> ## Documentation Index
> Fetch the complete documentation index at: https://docs.siderolabs.com/llms.txt
> Use this file to discover all available pages before exploring further.

# NetworkLinkIngressConfig

> NetworkLinkIngressConfig is a config document to filter out the packets coming into the system based on destination IP and interface.
Filters incoming packets on a link by destination address: only packets destined to one of
the node's own addresses are accepted, anything else is dropped.
This is meant for clusters using an encapsulating CNI, where pod/service CIDR destinations should never
arrive unencapsulated on an external interface; it is incompatible with native pod IP routing (e.g. BGP).

The set of accepted destinations can be overridden with the `destinationAddresses` option.


```yaml theme={null}
apiVersion: v1alpha1
kind: NetworkLinkIngressConfig
name: enp0s2.35 # Name of the link (interface) to filter the incoming packets on.
# Destination addresses to accept on this link, as a list of CIDRs.
destinationAddresses:
    - 1.2.3.4/32
```

<table>
  <thead>
    <tr>
      <th>Field</th>
      <th>Type</th>
      <th>Description</th>
      <th>Value(s)</th>
    </tr>
  </thead>

  <tbody>
    <tr>
      <td>`name`</td>
      <td>string</td>
      <td>Name of the link (interface) to filter the incoming packets on.</td>

      <td />
    </tr>

    <tr>
      <td>`destinationAddresses`</td>
      <td>\[]Prefix</td>
      <td>Destination addresses to accept on this link, as a list of CIDRs.\
      \
      This is an override: when specified, only packets destined to one of these addresses are\
      accepted, and neither the node's own addresses nor the broadcast, multicast and link-local\
      addresses are implicitly allowed.\
      \
      An empty list allows no destination at all, i.e. all packets arriving on the link are\
      dropped.\
      \
      Default value: the node's own addresses, the broadcast addresses of their IPv4 subnets,\
      `255.255.255.255/32`, `224.0.0.0/4`, `ff00::/8` and `fe80::/10`.</td>

      <td />
    </tr>
  </tbody>
</table>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.