Cilium
Easy
Policies
Which field in a CiliumNetworkPolicy egress rule allows traffic to the IPs behind a domain name?
Select your answer:
Show answer and explanation
Answer: toFQDNs
Explanation
toFQDNs takes matchName or matchPattern entries, and Cilium fills in the matching IPs from the DNS answers its proxy sees. That keeps the policy correct when a provider's IPs change. toCIDRSet needs the IP ranges written out, and toEntities selects groups such as world or cluster.
More easy Cilium questions
- Which command, run in a Cilium agent pod, lists the domain names and IPs that toFQDNs policies have learned?
- Which domain does the Cilium toFQDNs pattern *.example.com match?
- What is Cilium?
- What technology does Cilium use at its core?
- Which of the following is NOT a feature of Cilium?
- What is Hubble in the context of Cilium?