Skip to content

Prefix Set#

Filters → PSPrefix Sets

A PrefixSet is a collection of IP prefixes. They are used in Filter resources to match the source or destination IP of a packet against a certain prefix range, to determine whether to accept or drop a packet. Some common use cases are:

  • Allowing SSH connections from a subnet of IP addresses associated with internal, privileged clients
  • Restricting DNS traffic to a few IP addresses, to enable content filtering

Warning

This article discusses the PrefixSet resource used for configuring packet Filters. The PrefixSet resource used by RoutingPolicies is a different resource (same name, different app)

Dependencies#

The PrefixSet has no dependencies on other resources.

Referenced resources#

The PrefixSet resource does not reference any other resources.

Examples#

apiVersion: filters.eda.nokia.com/v1
kind: PrefixSet
metadata:
  namespace: eda
  name: bgp-neighbors
spec:
  prefixes:
    - prefix: 10.0.0.0/24
    - prefix: 10.0.1.0/24
    - prefix: 10.0.2.0/24
cat << 'EOF' | kubectl apply -f -
apiVersion: filters.eda.nokia.com/v1
kind: PrefixSet
metadata:
  namespace: eda
  name: bgp-neighbors
spec:
  prefixes:
    - prefix: 10.0.0.0/24
    - prefix: 10.0.1.0/24
    - prefix: 10.0.2.0/24
EOF

Custom Resource Definition#

To browse the Custom Resource Definition go to crd.eda.dev.

PrefixSet

filters.eda.nokia.com / v1

SPEC

PrefixSetSpec defines a collection of IP prefixes. Each set should contain only IPv4 or IPv6 prefixes.

  • #

STATUS

PrefixSetStatus defines the observed state of PrefixSet