Skip to content

Commit 0f96f04

Browse files
committed
updated code specific to direct ip logic
1 parent c32653b commit 0f96f04

File tree

1 file changed

+12
-0
lines changed

1 file changed

+12
-0
lines changed

npm/pkg/dataplane/policies/policy_windows.go

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -135,6 +135,18 @@ func (acl *ACLPolicy) convertToAclSettings(aclID string) (*NPMACLPolSettings, er
135135
// LocalAddresses = Destination IPs
136136
// RemoteAddresses = Source IPs
137137

138+
// if direct IPs are used, we leave local addresses to be an empty string
139+
if len(acl.SrcDirectIPs) > 0 || len(acl.DstDirectIPs) > 0 {
140+
policySettings.LocalAddresses = ""
141+
if policySettings.Direction == hcn.DirectionTypeOut {
142+
// EGRESS: Remote = Destination IPs from policy
143+
policySettings.RemoteAddresses = dstListStr
144+
} else {
145+
// INGRESS: Remote = Source IPs from policy
146+
policySettings.RemoteAddresses = srcListStr
147+
}
148+
}
149+
138150
policySettings.LocalAddresses = srcListStr
139151
policySettings.RemoteAddresses = dstListStr
140152

0 commit comments

Comments
 (0)