We expect the loopback address 127.0.0.1 to be accessible only from the local host. We need to allow RELATED,ESTABLISHED traffic which may be the return path of a Kubernetes HostPort.
weave expose