### iptable-rules ip netns exec qrouter-4eb18658-d7f9-4d67-9db2-e11e8a01b8b0 iptables -L -nvx Chain INPUT (policy ACCEPT 28 packets, 3678 bytes) pkts bytes target prot opt in out source destination 208 18598 neutron-l3-agent-INPUT all -- * * 0.0.0.0/0 0.0.0.0/0 Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 neutron-filter-top all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 neutron-l3-agent-FORWARD all -- * * 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy ACCEPT 166 packets, 14820 bytes) pkts bytes target prot opt in out source destination 166 14820 neutron-filter-top all -- * * 0.0.0.0/0 0.0.0.0/0 166 14820 neutron-l3-agent-OUTPUT all -- * * 0.0.0.0/0 0.0.0.0/0 Chain neutron-filter-top (2 references) pkts bytes target prot opt in out source destination 166 14820 neutron-l3-agent-local all -- * * 0.0.0.0/0 0.0.0.0/0 Chain neutron-l3-agent-FORWARD (1 references) pkts bytes target prot opt in out source destination Chain neutron-l3-agent-INPUT (1 references) pkts bytes target prot opt in out source destination 180 14920 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x1 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:9697 Chain neutron-l3-agent-OUTPUT (1 references) pkts bytes target prot opt in out source destination Chain neutron-l3-agent-local (1 references) pkts bytes target prot opt in out source destination ### NAT TABLE ip netns exec qrouter-4eb18658-d7f9-4d67-9db2-e11e8a01b8b0 iptables -L -t nat -nvx Chain PREROUTING (policy ACCEPT 4 packets, 803 bytes) pkts bytes target prot opt in out source destination 34 2603 neutron-l3-agent-PREROUTING all -- * * 0.0.0.0/0 0.0.0.0/0 Chain INPUT (policy ACCEPT 34 packets, 2603 bytes) pkts bytes target prot opt in out source destination Chain OUTPUT (policy ACCEPT 11 packets, 800 bytes) pkts bytes target prot opt in out source destination 11 800 neutron-l3-agent-OUTPUT all -- * * 0.0.0.0/0 0.0.0.0/0 Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 11 800 neutron-l3-agent-POSTROUTING all -- * * 0.0.0.0/0 0.0.0.0/0 11 800 neutron-postrouting-bottom all -- * * 0.0.0.0/0 0.0.0.0/0 Chain neutron-l3-agent-OUTPUT (1 references) pkts bytes target prot opt in out source destination 0 0 DNAT all -- * * 0.0.0.0/0 203.0.113.103 to:192.168.1.31 0 0 DNAT all -- * * 0.0.0.0/0 203.0.113.104 to:192.168.1.33 Chain neutron-l3-agent-POSTROUTING (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- !qg-bd2c79d2-27 !qg-bd2c79d2-27 0.0.0.0/0 0.0.0.0/0 ! ctstate DNAT Chain neutron-l3-agent-PREROUTING (1 references) pkts bytes target prot opt in out source destination 0 0 REDIRECT tcp -- qr-+ * 0.0.0.0/0 169.254.169.254 tcp dpt:80 redir ports 9697 0 0 DNAT all -- * * 0.0.0.0/0 203.0.113.103 to:192.168.1.31 0 0 DNAT all -- * * 0.0.0.0/0 203.0.113.104 to:192.168.1.33 Chain neutron-l3-agent-float-snat (1 references) pkts bytes target prot opt in out source destination 0 0 SNAT all -- * * 192.168.1.31 0.0.0.0/0 to:203.0.113.103 0 0 SNAT all -- * * 192.168.1.33 0.0.0.0/0 to:203.0.113.104 Chain neutron-l3-agent-snat (1 references) pkts bytes target prot opt in out source destination 11 800 neutron-l3-agent-float-snat all -- * * 0.0.0.0/0 0.0.0.0/0 11 800 SNAT all -- * qg-bd2c79d2-27 0.0.0.0/0 0.0.0.0/0 to:203.0.113.101 0 0 SNAT all -- * * 0.0.0.0/0 0.0.0.0/0 mark match ! 0x2 ctstate DNAT to:203.0.113.101 Chain neutron-postrouting-bottom (1 references) pkts bytes target prot opt in out source destination 7 504 neutron-l3-agent-snat all -- * * 0.0.0.0/0 0.0.0.0/0 /* Perform source NAT on outgoing traffic. */