Use the same Calico network policy for workloads to restrict traffic between hosts and the outside world.| docs.tigera.io