Skip to content

Commit e88e055

Browse files
committed
Modified the note in How DNS resolution works section
1 parent 8d6994f commit e88e055

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

modules/nw-egressnetworkpolicy-about.adoc

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -148,9 +148,9 @@ endif::ovn[]
148148

149149
[NOTE]
150150
====
151-
The egress firewall always allows pods access to the external interface of the node that the pod is on for DNS resolution.
151+
Using DNS names in your egress firewall policy does not affect local DNS resolution through CoreDNS.
152152
153-
If you use domain names in your egress firewall policy and your DNS resolution is not handled by a DNS server on the local node, then you must add egress firewall rules that allow access to your DNS server's IP addresses. if you are using domain names in your pods.
153+
However, if your egress firewall policy uses domain names, and an external DNS server handles DNS resolution for an affected pod, you must include egress firewall rules that permit access to the IP addresses of your DNS server.
154154
====
155155

156156
ifdef::ovn[]

0 commit comments

Comments
 (0)