2 -m comment --comment "cali:Grwsa6VmdQRwEuyN" -j MARK --set-xmark 0x89200000/0xfff00000
-A cali-sm-calidb6680f211e -m comment --comment "cali:9FYlF6letcKlk5oe" -j MARK --set-xmark 0xda100000/0xfff00000
-A cali-to-wl-dispatch -o cali0+ -m comment --comment "cali:dIkHjFD9PelLx7cm" -g cali-to-wl-dispatch-0
-A cali-to-wl-dispatch -o cali13785fc872e -m comment --comment "cali:cIMGpkA3jXCxJ0sc" -g cali-tw-cali13785fc872e
-A cali-to-wl-dispatch -o cali4f61634d253 -m comment --comment "cali:Z80Uzh7OxZyMRTYq" -g cali-tw-cali4f61634d253
-A cali-to-wl-dispatch -o cali7+ -m comment --comment "cali:6EYHcal2U_cP7WDV" -g cali-to-wl-dispatch-7
-A cali-to-wl-dispatch -o calib+ -m comment --comment "cali:eFaJ7sD2FokgMRFc" -g cali-to-wl-dispatch-b
-A cali-to-wl-dispatch -o calidb6680f211e -m comment --comment "cali:47FdrRUzqyvJeLaY" -g cali-tw-calidb6680f211e
-A cali-to-wl-dispatch -m comment --comment "cali:kycBurhOKnFyVgWr" -m comment --comment "Unknown interface" -j DROP
-A cali-to-wl-dispatch-0 -o cali0c3167183c0 -m comment --comment "cali:Nl48ws8CRejZBcP2" -g cali-tw-cali0c3167183c0
-A cali-to-wl-dispatch-0 -o cali0d9b53ecdd5 -m comment --comment "cali:ONSUqW8Q98SZcAcR" -g cali-tw-cali0d9b53ecdd5
-A cali-to-wl-dispatch-0 -m comment --comment "cali:6ysxeJrR1toZYdJx" -m comment --comment "Unknown interface" -j DROP
-A cali-to-wl-dispatch-7 -o cali7242e1d9cee -m comment --comment "cali:PSlbflX6L7j7mi7a" -g cali-tw-cali7242e1d9cee
-A cali-to-wl-dispatch-7 -o cali7b8f2446a02 -m comment --comment "cali:svJu2bpmHWGRWIXo" -g cali-tw-cali7b8f2446a02
-A cali-to-wl-dispatch-7 -m comment --comment "cali:NCHFX2cR6zydXYfz" -m comment --comment "Unknown interface" -j DROP
-A cali-to-wl-dispatch-b -o calib3e415d31f4 -m comment --comment "cali:ZJjebrGMhWOK6Qs0" -g cali-tw-calib3e415d31f4
-A cali-to-wl-dispatch-b -o calibbba98dcad2 -m comment --comment "cali:XNEd0b_oDntsQC4L" -g cali-tw-calibbba98dcad2
-A cali-to-wl-dispatch-b -m comment --comment "cali:ayrTZA8PKnS9yo_e" -m comment --comment "Unknown interface" -j DROP
-A cali-tw-cali0c3167183c0 -m comment --comment "cali:V5L3FD2FsiIXwcCV" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A cali-tw-cali0c3167183c0 -m comment --comment "cali:Zi4jmKZv3rsC9Ov9" -m conntrack --ctstate INVALID -j DROP
-A cali-tw-cali0c3167183c0 -m comment --comment "cali:jCwGRl-4UfC-ITNr" -j MARK --set-xmark 0x0/0x10000
-A cali-tw-cali0c3167183c0 -m comment --comment "cali:2JgiN67nxAUwpKWh" -j cali-pri-kns.logging
-A cali-tw-cali0c3167183c0 -m comment --comment "cali:rBxYy1Xv8fM-drps" -m comment --comment "Return if profile accepted" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-tw-cali0c3167183c0 -m comment --comment "cali:TtSMQsD3t-_q6U6c" -j cali-pri-_hBY0ZKx5QFvbMdaVEt
-A cali-tw-cali0c3167183c0 -m comment --comment "cali:PWBgcuhSDTn6c5zj" -m comment --comment "Return if profile accepted" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-tw-cali0c3167183c0 -m comment --comment "cali:KBSF1Mic9sLbWQ5w" -m comment --comment "Drop if no profiles matched" -j DROP
-A cali-tw-cali0d9b53ecdd5 -m comment --comment "cali:0w5vNtkbdfc7aYUe" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A cali-tw-cali0d9b53ecdd5 -m comment --comment "cali:eOlfCqzd9_y8l3Ar" -m conntrack --ctstate INVALID -j DROP
-A cali-tw-cali0d9b53ecdd5 -m comment --comment "cali:lary8u6-Jiyp2j0n" -j MARK --set-xmark 0x0/0x10000
-A cali-tw-cali0d9b53ecdd5 -m comment --comment "cali:viLoiouYE2Ux98PV" -j cali-pri-kns.monitoring
-A cali-tw-cali0d9b53ecdd5 -m comment --comment "cali:Bx6MkIi1jTi8s-ju" -m comment --comment "Return if profile accepted" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-tw-cali0d9b53ecdd5 -m comment --comment "cali:ZWVK-eVuXykStG9L" -j cali-pri-_epG8IGhtHjVk-L4I_A
-A cali-tw-cali0d9b53ecdd5 -m comment --comment "cali:5NZinjQ-wXJQVFEG" -m comment --comment "Return if profile accepted" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-tw-cali0d9b53ecdd5 -m comment --comment "cali:6gWS-rF82npL9S57" -m comment --comment "Drop if no profiles matched" -j DROP
-A cali-tw-cali13785fc872e -m comment --comment "cali:l8LdZXO3TEzHKieA" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A cali-tw-cali13785fc872e -m comment --comment "cali:B5xEuqssPIcsxWrX" -m conntrack --ctstate INVALID -j DROP
-A cali-tw-cali13785fc872e -m comment --comment "cali:tf6RfJqtOTMSiUvL" -j MARK --set-xmark 0x0/0x10000
-A cali-tw-cali13785fc872e -m comment --comment "cali:usz39-n9rl4Ok0Y5" -j cali-pri-kns.airs
-A cali-tw-cali13785fc872e -m comment --comment "cali:1RS-fJmx6W4uCPDF" -m comment --comment "Return if profile accepted" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-tw-cali13785fc872e -m comment --comment "cali:8oaDAeZS6rrIXJNs" -j cali-pri-ksa.airs.default
-A cali-tw-cali13785fc872e -m comment --comment "cali:7isxuGoVoEk4yV2I" -m comment --comment "Return if profile accepted" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-tw-cali13785fc872e -m comment --comment "cali:USBva094RD4kTu3u" -m comment --comment "Drop if no profiles matched" -j DROP
-A cali-tw-cali4f61634d253 -m comment --comment "cali:FVEoQ7VR3TpIogMh" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A cali-tw-cali4f61634d253 -m comment --comment "cali:snULmgulg6Ax3blR" -m conntrack --ctstate INVALID -j DROP
-A cali-tw-cali4f61634d253 -m comment --comment "cali:vn_4_ccphrZHGwGW" -j MARK --set-xmark 0x0/0x10000
-A cali-tw-cali4f61634d253 -m comment --comment "cali:L_ptHb9Kf8RJSrBM" -j cali-pri-kns.airs
-A cali-tw-cali4f61634d253 -m comment --comment "cali:OfAS8kc8pPV-kzq5" -m comment --comment "Return if profile accepted" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-tw-cali4f61634d253 -m comment --comment "cali:23RwJSt4G3Q5ROR_" -j cali-pri-ksa.airs.default
-A cali-tw-cali4f61634d253 -m comment --comment "cali:YaJ_uEyzx1h-s5WB" -m comment --comment "Return if profile accepted" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-tw-cali4f61634d253 -m comment --comment "cali:x3tE3NXayhum73Ii" -m comment --comment "Drop if no profiles matched" -j DROP
-A cali-tw-cali7242e1d9cee -m comment --comment "cali:QdBKRlxe4umUAg9d" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A cali-tw-cali7242e1d9cee -m comment --comment "cali:-kEN8VYPkPDUCgL4" -m conntrack --ctstate INVALID -j DROP
-A cali-tw-cali7242e1d9cee -m comment --comment "cali:WscVP96oSJljC4nt" -j MARK --set-xmark 0x0/0x10000
-A cali-tw-cali7242e1d9cee -m comment --comment "cali:0dwB5qRW3CVNJcRI" -j cali-pri-kns.airs
-A cali-tw-cali7242e1d9cee -m comment --comment "cali:1MDMdxOfdfMJQezS" -m comment --comment "Return if profile accepted" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-tw-cali7242e1d9cee -m comment --comment "cali:yS2357ZSgimSos3y" -j cali-pri-ksa.airs.default
-A cali-tw-cali7242e1d9cee -m comment --comment "cali:dNljKxbQfgrCAqAM" -m comment --comment "Return if profile accepted" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-tw-cali7242e1d9cee -m comment --comment "cali:LlEzJr1IYLnPZr_U" -m comment --comment "Drop if no profiles matched" -j DROP
-A cali-tw-cali7b8f2446a02 -m comment --comment "cali:TDbON6ZozYnsES1h" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A cali-tw-cali7b8f2446a02 -m comment --comment "cali:9EgiOIKTJ1IfMya1" -m conntrack --ctstate INVALID -j DROP
-A cali-tw-cali7b8f2446a02 -m comment --comment "cali:WPF9XMKQBeDoP_Cx" -j MARK --set-xmark 0x0/0x10000
-A cali-tw-cali7b8f2446a02 -m comment --comment "cali:v6-1bpx8ypzy_qaz" -j cali-pri-kns.airs-system
-A cali-tw-cali7b8f2446a02 -m comment --comment "cali:kCFcKeM7Fcr3QLfv" -m comment --comment "Return if profile accepted" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-tw-cali7b8f2446a02 -m comment --comment "cali:f-lWI5xiJ5hUZtxu" -j cali-pri-_mluTlJXg3OLaEFjyzh
-A cali-tw-cali7b8f2446a02 -m comment --comment "cali:cFoVIdmBHjM4SB4L" -m comment --comment "Return if profile accepted" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-tw-cali7b8f2446a02 -m comment --comment "cali:ZBxGrtLuyvSNfg7E" -m comment --comment "Drop if no profiles matched" -j DROP
-A cali-tw-calib3e415d31f4 -m comment --comment "cali:5g-Dr1SOlTbb9Vbx" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A cali-tw-calib3e415d31f4 -m comment --comment "cali:2ygNLL9ux1H0i9W3" -m conntrack --ctstate INVALID -j DROP
-A cali-tw-calib3e415d31f4 -m comment --comment "cali:8aJOmOwtmiVRK8uX" -j MARK --set-xmark 0x0/0x10000
-A cali-tw-calib3e415d31f4 -m comment --comment "cali:_5WEPnOf4zMWhKre" -j cali-pri-kns.airs
-A cali-tw-calib3e415d31f4 -m comment --comment "cali:TutSlC7GTK1tW5UR" -m comment --comment "Return if profile accepted" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-tw-calib3e415d31f4 -m comment --comment "cali:1z6rvmgcqYFcV80K" -j cali-pri-ksa.airs.default
-A cali-tw-calib3e415d31f4 -m comment --comment "cali:mUWSLMmiNzcwlVzO" -m comment --comment "Return if profile accepted" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-tw-calib3e415d31f4 -m comment --comment "cali:FxmgZqxEBRBkU1mw" -m comment --comment "Drop if no profiles matched" -j DROP
-A cali-tw-calibbba98dcad2 -m comment --comment "cali:Kp3wn6F1IghF-9h-" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A cali-tw-calibbba98dcad2 -m comment --comment "cali:r3O3s05OILjmTugn" -m conntrack --ctstate INVALID -j DROP
-A cali-tw-calibbba98dcad2 -m comment --comment "cali:f3dFrjMGtUjfKPtF" -j MARK --set-xmark 0x0/0x10000
-A cali-tw-calibbba98dcad2 -m comment --comment "cali:cS2PE0HABZ4nfpv8" -j cali-pri-kns.kube-system
-A cali-tw-calibbba98dcad2 -m comment --comment "cali:Xi2JviOEuHYX6Keo" -m comment --comment "Return if profile accepted" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-tw-calibbba98dcad2 -m comment --comment "cali:cmJQm4oY2ed7j7QH" -j cali-pri-_hNSGmJYNT8uLIzxesP
-A cali-tw-calibbba98dcad2 -m comment --comment "cali:vz6jv193sy8YmaJc" -m comment --comment "Return if profile accepted" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-tw-calibbba98dcad2 -m comment --comment "cali:b-UObM8qzvk_CZ_P" -m comment --comment "Drop if no profiles matched" -j DROP
-A cali-tw-calidb6680f211e -m comment --comment "cali:HKN0iAU4t7o8D2CJ" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A cali-tw-calidb6680f211e -m comment --comment "cali:ev6gEtBB6b3iR6BF" -m conntrack --ctstate INVALID -j DROP
-A cali-tw-calidb6680f211e -m comment --comment "cali:pfZR8wIdOt9em1c9" -j MARK --set-xmark 0x0/0x10000
-A cali-tw-calidb6680f211e -m comment --comment "cali:iTqFVRUuvaknjEGP" -j cali-pri-kns.airs
-A cali-tw-calidb6680f211e -m comment --comment "cali:lF8GGFkM_WH2pClG" -m comment --comment "Return if profile accepted" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-tw-calidb6680f211e -m comment --comment "cali:Cjx2V67-sDdkyle4" -j cali-pri-ksa.airs.default
-A cali-tw-calidb6680f211e -m comment --comment "cali:Kb_DL7TdhkvBvV9a" -m comment --comment "Return if profile accepted" -m mark --mark 0x10000/0x10000 -j RETURN
-A cali-tw-calidb6680f211e -m comment --comment "cali:Rz1wHv665Gg886x3" -m comment --comment "Drop if no profiles matched" -j DROP
-A cali-wl-to-host -m comment --comment "cali:Ee9Sbo10IpVujdIY" -j cali-from-wl-dispatch
-A cali-wl-to-host -m comment --comment "cali:nSZbcOoG1xPONxb8" -m comment --comment "Configured DefaultEndpointToHostAction" -j ACCEPT