Skip to content

Commit 90ae9d3

Browse files
authored
Merge pull request #68317 from subhtk/OCPBUG14840
OCPBUG#14840: Modified note related to egress firewall policy in how DNS resolution works section
2 parents 3293486 + e88e055 commit 90ae9d3

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

modules/nw-egressnetworkpolicy-about.adoc

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -148,9 +148,9 @@ endif::ovn[]
148148

149149
[NOTE]
150150
====
151-
The egress firewall always allows pods access to the external interface of the node that the pod is on for DNS resolution.
151+
Using DNS names in your egress firewall policy does not affect local DNS resolution through CoreDNS.
152152
153-
If you use domain names in your egress firewall policy and your DNS resolution is not handled by a DNS server on the local node, then you must add egress firewall rules that allow access to your DNS server's IP addresses. if you are using domain names in your pods.
153+
However, if your egress firewall policy uses domain names, and an external DNS server handles DNS resolution for an affected pod, you must include egress firewall rules that permit access to the IP addresses of your DNS server.
154154
====
155155

156156
ifdef::ovn[]

0 commit comments

Comments
 (0)