hardbyte / netchecks / 22692871318

91%

push

github

feat: add TCP probe type (#315)

* feat: add TCP probe type for raw connectivity checks

TCP probes test raw socket connectivity to a host:port, filling the gap
for non-HTTP services like databases and caches. Uses stdlib
socket.create_connection — no new dependencies.

Adds CLI command, runner integration, unit tests, E2E test manifest,
K8s example, SOC2 boundary protection example, and documentation.

* feat: add Cilium TCP egress policy E2E test

Validates that Cilium network policies actually enforce TCP egress
restrictions. Applies a policy allowing only port 443 to the K8s API,
then asserts that allowed connections succeed and blocked ports are
dropped — testing real policy enforcement, not just reachability.

41 of 48 new or added lines in 3 files covered. (85.42%)

355 of 389 relevant lines covered (91.26%)

5.48 hits per line