Skip to content

Commit a1bf7bf

Browse files
authored
fix: block pod to wireserver port 80 traffic on windows multitenancy (#2515)
Add endpoint policy to block wireserver traffic on windows
1 parent f97eb96 commit a1bf7bf

File tree

1 file changed

+13
-0
lines changed

1 file changed

+13
-0
lines changed

cni/azure-windows-multitenancy.conflist

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -42,6 +42,19 @@
4242
"DestinationPrefix": "10.0.0.0/8",
4343
"NeedEncap": true
4444
}
45+
},
46+
{
47+
"Name": "EndpointPolicy",
48+
"Value": {
49+
"Type": "ACL",
50+
"Protocols": "6",
51+
"Action": "Block",
52+
"Direction": "Out",
53+
"RemoteAddresses": "168.63.129.16",
54+
"RemotePorts": "80",
55+
"Priority": 200,
56+
"RuleType": "Switch"
57+
}
4558
}
4659
],
4760
"windowsSettings": {

0 commit comments

Comments
 (0)