Mangle is used for modifications to specific packets (refer to corrupted packets).NAT is used for network address translation (e.g., port forwarding).The filter is the default table used to house all firewall-related operations.Packets in RAW are not tracked by the system. The iptables version used in the Init container is v1.6.0 and contains 5 tables. The following figure shows the iptables call chain. netfilter is located in the kernel space and has not only network address conversion, but also packet content modification and packet filtering firewall functions.īefore learning about iptables for Init container initialization, let’s go over iptables and rule configuration. netfilter is located in the user space and is part of netfilter. Iptables is a management tool for netfilter, the firewall software in the Linux kernel. This article will give you a brief introduction to iptbles.

Understanding iptables is very important for us to understand how Istio works. iptables is used by default in Istio for transparent traffic hijacking. Iptables is an important feature in the Linux kernel and has a wide range of applications.

Iptables input