Network policies: can egress rules cover ICMP and the internal DNS resolver?

Question

We want to deny all egress except our database and the internal resolver. Are ICMP and DNS to the resolver covered by egress rules, or always allowed?

rhea · Answer

The internal resolver is always reachable — rules apply to everything else. ICMP is covered by rules; allow it explicitly if you use ping for health checks.

bramblefox · Answer

Clear, thanks.

Network policies: can egress rules cover ICMP and the internal DNS resolver?

Related topics

Suggested topics