You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/openshift/concepts-egress-lockdown.md
+5-4Lines changed: 5 additions & 4 deletions
Original file line number
Diff line number
Diff line change
@@ -1,5 +1,5 @@
1
1
---
2
-
title:Overview of egress lockdown
2
+
title:Overview of egress lockdown for Azure Red Hat OpenShift clusters
3
3
description: Overview of egress lockdown for Azure Red Hat OpenShift clusters
4
4
author: rahulm23
5
5
ms.author: rahulmehta
@@ -10,7 +10,7 @@ ms.date: 02/28/2022
10
10
#Customer intent: I need to understand how egress lockdown provides access to URLs and endpoints that a Red Hat OpenShift cluster needs to function efficiently.
11
11
---
12
12
13
-
# Overview of egress lockdown
13
+
# Overview of egress lockdown for Azure Red Hat OpenShift clusters
14
14
15
15
Egress lockdown provides access to the URLs and endpoints an Azure Red Hat OpenShift cluster needs to function effectively.
16
16
@@ -22,15 +22,16 @@ Egress lockdown doesn't rely on customer internet access for Azure Red Hat OpenS
22
22
23
23
The following image displays the architecture changes that encompass egress lockdown.
24
24
25
-

25
+
26
+
[](./media/concepts-networking/190-azure-red-hat-openshift-network-architecture-0921#lightbox)
26
27
27
28
A well-known subset of domains (that the Azure Red Hat OpenShift clusters need to function) validates the destination of the cluster traffic. Finally, the traffic passes through the Azure Red Hat OpenShift service to connect to these URLs and endpoints.
28
29
29
30
## Enable egress lockdown
30
31
31
32
In order to function, egress lock down relies on the Server Name Indication (SNI) extension to the Transport Layer Security (TLS). All customer workloads that communicate with the well-known subset of domains must have SNI enabled.
32
33
33
-
Egress lockdown is enabled by default for new cluster creation. However, to enable egress lockdown on existing clusters, you must have SNI enabled on the customer workloads. To enable egress lockdown on your existing clusters, submit a support case to either [Microsoft Support](https://support.microsoft.com/en-us) or [Red Hat Support](https://www.redhat.com/en/services/support).
34
+
Egress lockdown is enabled by default for new cluster creation. However, to enable egress lockdown on existing clusters, you must have SNI enabled on the customer workloads. To enable egress lockdown on your existing clusters, submit a support case to either [Microsoft Support](https://support.microsoft.com) or [Red Hat Support](https://www.redhat.com/en/services/support).
0 commit comments