This required fixing a small bug in the metric, where it had previously been counting the "-X" lines that had been passed to iptables-restore to delete stale chains, rather than only counting the actual rules.
cmd/proxy/app
pkg/proxy/meta_proxier
k8s.io/utils/pointer