<p>Is <code>NetworkPolicy</code> a stateful firewall?</p>
<p>For example, if I allow ingress from a certain IPs on certain ports, is the return traffic automatically allowed on ephemeral? Ditto for allowed egress.</p>
<p>How does this play with a default block policy in place?</p>
<p>Are there any other considerations here?</p>

<p>NetworkPolicy is stateful and will allow an established connection to communicate both ways.</p>
