kubernetes/pkg/kubelet/kubelet_network_linux.go

const KubeIPTablesHintChain …

const KubeFirewallChain …

func (kl *Kubelet) initNetworkUtil() { … }

// syncIPTablesRules ensures the KUBE-IPTABLES-HINT chain exists, and the martian packet
// protection rule is installed.
func (kl *Kubelet) syncIPTablesRules(iptClient utiliptables.Interface) bool { … }