Network Policies

Pod-to-Pod Firewall Rules

💡 Network, Policy, EK, "BUILDING, FIREWALL, RULES", jaisi, hai — DEFAULT, mein, HAR, POD, HAR, DOOSRE, POD, se, BAAT, kar, sakta hai, (sab, DOORS, khuli, HAIN) LEKIN, Network, Policy, se, TUM, SPECIFIC, DOORS, hi, khuli, RAKH, sakte, ho.

DEFAULT, RUP, se, Kubernetes, mein, SAARE, pods, EK, DOOSRE, se, FREELY, TALK, kar, sakte, HAIN — koi, ISOLATION, NAHI, hai. Network, Policy, se, RULES, DEFINE, kiye, ja, sakte, HAIN, ki, KAUNSE, pods, KAUNSE, DOOSRE, pods, se, (ya, KAUNSE, external, IPs, se) TALK, kar, sakte, HAIN.

Network, Policies, LABEL, SELECTORS, use, karte, HAIN, (jaise, Services, karte, HAIN) — jaise, "sirf, 'app: frontend' label, waale, pods, hi, 'app: backend' pods, se, connect, kar, sakte, HAIN".

apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: backend-policy
spec:
  podSelector:
    matchLabels:
      app: backend
  ingress:
  - from:
    - podSelector:
        matchLabels:
          app: frontend
    ports:
    - port: 8080

🛡️

Network, Policy, EK, "BUILDING, FIREWALL, RULES", jaisi, hai — DEFAULT, mein, HAR, POD, HAR, DOOSRE, POD, se, BAAT, kar, sakta hai, (sab, DOORS, khuli, HAIN) LEKIN, Network, Policy, se, TUM, SPECIFIC, DOORS, hi, khuli, RAKH, sakte, ho.

1 / 2

⚡ Quick Recap

Default mein saare pods freely talk kar sakte hain — koi isolation nahi
Network Policy se pod-to-pod communication rules define hoti hain
CNI plugin ka Network Policies support karna zaroori hai (jaise Calico)

On this page (2 subtopics)

Network, Policies, sirf, INCOMING, (ingress) traffic, hi, NAHI, — OUTGOING, (egress) traffic, ko, bhi, RESTRICT, kar, sakti, HAIN. jaise, EK, POD, ko, sirf, SPECIFIC, EXTERNAL, IPs, ya, DNS, tak, hi, OUTBOUND, connections, karne, DENA.

egress:
- to:
  - ipBlock:
      cidr: 10.0.0.0/24
  ports:
  - port: 443

EK, "default-deny" Network, Policy, (EMPTY, podSelector, ke, saath) SAARE, TRAFFIC, ko, BLOCK, kar, deti hai — PHIR, EXPLICIT, ALLOW, rules, ADD, ki, jaati, HAIN. YE, "ZERO, TRUST" security, model, ki, FOUNDATION, hai.

← Previous📁 Namespaces Next →🔁 Rolling Updates & Rollbacks

Code10x

Network Policies

Egress Policies

Default Deny Policy