DevOps Professional · Module 5: Hybrid networks and hard integrations · Lab
Solve a Hybrid Connectivity Model Inside Lab Bounds
45 min hands-on · Core
A local cluster with two fixture namespaces (side-east, side-west) and a checkpoint proxy between them. Fictional topology standing in for hybrid estates.
Local guide: run the steps below on your own machine in order, then check the validation list.
Objectives
- Model the two sides with three allow-listed crossing flows
- Test each allowed flow through the checkpoint
- Show an unlisted flow denied with the policy quoted
Step 1
Draw the fictional map
Diagram the two sides, the checkpoint and the three allowed flows (service, port, identity each). Label every element fictional; the allowlist is the design artifact under test.
Step 2
Test the allowed
Send each allowed flow through the checkpoint and quote success with the identity and path observed. Confirm audit entries record who crossed, when, for what.
Step 3
Deny the unlisted
Attempt a fourth flow absent from the list and quote the denial with the rule. Write why the denial is the policy working, not an outage.
How to confirm it worked
- Fictional map with three allow-listed flows
- Allowed flows quoted succeeding with audit entries
- Unlisted flow quoted denied with the rule