借用网上一张图,画的挺好~ 来自http://blog.csdn.net/xinghun_4/article/details/50492041 对应解释如下 [root@docker3 ~]# iptables -nL -t nat -v Chain PREROUTING (policy ACCEPT 2 packets, 1152 bytes) pkts bytes target prot opt in out source destination 10837 3999K KUBE-SERVICES all --…