# ilt-cilium-foundations-life-of-a-packet-overlay

for the checking of things I think we should consider

`kubectl exec -ti -n kube-system ds/cilium -- cilium status`

tho this doesn't show tunnel mode

maybe consider custom columns instead of jq.

`kubectl get nodes -o custom-columns=name:.metadata.name,node-ip:.status.addresses[].address,pod-cidr:.spec.podCIDRs[]`

less dependencies and easier to read

This is a bug the final words of section 4

Well done for completing the course! You are now familiar with Cilium Host Firewall! You now understand how you can apply the same k8S networking security policies to your nodes and even to non-k8s hosts!