Skip to content

Commit 70ba1d1

Browse files
committed
Updating note after review.
Signed-off-by: Sunil Singh <[email protected]>
1 parent c471da4 commit 70ba1d1

File tree

2 files changed

+2
-2
lines changed

2 files changed

+2
-2
lines changed

docs/05.policy/05.networkrules/05.networkrules.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -59,7 +59,7 @@ Don’t forget to Deploy/Update if you make any changes!
5959
The Network Rules have a `Match Counter` that increments every time an added rule is used, and displays the last date and time for each used rule. Below is an example which creates an `Allow` Network Rule for a specified container. Once container traffic is sent, the `Match Counter` and `Last used at` timestamp are verified against the created Network Rule and updated if hit.
6060

6161
:::note
62-
The `Match Counter` is not calculated based on the number of data packets. When a Network Rule is hit by traffic, the NeuVector controller generates one `UpdateConnections` log for each connection, and the counter of this Network Policy is then increased based on the number of `UpdateConnections`.
62+
The Controller receives a connection update message from the Enforcer. The `UpdateConnections` logic examines the contents of this message to determine which network rule was matched and when it was last used. Based on this, it updates both the rule’s `Match Counter` and `Last used at` timestamp.
6363
:::
6464

6565
1. Define an `Allow` Network Rule for a specified container(s). When defined initially the `Match Counter` displays as `0`, and the `Last used at` timestamp is empty for this Network Rule:

versioned_docs/version-5.4/05.policy/05.networkrules/05.networkrules.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -59,7 +59,7 @@ Don’t forget to Deploy/Update if you make any changes!
5959
Available as of NeuVector v5.4.4, the Network Rules have a `Match Counter` that increments every time an added rule is used, and displays the last date and time for each used rule. Below is an example which creates an `Allow` Network Rule for a specified container. Once container traffic is sent, the `Match Counter` and `Last used at` timestamp are verified against the created Network Rule and updated if hit.
6060

6161
:::note
62-
The `Match Counter` is not calculated based on the number of data packets. When a Network Rule is hit by traffic, the NeuVector controller generates one `UpdateConnections` log for each connection, and the counter of this Network Policy is then increased based on the number of `UpdateConnections`.
62+
The Controller receives a connection update message from the Enforcer. The `UpdateConnections` logic examines the contents of this message to determine which network rule was matched and when it was last used. Based on this, it updates both the rule’s `Match Counter` and `Last used at` timestamp.
6363
:::
6464

6565
1. Define an `Allow` Network Rule for a specified container(s). When defined initially the `Match Counter` displays as `0`, and the `Last used at` timestamp is empty for this Network Rule:

0 commit comments

Comments
 (0)