NeuVector generally thinks of things in terms of from

foo group

to

bar group

via

xxx Protocol

as explicit allow rules