From 391613d015e4251cc89e1061a16295ff6cd9d203 Mon Sep 17 00:00:00 2001
From: Murali Reddy <muralimmreddy@gmail.com>
Date: Tue, 28 May 2019 15:29:47 +0530
Subject: [PATCH] add details of ipset used for ipblock's excpet list

---
 docs/weavenpc-design.md | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/docs/weavenpc-design.md b/docs/weavenpc-design.md
index fd752605..80ba6409 100644
--- a/docs/weavenpc-design.md
+++ b/docs/weavenpc-design.md
@@ -20,6 +20,9 @@ NetworkPolicy object updates from the k8s API server:
   containing network policy's namespace) pod selector mentioned in a
   network policy, containing the IP addresses of all pods in the
   namespace whose labels match that selector
+* A `hash:net` set for each distinct (within the scope of the
+  containing network policy's namespace) `except` list of CIDR's mentioned in
+  the network policies
 
 IPsets are implemented by the kernel module `xt_set`, without which
 weave-npc will not work.