From #1599 (comment):

We should add documentation to this file explaining L3-dependent L4 policy.

The way that the documentation is written right now, it already implies the l3-dependent l4 policy behaviour from #1599 . However, there aren't good examples that highlight the behaviour difference between multiple ingress rules matching on FromEndpoints or ToPorts vs. a single rule with both. This documentation could help people who end up in a situation where they're allowing L3 and allowing L4, but actually intended to only specify l3-dependent l4 policy.