Control access to private network in the Direct Sockets API
Last updated October 31, 2024
The Direct Sockets API allows communication with arbitrary endpoints using TCP and UDP.
Please see https://github.com/WICG/direct-sockets for details.
Private network endpoints are those using IP addresses from private IP address space, which is defined in https://wicg.github.io/private-network-access/#ip-address-space-private.
Setting the policy to 1 or leaving it unset allows Isolated Web App origins to communicate with private network endpoints in the Direct Sockets API.
Setting the policy to 2 blocks Isolated Web App origins from communicating with private network endpoints in the Direct Sockets API.
Note that this policy only applies if the origin is allowed to use the Direct Sockets API.
Please consult DefaultDirectSocketsSetting, DirectSocketsAllowedForUrls and DirectSocketsBlockedForUrls for more details.
The default can also be overridden for matching URLs using DirectSocketsPrivateNetworkAccessAllowedForUrls and DirectSocketsPrivateNetworkAccessBlockedForUrls
This policy applies only to new connection attempts and doesn't invalidate existing connections.