search

kubernetes-sigs / kube-network-policies

Kubernetes network policies
Apache License 2.0
21 stars 8 forks source link

Do not process packet twice #10

Closed aojea closed 3 weeks ago

aojea commented 2 months ago
  1. PodA and PodB in same node is only evaluated once, since it is in forwarding and return will not hit the new Contrack state (I think)
  2. PodA in NodeA to PodB in NodeB is evaluated in both Nodes
  3. PodA in NodeA to external , is only evaluated once
  4. External to PodA in nodeA is only evaluated once

If a network policy was evaluated on origin, don't evaluate again in the destination.

/kind feature

Rahul-D78 commented 2 months ago

Hey aojea, I'm interested to work on this. Any pointers on where to start in the codebase would be greatly appreciated. Thanks!