Network Rule

Network rules define allowed destinations for remote Arrow Flight UDF servers. An external access integration groups these rules. A UDF references the integration through EXTERNAL_ACCESS_INTEGRATIONS.

Only TYPE = HOST_PORT and MODE = EGRESS are supported. Managing rules requires global SUPER.

Command	Description
CREATE NETWORK RULE	Creates or replaces a host/port rule.
ALTER NETWORK RULE	Replaces the allowed destination list.
DROP NETWORK RULE	Removes a rule.

Related Topics

• External Access Integrations: setup, operator limits, privileges, and propagation.
• External Access Integration commands.
• Network Policy: controls client connections to Databend, not remote UDF destinations.