iptables -L -n -v --line-numbers -t nat
Chain PREROUTING (policy ACCEPT 5677K packets, 551M bytes)
num   pkts bytes target     prot opt in     out     source               destination         
1    6233K  580M SUBMARINER-GN-INGRESS  0    --  *      *       0.0.0.0/0            0.0.0.0/0           
2    5688K  552M OVN-KUBE-ETP  0    --  *      *       0.0.0.0/0            0.0.0.0/0           
3    5688K  552M OVN-KUBE-EXTERNALIP  0    --  *      *       0.0.0.0/0            0.0.0.0/0           
4    5677K  551M OVN-KUBE-NODEPORT  0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
num   pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 8753K packets, 553M bytes)
num   pkts bytes target     prot opt in     out     source               destination         
1    8762K  553M OVN-KUBE-EXTERNALIP  0    --  *      *       0.0.0.0/0            0.0.0.0/0           
2    8753K  553M OVN-KUBE-NODEPORT  0    --  *      *       0.0.0.0/0            0.0.0.0/0           
3    8753K  553M OVN-KUBE-ITP  0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain POSTROUTING (policy ACCEPT 1224K packets, 101M bytes)
num   pkts bytes target     prot opt in     out     source               destination         
1    9329K  583M SUBMARINER-POSTROUTING  0    --  *      *       0.0.0.0/0            0.0.0.0/0           
2    8762K  553M OVN-KUBE-EGRESS-IP-MULTI-NIC  0    --  *      *       0.0.0.0/0            0.0.0.0/0           
3    8762K  553M OVN-KUBE-EGRESS-SVC  0    --  *      *       0.0.0.0/0            0.0.0.0/0           
4    7537K  452M OVN-KUBE-SNAT-MGMTPORT  0    --  *      ovn-k8s-mp0  0.0.0.0/0            0.0.0.0/0           

Chain KUBE-KUBELET-CANARY (0 references)
num   pkts bytes target     prot opt in     out     source               destination         

Chain OVN-KUBE-EGRESS-IP-MULTI-NIC (1 references)
num   pkts bytes target     prot opt in     out     source               destination         

Chain OVN-KUBE-EGRESS-SVC (1 references)
num   pkts bytes target     prot opt in     out     source               destination         
1        0     0 RETURN     0    --  *      *       0.0.0.0/0            0.0.0.0/0            mark match 0x3f0 /* DoNotSNAT */

Chain OVN-KUBE-ETP (1 references)
num   pkts bytes target     prot opt in     out     source               destination         

Chain OVN-KUBE-EXTERNALIP (2 references)
num   pkts bytes target     prot opt in     out     source               destination         
1        0     0 DNAT       6    --  *      *       0.0.0.0/0            242.1.255.244        tcp dpt:8000 to:172.30.208.38:8000
2       74  4440 DNAT       6    --  *      *       0.0.0.0/0            242.1.255.253        tcp dpt:6800 to:172.30.134.4:6800
3       39  2340 DNAT       6    --  *      *       0.0.0.0/0            242.1.255.247        tcp dpt:3300 to:172.30.111.140:3300
4     3247  195K DNAT       6    --  *      *       0.0.0.0/0            242.1.255.252        tcp dpt:6800 to:172.30.87.74:6800
5      510 30600 DNAT       6    --  *      *       0.0.0.0/0            242.1.255.251        tcp dpt:6800 to:172.30.40.62:6800
6       91  5460 DNAT       6    --  *      *       0.0.0.0/0            242.1.255.246        tcp dpt:3300 to:172.30.45.170:3300
7     2646  159K DNAT       6    --  *      *       0.0.0.0/0            242.1.255.250        tcp dpt:6800 to:172.30.17.89:6800
8     6831  410K DNAT       6    --  *      *       0.0.0.0/0            242.1.255.249        tcp dpt:6800 to:172.30.240.255:6800
9       90  5400 DNAT       6    --  *      *       0.0.0.0/0            242.1.255.245        tcp dpt:3300 to:172.30.162.218:3300
10    6763  406K DNAT       6    --  *      *       0.0.0.0/0            242.1.255.248        tcp dpt:6800 to:172.30.121.113:6800

Chain OVN-KUBE-ITP (1 references)
num   pkts bytes target     prot opt in     out     source               destination         

Chain OVN-KUBE-NODEPORT (2 references)
num   pkts bytes target     prot opt in     out     source               destination         
1        0     0 DNAT       6    --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type LOCAL tcp dpt:31659 to:172.30.138.30:50051
2        0     0 DNAT       6    --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type LOCAL tcp dpt:31571 to:172.30.142.195:443
3        0     0 DNAT       6    --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type LOCAL tcp dpt:30625 to:172.30.69.228:7004
4        0     0 DNAT       6    --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type LOCAL tcp dpt:31116 to:172.30.69.228:8444
5        0     0 DNAT       6    --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type LOCAL tcp dpt:30465 to:172.30.69.228:443
6        0     0 DNAT       6    --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type LOCAL tcp dpt:32632 to:172.30.69.228:80

Chain OVN-KUBE-SNAT-MGMTPORT (1 references)
num   pkts bytes target     prot opt in     out     source               destination         
1    7537K  452M SNAT       0    --  *      ovn-k8s-mp0  0.0.0.0/0            0.0.0.0/0            /* OVN SNAT to Management Port */ to:10.254.20.2

Chain SM-GN-EGRESS-CLUSTER (1 references)
num   pkts bytes target     prot opt in     out     source               destination         
1     556K   29M SNAT       0    --  *      *       10.254.0.0/16        0.0.0.0/0            mark match 0xc0000/0xc0000 to:242.1.0.1-242.1.0.8
2        0     0 SNAT       0    --  *      *       172.30.0.0/16        0.0.0.0/0            mark match 0xc0000/0xc0000 to:242.1.0.1-242.1.0.8

Chain SM-GN-EGRESS-HDLS-EPS (1 references)
num   pkts bytes target     prot opt in     out     source               destination         

Chain SM-GN-EGRESS-HDLS-PODS (1 references)
num   pkts bytes target     prot opt in     out     source               destination         

Chain SM-GN-EGRESS-NS (1 references)
num   pkts bytes target     prot opt in     out     source               destination         

Chain SM-GN-EGRESS-PODS (1 references)
num   pkts bytes target     prot opt in     out     source               destination         

Chain SUBMARINER-GN-EGRESS (1 references)
num   pkts bytes target     prot opt in     out     source               destination         
1    27924 1750K SUBMARINER-GN-MARK  0    --  *      *       0.0.0.0/0            0.0.0.0/0           
2    27924 1750K SM-GN-EGRESS-PODS  0    --  *      *       0.0.0.0/0            0.0.0.0/0           
3    27924 1750K SM-GN-EGRESS-HDLS-PODS  0    --  *      *       0.0.0.0/0            0.0.0.0/0           
4    27924 1750K SM-GN-EGRESS-HDLS-EPS  0    --  *      *       0.0.0.0/0            0.0.0.0/0           
5    27924 1750K SM-GN-EGRESS-NS  0    --  *      *       0.0.0.0/0            0.0.0.0/0           
6    27924 1750K SM-GN-EGRESS-CLUSTER  0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain SUBMARINER-GN-INGRESS (1 references)
num   pkts bytes target     prot opt in     out     source               destination         
1     1762 91624 DNAT       1    --  *      *       0.0.0.0/0            242.1.255.254        to:10.254.20.2

Chain SUBMARINER-GN-MARK (1 references)
num   pkts bytes target     prot opt in     out     source               destination         
1     1768 91936 MARK       0    --  *      *       0.0.0.0/0            242.0.0.0/16         MARK or 0xc0000

Chain SUBMARINER-POSTROUTING (1 references)
num   pkts bytes target     prot opt in     out     source               destination         
1    9329K  583M SUBMARINER-GN-EGRESS  0    --  *      *       0.0.0.0/0            0.0.0.0/0           
2        1    52 ACCEPT     0    --  *      *       0.0.0.0/0            242.0.0.0/16        
3    11760  707K ACCEPT     0    --  *      *       242.0.0.0/16         0.0.0.0/0