Kubernetes NetworkPolicy - is this a stateful firewall?

Question

Is NetworkPolicy a stateful firewall?

For example, if I allow ingress from a certain IPs on certain ports, is the return traffic automatically allowed on ephemeral? Ditto for allowed egress.

How does this play with a default block policy in place?

Are there any other considerations here?

Excellent

Answer 1

NetworkPolicy is stateful and will allow an established connection to communicate both ways.

Duplex

+Shai Katz, thanks. Could you please provide any references documenting that? – Excellent

@IlyaAyzenshtok Take a look at github.com/networkpolicy/…. – Cooks