anchor.diff:  |====
   // end::policy-audit[]
   
  -ifdef::operator[]
  -NOTE: You can only change the configuration for your cluster network provider during cluster installation.
  +.`gatewayConfig` object
  +[cols=".^2,.^2,.^6a",options="header"]
  +|====
  +|Field|Type|Description
  +
  +|`routingViaHost`
  +|`boolean`
  +|Set this field to `true` to send egress traffic from pods to the host networking stack.
  +For highly-specialized installations and applications that rely on manually configured routes in the kernel routing table, you might want to route egress traffic to the host networking stack.
  +By default, egress traffic is processed in OVN to exit the cluster and is not affected by specialized routes in the kernel routing table.
  +The default value is `false`.
  +
  +This field has an interaction with the Open vSwitch hardware offloading feature.
  +If you set this field to `true`, you do not receive the performance benefits of the offloading because egress traffic is processed by the host networking stack.
  +
  +|====
  +
  +ifdef::operator[]
  +NOTE: You can only change the configuration for your cluster network provider during cluster installation, except for the `gatewayConfig` field that can be changed at runtime as a post-installation activity.
   endif::operator[]
   
   .Example OVN-Kubernetes configuration
  
positive.code: |`object`
  |Specify a configuration object for customizing network policy audit logging. If unset, the defaults audit log settings are used.
  
  |====
  
  // tag::policy-audit[]
  
negative.code: // Module included in the following assemblies:
  //
  // * installing/installing_aws/installing-aws-network-customizations.adoc
  // * installing/installing_azure/installing-azure-network-customizations.adoc
  // * installing/installing_bare_metal/installing-bare-metal-network-customizations.adoc
  // * installing/installing_gcp/installing-gcp-network-customizations.adoc
  // * installing/installing_ibm_power/installing-ibm-power.adoc
  // * installing/installing_ibm_power/installing-restricted-networks-ibm-power.adoc
  // * installing/installing_ibm_z/installing-ibm-z-kvm.adoc
  // * installing/installing_ibm_z/installing-ibm-z.adoc
  // * installing/installing_ibm_z/installing-restricted-networks-ibm-z-kvm.adoc
  // * installing/installing_ibm_z/installing-restricted-networks-ibm-z.adoc
  // * installing/installing_vmc/installing-vmc-network-customizations-user-infra.adoc
  // * installing/installing_vmc/installing-vmc-network-customizations.adoc
  // * installing/installing_vsphere/installing-vsphere-installer-provisioned-network-customizations.adoc
  // * installing/installing_vsphere/installing-vsphere-network-customizations.adoc
  // * networking/cluster-network-operator.adoc
  // * networking/network_policy/logging-network-policy.adoc
  // * post_installation_configuration/network-configuration.adoc
  
  // Installation assemblies need different details than the CNO operator does
  ifeval::["{context}" == "cluster-network-operator"]
  