Skip to content

Instantly share code, notes, and snippets.

@tuannvm

tuannvm/note.md

Last active June 22, 2019 14:04
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save tuannvm/141cb8aed2452e61a83b3999d0f4f4b8 to your computer and use it in GitHub Desktop.
Save tuannvm/141cb8aed2452e61a83b3999d0f4f4b8 to your computer and use it in GitHub Desktop.
Download ZIP
#servicemesh #istio
Raw
note.md

Isitio evaluation

Setting Request Timeouts

One more thing to note about timeouts in Istio is that in addition to overriding them in route rules, as you did in this task, they can also be overridden on a per-request basis if the application adds an x-envoy-upstream-rq-timeout-ms header on outbound requests. In the header, the timeout is specified in milliseconds instead of seconds.

https://istio.io/docs/tasks/traffic-management/secure-ingress/sds/

Doesn't work in istio-enabled GKE, as right after we try to modify ingressgateway GKE will try to revert that :(

TODO:

  • Install custom istio on GKE

https://istio.io/docs/tasks/security/authn-policy/

MeshPolicy is a cluster-wide resource Only destination rules in the client namespace, server namespace and global namespace (default is istio-system) will be considered for a service, in that order. DestinationRule could be created in both source for destination namespace

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment