-
Feature
-
Resolution: Done
-
Major
-
None
Add the ability to create egress firewall rules based on nodes to allow host network access to specific nodes
Why is this important?
- There is a difference between SDN and OVN's implementation of Egress Firewall where SDN implicitly allows services to bypass Egress Firewall. Some customers rely on this behavior in order to implicitly allow pods to reach services backed by host network pods. This traffic blocked by default today in OVN, and adding manual rules per host IP can be tedious.
See https://bugzilla.redhat.com/show_bug.cgi?id=1993841 for more info.
- clones
-
SDN-3098 Enhance EgressFirewall to include a nodeSelector for destinations
- Closed