Network Policy: Consider generating TCP RST instead of DROP #17944
Description
Proposal / RFE
Currently Cilium drops packets that don't comply to network policies.
While we can observe firewall verdict in Hubble, getting RST would be useful for east-west traffic and can ease debugging for internal applications.
Resets usually helped other IT personnel troubleshoot an issue, the app would behave better and fail immediately vs sitting there retrying and timing out
James Harr
Can be related to #13451
Metadata
Metadata
Assignees
Labels
Impacts bpf/ or low-level forwarding details, including map management and monitor messages.This was reported by a user in the Cilium community, eg via Slack.This would improve or streamline existing functionality.This introduces new functionality.These issues are not marked stale by our issue bot.Impacts whether traffic is allowed or denied based on user-defined policies.