Hi Serguei, On Fri, Nov 29, 2019 at 08:13:21PM +0000, Serguei Bezverkhi (sbezverk) wrote: > @Phil, thanks so much for Concat suggestion. Any more points for optimization? If no, then I will move to nat portion of k8s iptables. Looks fine to me. I don't like the mark-based verdicts, but to validate those we need to see where the marks are set. Cheers, Phil