Which of the following are NOT ingress matching criteria for a network policy? (Choose two)