Chain INPUT (policy ACCEPT 8109909 packets, 14375326641 bytes)
    pkts      bytes target     prot opt in     out     source               destination         
 3763520 4013396924 ACCEPT     0    --  ovn-k8s-mp0 *       0.0.0.0/0            0.0.0.0/0            /* from OVN to localhost */
 8109909 14375326641 KUBE-FIREWALL  0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain FORWARD (policy ACCEPT 9820 packets, 4208480 bytes)
    pkts      bytes target     prot opt in     out     source               destination         
   23196  2372412 ACCEPT     0    --  ovn-k8s-mp0 *       0.0.0.0/0            0.0.0.0/0           
   17059 10650294 ACCEPT     0    --  *      ovn-k8s-mp0  0.0.0.0/0            0.0.0.0/0           
       0        0 REJECT     6    --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:22624 flags:0x17/0x02 reject-with icmp-port-unreachable
       0        0 REJECT     6    --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:22623 flags:0x17/0x02 reject-with icmp-port-unreachable

Chain OUTPUT (policy ACCEPT 11447143 packets, 11880506947 bytes)
    pkts      bytes target     prot opt in     out     source               destination         
       0        0 REJECT     6    --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:22624 flags:0x17/0x02 reject-with icmp-port-unreachable
       0        0 REJECT     6    --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:22623 flags:0x17/0x02 reject-with icmp-port-unreachable
11446684 11880433562 KUBE-FIREWALL  0    --  *      *       0.0.0.0/0            0.0.0.0/0           
       0        0 DROP       17   --  *      ens3    0.0.0.0/0            0.0.0.0/0            udp dpt:53 STRING match  "|19636f6e736f6c652d6f70656e73686966742d636f6e736f6c65036372630774657374696e67|" ALGO name bm
       0        0 DROP       17   --  *      ens3    0.0.0.0/0            0.0.0.0/0            udp dpt:53 STRING match  "|03617069036372630774657374696e67|" ALGO name bm
       0        0 DROP       17   --  *      ens3    0.0.0.0/0            0.0.0.0/0            udp dpt:53 STRING match  "|076170692d696e74036372630774657374696e67|" ALGO name bm
       0        0 DROP       17   --  *      ens3    0.0.0.0/0            0.0.0.0/0            udp dpt:53 STRING match  "|1f63616e6172792d6f70656e73686966742d696e67726573732d63616e617279036372630774657374696e67|" ALGO name bm
       0        0 DROP       17   --  *      ens3    0.0.0.0/0            0.0.0.0/0            udp dpt:53 STRING match  "|2664656661756c742d726f7574652d6f70656e73686966742d696d6167652d7265676973747279036372630774657374696e67|" ALGO name bm
       0        0 DROP       17   --  *      ens3    0.0.0.0/0            0.0.0.0/0            udp dpt:53 STRING match  "|1b646f776e6c6f6164732d6f70656e73686966742d636f6e736f6c65036372630774657374696e67|" ALGO name bm
       0        0 DROP       17   --  *      ens3    0.0.0.0/0            0.0.0.0/0            udp dpt:53 STRING match  "|0f6f617574682d6f70656e7368696674036372630b74657374696e67206372630774657374696e67|" ALGO name bm
       0        0 DROP       17   --  *      ens3    0.0.0.0/0            0.0.0.0/0            udp dpt:53 STRING match  "|0f6f617574682d6f70656e736869667408617070732d6372630774657374696e67|" ALGO name bm

Chain KUBE-FIREWALL (2 references)
    pkts      bytes target     prot opt in     out     source               destination         
       0        0 DROP       0    --  *      *      !127.0.0.0/8          127.0.0.0/8          /* block incoming localnet connections */ ! ctstate RELATED,ESTABLISHED,DNAT

Chain KUBE-KUBELET-CANARY (0 references)
    pkts      bytes target     prot opt in     out     source               destination         
