RHEL 10 updates the iptables-nft compatibility layer (version 1.8.11).

Since the Service Mesh CNI plugin relies on this layer for traffic redirection, we need to:

• Validate that current CNI rule generation remains compatible with the updated iptables-nft translation logic.

• Test for potential regressions, such as traffic flow issues, routing loops, or bypasses.

• Confirm that complex matches and negations used in redirection rules function as expected.