Network security: Cannot attach egress network rule to a network policy (Pending)¶

Network rules can be attached to a network policy to control incoming network traffic (ingress) or attached to an external access integration to control outgoing network traffic (egress). The purpose of the network rule is controlled by its MODE parameter. The same network rule is never used for both ingress (MODE=INGRESS) and egress (MODE=EGRESS).

Before the change:

Administrators can attach a network rule with MODE=EGRESS to a network policy even though it has no effect.

After the change:

An attempt to attach a network rule with MODE=EGRESS to a network policy results in an error.

Ref: 1760