cilium / hubble

Hubble - Network, Service & Security Observability for Kubernetes using eBPF
Apache License 2.0
3.56k stars 253 forks source link

Feature: Generate Network Policy Rules #1376

Open danieljkemp opened 9 months ago

danieljkemp commented 9 months ago

Cilium Feature Proposal

Is your feature request related to a problem?

No, but it might be a useful feature

Describe the feature you'd like

Generate allow-list network policies based on traffic detected by hubble

(Optional) Describe your proposed solution

When running hubble observe, we can build a model of the network traffic, and with that information, generate a minimal network policy that would allow it.

potentially related: https://github.com/cilium/hubble/issues/1100 ?

erkerb4 commented 3 months ago

This would be a great feature.

Another idea would be for Hubble to provide some way to export the traffic data, and users could feed that to Network Policy Editor.