February 2026
Intermediate to advanced
372 pages
10h 2m
Spanish
Content preview from Cilium: en funcionamiento (Spanish Edition)
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Capítulo 13. Política decapa 7 y FQDN
Este trabajo se ha traducido utilizando IA. Agradecemos tus opiniones y comentarios: translation-feedback@oreilly.com
En este capítulo, abordaremos una serie de casos de uso avanzados de la política de red que se basan en los fundamentos de la política de red que establecimos en el capítulo 12. Si no has leído ese capítulo, al menos debes estar familiarizado con la estructura de las reglas y el funcionamiento de la ruta de datos de la política. Aquí nos centraremos en la política de capa 7 para HTTP, HTTPS, DNS y FQDN. Todos los manifiestos de este capítulo se encuentran en el directorio chapter13 del repositorio GitHub del libro.
Política de capa 7
En, el capítulo anterior, aplicamos la política exclusivamente en la capa 3. Utilizamos varias formas de comprender la identidad del tráfico, como las declaraciones de reglas de salida toEndpoints, toEntities y toCIDR y sus equivalentes de entrada, pero, en última instancia, todas las políticas que aplicamos se basaron en la dirección IP y la información del puerto del paquete.
Si podemos identificar de forma única todos los recursos que queremos proteger basándonos únicamente en estos factores, estupendo, pero a menudo necesitamos ir más allá. Por ejemplo, ¿qué pasa si queremos que el acceso de una carga de trabajo a un servicio externo sea de solo lectura? Si se trata de un servicio a través de HTTP, podemos limitar la salida solo a la dirección IP o identidad relevante y solo al puerto TCP 80, ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.