Skip to main content
Version: Next 🚧

Network capabilities

Kubewarden policies can't make network requests from within the WebAssembly execution context.

You can do network operations by leveraging a series of capabilities exposed by the host.

DNS host lookup​

This function performs a DNS lookup starting from the FQDN given by the policy.

Caching​

Caching of lookup results is for one minute.

Communication protocol​

This is the description of the waPC protocol used to expose this capability:

waPC function - v1/dns_lookup_host input​

# hostname - JSON encoded string
string

waPC function - v1/dns_lookup_host output​


{
  # list of IPs
  "ips": [string]
}

The response contains all the IP addresses, both IPv4 and IPv6, as strings, associated with the given FQDN.

For example, when requesting the manifest digest of the busybox:latest image, the payloads would be:

  • Input payload: "google.com"
  • Output payload: { "ips": ["127.0.0.1"]}