CanUseIPTablesProxier returns true if we should use the iptables Proxier instead of the "classic" userspace Proxier.

CleanupLeftovers removes all iptables rules and chains created by the Proxier It returns true if an error was encountered.

NewProxier returns a new Proxier given an iptables Interface instance.

KubeMarkDropChain is the mark-for-drop chain.

KubeMarkMasqChain is the mark-for-masquerade chain.

LinuxKernelCompatTester is the Linux implementation of KernelCompatTester.

Proxier is an iptables based proxy for connections between a localhost:lport and services that provide the actual backends.

KernelCompatTester tests whether the required kernel capabilities are present to run the iptables proxier.