@@ -262,27 +262,18 @@ ingress or egress traffic.
262
262
NetworkPolicy is defined for [ layer 4] ( https://en.wikipedia.org/wiki/OSI_model#Layer_4:_Transport_layer )
263
263
connections (TCP, UDP, and optionally SCTP). For all the other protocols, the behaviour may vary
264
264
across network plugins.
265
- When a ` deny all ` network policy is defined, it is only guaranteed to deny TCP, UDP and SCTP
266
- connections. For other protocols, such as ARP or ICMP, the behaviour is undefined.
267
- The same applies to allow rules: when a specific pod is allowed as ingress source or egress destination,
268
- it is undefined what happens with (for example) ICMP packets. Protocols such as ICMP may be allowed by some
269
- network plugins and denied by others.
270
-
271
- ### SCTP support
272
-
273
- {{< feature-state for_k8s_version="v1.20" state="stable" >}}
274
-
275
- As a stable feature, this is enabled by default. To disable SCTP at a cluster level, you (or your
276
- cluster administrator) will need to disable the ` SCTPSupport `
277
- [ feature gate] ( /docs/reference/command-line-tools-reference/feature-gates/ )
278
- for the API server with ` --feature-gates=SCTPSupport=false,… ` .
279
- When the feature gate is enabled, you can set the ` protocol ` field of a NetworkPolicy to ` SCTP ` .
280
265
281
266
{{< note >}}
282
267
You must be using a {{< glossary_tooltip text="CNI" term_id="cni" >}} plugin that supports SCTP
283
268
protocol NetworkPolicies.
284
269
{{< /note >}}
285
270
271
+ When a ` deny all ` network policy is defined, it is only guaranteed to deny TCP, UDP and SCTP
272
+ connections. For other protocols, such as ARP or ICMP, the behaviour is undefined.
273
+ The same applies to allow rules: when a specific pod is allowed as ingress source or egress destination,
274
+ it is undefined what happens with (for example) ICMP packets. Protocols such as ICMP may be allowed by some
275
+ network plugins and denied by others.
276
+
286
277
## Targeting a range of ports
287
278
288
279
{{< feature-state for_k8s_version="v1.25" state="stable" >}}
0 commit comments