86
How to block unwanted outbound traffic from your containers (blog.dera.page)
submitted 6 months ago by to c/selfhosted@lemmy.world
14 comments fedilink hide all child comments
 

(First blog post ever, would appreciate your input!)

Edit: Title was a lil clickbaity

you are viewing a single comment's thread
view the rest of the comments
[–] 4 points 6 months ago (2 children)

Nice work! This was the reason I moved my homelab stack to k8s with Cilium.

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
  • [–] 4 points 6 months ago (1 child)

    Same here. K8s makes stuff like this so mucb easier, since you can declaratively control traffic flow via NetworkPolicies.

    And with cilum you ca use hubble to visualize whay traffic is currently happening, in order to figure out what is actually needed.

    I also use Cilium as my host based firewall instead of ufw/firewalld.

    https://docs.cilium.io/en/latest/security/host-firewall/

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •