Skip to content

Instantly share code, notes, and snippets.

@ohmrefresh

ohmrefresh/part1.bash

Last active December 10, 2019 03:33
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save ohmrefresh/baa65ccdac9d4b2df177ee43a12e3d8d to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save ohmrefresh/baa65ccdac9d4b2df177ee43a12e3d8d to your computer and use it in GitHub Desktop.
Download ZIP
IPtable101
Raw
part1.bash
-A KUBE-SEP-2UEFXEFY3XXHAVSQ -s 10.129.25.27/32 -m comment --comment "demo-project/app01:https" -j KUBE-MARK-MASQ
-A KUBE-SEP-2UEFXEFY3XXHAVSQ -p tcp -m comment --comment "demo-project/app01:https" -m tcp -j DNAT --to-destination 10.129.25.27:8443
-A KUBE-SEP-GLTDMJISNXQTRVXI -s 10.129.25.24/32 -m comment --comment "demo-project/app01:https" -j KUBE-MARK-MASQ
-A KUBE-SEP-GLTDMJISNXQTRVXI -p tcp -m comment --comment "demo-project/app01:https" -m tcp -j DNAT --to-destination 10.129.25.24:8443
-A KUBE-SEP-HUQBD2AEIMNUNXEV -s 10.129.25.25/32 -m comment --comment "demo-project/app01:https" -j KUBE-MARK-MASQ
-A KUBE-SEP-HUQBD2AEIMNUNXEV -p tcp -m comment --comment "demo-project/app01:https" -m tcp -j DNAT --to-destination 10.129.25.25:8443
-A KUBE-SEP-HUXRJOZCU27DI2SS -s 10.129.25.26/32 -m comment --comment "demo-project/app01:https" -j KUBE-MARK-MASQ
-A KUBE-SEP-HUXRJOZCU27DI2SS -p tcp -m comment --comment "demo-project/app01:https" -m tcp -j DNAT --to-destination 10.129.25.26:8443
-A KUBE-SERVICES ! -s 10.128.0.0/14 -d 172.30.136.125/32 -p tcp -m comment --comment "demo-project/app01:https cluster IP" -m tcp --dport 8443 -j KUBE-MARK-MASQ
-A KUBE-SERVICES -d 172.30.136.125/32 -p tcp -m comment --comment "demo-project/app01:https cluster IP" -m tcp --dport 8443 -j KUBE-SVC-HKZYJLO5TFDCYS7I
-A KUBE-SVC-HKZYJLO5TFDCYS7I -m comment --comment "demo-project/app01:https" -m statistic --mode random --probability 0.25000000000 -j KUBE-SEP-GLTDMJISNXQTRVXI
-A KUBE-SVC-HKZYJLO5TFDCYS7I -m comment --comment "demo-project/app01:https" -m statistic --mode random --probability 0.33332999982 -j KUBE-SEP-HUQBD2AEIMNUNXEV
-A KUBE-SVC-HKZYJLO5TFDCYS7I -m comment --comment "demo-project/app01:https" -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-HUXRJOZCU27DI2SS
-A KUBE-SVC-HKZYJLO5TFDCYS7I -m comment --comment "demo-project/app01:https" -j KUBE-SEP-2UEFXEFY3XXHAVSQ
Raw
part2.bash
-A KUBE-SERVICES ! -s 10.128.0.0/14 -d 172.30.136.125/32 -p tcp -m comment --comment "demo-project/app01:https cluster IP" -m tcp --dport 8443 -j KUBE-MARK-MASQ
-A KUBE-SERVICES -d 172.30.136.125/32 -p tcp -m comment --comment "demo-project/app01:https cluster IP" -m tcp --dport 8443 -j KUBE-SVC-HKZYJLO5TFDCYS7I
Raw
part3.bash
-A KUBE-SVC-HKZYJLO5TFDCYS7I -m comment --comment "demo-project/app01:https" -m statistic --mode random --probability 0.25000000000 -j KUBE-SEP-GLTDMJISNXQTRVXI
-A KUBE-SVC-HKZYJLO5TFDCYS7I -m comment --comment "demo-project/app01:https" -m statistic --mode random --probability 0.33332999982 -j KUBE-SEP-HUQBD2AEIMNUNXEV
-A KUBE-SVC-HKZYJLO5TFDCYS7I -m comment --comment "demo-project/app01:https" -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-HUXRJOZCU27DI2SS
-A KUBE-SVC-HKZYJLO5TFDCYS7I -m comment --comment "demo-project/app01:https" -j KUBE-SEP-2UEFXEFY3XXHAVSQ
Raw
part4.bash
-A KUBE-SEP-2UEFXEFY3XXHAVSQ -s 10.129.25.27/32 -m comment --comment "demo-project/app01:https" -j KUBE-MARK-MASQ
-A KUBE-SEP-2UEFXEFY3XXHAVSQ -p tcp -m comment --comment "demo-project/app01:https" -m tcp -j DNAT --to-destination 10.129.25.27:8443
-A KUBE-SEP-GLTDMJISNXQTRVXI -s 10.129.25.24/32 -m comment --comment "demo-project/app01:https" -j KUBE-MARK-MASQ
-A KUBE-SEP-GLTDMJISNXQTRVXI -p tcp -m comment --comment "demo-project/app01:https" -m tcp -j DNAT --to-destination 10.129.25.24:8443
-A KUBE-SEP-HUQBD2AEIMNUNXEV -s 10.129.25.25/32 -m comment --comment "demo-project/app01:https" -j KUBE-MARK-MASQ
-A KUBE-SEP-HUQBD2AEIMNUNXEV -p tcp -m comment --comment "demo-project/app01:https" -m tcp -j DNAT --to-destination 10.129.25.25:8443
-A KUBE-SEP-HUXRJOZCU27DI2SS -s 10.129.25.26/32 -m comment --comment "demo-project/app01:https" -j KUBE-MARK-MASQ
-A KUBE-SEP-HUXRJOZCU27DI2SS -p tcp -m comment --comment "demo-project/app01:https" -m tcp -j DNAT --to-destination 10.129.25.26:8443
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment