Cilium
Hard
Networking
What is the purpose of Cilium's egress gateway feature?
Select your answer:
Show answer and explanation
Answer: To allow pods to reach external services with a specific source IP address
Explanation
Cilium's egress gateway feature allows pods to reach external services with a specific source IP address. This is useful when external services whitelist specific IP addresses for security reasons, as it allows you to control the source IP of traffic leaving your cluster, even as pods are created and destroyed.
More hard Cilium questions
- What is the purpose of Cilium's 'prefilter' feature?
- In Cilium's tunnel mode (VXLAN or Geneve), how does the receiving node learn the security identity of a packet sent by a pod on another node?
- A CiliumNetworkPolicy contains HTTP rules, such as allowing only GET requests to /api. Which component enforces those rules?
- How does a client experience a request blocked by an L3/L4 Cilium policy, compared with one blocked by an L7 HTTP rule?
- With Cilium's default policy enforcement mode, when does a pod go from allowing all ingress traffic to denying everything that isn't explicitly allowed?
- In a CiliumNetworkPolicy, what does the entity 'world' match?