json Revision: 3 $ docker run --rm -ti --net cilium-net -l "id=app2" cilium/demo-client cur HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 28 Date: Tue, 31 Oct 2017 14:30:56 GMT Etag: "1c-54bb868cec400" is public' } and $ docker run --rm -ti --net cilium-net -l "id=app2" cilium/demo-client cur HTTP/1.1 403 Forbidden Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, application/json' -d @web-server.json 127.0.0. You should see output similar to the following: HTTP/1.1 201 Created ... Marathon-Deployment-Id: [UUID] ... Confirm that Cilium sees the new workload. The

(HTTP/1.1 POST http://deathstar.default.svc.cluster.local/v1/request-landing) May 4 13:23:40.502: default/tiefighter:42690 <- default/deathstar- c74d84667-cx5kp:80 http-response FORWARDED (HTTP/1.1 200 791: default/tiefighter:42742 -> default/deathstar- c74d84667-cx5kp:80 http-request DROPPED (HTTP/1.1 PUT http://deathstar.default.svc.cluster.local/v1/exhaust-port) The following command shows all traffic 791: default/tiefighter:42742 -> default/deathstar- c74d84667-cx5kp:80 http-request DROPPED (HTTP/1.1 PUT http://deathstar.default.svc.cluster.local/v1/exhaust-port) May 4 13:23:47.852: default/xwing:42818

(HTTP/1.1 POST http://deathstar.default.svc.cluster.local/v1/request-landing) May 4 13:23:40.502: default/tiefighter:42690 <- default/deathstar- c74d84667-cx5kp:80 http-response FORWARDED (HTTP/1.1 200 791: default/tiefighter:42742 -> default/deathstar- c74d84667-cx5kp:80 http-request DROPPED (HTTP/1.1 PUT http://deathstar.default.svc.cluster.local/v1/exhaust-port) The following command shows all traffic 791: default/tiefighter:42742 -> default/deathstar- c74d84667-cx5kp:80 http-request DROPPED (HTTP/1.1 PUT http://deathstar.default.svc.cluster.local/v1/exhaust-port) May 4 13:23:47.852: default/xwing:42818

run --rm -ti --net cilium-net -l "id=app2" cilium/demo-client curl -si 'http://app1/public' HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 28 Date: Tue, 31 Oct 2017 14:30:56 GMT Etag: "1c-54bb868cec400" run --rm -ti --net cilium-net -l "id=app2" cilium/demo-client curl -si 'http://app1/private' HTTP/1.1 403 Forbidden Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 31 -d @web-server.json 127.0.0.1:8080/v2/apps You should see output similar to the following: HTTP/1.1 201 Created ... Marathon-Deployment-Id: [UUID] ... Confirm that Cilium sees the new workload. The

run --rm -ti --net cilium-net -l "id=app2" cilium/demo-client curl -si 'http://app1/public' HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 28 Date: Tue, 31 Oct 2017 14:30:56 GMT Etag: "1c-54bb868cec400" run --rm -ti --net cilium-net -l "id=app2" cilium/demo-client curl -si 'http://app1/private' HTTP/1.1 403 Forbidden Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 31 -d @web-server.json 127.0.0.1:8080/v2/apps You should see output similar to the following: HTTP/1.1 201 Created ... Marathon-Deployment-Id: [UUID] ... Confirm that Cilium sees the new workload. The

resource above. $ kubectl exec mediabot -- curl -I -s http://169.254.169.254:8080/index.html HTTP/1.1 200 OK Server: nginx/1.19.2 Date: Fri, 28 Aug 2020 01:33:34 GMT Content-Type: text/html Content-Length: win 221, options [nop,nop,TS val 2541637677 ecr 2962246962], length 95: HTTP: HEAD /index.html HTTP/1.1 01:36:24.608876 IP 10.16.70.187.80 > 10.16.215.55.60876: Flags [.], ack 96, win 219, options [nop 1:239, ack 96, win 219, options [nop,nop,TS val 2962246962 ecr 2541637677], length 238: HTTP: HTTP/1.1 200 OK 01:36:24.609052 IP 10.16.215.55.60876 > 10.16.70.187.80: Flags [.], ack 239, win 229, options

default/tiefighter:52568 default/deathstar-5b7489bc84-8wvng:80 http-request FORWARDED HTTP/1.1 POST http://deathstar.default.svc.cluster.local/v1/request- landing Jun 18 13:52:23.844 default/ default/deathstar-5b7489bc84-8wvng:80 default/tiefighter:52568 http-response FORWARDED HTTP/1.1 200 0ms (POST http://deathstar.default.svc.cluster.local/v1/request-landing) Jun 18 13:52:31.019 default/tiefighter:52628 default/deathstar-5b7489bc84-8wvng:80 http-request DROPPED HTTP/1.1 PUT http://deathstar.default.svc.cluster.local/v1/exhaust-port The following command shows all traffic