Kubernetes NetworkPolicy - is this a stateful firewall?

Question

Is NetworkPolicy a stateful firewall?

For example, if I allow ingress from a certain IPs on certain ports, is the return traffic automatically allowed on ephemeral? Ditto for allowed egress.

How does this play with a default block policy in place?

Are there any other considerations here?

score 6 · Answer 1 · answered Mar 22 '21 at 09:52

6

NetworkPolicy is stateful and will allow an established connection to communicate both ways.

answered Mar 22 '21 at 09:52

Shai Katz

1,603
12
22

3

+Shai Katz, thanks. Could you please provide any references documenting that? – Ilya Ayzenshtok Mar 23 '21 at 14:40
1

@IlyaAyzenshtok Take a look at https://github.com/networkpolicy/tutorial#what-is-stateful-policy-enforcement. – Davi Garcia Mar 17 '22 at 12:10

Kubernetes NetworkPolicy - is this a stateful firewall?

1 Answers1