From fbde2bcb9a8a8fcf06cc6fe1675560cf46237e7b Mon Sep 17 00:00:00 2001 From: Albin Kerouanton Date: Wed, 20 Aug 2025 10:52:33 +0200 Subject: [PATCH] nftabler,nftablesdoc: stringify numerical dstnat prio MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit When nftablesdoc tests dump the state of nftables, the argument '-y' / '--numeric-priority' isn't used, so all priorities should be stringified. However, there's a bug in older versions of nftables that prevents the stringification of the 'dstnat' priority — it's currently dumped as '-100'. New versions fix that, and thus running these tests on Debian 13 fails because of this discrepancy with golden files. So, look for 'type nat hook output priority -100' and stringify the priority to ensure compatibility across versions of nft. Signed-off-by: Albin Kerouanton --- .../drivers/bridge/internal/nftabler/nftabler_test.go | 4 +++- .../cleaned,hairpin=false,wsl2mirrored=true__ip.golden | 2 +- .../testdata/TestNftabler/cleaned,hairpin=false__ip.golden | 2 +- .../testdata/TestNftabler/cleaned,hairpin=false__ip6.golden | 2 +- .../cleaned,hairpin=true,wsl2mirrored=true__ip.golden | 2 +- .../testdata/TestNftabler/cleaned,hairpin=true__ip.golden | 2 +- .../testdata/TestNftabler/cleaned,hairpin=true__ip6.golden | 2 +- ...at=false,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden | 2 +- ...alse,masq=false,snat=false,gwm=nat,bindlh=false__ip.golden | 2 +- ...lse,masq=false,snat=false,gwm=nat,bindlh=false__ip6.golden | 2 +- ...nat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...false,masq=false,snat=false,gwm=nat,bindlh=true__ip.golden | 2 +- ...alse,masq=false,snat=false,gwm=nat,bindlh=true__ip6.golden | 2 +- ...=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden | 2 +- ...lse,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden | 2 +- ...se,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden | 2 +- ...m=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...alse,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden | 2 +- ...lse,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden | 2 +- ...false,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden | 2 +- ...e,masq=false,snat=false,gwm=routed,bindlh=false__ip.golden | 2 +- ...,masq=false,snat=false,gwm=routed,bindlh=false__ip6.golden | 2 +- ...=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...se,masq=false,snat=false,gwm=routed,bindlh=true__ip.golden | 2 +- ...e,masq=false,snat=false,gwm=routed,bindlh=true__ip6.golden | 2 +- ...nat=true,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden | 2 +- ...false,masq=false,snat=true,gwm=nat,bindlh=false__ip.golden | 2 +- ...alse,masq=false,snat=true,gwm=nat,bindlh=false__ip6.golden | 2 +- ...snat=true,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...=false,masq=false,snat=true,gwm=nat,bindlh=true__ip.golden | 2 +- ...false,masq=false,snat=true,gwm=nat,bindlh=true__ip6.golden | 2 +- ...=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden | 2 +- ...alse,snat=true,gwm=nat-unprotected,bindlh=false__ip.golden | 2 +- ...lse,snat=true,gwm=nat-unprotected,bindlh=false__ip6.golden | 2 +- ...m=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...false,snat=true,gwm=nat-unprotected,bindlh=true__ip.golden | 2 +- ...alse,snat=true,gwm=nat-unprotected,bindlh=true__ip6.golden | 2 +- ...=true,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden | 2 +- ...se,masq=false,snat=true,gwm=routed,bindlh=false__ip.golden | 2 +- ...e,masq=false,snat=true,gwm=routed,bindlh=false__ip6.golden | 2 +- ...t=true,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...lse,masq=false,snat=true,gwm=routed,bindlh=true__ip.golden | 2 +- ...se,masq=false,snat=true,gwm=routed,bindlh=true__ip6.golden | 2 +- ...at=false,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden | 2 +- ...false,masq=true,snat=false,gwm=nat,bindlh=false__ip.golden | 2 +- ...alse,masq=true,snat=false,gwm=nat,bindlh=false__ip6.golden | 2 +- ...nat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...=false,masq=true,snat=false,gwm=nat,bindlh=true__ip.golden | 2 +- ...false,masq=true,snat=false,gwm=nat,bindlh=true__ip6.golden | 2 +- ...=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden | 2 +- ...rue,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden | 2 +- ...ue,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden | 2 +- ...m=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...true,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden | 2 +- ...rue,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden | 2 +- ...false,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden | 2 +- ...se,masq=true,snat=false,gwm=routed,bindlh=false__ip.golden | 2 +- ...e,masq=true,snat=false,gwm=routed,bindlh=false__ip6.golden | 2 +- ...=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...lse,masq=true,snat=false,gwm=routed,bindlh=true__ip.golden | 2 +- ...se,masq=true,snat=false,gwm=routed,bindlh=true__ip6.golden | 2 +- ...nat=true,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden | 2 +- ...=false,masq=true,snat=true,gwm=nat,bindlh=false__ip.golden | 2 +- ...false,masq=true,snat=true,gwm=nat,bindlh=false__ip6.golden | 2 +- ...snat=true,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...c=false,masq=true,snat=true,gwm=nat,bindlh=true__ip.golden | 2 +- ...=false,masq=true,snat=true,gwm=nat,bindlh=true__ip6.golden | 2 +- ...=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden | 2 +- ...true,snat=true,gwm=nat-unprotected,bindlh=false__ip.golden | 2 +- ...rue,snat=true,gwm=nat-unprotected,bindlh=false__ip6.golden | 2 +- ...m=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...=true,snat=true,gwm=nat-unprotected,bindlh=true__ip.golden | 2 +- ...true,snat=true,gwm=nat-unprotected,bindlh=true__ip6.golden | 2 +- ...=true,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden | 2 +- ...lse,masq=true,snat=true,gwm=routed,bindlh=false__ip.golden | 2 +- ...se,masq=true,snat=true,gwm=routed,bindlh=false__ip6.golden | 2 +- ...t=true,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...alse,masq=true,snat=true,gwm=routed,bindlh=true__ip.golden | 2 +- ...lse,masq=true,snat=true,gwm=routed,bindlh=true__ip6.golden | 2 +- ...at=false,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden | 2 +- ...true,masq=false,snat=false,gwm=nat,bindlh=false__ip.golden | 2 +- ...rue,masq=false,snat=false,gwm=nat,bindlh=false__ip6.golden | 2 +- ...nat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...=true,masq=false,snat=false,gwm=nat,bindlh=true__ip.golden | 2 +- ...true,masq=false,snat=false,gwm=nat,bindlh=true__ip6.golden | 2 +- ...=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden | 2 +- ...lse,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden | 2 +- ...se,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden | 2 +- ...m=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...alse,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden | 2 +- ...lse,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden | 2 +- ...false,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden | 2 +- ...e,masq=false,snat=false,gwm=routed,bindlh=false__ip.golden | 2 +- ...,masq=false,snat=false,gwm=routed,bindlh=false__ip6.golden | 2 +- ...=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...ue,masq=false,snat=false,gwm=routed,bindlh=true__ip.golden | 2 +- ...e,masq=false,snat=false,gwm=routed,bindlh=true__ip6.golden | 2 +- ...nat=true,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden | 2 +- ...=true,masq=false,snat=true,gwm=nat,bindlh=false__ip.golden | 2 +- ...true,masq=false,snat=true,gwm=nat,bindlh=false__ip6.golden | 2 +- ...snat=true,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...c=true,masq=false,snat=true,gwm=nat,bindlh=true__ip.golden | 2 +- ...=true,masq=false,snat=true,gwm=nat,bindlh=true__ip6.golden | 2 +- ...=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden | 2 +- ...alse,snat=true,gwm=nat-unprotected,bindlh=false__ip.golden | 2 +- ...lse,snat=true,gwm=nat-unprotected,bindlh=false__ip6.golden | 2 +- ...m=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...false,snat=true,gwm=nat-unprotected,bindlh=true__ip.golden | 2 +- ...alse,snat=true,gwm=nat-unprotected,bindlh=true__ip6.golden | 2 +- ...=true,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden | 2 +- ...ue,masq=false,snat=true,gwm=routed,bindlh=false__ip.golden | 2 +- ...e,masq=false,snat=true,gwm=routed,bindlh=false__ip6.golden | 2 +- ...t=true,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...rue,masq=false,snat=true,gwm=routed,bindlh=true__ip.golden | 2 +- ...ue,masq=false,snat=true,gwm=routed,bindlh=true__ip6.golden | 2 +- ...at=false,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden | 2 +- ...=true,masq=true,snat=false,gwm=nat,bindlh=false__ip.golden | 2 +- ...true,masq=true,snat=false,gwm=nat,bindlh=false__ip6.golden | 2 +- ...nat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...c=true,masq=true,snat=false,gwm=nat,bindlh=true__ip.golden | 2 +- ...=true,masq=true,snat=false,gwm=nat,bindlh=true__ip6.golden | 2 +- ...=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden | 2 +- ...rue,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden | 2 +- ...ue,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden | 2 +- ...m=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...true,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden | 2 +- ...rue,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden | 2 +- ...false,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden | 2 +- ...ue,masq=true,snat=false,gwm=routed,bindlh=false__ip.golden | 2 +- ...e,masq=true,snat=false,gwm=routed,bindlh=false__ip6.golden | 2 +- ...=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...rue,masq=true,snat=false,gwm=routed,bindlh=true__ip.golden | 2 +- ...ue,masq=true,snat=false,gwm=routed,bindlh=true__ip6.golden | 2 +- ...nat=true,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden | 2 +- ...c=true,masq=true,snat=true,gwm=nat,bindlh=false__ip.golden | 2 +- ...=true,masq=true,snat=true,gwm=nat,bindlh=false__ip6.golden | 2 +- ...snat=true,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...cc=true,masq=true,snat=true,gwm=nat,bindlh=true__ip.golden | 2 +- ...c=true,masq=true,snat=true,gwm=nat,bindlh=true__ip6.golden | 2 +- ...=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden | 2 +- ...true,snat=true,gwm=nat-unprotected,bindlh=false__ip.golden | 2 +- ...rue,snat=true,gwm=nat-unprotected,bindlh=false__ip6.golden | 2 +- ...m=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...=true,snat=true,gwm=nat-unprotected,bindlh=true__ip.golden | 2 +- ...true,snat=true,gwm=nat-unprotected,bindlh=true__ip6.golden | 2 +- ...=true,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden | 2 +- ...rue,masq=true,snat=true,gwm=routed,bindlh=false__ip.golden | 2 +- ...ue,masq=true,snat=true,gwm=routed,bindlh=false__ip6.golden | 2 +- ...t=true,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...true,masq=true,snat=true,gwm=routed,bindlh=true__ip.golden | 2 +- ...rue,masq=true,snat=true,gwm=routed,bindlh=true__ip6.golden | 2 +- ...false,internal=true,icc=false,wsl2mirrored=true__ip.golden | 2 +- .../hairpin=false,internal=true,icc=false__ip.golden | 2 +- .../hairpin=false,internal=true,icc=false__ip6.golden | 2 +- ...=false,internal=true,icc=true,wsl2mirrored=true__ip.golden | 2 +- .../hairpin=false,internal=true,icc=true__ip.golden | 2 +- .../hairpin=false,internal=true,icc=true__ip6.golden | 2 +- ...alse,masq=false,snat=false,gwm=nat,bindlh=false__ip.golden | 2 +- ...lse,masq=false,snat=false,gwm=nat,bindlh=false__ip6.golden | 2 +- ...nat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...false,masq=false,snat=false,gwm=nat,bindlh=true__ip.golden | 2 +- ...alse,masq=false,snat=false,gwm=nat,bindlh=true__ip6.golden | 2 +- ...lse,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden | 2 +- ...se,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden | 2 +- ...m=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...alse,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden | 2 +- ...lse,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden | 2 +- ...e,masq=false,snat=false,gwm=routed,bindlh=false__ip.golden | 2 +- ...,masq=false,snat=false,gwm=routed,bindlh=false__ip6.golden | 2 +- ...=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...se,masq=false,snat=false,gwm=routed,bindlh=true__ip.golden | 2 +- ...e,masq=false,snat=false,gwm=routed,bindlh=true__ip6.golden | 2 +- ...false,masq=false,snat=true,gwm=nat,bindlh=false__ip.golden | 2 +- ...alse,masq=false,snat=true,gwm=nat,bindlh=false__ip6.golden | 2 +- ...snat=true,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...=false,masq=false,snat=true,gwm=nat,bindlh=true__ip.golden | 2 +- ...false,masq=false,snat=true,gwm=nat,bindlh=true__ip6.golden | 2 +- ...alse,snat=true,gwm=nat-unprotected,bindlh=false__ip.golden | 2 +- ...lse,snat=true,gwm=nat-unprotected,bindlh=false__ip6.golden | 2 +- ...m=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...false,snat=true,gwm=nat-unprotected,bindlh=true__ip.golden | 2 +- ...alse,snat=true,gwm=nat-unprotected,bindlh=true__ip6.golden | 2 +- ...se,masq=false,snat=true,gwm=routed,bindlh=false__ip.golden | 2 +- ...e,masq=false,snat=true,gwm=routed,bindlh=false__ip6.golden | 2 +- ...t=true,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...lse,masq=false,snat=true,gwm=routed,bindlh=true__ip.golden | 2 +- ...se,masq=false,snat=true,gwm=routed,bindlh=true__ip6.golden | 2 +- ...false,masq=true,snat=false,gwm=nat,bindlh=false__ip.golden | 2 +- ...alse,masq=true,snat=false,gwm=nat,bindlh=false__ip6.golden | 2 +- ...nat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...=false,masq=true,snat=false,gwm=nat,bindlh=true__ip.golden | 2 +- ...false,masq=true,snat=false,gwm=nat,bindlh=true__ip6.golden | 2 +- ...rue,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden | 2 +- ...ue,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden | 2 +- ...m=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...true,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden | 2 +- ...rue,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden | 2 +- ...se,masq=true,snat=false,gwm=routed,bindlh=false__ip.golden | 2 +- ...e,masq=true,snat=false,gwm=routed,bindlh=false__ip6.golden | 2 +- ...=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...lse,masq=true,snat=false,gwm=routed,bindlh=true__ip.golden | 2 +- ...se,masq=true,snat=false,gwm=routed,bindlh=true__ip6.golden | 2 +- ...=false,masq=true,snat=true,gwm=nat,bindlh=false__ip.golden | 2 +- ...false,masq=true,snat=true,gwm=nat,bindlh=false__ip6.golden | 2 +- ...snat=true,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...c=false,masq=true,snat=true,gwm=nat,bindlh=true__ip.golden | 2 +- ...=false,masq=true,snat=true,gwm=nat,bindlh=true__ip6.golden | 2 +- ...true,snat=true,gwm=nat-unprotected,bindlh=false__ip.golden | 2 +- ...rue,snat=true,gwm=nat-unprotected,bindlh=false__ip6.golden | 2 +- ...m=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...=true,snat=true,gwm=nat-unprotected,bindlh=true__ip.golden | 2 +- ...true,snat=true,gwm=nat-unprotected,bindlh=true__ip6.golden | 2 +- ...lse,masq=true,snat=true,gwm=routed,bindlh=false__ip.golden | 2 +- ...se,masq=true,snat=true,gwm=routed,bindlh=false__ip6.golden | 2 +- ...t=true,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...alse,masq=true,snat=true,gwm=routed,bindlh=true__ip.golden | 2 +- ...lse,masq=true,snat=true,gwm=routed,bindlh=true__ip6.golden | 2 +- ...true,masq=false,snat=false,gwm=nat,bindlh=false__ip.golden | 2 +- ...rue,masq=false,snat=false,gwm=nat,bindlh=false__ip6.golden | 2 +- ...nat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...=true,masq=false,snat=false,gwm=nat,bindlh=true__ip.golden | 2 +- ...true,masq=false,snat=false,gwm=nat,bindlh=true__ip6.golden | 2 +- ...lse,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden | 2 +- ...se,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden | 2 +- ...m=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...alse,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden | 2 +- ...lse,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden | 2 +- ...e,masq=false,snat=false,gwm=routed,bindlh=false__ip.golden | 2 +- ...,masq=false,snat=false,gwm=routed,bindlh=false__ip6.golden | 2 +- ...=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...ue,masq=false,snat=false,gwm=routed,bindlh=true__ip.golden | 2 +- ...e,masq=false,snat=false,gwm=routed,bindlh=true__ip6.golden | 2 +- ...=true,masq=false,snat=true,gwm=nat,bindlh=false__ip.golden | 2 +- ...true,masq=false,snat=true,gwm=nat,bindlh=false__ip6.golden | 2 +- ...snat=true,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...c=true,masq=false,snat=true,gwm=nat,bindlh=true__ip.golden | 2 +- ...=true,masq=false,snat=true,gwm=nat,bindlh=true__ip6.golden | 2 +- ...alse,snat=true,gwm=nat-unprotected,bindlh=false__ip.golden | 2 +- ...lse,snat=true,gwm=nat-unprotected,bindlh=false__ip6.golden | 2 +- ...m=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...false,snat=true,gwm=nat-unprotected,bindlh=true__ip.golden | 2 +- ...alse,snat=true,gwm=nat-unprotected,bindlh=true__ip6.golden | 2 +- ...ue,masq=false,snat=true,gwm=routed,bindlh=false__ip.golden | 2 +- ...e,masq=false,snat=true,gwm=routed,bindlh=false__ip6.golden | 2 +- ...t=true,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...rue,masq=false,snat=true,gwm=routed,bindlh=true__ip.golden | 2 +- ...ue,masq=false,snat=true,gwm=routed,bindlh=true__ip6.golden | 2 +- ...=true,masq=true,snat=false,gwm=nat,bindlh=false__ip.golden | 2 +- ...true,masq=true,snat=false,gwm=nat,bindlh=false__ip6.golden | 2 +- ...nat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...c=true,masq=true,snat=false,gwm=nat,bindlh=true__ip.golden | 2 +- ...=true,masq=true,snat=false,gwm=nat,bindlh=true__ip6.golden | 2 +- ...rue,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden | 2 +- ...ue,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden | 2 +- ...m=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...true,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden | 2 +- ...rue,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden | 2 +- ...ue,masq=true,snat=false,gwm=routed,bindlh=false__ip.golden | 2 +- ...e,masq=true,snat=false,gwm=routed,bindlh=false__ip6.golden | 2 +- ...=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...rue,masq=true,snat=false,gwm=routed,bindlh=true__ip.golden | 2 +- ...ue,masq=true,snat=false,gwm=routed,bindlh=true__ip6.golden | 2 +- ...c=true,masq=true,snat=true,gwm=nat,bindlh=false__ip.golden | 2 +- ...=true,masq=true,snat=true,gwm=nat,bindlh=false__ip6.golden | 2 +- ...snat=true,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...cc=true,masq=true,snat=true,gwm=nat,bindlh=true__ip.golden | 2 +- ...c=true,masq=true,snat=true,gwm=nat,bindlh=true__ip6.golden | 2 +- ...true,snat=true,gwm=nat-unprotected,bindlh=false__ip.golden | 2 +- ...rue,snat=true,gwm=nat-unprotected,bindlh=false__ip6.golden | 2 +- ...m=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...=true,snat=true,gwm=nat-unprotected,bindlh=true__ip.golden | 2 +- ...true,snat=true,gwm=nat-unprotected,bindlh=true__ip6.golden | 2 +- ...rue,masq=true,snat=true,gwm=routed,bindlh=false__ip.golden | 2 +- ...ue,masq=true,snat=true,gwm=routed,bindlh=false__ip6.golden | 2 +- ...t=true,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden | 2 +- ...true,masq=true,snat=true,gwm=routed,bindlh=true__ip.golden | 2 +- ...rue,masq=true,snat=true,gwm=routed,bindlh=true__ip6.golden | 2 +- ...=true,internal=true,icc=false,wsl2mirrored=true__ip.golden | 2 +- .../hairpin=true,internal=true,icc=false__ip.golden | 2 +- .../hairpin=true,internal=true,icc=false__ip6.golden | 2 +- ...n=true,internal=true,icc=true,wsl2mirrored=true__ip.golden | 2 +- .../hairpin=true,internal=true,icc=true__ip.golden | 2 +- .../hairpin=true,internal=true,icc=true__ip6.golden | 2 +- .../network/bridge/nftablesdoc/generated/new-daemon.md | 2 +- .../network/bridge/nftablesdoc/generated/usernet-internal.md | 2 +- .../bridge/nftablesdoc/generated/usernet-portmap-lo.md | 2 +- .../bridge/nftablesdoc/generated/usernet-portmap-natunprot.md | 2 +- .../bridge/nftablesdoc/generated/usernet-portmap-noicc.md | 2 +- .../bridge/nftablesdoc/generated/usernet-portmap-noproxy.md | 4 ++-- .../bridge/nftablesdoc/generated/usernet-portmap-routed.md | 2 +- .../network/bridge/nftablesdoc/generated/usernet-portmap.md | 2 +- .../network/bridge/nftablesdoc/nftablesdoc_linux_test.go | 1 + 292 files changed, 295 insertions(+), 292 deletions(-) diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/nftabler_test.go b/daemon/libnetwork/drivers/bridge/internal/nftabler/nftabler_test.go index 597a4a43d5..f5a8520f37 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/nftabler_test.go +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/nftabler_test.go @@ -7,6 +7,7 @@ import ( "fmt" "net" "net/netip" + "strings" "testing" "github.com/moby/moby/v2/daemon/libnetwork/drivers/bridge/internal/firewaller" @@ -99,8 +100,9 @@ func testNftabler(t *testing.T, tn string, config firewaller.Config, netConfig f assert.Assert(t, is.Contains(res.Combined(), "No such file or directory")) return } + out := strings.ReplaceAll(res.Combined(), "type nat hook output priority -100", "type nat hook output priority dstnat") assert.Assert(t, res.Error) - golden.Assert(t, res.Combined(), name+"__"+family+".golden") + golden.Assert(t, out, name+"__"+family+".golden") } makePB := func(hip string, cip netip.Addr) types.PortBinding { diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/cleaned,hairpin=false,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/cleaned,hairpin=false,wsl2mirrored=true__ip.golden index 2364b7366a..42a31fac97 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/cleaned,hairpin=false,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/cleaned,hairpin=false,wsl2mirrored=true__ip.golden @@ -22,7 +22,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/cleaned,hairpin=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/cleaned,hairpin=false__ip.golden index 420c8e517c..283335d9a6 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/cleaned,hairpin=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/cleaned,hairpin=false__ip.golden @@ -22,7 +22,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/cleaned,hairpin=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/cleaned,hairpin=false__ip6.golden index 3322d3478a..5bc1e07137 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/cleaned,hairpin=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/cleaned,hairpin=false__ip6.golden @@ -22,7 +22,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/cleaned,hairpin=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/cleaned,hairpin=true,wsl2mirrored=true__ip.golden index b2a46538e7..a1f201dfd6 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/cleaned,hairpin=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/cleaned,hairpin=true,wsl2mirrored=true__ip.golden @@ -22,7 +22,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/cleaned,hairpin=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/cleaned,hairpin=true__ip.golden index b2a46538e7..a1f201dfd6 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/cleaned,hairpin=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/cleaned,hairpin=true__ip.golden @@ -22,7 +22,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/cleaned,hairpin=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/cleaned,hairpin=true__ip6.golden index 470902e9c4..c836314cd9 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/cleaned,hairpin=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/cleaned,hairpin=true__ip6.golden @@ -22,7 +22,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden index 85bedb10fb..1212cd7295 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=false__ip.golden index f574ff867f..b2f32a082b 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=false__ip6.golden index 85496e26a0..173670eba8 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden index f515f8081b..0658881cb6 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=true__ip.golden index d2da78b3a4..7b34f144bb 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=true__ip6.golden index bfc05d85c7..9677d8ec6a 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden index 190c26ce78..1c543a9d2c 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden index 105a82ab4d..b8fec130aa 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden index 2b70a4833e..e957ecd656 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden index 6684856671..958792c1cf 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden index c61296c0d8..6b3f27dd48 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden index e5e101b871..a60a2b7d2a 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden index 4a4fe0e689..c3c4146460 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=false__ip.golden index 9eb03883f1..184e374d74 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=false__ip6.golden index d532997d49..32c1c9452d 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden index 05b21bd2cf..af40a90b99 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=true__ip.golden index 25766aba50..1996fb6744 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=true__ip6.golden index 4d3c334e44..2761a56050 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden index 85bedb10fb..1212cd7295 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=false__ip.golden index f574ff867f..b2f32a082b 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=false__ip6.golden index 85496e26a0..173670eba8 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden index f515f8081b..0658881cb6 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=true__ip.golden index d2da78b3a4..7b34f144bb 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=true__ip6.golden index bfc05d85c7..9677d8ec6a 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden index 190c26ce78..1c543a9d2c 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=false__ip.golden index 105a82ab4d..b8fec130aa 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=false__ip6.golden index 2b70a4833e..e957ecd656 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden index 6684856671..958792c1cf 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=true__ip.golden index c61296c0d8..6b3f27dd48 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=true__ip6.golden index e5e101b871..a60a2b7d2a 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden index 4a4fe0e689..c3c4146460 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=false__ip.golden index 9eb03883f1..184e374d74 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=false__ip6.golden index d532997d49..32c1c9452d 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden index 05b21bd2cf..af40a90b99 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=true__ip.golden index 25766aba50..1996fb6744 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=true__ip6.golden index 4d3c334e44..2761a56050 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden index e37ead0041..95cb94b517 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=false__ip.golden index 1470671435..84be443f1e 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=false__ip6.golden index c719c0c263..b677259d34 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden index baab945ba7..07174bfae0 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=true__ip.golden index 8b98dbfb7d..42a770cbc3 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=true__ip6.golden index bd5901e6cf..558c615493 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden index b5375f0804..95afd99df7 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden index 71a7198e3d..37232d9e0c 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden index 4e1fa438f3..f4a0ea1338 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden index ee6b5b8ee4..6e5ceb93ca 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden index 1ff6f79972..af6f332c41 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden index df7673a522..8bdb34f41e 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden index 4a4fe0e689..c3c4146460 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=false__ip.golden index 9eb03883f1..184e374d74 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=false__ip6.golden index d532997d49..32c1c9452d 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden index 05b21bd2cf..af40a90b99 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=true__ip.golden index 25766aba50..1996fb6744 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=true__ip6.golden index 4d3c334e44..2761a56050 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden index e7583a815a..b6040d96f0 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=false__ip.golden index 3e570c7ee8..eb938972bc 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=false__ip6.golden index 19185f69a8..85c56b1716 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden index 0c4957b6b4..40861c7c0c 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=true__ip.golden index 6d841c68af..3098db5f1f 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=true__ip6.golden index 3b5be4727c..85a6c48fc3 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden index 6f43331750..e5179ef80e 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=false__ip.golden index df395da8ee..7f3f4cfe64 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=false__ip6.golden index 438eb64798..b34e27b8cf 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden index fa67edfa74..b10a712c75 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=true__ip.golden index 8635665131..79d6128067 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=true__ip6.golden index c50c9bb820..7455619fef 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden index 4a4fe0e689..c3c4146460 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=false__ip.golden index 9eb03883f1..184e374d74 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=false__ip6.golden index d532997d49..32c1c9452d 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden index 05b21bd2cf..af40a90b99 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=true__ip.golden index 25766aba50..1996fb6744 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=true__ip6.golden index 4d3c334e44..2761a56050 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden index 0c4b2c3402..81093d1604 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=false__ip.golden index 3f7fe5e69a..e571f83b74 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=false__ip6.golden index 1b88ef47b7..8526d24d9a 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden index d1a6f6c1e1..bcf953ce71 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=true__ip.golden index 8ca8b3b345..b3796b1185 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=true__ip6.golden index 739b91b64f..a2aa043136 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden index 80a6e4c634..539b2b7966 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden index 58db782f04..1ad3528171 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden index ef6fa51d11..74ad16f7ac 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden index 0cf12ff9d9..b26472c569 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden index f3885e5329..593f95a691 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden index 235ca42dfa..be252aff07 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden index 0801ed4ff5..eeb7ddbff8 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=false__ip.golden index d7a7ed8f74..931371f36e 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=false__ip6.golden index a373860066..500735210c 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden index d16b995a26..55345551d1 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=true__ip.golden index b86ddf2f16..8594f3d7f4 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=true__ip6.golden index 0a5962adad..b57207a101 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden index 0c4b2c3402..81093d1604 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=false__ip.golden index 3f7fe5e69a..e571f83b74 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=false__ip6.golden index 1b88ef47b7..8526d24d9a 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden index d1a6f6c1e1..bcf953ce71 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=true__ip.golden index 8ca8b3b345..b3796b1185 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=true__ip6.golden index 739b91b64f..a2aa043136 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden index 80a6e4c634..539b2b7966 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=false__ip.golden index 58db782f04..1ad3528171 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=false__ip6.golden index ef6fa51d11..74ad16f7ac 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden index 0cf12ff9d9..b26472c569 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=true__ip.golden index f3885e5329..593f95a691 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=true__ip6.golden index 235ca42dfa..be252aff07 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden index 0801ed4ff5..eeb7ddbff8 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=false__ip.golden index d7a7ed8f74..931371f36e 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=false__ip6.golden index a373860066..500735210c 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden index d16b995a26..55345551d1 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=true__ip.golden index b86ddf2f16..8594f3d7f4 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=true__ip6.golden index 0a5962adad..b57207a101 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden index 77f4787020..afbe341811 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=false__ip.golden index af251a9f59..f477faeb8a 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=false__ip6.golden index 80caa698c9..72e750d9cc 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden index bee4ab26c5..a8348a5a38 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=true__ip.golden index ecb9ef15ca..3bb98882f5 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=true__ip6.golden index 2a72ae3753..39fb6c000c 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden index aca2ebacc3..8b1a8a39e0 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden index d0ca416389..3dd3456ca4 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden index fda3ede9c5..01085504a6 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden index 02d81f2767..34df4d8dc1 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden index cc6168a556..4784a2ac24 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden index 967198bfd5..e93c82bda0 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden index 0801ed4ff5..eeb7ddbff8 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=false__ip.golden index d7a7ed8f74..931371f36e 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=false__ip6.golden index a373860066..500735210c 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden index d16b995a26..55345551d1 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=true__ip.golden index b86ddf2f16..8594f3d7f4 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=true__ip6.golden index 0a5962adad..b57207a101 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden index af2b860399..223fec172a 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=false__ip.golden index 89fbba1089..ba90b117c6 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=false__ip6.golden index aec74a97ae..05f36832d8 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden index b6d115472a..ba7d66c182 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=true__ip.golden index 10f2cb7a55..a8c1d2c812 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=true__ip6.golden index 5c35880d17..88ba768fbd 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden index 807654c27f..4df471dd20 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=false__ip.golden index 4ff9d9eed3..76d42056c8 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=false__ip6.golden index 21e7617aa9..4d1df7b239 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden index 55f5b826c8..468dccd5be 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=true__ip.golden index 341ad41ee7..3cc1efd9a8 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=true__ip6.golden index fb293eeb16..f21d2a1462 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden index 0801ed4ff5..eeb7ddbff8 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=false__ip.golden index d7a7ed8f74..931371f36e 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=false__ip6.golden index a373860066..500735210c 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden index d16b995a26..55345551d1 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=true__ip.golden index b86ddf2f16..8594f3d7f4 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=true__ip6.golden index 0a5962adad..b57207a101 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=true,icc=false,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=true,icc=false,wsl2mirrored=true__ip.golden index 9f955fcc6f..bbde401e53 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=true,icc=false,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=true,icc=false,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=true,icc=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=true,icc=false__ip.golden index 417cc75b1e..40a1fd8bba 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=true,icc=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=true,icc=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=true,icc=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=true,icc=false__ip6.golden index a5aefae7ab..411ad9fbc9 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=true,icc=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=true,icc=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=true,icc=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=true,icc=true,wsl2mirrored=true__ip.golden index f9162632d6..966d12a7d4 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=true,icc=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=true,icc=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=true,icc=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=true,icc=true__ip.golden index aeff4ff469..86a6d99177 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=true,icc=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=true,icc=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=true,icc=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=true,icc=true__ip6.golden index 277fddc12f..96c271a53d 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=true,icc=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=true,icc=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=false__ip.golden index 7afaaea819..91073953bd 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=false__ip6.golden index ebccb6dac5..1e6a6089ca 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden index 7cd3275811..4b33f3ca9e 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=true__ip.golden index 0cf6b9c8bd..48251eac9c 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=true__ip6.golden index 3815cbfe40..dc5db323f5 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden index dace52d8fc..6951e9dd61 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden index 0fcd915fa1..2e3b3ebea9 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden index c814709d30..92d6198636 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden index 0edf5660be..6a6bc9ec2a 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden index 78d1669553..d23adea038 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=false__ip.golden index 4459f37810..b15bd8029e 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=false__ip6.golden index fc63ce3a39..a125b4dcce 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden index 472c33a8c8..05925f41b1 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=true__ip.golden index 22421c25c0..aecdb02f38 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=true__ip6.golden index b97009e4f2..2f38e2bdb0 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=false__ip.golden index 3ab66fa04f..03f3cc5149 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=false__ip6.golden index 431c015754..8dc109ed7a 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden index dc6608a4ad..c53eeb7c1e 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=true__ip.golden index 6bb3c0c024..543152d172 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=true__ip6.golden index 2879a13883..0caf13e95f 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=false__ip.golden index 329166f8ba..24288b8538 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=false__ip6.golden index dd88f04537..143ce5cea3 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden index 72e34628c1..b214139f11 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=true__ip.golden index e5867e7ae2..58be569c65 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=true__ip6.golden index 3c8ff57595..54d051a902 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=false__ip.golden index 58196f5b60..fd457c1b46 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=false__ip6.golden index 183e5506a1..28eb2a301f 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden index 9c7cb05439..b0d08eef40 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=true__ip.golden index 672b9f51ad..bebe1db84d 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=true__ip6.golden index d7b9982799..d7ef041ad6 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=false__ip.golden index 0942b447f6..9fc82bad23 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=false__ip6.golden index 3405d24c09..00f387d816 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden index 6e8bfeb25d..5394d38113 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=true__ip.golden index 0e00c144f1..29e7cdf1f7 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=true__ip6.golden index c3c8d27c90..514c341d5d 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden index 624cb6a217..13a267070e 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden index 06e93120d3..595b30dcd4 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden index cd68bb0a37..5e0b25fd61 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden index 8beeb1de37..6aae8283ce 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden index f8c824309f..4e2971b2ab 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=false__ip.golden index 4459f37810..b15bd8029e 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=false__ip6.golden index fc63ce3a39..a125b4dcce 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden index 472c33a8c8..05925f41b1 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=true__ip.golden index 22421c25c0..aecdb02f38 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=true__ip6.golden index b97009e4f2..2f38e2bdb0 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=false__ip.golden index 82ecd5bc2d..79cadb7247 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=false__ip6.golden index 3a138c76eb..1b7ed7f561 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden index 5f34b42a06..231f994318 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=true__ip.golden index f51054b6f3..76277da8d3 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=true__ip6.golden index 7fbcb6f13e..bcf9043ff3 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=false__ip.golden index 4573d235ed..d2a89a796c 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=false__ip6.golden index 494c3d69f3..ac4aa61c8e 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden index b06a6710d3..857b9aeed4 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=true__ip.golden index b0f11e417e..e521f42246 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=true__ip6.golden index b7404b35da..fd56cf83e7 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=false__ip.golden index 58196f5b60..fd457c1b46 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=false__ip6.golden index 183e5506a1..28eb2a301f 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden index 9c7cb05439..b0d08eef40 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=true__ip.golden index 672b9f51ad..bebe1db84d 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=true__ip6.golden index d7b9982799..d7ef041ad6 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=false__ip.golden index 106f0542c2..179155329c 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=false__ip6.golden index 30f01fba20..79c37a4c56 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden index 9a702dac20..c3aeeef02b 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=true__ip.golden index 7c8d8deb35..7a499b6272 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=true__ip6.golden index 14eb9351ec..873cb91227 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden index 2b6e0431a6..d2ca97b4b2 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden index 3d06dbb930..41f30cd1fc 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden index 7e52c614da..e5b02c7c24 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden index 2838667c58..062c76110b 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden index f1ac2827bf..df116161d2 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=false__ip.golden index a5cfc7d88b..70a7183b17 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=false__ip6.golden index 4ed49c31e9..d985f39784 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden index e48a264f03..744e3f5a81 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=true__ip.golden index 1e6952d3ec..9bc5d46eaf 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=true__ip6.golden index 0552e2019f..348b108f17 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=false__ip.golden index dd57b75f63..0d0fbc5246 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=false__ip6.golden index e595ee9602..5b88274144 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden index 6860c90bee..8aee873833 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=true__ip.golden index affb70a075..37fd2f2275 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=true__ip6.golden index c41c83d74a..61aed4d00c 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=false__ip.golden index 387fd33eba..863f492ab0 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=false__ip6.golden index 4e8a231811..58ec595fd9 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden index ea8074ae7e..cf85ab07b3 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=true__ip.golden index a22a13395a..df60909d23 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=true__ip6.golden index 8369a62594..80fd282abe 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=nat-unprotected,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=false__ip.golden index e8e43f5535..3557dd5c01 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=false__ip6.golden index 2321802a5f..5e46a153b7 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden index 0ee843bfba..b048869a1b 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=true__ip.golden index 045ceb2289..6927cf7eda 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=true__ip6.golden index f06adbaee9..ab9a1977fd 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=false,snat=true,gwm=routed,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=false__ip.golden index a1a6f9e6a5..0ac656a822 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=false__ip6.golden index 3a03ff2e9c..23ffd02745 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden index 9fb34d5dc1..b5a9c7e8a3 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=true__ip.golden index b10a8569cf..7bacc19ff7 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=true__ip6.golden index d339210576..d49cbd3a68 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=nat,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden index f88627a073..6a7f2f47ff 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden index b9bd41906e..df1e06cb6f 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden index 7890c8e896..a202a22a4e 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden index ef223ee185..8cfa2bb4a3 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden index 60eb60d3b0..560e712cfa 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=false__ip.golden index a5cfc7d88b..70a7183b17 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=false__ip6.golden index 4ed49c31e9..d985f39784 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden index e48a264f03..744e3f5a81 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=true__ip.golden index 1e6952d3ec..9bc5d46eaf 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=true__ip6.golden index 0552e2019f..348b108f17 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=false,gwm=routed,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=false__ip.golden index 540eaf59ce..9975bbee86 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=false__ip6.golden index e680906cb2..61c5183212 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden index 7adc980005..b593ed8301 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=true__ip.golden index c8cba4b5a3..97e2ca9add 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=true__ip6.golden index 93d7959d62..34ca2595af 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=nat,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=false__ip.golden index e1e58bebd9..6d93bdedf6 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=false__ip6.golden index e91a16f8a2..a8f953a95e 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden index ec4ead35b3..7ab3f61e22 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=true__ip.golden index e2c4dd461f..6b2044d3d9 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=true__ip6.golden index b5e62d63a9..bb4870e87a 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=nat-unprotected,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=false__ip.golden index e8e43f5535..3557dd5c01 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=false__ip6.golden index 2321802a5f..5e46a153b7 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden index 0ee843bfba..b048869a1b 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=true__ip.golden index 045ceb2289..6927cf7eda 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=true__ip6.golden index f06adbaee9..ab9a1977fd 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=false,icc=true,masq=true,snat=true,gwm=routed,bindlh=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=true,icc=false,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=true,icc=false,wsl2mirrored=true__ip.golden index 35796ca461..61058436c0 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=true,icc=false,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=true,icc=false,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=true,icc=false__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=true,icc=false__ip.golden index 35796ca461..61058436c0 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=true,icc=false__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=true,icc=false__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=true,icc=false__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=true,icc=false__ip6.golden index cdb0a791ec..545a4bd8eb 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=true,icc=false__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=true,icc=false__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=true,icc=true,wsl2mirrored=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=true,icc=true,wsl2mirrored=true__ip.golden index 1d02a3da8e..82ec09d722 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=true,icc=true,wsl2mirrored=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=true,icc=true,wsl2mirrored=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=true,icc=true__ip.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=true,icc=true__ip.golden index 1d02a3da8e..82ec09d722 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=true,icc=true__ip.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=true,icc=true__ip.golden @@ -26,7 +26,7 @@ table ip docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=true,icc=true__ip6.golden b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=true,icc=true__ip6.golden index bee3ccec32..8d874ed69b 100644 --- a/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=true,icc=true__ip6.golden +++ b/daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=true,internal=true,icc=true__ip6.golden @@ -26,7 +26,7 @@ table ip6 docker-bridges { } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output } diff --git a/integration/network/bridge/nftablesdoc/generated/new-daemon.md b/integration/network/bridge/nftablesdoc/generated/new-daemon.md index 92e93a20ab..5a3aef0d3a 100644 --- a/integration/network/bridge/nftablesdoc/generated/new-daemon.md +++ b/integration/network/bridge/nftablesdoc/generated/new-daemon.md @@ -35,7 +35,7 @@ are then added. } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter jump nat-prerouting-and-output } diff --git a/integration/network/bridge/nftablesdoc/generated/usernet-internal.md b/integration/network/bridge/nftablesdoc/generated/usernet-internal.md index 96db43f4a9..3301c55e50 100644 --- a/integration/network/bridge/nftablesdoc/generated/usernet-internal.md +++ b/integration/network/bridge/nftablesdoc/generated/usernet-internal.md @@ -61,7 +61,7 @@ Most rules are the same as the network with [external access][0]: } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter jump nat-prerouting-and-output } diff --git a/integration/network/bridge/nftablesdoc/generated/usernet-portmap-lo.md b/integration/network/bridge/nftablesdoc/generated/usernet-portmap-lo.md index 80ea3ec598..fdaa71fd2e 100644 --- a/integration/network/bridge/nftablesdoc/generated/usernet-portmap-lo.md +++ b/integration/network/bridge/nftablesdoc/generated/usernet-portmap-lo.md @@ -46,7 +46,7 @@ Most rules are the same as for a port published to a regular [host address][0]: } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter jump nat-prerouting-and-output } diff --git a/integration/network/bridge/nftablesdoc/generated/usernet-portmap-natunprot.md b/integration/network/bridge/nftablesdoc/generated/usernet-portmap-natunprot.md index 646a72af36..a32492ce41 100644 --- a/integration/network/bridge/nftablesdoc/generated/usernet-portmap-natunprot.md +++ b/integration/network/bridge/nftablesdoc/generated/usernet-portmap-natunprot.md @@ -47,7 +47,7 @@ Most rules are the same as the [nat mode network][1]: } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter jump nat-prerouting-and-output } diff --git a/integration/network/bridge/nftablesdoc/generated/usernet-portmap-noicc.md b/integration/network/bridge/nftablesdoc/generated/usernet-portmap-noicc.md index e079aa172e..770e0a919e 100644 --- a/integration/network/bridge/nftablesdoc/generated/usernet-portmap-noicc.md +++ b/integration/network/bridge/nftablesdoc/generated/usernet-portmap-noicc.md @@ -47,7 +47,7 @@ Most rules are the same as the network with [icc enabled][0]: } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter jump nat-prerouting-and-output } diff --git a/integration/network/bridge/nftablesdoc/generated/usernet-portmap-noproxy.md b/integration/network/bridge/nftablesdoc/generated/usernet-portmap-noproxy.md index 13185aa92d..95b684634a 100644 --- a/integration/network/bridge/nftablesdoc/generated/usernet-portmap-noproxy.md +++ b/integration/network/bridge/nftablesdoc/generated/usernet-portmap-noproxy.md @@ -48,7 +48,7 @@ Most rules are the same as the network with the [proxy enabled][0]: } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter jump nat-prerouting-and-output } @@ -124,7 +124,7 @@ loopback address by a container in another network - there's no proxy to catch them ... chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; fib daddr type local counter jump nat-prerouting-and-output } diff --git a/integration/network/bridge/nftablesdoc/generated/usernet-portmap-routed.md b/integration/network/bridge/nftablesdoc/generated/usernet-portmap-routed.md index 3de842b16a..62ef0c159f 100644 --- a/integration/network/bridge/nftablesdoc/generated/usernet-portmap-routed.md +++ b/integration/network/bridge/nftablesdoc/generated/usernet-portmap-routed.md @@ -47,7 +47,7 @@ Most rules are the same as the [nat mode network][1]: } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter jump nat-prerouting-and-output } diff --git a/integration/network/bridge/nftablesdoc/generated/usernet-portmap.md b/integration/network/bridge/nftablesdoc/generated/usernet-portmap.md index 27a54bca03..d88ff341cd 100644 --- a/integration/network/bridge/nftablesdoc/generated/usernet-portmap.md +++ b/integration/network/bridge/nftablesdoc/generated/usernet-portmap.md @@ -43,7 +43,7 @@ The `ip docker-bridges` table is updated as follows: } chain nat-OUTPUT { - type nat hook output priority -100; policy accept; + type nat hook output priority dstnat; policy accept; ip daddr != 127.0.0.0/8 fib daddr type local counter jump nat-prerouting-and-output } diff --git a/integration/network/bridge/nftablesdoc/nftablesdoc_linux_test.go b/integration/network/bridge/nftablesdoc/nftablesdoc_linux_test.go index 49faf09663..3d665770bd 100644 --- a/integration/network/bridge/nftablesdoc/nftablesdoc_linux_test.go +++ b/integration/network/bridge/nftablesdoc/nftablesdoc_linux_test.go @@ -380,6 +380,7 @@ func pollService(ctx context.Context, t *testing.T, c *client.Client, host netwo func runNftables(t *testing.T, host networking.Host) map[string]string { res := map[string]string{} out := host.MustRun(t, "nft", "-s", "list", "table", "ip", "docker-bridges") + out = strings.ReplaceAll(out, "type nat hook output priority -100", "type nat hook output priority dstnat") // Indent the result, so that it's treated as preformatted markdown. res["Ruleset4"] = " " + strings.ReplaceAll(out, "\n", "\n ")