I want istio envoy proxy to translate http traffic to https

会有一股神秘感。 提交于 2021-02-11 14:50:19

问题


I'm using k8s with istio. And, I have external api with https endpoint (mutual tls)

And I don't want every api request from k8s pod to implement mutual tls call, so it would be great if istio envoy proxy can process mutual tls. Then pod can call api with http, and request would be converted to https mtls request by envoy.

+---------------------------------+
| (pod) ---http--> (envoy proxy) -|-https(mtls)--> external api
+---------------------------------+

I managed to find a solution of mutual tls with envoy. How can I use custom client certificate for external service with istio?

Now I should find how to setup envoy proxy to convert http to https. I guess that I should use ServiceEntry, DestinationRule, VirtualService, but I stuck here.

Help me.


回答1:


Here is a task on istio.io how to do it.



来源:https://stackoverflow.com/questions/57347419/i-want-istio-envoy-proxy-to-translate-http-traffic-to-https

标签
易学教程内所有资源均来自网络或用户发布的内容,如有违反法律规定的内容欢迎反馈
该文章没有解决你所遇到的问题?点击提问,说说你的问题,让更多的人一起探讨吧!