hknutzen / Netspoc / 10005292645

100%

push

github

Check supernet access at managed=local cluster

1. Checks rule where
- source or destination is some supernet,
- this supernet is located inside some managed=local cluster
- and other side of rule is outside of managed=local cluster.
In this case, the rule would not be filtered inside managed=local cluster
and hence access from/to subnets in same cluster
would be allowed by accident.
2. Checks path of rule at router with managed=local
where source or destination is some supernet
for subnets of supernet in current managed=local cluster.
If rule isn't filtered at current router, access from/to subnets in
cluster would be allowed by accident.

124 of 136 new or added lines in 2 files covered. (91.18%)

23460 of 23473 relevant lines covered (99.94%)

1.22 hits per line