xref: /linux-tools/misc/scripts/iptables/gen_vips_trie_iptablerules_batch.py (revision de922be4e919572d28577568db563e691d5e7702)
1*de922be4SDavid Wang# iptables -t nat -N services
2*de922be4SDavid Wang# iptables -t nat -A OUTPUT -d 10.10.0.0/16 -j services
3*de922be4SDavid Wang# iptables -t nat -N myservice
4*de922be4SDavid Wang# iptables -t nat -A myservice  -m statistic --mode random --probability 0.3333 -j DNAT --to-destination 172.18.1.3
5*de922be4SDavid Wang# iptables -t nat -A myservice  -m statistic --mode random --probability 0.5 -j DNAT --to-destination 172.18.1.4
6*de922be4SDavid Wang# iptables -t nat -A myservice  -j DNAT --to-destination 172.18.1.5
7*de922be4SDavid Wang
8*de922be4SDavid Wang
9*de922be4SDavid Wang
10*de922be4SDavid Wang# iptables -t nat -A OUTPUT -d 10.10.0.0/16 -j myservice
11*de922be4SDavid Wang
12*de922be4SDavid Wangprint "*nat"
13*de922be4SDavid Wangfor a in range(1, 101):
14*de922be4SDavid Wang    cc = "myservice_%d" % a
15*de922be4SDavid Wang    print ":%s - [0:0]" % cc
16*de922be4SDavid Wang
17*de922be4SDavid Wangfor a in range(1, 101):
18*de922be4SDavid Wang    cc = "myservice_%d" % a
19*de922be4SDavid Wang    print "-A services -d 10.10.%d.0/24 -j %s" % (a, cc)
20*de922be4SDavid Wang    for b in range(1, 101):
21*de922be4SDavid Wang        print "-A %s -d 10.10.%d.%d/32 -j myservice" % (cc, a, b)
22*de922be4SDavid Wang
23*de922be4SDavid Wangprint "COMMIT"
24*de922be4SDavid Wang
25