This message was deleted.

I spent a few weeks working on getting firewalld working and never had any luck. I've heard others report that they've gotten vanilla IPtables or UFW working. Additionally Calico has some docs about how you can use it to implement a firewall so you might be able to use that with the default Canal too. SELinux worked last I tried, though.