-
Notifications
You must be signed in to change notification settings - Fork 850
Closed
Description
Enable bridge CNI users set port-isolation [1] on the interface.
Linux-bridge port that is set as isolated cannot communicate with other isolated ports (they can still communicate with non-isolated ports).
For example:
In case I have two containers connected over a bridge (running on the same node), I want traffic to go though a smart switch, and the switch should decide whether these containers can communicate with each other according to some restrictions or policies.
Add new option should be an addition flag, controlling whether port-isolation is set on the interface or not.
Default should be false.
[1] https://man7.org/linux/man-pages/man8/bridge.8.html (see "isolated" option)
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels