Skip to main content
All glossary terms

Proxy & networking

Egress filtering

Egress filtering applies policy to traffic leaving a network or workload, such as limiting destination addresses, ports, protocols, or request attributes. It can be enforced at different layers, and the available signals depend on where the control is placed.

Also known as outbound traffic filtering.

Why it matters in practice

Outbound controls can reduce unwanted connections, but their effectiveness depends on coverage, rule quality, DNS behavior, and bypass paths. A network allowlist may not inspect application semantics, while a proxy may not see traffic that avoids it. Egress filtering is one control and does not establish complete SSRF protection.

Example

A test workload is allowed to reach its approved proxy endpoint, while direct outbound connections are reviewed by the network policy.

Educational note

This definition is general information, not legal advice. It may omit facts that matter to a specific situation and does not establish or guarantee compliance.