Externalized services v2

Uses IPTables on each host node to demux based on destination IP address.

Eliminates service port conflicts.
I mis-processesd what you are doing here, so the previous comment doesn't apply.

However, I do not understand why you need the MASQUERADE rule below?