IBM / network-config-analyzer

A semantic analyzer for resources that configure network connectivity (e.g., Kubernetes NetworkPolicy).

IBM/network-config-analyzer Issues

issues with html output
Updated 4 months ago1
save info of GatewayPolicy for explainabiliy
Closed 4 months ago
support connectivity analysis for istio egress gateway
Closed 4 months ago
live-cluster tests on ci pipeline
Updated 4 months ago1
Extend default resource loading in live cluster to istio resources
Updated 4 months ago1
optimized computation finalize
Updated 4 months ago
Lazy evaluation of policies' allowed connections
Updated 4 months ago1
Inconsistencies resource loading in scheme file
Updated 4 months ago
Generalize filtering of allowed connections results to all queries
Closed 4 months ago
Support all query types in optimized implementation
Closed 4 months ago
Enhance explainability to give more accurate explanation of denied connection when possible (rather than all policies)
Updated 4 months ago
Enhance explainability to explain non-tcp conns even if istio is present
Updated 4 months ago
Consider keeping optimized connections copies per policy, in addition to copies per rules
Updated 4 months ago
Different nodes naming conventions in the output formats may cause confusion when user may want to relay on them as input
Updated 4 months ago
Improve fw-rules connectivity output for optimized connectivity map
Updated 4 months ago
Filter out reporting connectivity to DNS entries whenever Istio layer is not present in configuration
Updated 4 months ago
Revisit handling DNS entries in different layers and different stages of analysis
Updated 4 months ago1
Inconsistency in the way live-sim works with scheme files
Closed 6 months ago1
Wrong handling of the global resourceList in combination with livesim
Updated 6 months ago2
Support for Istio egress gateway
Closed 6 months ago
Fix code scanning alert - Inefficient regular expression
Closed 7 months ago
Dynamically adjust LiveSim resources according to namespace
Updated 8 months ago
Provide more details in error messages
Updated 8 months ago
ipv6 filter flag follow-ups
Updated 9 months ago
Avoid using minDFA dimensions unless necessary
Updated 9 months ago
connectivity output graph issue
Closed 10 months ago1
NCA crashes when parsing an illegal json
Closed 10 months ago
Some warnings are not printed to stderr
Closed 10 months ago1
The exportTo field in VirtualService should be an array, not a string
Closed 10 months ago1
all-captured issue
Closed 10 months ago
ingress policy parser issue
Closed 10 months ago1
Create abstract class NetworkPolicyRule to be the base of all policy rule classes
Updated a year ago
KeyError: 198.23.120.0-208.43.117.255, while running with optimization + dot output format
Closed a year ago1
Inconsistent handling of IPv6 blocks in Istio between ConnectivityMap query and Equivalence query
Updated a year ago1
Update EquivalenceQuery expected results according to more refined output in optimized solution
Updated a year ago
Extend support of IstioServiceEntry fields
Updated a year ago
txt_no_fw_rules output format update: remove connections from workload to itself
Closed a year ago
Fix "src_peers" and "dst_peers" dimensions comparisons
Closed a year ago
Add unit tests for named ports resolution during ConnectivityProperties construction
Closed a year ago
Remove warning about rewrite not supported inside HTTPRroute in the VirtualService
Closed a year ago1
Raise an error if multiple sidecars are configured for same object
Closed a year ago
default Istio outbound traffic mode usage
Updated a year ago
Ingress policy parser optimizations
Closed a year ago
Remove ConnectionSet and replace by using ConnectivityProperties
Updated a year ago
consider livesim improvements
Updated a year ago
create informative legend at connectivity map
Closed a year ago1
connect interactive map to NCA
Updated a year ago
add more explainations to interactive map
Closed a year ago1
HTML interactive output format
Updated a year ago
Remove helm installation from ubi-based image
Closed a year ago1