Is NetworkPolicy a stateful firewall?
For example, if I allow ingress from a certain IPs on certain ports, is the return traffic automatically allowed on ephemeral? Ditto for allowed egress.
How does this play with a default block policy in place?
Are there any other considerations here?
NetworkPolicy is stateful and will allow an established connection to communicate both ways.