add allowSameSubnetTraffic docs

Signed-off-by: yuanliu <yuanliu_yewu@cmss.chinamobile.com>
kubeovn · Oct 25, 2023 · c406ad8 · c406ad8
1 parent f2170d9
commit c406ad8
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 0 deletions.
diff --git a/docs/guide/subnet.en.md b/docs/guide/subnet.en.md
@@ -244,6 +244,7 @@ kind: Subnet
 metadata:
   name: acl
 spec:
+  allowSameSubnetTraffic: false
   acls:
     - action: drop
       direction: to-lport
@@ -255,6 +256,7 @@ spec:
       priority: 1002
   cidrBlock: 10.10.0.0/24
 ```
+In some scenarios, users hope that the internal traffic of the subnet configured with ACL rules will not be affected, which can be achieved by configuring `allowSameSubnetTraffic: true`.
 
 ## Subnet Isolation
 

diff --git a/docs/guide/subnet.md b/docs/guide/subnet.md
@@ -232,6 +232,7 @@ kind: Subnet
 metadata:
   name: acl
 spec:
+  allowSameSubnetTraffic: false
   acls:
     - action: drop
       direction: to-lport
@@ -244,6 +245,8 @@ spec:
   cidrBlock: 10.10.0.0/24
 ```
 
+某些场景下用户希望配置了 ACL 规则的子网内部网络通信不受影响，可以通过配置 `allowSameSubnetTraffic: true` 来实现。
+
 ## 子网隔离设置
 
 > 子网 ACL 的功能可以覆盖子网隔离的功能，并有更好的灵活性，我们推荐使用子网 ACL 来做相应的配置。