Skip to content

Docs CSC now features an automatic Finnish translation. Click here for more information.

Warning!

Puhti and Mahti are being decommissioned in stages, and their storage areas will become fully unavailable from 15 October 2026. Clean up unnecessary files and move any data you need to keep by 31 August 2026. See the Roihu data migration guide for instructions on transferring your data to Roihu.

Puhti computing services have been decommissioned and no new jobs are accepted or executed on its compute nodes. Puhti login nodes and storage services are planned to remain available until 15 October 2026.

Network policies

From a networking point of view, each namespace is configured by default to provide an isolated network for everything that runs inside it, notably Pods and Services. Traffic to any Pod or Service coming from outside the namespace, even from other namespaces in Rahti, is blocked. The only traffic that is allowed in from outside the namespace is the traffic that goes through a Route. This isolation is achieved with network policies. It is possible to change this behaviour by editing the two NetworkPolicy objects that are created by default in Rahti.

Rahti Networking

Advanced networking

In the Rahti web console, under Networking > NetworkPolicies, it is possible to browse and edit the default network policies, but only in YAML format. Only change them if you are really sure of what you are doing.

For an overview of how Pods, Services, and Routes are connected in Rahti, see Networking in Rahti.