Chain INPUT (policy ACCEPT 4711374 packets, 10433965427 bytes)
    pkts      bytes target     prot opt in     out     source               destination         
 1823396 1819193213 ACCEPT     0    --  ovn-k8s-mp0 *       0.0.0.0/0            0.0.0.0/0            /* from OVN to localhost */
 4711374 10433965427 KUBE-FIREWALL  0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain FORWARD (policy ACCEPT 612 packets, 62153 bytes)
    pkts      bytes target     prot opt in     out     source               destination         
    6815   731035 ACCEPT     0    --  ovn-k8s-mp0 *       0.0.0.0/0            0.0.0.0/0           
    5697  3240870 ACCEPT     0    --  *      ovn-k8s-mp0  0.0.0.0/0            0.0.0.0/0           
       0        0 REJECT     6    --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:22624 flags:0x17/0x02 reject-with icmp-port-unreachable
       0        0 REJECT     6    --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:22623 flags:0x17/0x02 reject-with icmp-port-unreachable

Chain OUTPUT (policy ACCEPT 5775255 packets, 5633347673 bytes)
    pkts      bytes target     prot opt in     out     source               destination         
       0        0 REJECT     6    --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:22624 flags:0x17/0x02 reject-with icmp-port-unreachable
       0        0 REJECT     6    --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:22623 flags:0x17/0x02 reject-with icmp-port-unreachable
 5774819 5633277129 KUBE-FIREWALL  0    --  *      *       0.0.0.0/0            0.0.0.0/0           
       0        0 DROP       17   --  *      ens3    0.0.0.0/0            0.0.0.0/0            udp dpt:53 STRING match  "|19636f6e736f6c652d6f70656e73686966742d636f6e736f6c65036372630774657374696e67|" ALGO name bm
       0        0 DROP       17   --  *      ens3    0.0.0.0/0            0.0.0.0/0            udp dpt:53 STRING match  "|03617069036372630774657374696e67|" ALGO name bm
       0        0 DROP       17   --  *      ens3    0.0.0.0/0            0.0.0.0/0            udp dpt:53 STRING match  "|076170692d696e74036372630774657374696e67|" ALGO name bm
       0        0 DROP       17   --  *      ens3    0.0.0.0/0            0.0.0.0/0            udp dpt:53 STRING match  "|1f63616e6172792d6f70656e73686966742d696e67726573732d63616e617279036372630774657374696e67|" ALGO name bm
       0        0 DROP       17   --  *      ens3    0.0.0.0/0            0.0.0.0/0            udp dpt:53 STRING match  "|2664656661756c742d726f7574652d6f70656e73686966742d696d6167652d7265676973747279036372630774657374696e67|" ALGO name bm
       0        0 DROP       17   --  *      ens3    0.0.0.0/0            0.0.0.0/0            udp dpt:53 STRING match  "|1b646f776e6c6f6164732d6f70656e73686966742d636f6e736f6c65036372630774657374696e67|" ALGO name bm
       0        0 DROP       17   --  *      ens3    0.0.0.0/0            0.0.0.0/0            udp dpt:53 STRING match  "|0f6f617574682d6f70656e7368696674036372630b74657374696e67206372630774657374696e67|" ALGO name bm
       0        0 DROP       17   --  *      ens3    0.0.0.0/0            0.0.0.0/0            udp dpt:53 STRING match  "|0f6f617574682d6f70656e736869667408617070732d6372630774657374696e67|" ALGO name bm

Chain KUBE-FIREWALL (2 references)
    pkts      bytes target     prot opt in     out     source               destination         
       0        0 DROP       0    --  *      *      !127.0.0.0/8          127.0.0.0/8          /* block incoming localnet connections */ ! ctstate RELATED,ESTABLISHED,DNAT

Chain KUBE-KUBELET-CANARY (0 references)
    pkts      bytes target     prot opt in     out     source               destination         
