• see the KEP on host-networked pods for details
• there are known limitations here like attaching app sock to linux VRF, so those must be documented for end-users
• https://github.com/openshift/enhancements/pull/1623/files#diff-76f8949dbcefb73686f569b18267b152f0f1ef3d71ce9888046aa93f97566005R791
• might need some nftables here for host networked pods; to block everything

End goals of this card:

• HostNetPods on default:
  • should be able to talk to everything in K8s
• HostNetPods on User networks:
  • should be able to talk to only its own pods and must be isolated from default network pods

Tracks L3 work for both gateway modes; add support for host-net pods in UDNs