TL;DR: How can we configure istio sidecar injection/istio-proxy/envoy-proxy/istio egressgateway to allow long living (>3 hours), possibly idle, TCP connections? Some details: We're trying to per...

I'm novice in gRPC. My program is written with ‍‍nuxtjs and is a simple login page that receives the username and password and sends it to the server using gRPC. Everything is fine when I submit a ...

I'm using https://github.com/jetstack/cert-manager in a Kubernetes environment to automatically load https://letsencrypt.org/. It creates certificates that expire in 90 days. 30 days prior to expir...

I have a .NET Core based micro service architecture and have several micro services. We chose Ocelot as API Gateway for routing, aggregation & security implementation. During our architec...

I have a service mesh envoy proxy configuration issue. The configuration is based on this example from the official envoy proxy site: https://www.envoyproxy.io/docs/envoy/latest/start/sandboxes/fro...

For a hybrid-cloud use-case we are looking into the suitability of EnvoyProxy to act as a solution to move data across an on-premise firewall. The intended setup is as follows: App A is located in...

I have 4 microservices running on my laptop listening at various ports. Can I use Istio to create a service mesh on my laptop so the services can communicate with each other through Istio? All the ...

State of Servies: Client (nuxt) is up on http://localhost:3000 and the client sends requests to http://localhost:8080. Server (django) is running on 0.0.0.0:50051. Also docker is up 78496fef5...

I have Envoy Proxy handling SSL termination. Nginx (1.17.0 in a docker container, compiled --with-http_v2_module) is one of several upstream services. As a result, Nginx receives traffic on port 44...

I'm trying to debug a mesh of services, with Envoy sat in the middle. The access logs are showing a lot of 503s, which vary in their %RESPONSE_FLAGS%. Other than the access logging docs, I can't fi...

I'm trying to use http2/grpc streaming, but my connection cuts off in 15 seconds. The documentation on the timeout setting says to set the timeout to 0. However when I do this then Envoy throws an ...

As is very well explained in this elaborate answer, you can customise istio's logging format in IstioOperator. In my case, IstioOperator (when it comes to access logging configuration) looks like t...

I want to be able to capture (log) (at least some of) envoy's HTTP headers on my istio service mesh. I have gone through envoy's docs, and in the log levels' section, it does not mention any header...

I am trying to implement a service mesh to a service with Kubernetes using Istio and Envoy. I was able to set up the service and istio-proxy but I am not able to control the order in which the cont...

I have an Istio 1.4.6 VirtualService with a match and a url rewrite defined as follows: match: - authority: prefix: example.com uri: prefix: /foo/bar rewrite: uri: / route: - destination:...

Is there any way to remove a header going upstream after the external authentication with the envoy proxy? We planned to migrate to envoy proxy for our internal API gateway, but this is a blocker n...

I am trying to understand the difference between the VirtualService and the Gateway in istio? As far I could understand, VirutalService is also used for the purpose of routing the traffic same as G...

I am having tough time understanding the distinction between Envoy and Consul. What are the use cases for each one and what are the advantages ? They both seem to be providing service mesh, observ...

Circuit breaker doesn't trip on httpConsecutiveErrors: 1 (for 500 response). All requests pass through and give a 500 instead . Circuit breaker should trip and should return 503(Service Unavailable...

Im trying to setup a basic envoy proxy (using Docker) from the envoy documentations but I keep getting parsing error as below: [2019-09-30 11:16:05.313][1][info][main] [source/server/server.cc:238...

I'm looking for to utilize a more mainstream and language-agnostic API proxy/wrapper for implementing common patterns (eg, circuit breaker, health checks, etc.) and tracking stats for API calls. H...

I have a K8s deployment with one pod running among others a container with Envoy sw. I have defined image in such way that if there is an Environment variable EXTRA_OPTS defined it will be appended...

I am planning to introduce K8s/Istio into my infra. Right now I have plenty of services which communicate with each other using RabbitMQ. Service mesh concept seems to assume all services should b...

Due to some legacy application that relies on Host header to function correctly, I need to have an Ingress (proxy, etc) that capable of rewrite Host header and pass that to downstream (backend). Is...

I am looking for a service proxy (or load-balancer) with URL-based affinity. This is for using in Kubernetes, inside the cluster: I am looking for an "internal" load balancer, I don't need to expo...