TL;DR. golang.org/x/net/idna.Lookup.ToASCII runs UTS-46 NFKC mapping 0-9. A pre-IDNA net.ParseIP check rejects the NO_PROXY lists, TLS-SNI routers, and cookie-domain validators that TrimRight + ParseAddr golang.org/x/net/http/httpproxy, the canonical safe pattern, and two I ran into this one while writing a Go HTTP client for a private project. I idna.Lookup.ToASCII canonicalising the host The sha
CKS Study Memo on Network Policies official document: https://kubernetes.io/docs/concepts/services-networking/network-policies/ You can control traffic between pods using the NetworkPolicy resource. In the sample manifest, the selectors are written like this. ingress: - from: - namespaceSelector: matchLabels: user: alice - podSelector: matchLabels: