iptables -t nat -A ISTIO_REDIRECT -p tcp -j REDIRECT --to-ports 15001
iptables -t nat -A ISTIO_IN_REDIRECT -p tcp -j REDIRECT --to-ports 15006
iptables -t nat -A PREROUTING -p tcp -j ISTIO_INBOUND
iptables -t nat -A ISTIO_INBOUND -p tcp --dport 4000 -j ISTIO_IN_REDIRECT
iptables -t nat -A ISTIO_INBOUND -p tcp --dport 5000 -j ISTIO_IN_REDIRECT
iptables -t nat -A OUTPUT -p tcp -j ISTIO_OUTPUT
iptables -t nat -A ISTIO_OUTPUT -o lo -s 127.0.0.6/32 -j RETURN

The `GORISCV64` environment variable defaults to `rva20u64`.

### Wasm {#wasm}

<!-- go.dev/issue/63718 -->
The `go_wasip1_wasm_exec` script in `GOROOT/misc/wasm` has dropped support

  if [[ "$(get-num-nodes)" -gt 1000 ]]; then
    suggested_range="10.40.0.0/21"
  fi
  if [[ "$(get-num-nodes)" -gt 2000 ]]; then
    suggested_range="10.40.0.0/20"
  fi
  if [[ "$(get-num-nodes)" -gt 4000 ]]; then
    suggested_range="10.40.0.0/19"
  fi
  echo "${suggested_range}"
}

function get-cluster-ip-range {
  local suggested_range="10.64.0.0/14"
  if [[ "$(get-num-nodes)" -gt 1000 ]]; then

GoStart dt=16 g=84 g_seq=1
GoStop dt=2565 reason_string=20 stack=9
GoStart dt=17 g=84 g_seq=2
GoBlock dt=886 reason_string=13 stack=11
ProcStop dt=2581
ProcStart dt=17 p=1 p_seq=1
ProcStop dt=4400
ProcStart dt=16 p=1 p_seq=2
GoStart dt=24 g=87 g_seq=3
GCMarkAssistEnd dt=8
HeapAlloc dt=70 heapalloc_value=191782336
GCMarkAssistBegin dt=85 stack=3
GoBlock dt=1055 reason_string=13 stack=11

00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 32 cc a9  |.............2..|
00000050  cc a8 c0 2b c0 2f c0 2c  c0 30 c0 09 c0 13 c0 0a  |...+./.,.0......|
00000060  c0 14 00 9c 00 9d 00 2f  00 35 c0 12 00 0a c0 23  |......./.5.....#|
00000070  c0 27 00 3c c0 07 c0 11  00 05 13 03 13 01 13 02  |.'.<............|
00000080  01 00 00 7b 00 0b 00 02  01 00 ff 01 00 01 00 00  |...{............|

00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 32 cc a9  |.............2..|
00000050  cc a8 c0 2b c0 2f c0 2c  c0 30 c0 09 c0 13 c0 0a  |...+./.,.0......|
00000060  c0 14 00 9c 00 9d 00 2f  00 35 c0 12 00 0a c0 23  |......./.5.....#|
00000070  c0 27 00 3c c0 07 c0 11  00 05 13 03 13 01 13 02  |.'.<............|
00000080  01 00 00 7f 00 0b 00 02  01 00 ff 01 00 01 00 00  |................|

00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 32 cc a9  |.............2..|
00000050  cc a8 c0 2b c0 2f c0 2c  c0 30 c0 09 c0 13 c0 0a  |...+./.,.0......|
00000060  c0 14 00 9c 00 9d 00 2f  00 35 c0 12 00 0a c0 23  |......./.5.....#|
00000070  c0 27 00 3c c0 07 c0 11  00 05 13 03 13 01 13 02  |.'.<............|
00000080  01 00 00 7f 00 0b 00 02  01 00 ff 01 00 01 00 00  |................|

	r := testing.BenchmarkResult{
		N: 100,
		T: 240 * time.Nanosecond,
	}
	if r.NsPerOp() != 2 {
		t.Errorf("NsPerOp: expected 2, actual %v", r.NsPerOp())
	}
	if want, got := "     100\t         2.400 ns/op", r.String(); want != got {
		t.Errorf("String: expected %q, actual %q", want, got)
	}

	// Test sub-1 ns/op (issue #31005)
	r.T = 40 * time.Nanosecond

00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 32 cc a9  |.............2..|
00000050  cc a8 c0 2b c0 2f c0 2c  c0 30 c0 09 c0 13 c0 0a  |...+./.,.0......|
00000060  c0 14 00 9c 00 9d 00 2f  00 35 c0 12 00 0a c0 23  |......./.5.....#|
00000070  c0 27 00 3c c0 07 c0 11  00 05 13 03 13 01 13 02  |.'.<............|
00000080  01 00 00 7f 00 0b 00 02  01 00 ff 01 00 01 00 00  |................|

00000040  00 00 00 00 00 00 00 00  00 00 00 00 00 32 cc a9  |.............2..|
00000050  cc a8 c0 2b c0 2f c0 2c  c0 30 c0 09 c0 13 c0 0a  |...+./.,.0......|
00000060  c0 14 00 9c 00 9d 00 2f  00 35 c0 12 00 0a c0 23  |......./.5.....#|
00000070  c0 27 00 3c c0 07 c0 11  00 05 13 03 13 01 13 02  |.'.<............|
00000080  01 00 00 7f 00 0b 00 02  01 00 ff 01 00 01 00 00  |................|