Questions tagged [istio]

Use this tag if a question is about Istio, which can be used to connect, secure, control, and observe services.

Filter by
Sorted by
Tagged with
0
votes
0answers
7 views

Proxy configuration in Istio

I've got a problem with network connections inside istio. After setting up ServiceEntry that looks exactly like this: apiVersion: networking.istio.io/v1alpha3 kind: ServiceEntry metadata: name: ...
1
vote
1answer
7 views

Istio: envoy proxy to https container in same pod

I've got a container that runs a https service on port 9999. The service is as follows: apiVersion: v1 kind: Service metadata: labels: role: pingfederate2 name: pingfederate2 spec: ports: ...
0
votes
0answers
14 views

Istio Upstream connection failure in addition to 503 response code in istio-proxy logs

Istio sidecar for ldap server showing this error [2020-03-09T10:26:28.802Z] "- - -" 0 - "-" "-" 2927 9389 120 - "-" "-" "-" "-" "192.168.64.17:8443" outbound|443||kubernetes.default.svc.cluster.local ...
-1
votes
1answer
70 views

upstream connect error or disconnect/reset before headers. reset reason: connection failure

I am deploying a virtual service and gateway but when I run it on browser get the below error: upstream connect error or disconnect/reset before headers. reset reason: connection failure I deployed ...
0
votes
0answers
10 views

Problems with ISTIO incorrectly handling gRPC connections

We've seen some odd behaviour on our kubernetes cluster. We have two test applications that speak gRPC. One sends a subscription message and the other sends back a stream of responses. The envisaged ...
0
votes
0answers
98 views

Replace/Consume Istio's Prometheus/Grafana by existing Prometheus-operator

I have multiple K8S clusters that have Prometheus-operator Helm chart installed in monitoring namespace. Each operator consists of Prometheus/Alertmanager/Grafana. Aside from it I have Istio Helm ...
1
vote
0answers
73 views

Getting client IP address in Istio

So I have a setup like this: AWS NLB (forwards) --> Istio --> Nginx pod Now, I'm trying to implement rate limiting at Istio layer. I followed this link. However, I can still request the API more ...
0
votes
1answer
29 views

How to scale the control plane of a service mesh?

Scalability in the data plane is easy to achieve by simply having more replicas. The configuration the proxies receive from the control plane makes that possible . However, if the number of services (...
3
votes
2answers
7k views

How to solve 'upstream connect error or disconnect/reset before headers. reset reason: connection termination' in Istio?

I try to setup an aws load balancer (ELB) with SSL follow the instruction at #6566 Certificate was attached on ELB. However, I got the issue "upstream connect error or disconnect/reset before ...
2
votes
0answers
70 views

What security loopholes does Istio tackle?

My application consists of four microservices. (hr, salary, stock and employee). Users of the application access the "hr" service using http. To fulfill this request the hr microservice communicates ...
0
votes
1answer
106 views

Kubernetes - Internal only API Endpoints

Hypothetical question. Say we have a Java application running in a Kubernetes pod (single docker container) that has 'public' endpoints and 'internal' endpoints. The /public endpoints should be ...