8.2. Connectivity mapping using the roxctl netpol connectivity map command

Procedure

1. To retrieve the connectivity mapping information, run the following command:

   roxctl netpol connectivity map <folder_path> [flags]

   where:

   <folder_path>

   Specifies the path to the folder, which can include sub-folders that contain YAML resources and network policies for analysis, for example, netpol-analysis-example-minimal/. The command scans the entire sub-folder tree. Optionally, you can also specify parameters to modify the behavior of the command.

   Expand

   표 8.2. Example output

   src	dst	conn
   0.0.0.0-255.255.255.255	default/frontend[Deployment]	TCP 8080
   default/frontend[Deployment]	0.0.0.0-255.255.255.255	UDP 53
   default/frontend[Deployment]	default/backend[Deployment]	TCP 9090

   Show more

   The output displays a table listing the allowed connectivity lines. Each line is composed of the following elements:

   src

   Represents the source endpoint.

   dst

   Represents the destination endpoint.

   conn

   Represents the permissible connectivity attributes.

   An endpoint follows the format namespace/name[Kind]. For example, default/backend[Deployment].

2. Optional: To see which policies and rules are responsible for allowing or denying specific connections, you can use the --explain option with the roxctl netpol connectivity map command. You can use the output to debug network policy configurations. For more information about understanding the explanation output, see "Retriving explanations".