Cloud Native应用交付

  • 首页
  • 关于本站
  • 个人介绍
  • Downloads
  • Repo
    • Github
    • Container
  • F5
    • F5 In AI Agent Arch
    • F5 AI Infrastructure Blueprint
    • F5 Python SDK
    • F5-container
    • F5-LBaaS
  • 社交
    • 联系我
    • 微信/微博
    • 公众号
    • 打赏赞助
行至水穷处 坐看云起时
Cloud Native Application Services: cnadn.net
  1. 首页
  2. ServiceMesh
  3. 正文

istio envoy sidecar 无策略时bootstrap配置

2020年06月21日 7545点热度 0人点赞 0条评论

Warning: Array to string conversion in /home/wwwroot/myf5/wp-content/plugins/wpjam-basic/public/wpjam-utils.php on line 496
$ istioctl proxy-config bootstrap ratings-v1-756b788d54-r59h5.istio-bookinfo
{
    "bootstrap": {
        "node": {
            "id": "sidecar~10.244.1.199~ratings-v1-756b788d54-r59h5.istio-bookinfo~istio-bookinfo.svc.cluster.local",
            "cluster": "ratings.istio-bookinfo",
            "metadata": {
                    "APP_CONTAINERS": "[\n    ratings\n]",
                    "CLUSTER_ID": "Kubernetes",
                    "CONFIG_NAMESPACE": "istio-bookinfo",
                    "EXCHANGE_KEYS": "NAME,NAMESPACE,INSTANCE_IPS,LABELS,OWNER,PLATFORM_METADATA,WORKLOAD_NAME,MESH_ID,SERVICE_ACCOUNT,CLUSTER_ID",
                    "INSTANCE_IPS": "10.244.1.199",
                    "INTERCEPTION_MODE": "REDIRECT",
                    "ISTIO_PROXY_SHA": "istio-proxy:9085616b434c0e0b54cc677cfd3b97a0fed71c0c",
                    "ISTIO_VERSION": "1.6.3",
                    "LABELS": {
                                "app": "ratings",
                                "istio.io/rev": "default",
                                "pod-template-hash": "756b788d54",
                                "security.istio.io/tlsMode": "istio",
                                "service.istio.io/canonical-name": "ratings",
                                "service.istio.io/canonical-revision": "v1",
                                "version": "v1"
                            },
                    "MESH_ID": "cluster.local",
                    "NAME": "ratings-v1-756b788d54-r59h5",
                    "NAMESPACE": "istio-bookinfo",
                    "OWNER": "kubernetes://apis/apps/v1/namespaces/istio-bookinfo/deployments/ratings-v1",
                    "POD_PORTS": "[{\"containerPort\":9080,\"protocol\":\"TCP\"}]",
                    "PROXY_CONFIG": {
                                "binaryPath": "/usr/local/bin/envoy",
                                "concurrency": 2,
                                "configPath": "./etc/istio/proxy",
                                "controlPlaneAuthPolicy": "MUTUAL_TLS",
                                "discoveryAddress": "istiod.istio-system.svc:15012",
                                "drainDuration": "45s",
                                "envoyAccessLogService": {
                                        },
                                "envoyMetricsService": {
                                        },
                                "parentShutdownDuration": "60s",
                                "proxyAdminPort": 15000,
                                "proxyMetadata": {
                                            "DNS_AGENT": ""
                                        },
                                "serviceCluster": "ratings.istio-bookinfo",
                                "statNameLength": 189,
                                "statusPort": 15020,
                                "tracing": {
                                            "zipkin": {
                                                        "address": "zipkin.istio-system:9411"
                                                    }
                                        }
                            },
                    "SDS": "true",
                    "SERVICE_ACCOUNT": "bookinfo-ratings",
                    "TRUSTJWT": "true",
                    "WORKLOAD_NAME": "ratings-v1"
                },
            "locality": {

            },
            "hiddenEnvoyDeprecatedBuildVersion": "9085616b434c0e0b54cc677cfd3b97a0fed71c0c/1.14.1/Clean/RELEASE/BoringSSL",
            "userAgentName": "envoy",
            "userAgentBuildVersion": {
                "version": {
                    "majorNumber": 1,
                    "minorNumber": 14,
                    "patch": 1
                },
                "metadata": {
                        "build.type": "RELEASE",
                        "revision.sha": "9085616b434c0e0b54cc677cfd3b97a0fed71c0c",
                        "revision.status": "Clean",
                        "ssl.version": "BoringSSL"
                    }
            },
            "extensions": [
                {
                    "name": "envoy.transport_sockets.alts",
                    "category": "envoy.transport_sockets.downstream"
                },
                {
                    "name": "envoy.transport_sockets.raw_buffer",
                    "category": "envoy.transport_sockets.downstream"
                },
                {
                    "name": "envoy.transport_sockets.tap",
                    "category": "envoy.transport_sockets.downstream"
                },
                {
                    "name": "envoy.transport_sockets.tls",
                    "category": "envoy.transport_sockets.downstream"
                },
                {
                    "name": "raw_buffer",
                    "category": "envoy.transport_sockets.downstream"
                },
                {
                    "name": "tls",
                    "category": "envoy.transport_sockets.downstream"
                },
                {
                    "name": "envoy.retry_host_predicates.omit_canary_hosts",
                    "category": "envoy.retry_host_predicates"
                },
                {
                    "name": "envoy.retry_host_predicates.omit_host_metadata",
                    "category": "envoy.retry_host_predicates"
                },
                {
                    "name": "envoy.retry_host_predicates.previous_hosts",
                    "category": "envoy.retry_host_predicates"
                },
                {
                    "name": "envoy.filters.thrift.rate_limit",
                    "category": "envoy.thrift_proxy.filters"
                },
                {
                    "name": "envoy.filters.thrift.router",
                    "category": "envoy.thrift_proxy.filters"
                },
                {
                    "name": "auto",
                    "category": "envoy.thrift_proxy.protocols"
                },
                {
                    "name": "binary",
                    "category": "envoy.thrift_proxy.protocols"
                },
                {
                    "name": "binary/non-strict",
                    "category": "envoy.thrift_proxy.protocols"
                },
                {
                    "name": "compact",
                    "category": "envoy.thrift_proxy.protocols"
                },
                {
                    "name": "twitter",
                    "category": "envoy.thrift_proxy.protocols"
                },
                {
                    "name": "default",
                    "category": "envoy.dubbo_proxy.route_matchers"
                },
                {
                    "name": "envoy.filters.udp.dns_filter",
                    "category": "envoy.filters.udp_listener"
                },
                {
                    "name": "envoy.filters.udp_listener.udp_proxy",
                    "category": "envoy.filters.udp_listener"
                },
                {
                    "name": "dubbo",
                    "category": "envoy.dubbo_proxy.protocols"
                },
                {
                    "name": "envoy.cluster.eds",
                    "category": "envoy.clusters"
                },
                {
                    "name": "envoy.cluster.logical_dns",
                    "category": "envoy.clusters"
                },
                {
                    "name": "envoy.cluster.original_dst",
                    "category": "envoy.clusters"
                },
                {
                    "name": "envoy.cluster.static",
                    "category": "envoy.clusters"
                },
                {
                    "name": "envoy.cluster.strict_dns",
                    "category": "envoy.clusters"
                },
                {
                    "name": "envoy.clusters.aggregate",
                    "category": "envoy.clusters"
                },
                {
                    "name": "envoy.clusters.dynamic_forward_proxy",
                    "category": "envoy.clusters"
                },
                {
                    "name": "envoy.clusters.redis",
                    "category": "envoy.clusters"
                },
                {
                    "name": "envoy.ip",
                    "category": "envoy.resolvers"
                },
                {
                    "name": "envoy.wasm",
                    "category": "wasm_vm"
                },
                {
                    "name": "envoy.access_loggers.file",
                    "category": "envoy.access_loggers"
                },
                {
                    "name": "envoy.access_loggers.http_grpc",
                    "category": "envoy.access_loggers"
                },
                {
                    "name": "envoy.access_loggers.tcp_grpc",
                    "category": "envoy.access_loggers"
                },
                {
                    "name": "envoy.access_loggers.wasm",
                    "category": "envoy.access_loggers"
                },
                {
                    "name": "envoy.file_access_log",
                    "category": "envoy.access_loggers"
                },
                {
                    "name": "envoy.http_grpc_access_log",
                    "category": "envoy.access_loggers"
                },
                {
                    "name": "envoy.tcp_grpc_access_log",
                    "category": "envoy.access_loggers"
                },
                {
                    "name": "envoy.wasm_access_log",
                    "category": "envoy.access_loggers"
                },
                {
                    "name": "envoy.extensions.http.cache.simple",
                    "category": "http_cache_factory"
                },
                {
                    "name": "compress",
                    "category": "envoy.wasm.foreign_functions"
                },
                {
                    "name": "declare_property",
                    "category": "envoy.wasm.foreign_functions"
                },
                {
                    "name": "expr_create",
                    "category": "envoy.wasm.foreign_functions"
                },
                {
                    "name": "expr_delete",
                    "category": "envoy.wasm.foreign_functions"
                },
                {
                    "name": "expr_evaluate",
                    "category": "envoy.wasm.foreign_functions"
                },
                {
                    "name": "uncompress",
                    "category": "envoy.wasm.foreign_functions"
                },
                {
                    "name": "envoy.dog_statsd",
                    "category": "envoy.stats_sinks"
                },
                {
                    "name": "envoy.metrics_service",
                    "category": "envoy.stats_sinks"
                },
                {
                    "name": "envoy.stat_sinks.dog_statsd",
                    "category": "envoy.stats_sinks"
                },
                {
                    "name": "envoy.stat_sinks.hystrix",
                    "category": "envoy.stats_sinks"
                },
                {
                    "name": "envoy.stat_sinks.metrics_service",
                    "category": "envoy.stats_sinks"
                },
                {
                    "name": "envoy.stat_sinks.statsd",
                    "category": "envoy.stats_sinks"
                },
                {
                    "name": "envoy.statsd",
                    "category": "envoy.stats_sinks"
                },
                {
                    "name": "envoy.resource_monitors.fixed_heap",
                    "category": "envoy.resource_monitors"
                },
                {
                    "name": "envoy.resource_monitors.injected_resource",
                    "category": "envoy.resource_monitors"
                },
                {
                    "name": "envoy.filters.network.upstream.metadata_exchange",
                    "category": "envoy.filters.upstream_network"
                },
                {
                    "name": "envoy.wasm.access_log_policy",
                    "category": "envoy.wasm.null_vms"
                },
                {
                    "name": "envoy.wasm.attributegen",
                    "category": "envoy.wasm.null_vms"
                },
                {
                    "name": "envoy.wasm.metadata_exchange",
                    "category": "envoy.wasm.null_vms"
                },
                {
                    "name": "envoy.wasm.null.stackdriver",
                    "category": "envoy.wasm.null_vms"
                },
                {
                    "name": "envoy.wasm.stats",
                    "category": "envoy.wasm.null_vms"
                },
                {
                    "name": "auto",
                    "category": "envoy.thrift_proxy.transports"
                },
                {
                    "name": "framed",
                    "category": "envoy.thrift_proxy.transports"
                },
                {
                    "name": "header",
                    "category": "envoy.thrift_proxy.transports"
                },
                {
                    "name": "unframed",
                    "category": "envoy.thrift_proxy.transports"
                },
                {
                    "name": "envoy.buffer",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.cors",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.csrf",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.ext_authz",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.fault",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.adaptive_concurrency",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.aws_lambda",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.aws_request_signing",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.buffer",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.cache",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.cors",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.csrf",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.dynamic_forward_proxy",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.dynamo",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.ext_authz",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.fault",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.grpc_http1_bridge",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.grpc_http1_reverse_bridge",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.grpc_json_transcoder",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.grpc_stats",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.grpc_web",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.gzip",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.header_to_metadata",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.health_check",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.ip_tagging",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.jwt_authn",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.lua",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.on_demand",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.original_src",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.ratelimit",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.rbac",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.router",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.squash",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.tap",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.filters.http.wasm",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.grpc_http1_bridge",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.grpc_json_transcoder",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.grpc_web",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.gzip",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.health_check",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.http_dynamo_filter",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.ip_tagging",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.lua",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.rate_limit",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.router",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "envoy.squash",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "istio.alpn",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "istio_authn",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "jwt-auth",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "mixer",
                    "category": "envoy.filters.http"
                },
                {
                    "name": "raw_udp_listener",
                    "category": "envoy.udp_listeners"
                },
                {
                    "name": "envoy.grpc_credentials.aws_iam",
                    "category": "envoy.grpc_credentials"
                },
                {
                    "name": "envoy.grpc_credentials.default",
                    "category": "envoy.grpc_credentials"
                },
                {
                    "name": "envoy.grpc_credentials.file_based_metadata",
                    "category": "envoy.grpc_credentials"
                },
                {
                    "name": "envoy.filters.listener.http_inspector",
                    "category": "envoy.filters.listener"
                },
                {
                    "name": "envoy.filters.listener.original_dst",
                    "category": "envoy.filters.listener"
                },
                {
                    "name": "envoy.filters.listener.original_src",
                    "category": "envoy.filters.listener"
                },
                {
                    "name": "envoy.filters.listener.proxy_protocol",
                    "category": "envoy.filters.listener"
                },
                {
                    "name": "envoy.filters.listener.tls_inspector",
                    "category": "envoy.filters.listener"
                },
                {
                    "name": "envoy.listener.http_inspector",
                    "category": "envoy.filters.listener"
                },
                {
                    "name": "envoy.listener.original_dst",
                    "category": "envoy.filters.listener"
                },
                {
                    "name": "envoy.listener.original_src",
                    "category": "envoy.filters.listener"
                },
                {
                    "name": "envoy.listener.proxy_protocol",
                    "category": "envoy.filters.listener"
                },
                {
                    "name": "envoy.listener.tls_inspector",
                    "category": "envoy.filters.listener"
                },
                {
                    "name": "envoy.health_checkers.redis",
                    "category": "envoy.health_checkers"
                },
                {
                    "name": "dubbo.hessian2",
                    "category": "envoy.dubbo_proxy.serializers"
                },
                {
                    "name": "envoy.retry_priorities.previous_priorities",
                    "category": "envoy.retry_priorities"
                },
                {
                    "name": "envoy.filters.dubbo.router",
                    "category": "envoy.dubbo_proxy.filters"
                },
                {
                    "name": "envoy.dynamic.ot",
                    "category": "envoy.tracers"
                },
                {
                    "name": "envoy.lightstep",
                    "category": "envoy.tracers"
                },
                {
                    "name": "envoy.tracers.datadog",
                    "category": "envoy.tracers"
                },
                {
                    "name": "envoy.tracers.dynamic_ot",
                    "category": "envoy.tracers"
                },
                {
                    "name": "envoy.tracers.lightstep",
                    "category": "envoy.tracers"
                },
                {
                    "name": "envoy.tracers.opencensus",
                    "category": "envoy.tracers"
                },
                {
                    "name": "envoy.tracers.xray",
                    "category": "envoy.tracers"
                },
                {
                    "name": "envoy.tracers.zipkin",
                    "category": "envoy.tracers"
                },
                {
                    "name": "envoy.zipkin",
                    "category": "envoy.tracers"
                },
                {
                    "name": "envoy.transport_sockets.alts",
                    "category": "envoy.transport_sockets.upstream"
                },
                {
                    "name": "envoy.transport_sockets.raw_buffer",
                    "category": "envoy.transport_sockets.upstream"
                },
                {
                    "name": "envoy.transport_sockets.tap",
                    "category": "envoy.transport_sockets.upstream"
                },
                {
                    "name": "envoy.transport_sockets.tls",
                    "category": "envoy.transport_sockets.upstream"
                },
                {
                    "name": "raw_buffer",
                    "category": "envoy.transport_sockets.upstream"
                },
                {
                    "name": "tls",
                    "category": "envoy.transport_sockets.upstream"
                },
                {
                    "name": "envoy.client_ssl_auth",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.echo",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.ext_authz",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.filters.network.client_ssl_auth",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.filters.network.direct_response",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.filters.network.dubbo_proxy",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.filters.network.echo",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.filters.network.ext_authz",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.filters.network.http_connection_manager",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.filters.network.kafka_broker",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.filters.network.local_ratelimit",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.filters.network.metadata_exchange",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.filters.network.mongo_proxy",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.filters.network.mysql_proxy",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.filters.network.ratelimit",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.filters.network.rbac",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.filters.network.redis_proxy",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.filters.network.sni_cluster",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.filters.network.tcp_cluster_rewrite",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.filters.network.tcp_proxy",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.filters.network.thrift_proxy",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.filters.network.wasm",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.filters.network.zookeeper_proxy",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.http_connection_manager",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.mongo_proxy",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.ratelimit",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.redis_proxy",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "envoy.tcp_proxy",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "forward_downstream_sni",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "mixer",
                    "category": "envoy.filters.network"
                },
                {
                    "name": "sni_verifier",
                    "category": "envoy.filters.network"
                }
            ]
        },
        "staticResources": {
            "listeners": [
                {
                    "address": {
                        "socketAddress": {
                            "address": "0.0.0.0",
                            "portValue": 15090
                        }
                    },
                    "filterChains": [
                        {
                            "filters": [
                                {
                                    "name": "envoy.http_connection_manager",
                                    "typedConfig": {
                                        "@type": "type.googleapis.com/envoy.config.filter.network.http_connection_manager.v2.HttpConnectionManager",
                                        "statPrefix": "stats",
                                        "routeConfig": {
                                            "virtualHosts": [
                                                {
                                                    "name": "backend",
                                                    "domains": [
                                                        "*"
                                                    ],
                                                    "routes": [
                                                        {
                                                            "match": {
                                                                "prefix": "/stats/prometheus"
                                                            },
                                                            "route": {
                                                                ### port 15090  prometheus 服务VS, 发送到prometheus_stats cluster(pool)
                                                                "cluster": "prometheus_stats"
                                                            }
                                                        }
                                                    ]
                                                }
                                            ]
                                        },
                                        "httpFilters": [
                                            {
                                                "name": "envoy.router",
                                                "typedConfig": {
                                                    "@type": "type.googleapis.com/envoy.config.filter.http.router.v2.Router"
                                                }
                                            }
                                        ]
                                    }
                                }
                            ]
                        }
                    ]
                },
                {
                    "address": {
                        ## 健康检查
                        "socketAddress": {
                            "address": "0.0.0.0",
                            "portValue": 15021
                        }
                    },
                    "filterChains": [
                        {
                            "filters": [
                                {
                                    "name": "envoy.http_connection_manager",
                                    "typedConfig": {
                                        "@type": "type.googleapis.com/envoy.config.filter.network.http_connection_manager.v2.HttpConnectionManager",
                                        "statPrefix": "agent",
                                        "routeConfig": {
                                            "virtualHosts": [
                                                {
                                                    "name": "backend",
                                                    "domains": [
                                                        "*"
                                                    ],
                                                    "routes": [
                                                        {
                                                            "match": {
                                                                "prefix": "/healthz/ready"
                                                            },
                                                            "route": {
                                                                "cluster": "agent"
                                                            }
                                                        }
                                                    ]
                                                }
                                            ]
                                        },
                                        "httpFilters": [
                                            {
                                                "name": "envoy.router",
                                                "typedConfig": {
                                                    "@type": "type.googleapis.com/envoy.config.filter.http.router.v2.Router"
                                                }
                                            }
                                        ]
                                    }
                                }
                            ]
                        }
                    ]
                }
            ],
            "clusters": [
                {
                    "name": "prometheus_stats",
                    "type": "STATIC",
                    "connectTimeout": "0.250s",
                    "loadAssignment": {
                        "clusterName": "prometheus_stats",
                        "endpoints": [
                            {
                                "lbEndpoints": [
                                    {
                                        "endpoint": {
                                            "address": {
                                                "socketAddress": {
                                                    "address": "127.0.0.1",
                                                    "portValue": 15000
                                                }
                                            }
                                        }
                                    }
                                ]
                            }
                        ]
                    }
                },
                {
                    "name": "agent",
                    "type": "STATIC",
                    "connectTimeout": "0.250s",
                    "loadAssignment": {
                        "clusterName": "prometheus_stats",
                        "endpoints": [
                            {
                                "lbEndpoints": [
                                    {
                                        "endpoint": {
                                            "address": {
                                                "socketAddress": {
                                                    "address": "127.0.0.1",
                                                    "portValue": 15020
                                                }
                                            }
                                        }
                                    }
                                ]
                            }
                        ]
                    }
                },
                {
                    ###服务发现 静态定义 cluster,被xds-grpc cluster里的 tlsCertificateSdsSecretConfigs 调用
                    "name": "sds-grpc",
                    "type": "STATIC",
                    "connectTimeout": "1s",
                    "loadAssignment": {
                        "clusterName": "sds-grpc",
                        "endpoints": [
                            {
                                "lbEndpoints": [
                                    {
                                        "endpoint": {
                                            "address": {
                                                "pipe": {
                                                    "path": "./etc/istio/proxy/SDS"
                                                }
                                            }
                                        }
                                    }
                                ]
                            }
                        ]
                    },
                    "http2ProtocolOptions": {

                    }
                },
                {
                    "name": "xds-grpc",
                    "type": "STRICT_DNS",
                    "connectTimeout": "1s",
                    "loadAssignment": {
                        "clusterName": "xds-grpc",
                        "endpoints": [
                            {
                                "lbEndpoints": [
                                    {
                                        "endpoint": {
                                            "address": {
                                                "socketAddress": {
                                                    ###请求发送到 istiod 的15012
                                                    "address": "istiod.istio-system.svc",
                                                    "portValue": 15012
                                                }
                                            }
                                        }
                                    }
                                ]
                            }
                        ]
                    },
                    "maxRequestsPerConnection": 1,
                    "circuitBreakers": {
                        "thresholds": [
                            {
                                "maxConnections": 100000,
                                "maxPendingRequests": 100000,
                                "maxRequests": 100000
                            },
                            {
                                "priority": "HIGH",
                                "maxConnections": 100000,
                                "maxPendingRequests": 100000,
                                "maxRequests": 100000
                            }
                        ]
                    },
                    "http2ProtocolOptions": {

                    },
                    "respectDnsTtl": true,
                    "dnsLookupFamily": "V4_ONLY",
                    "transportSocket": {
                        "name": "envoy.transport_sockets.tls",
                        "typedConfig": {
                            "@type": "type.googleapis.com/envoy.api.v2.auth.UpstreamTlsContext",
                            "commonTlsContext": {
                                "tlsCertificateSdsSecretConfigs": [
                                    {
                                        "name": "default",
                                        "sdsConfig": {
                                            "apiConfigSource": {
                                                "apiType": "GRPC",
                                                "grpcServices": [
                                                    {
                                                        "envoyGrpc": {
                                                            "clusterName": "sds-grpc"
                                                        }
                                                    }
                                                ]
                                            }
                                        }
                                    }
                                ],
                                "validationContext": {
                                    "trustedCa": {
                                        "filename": "./var/run/secrets/istio/root-cert.pem"
                                    },
                                    "matchSubjectAltNames": [
                                        {
                                            "exact": "istiod.istio-system.svc"
                                        }
                                    ]
                                },
                                "alpnProtocols": [
                                    "h2"
                                ]
                            }
                        }
                    },
                    "upstreamConnectionOptions": {
                        "tcpKeepalive": {
                            "keepaliveTime": 300
                        }
                    }
                },
                {
                    "name": "zipkin",
                    "type": "STRICT_DNS",
                    "connectTimeout": "1s",
                    "loadAssignment": {
                        "clusterName": "zipkin",
                        "endpoints": [
                            {
                                "lbEndpoints": [
                                    {
                                        "endpoint": {
                                            "address": {
                                                "socketAddress": {
                                                    "address": "zipkin.istio-system",
                                                    "portValue": 9411
                                                }
                                            }
                                        }
                                    }
                                ]
                            }
                        ]
                    },
                    "respectDnsTtl": true,
                    "dnsLookupFamily": "V4_ONLY"
                }
            ]
        },
        "dynamicResources": {
            "ldsConfig": {
                "ads": {

                }
            },
            "cdsConfig": {
                "ads": {

                }
            },
            "adsConfig": {
                "apiType": "GRPC",
                "grpcServices": [
                    {
                        "envoyGrpc": {
                            ################从这里获取发现
                            "clusterName": "xds-grpc"
                        }
                    }
                ]
            }
        },
        "statsConfig": {
            "statsTags": [
                {
                    "tagName": "cluster_name",
                    "regex": "^cluster\\.((.+?(\\..+?\\.svc\\.cluster\\.local)?)\\.)"
                },
                {
                    "tagName": "tcp_prefix",
                    "regex": "^tcp\\.((.*?)\\.)\\w+?$"
                },
                {
                    "tagName": "response_code",
                    "regex": "(response_code=\\.=(.+?);\\.;)|_rq(_(\\.d{3}))$"
                },
                {
                    "tagName": "response_code_class",
                    "regex": "_rq(_(\\dxx))$"
                },
                {
                    "tagName": "http_conn_manager_listener_prefix",
                    "regex": "^listener(?=\\.).*?\\.http\\.(((?:[_.[:digit:]]*|[_\\[\\]aAbBcCdDeEfF[:digit:]]*))\\.)"
                },
                {
                    "tagName": "http_conn_manager_prefix",
                    "regex": "^http\\.(((?:[_.[:digit:]]*|[_\\[\\]aAbBcCdDeEfF[:digit:]]*))\\.)"
                },
                {
                    "tagName": "listener_address",
                    "regex": "^listener\\.(((?:[_.[:digit:]]*|[_\\[\\]aAbBcCdDeEfF[:digit:]]*))\\.)"
                },
                {
                    "tagName": "mongo_prefix",
                    "regex": "^mongo\\.(.+?)\\.(collection|cmd|cx_|op_|delays_|decoding_)(.*?)$"
                },
                {
                    "tagName": "reporter",
                    "regex": "(reporter=\\.=(.*?);\\.;)"
                },
                {
                    "tagName": "source_namespace",
                    "regex": "(source_namespace=\\.=(.*?);\\.;)"
                },
                {
                    "tagName": "source_workload",
                    "regex": "(source_workload=\\.=(.*?);\\.;)"
                },
                {
                    "tagName": "source_workload_namespace",
                    "regex": "(source_workload_namespace=\\.=(.*?);\\.;)"
                },
                {
                    "tagName": "source_principal",
                    "regex": "(source_principal=\\.=(.*?);\\.;)"
                },
                {
                    "tagName": "source_app",
                    "regex": "(source_app=\\.=(.*?);\\.;)"
                },
                {
                    "tagName": "source_version",
                    "regex": "(source_version=\\.=(.*?);\\.;)"
                },
                {
                    "tagName": "source_cluster",
                    "regex": "(source_cluster=\\.=(.*?);\\.;)"
                },
                {
                    "tagName": "destination_namespace",
                    "regex": "(destination_namespace=\\.=(.*?);\\.;)"
                },
                {
                    "tagName": "destination_workload",
                    "regex": "(destination_workload=\\.=(.*?);\\.;)"
                },
                {
                    "tagName": "destination_workload_namespace",
                    "regex": "(destination_workload_namespace=\\.=(.*?);\\.;)"
                },
                {
                    "tagName": "destination_principal",
                    "regex": "(destination_principal=\\.=(.*?);\\.;)"
                },
                {
                    "tagName": "destination_app",
                    "regex": "(destination_app=\\.=(.*?);\\.;)"
                },
                {
                    "tagName": "destination_version",
                    "regex": "(destination_version=\\.=(.*?);\\.;)"
                },
                {
                    "tagName": "destination_service",
                    "regex": "(destination_service=\\.=(.*?);\\.;)"
                },
                {
                    "tagName": "destination_service_name",
                    "regex": "(destination_service_name=\\.=(.*?);\\.;)"
                },
                {
                    "tagName": "destination_service_namespace",
                    "regex": "(destination_service_namespace=\\.=(.*?);\\.;)"
                },
                {
                    "tagName": "destination_port",
                    "regex": "(destination_port=\\.=(.*?);\\.;)"
                },
                {
                    "tagName": "destination_cluster",
                    "regex": "(destination_cluster=\\.=(.*?);\\.;)"
                },
                {
                    "tagName": "request_protocol",
                    "regex": "(request_protocol=\\.=(.*?);\\.;)"
                },
                {
                    "tagName": "request_operation",
                    "regex": "(request_operation=\\.=(.*?);\\.;)"
                },
                {
                    "tagName": "request_host",
                    "regex": "(request_host=\\.=(.*?);\\.;)"
                },
                {
                    "tagName": "response_flags",
                    "regex": "(response_flags=\\.=(.*?);\\.;)"
                },
                {
                    "tagName": "grpc_response_status",
                    "regex": "(grpc_response_status=\\.=(.*?);\\.;)"
                },
                {
                    "tagName": "connection_security_policy",
                    "regex": "(connection_security_policy=\\.=(.*?);\\.;)"
                },
                {
                    "tagName": "permissive_response_code",
                    "regex": "(permissive_response_code=\\.=(.*?);\\.;)"
                },
                {
                    "tagName": "permissive_response_policyid",
                    "regex": "(permissive_response_policyid=\\.=(.*?);\\.;)"
                },
                {
                    "tagName": "source_canonical_service",
                    "regex": "(source_canonical_service=\\.=(.*?);\\.;)"
                },
                {
                    "tagName": "destination_canonical_service",
                    "regex": "(destination_canonical_service=\\.=(.*?);\\.;)"
                },
                {
                    "tagName": "source_canonical_revision",
                    "regex": "(source_canonical_revision=\\.=(.*?);\\.;)"
                },
                {
                    "tagName": "destination_canonical_revision",
                    "regex": "(destination_canonical_revision=\\.=(.*?);\\.;)"
                },
                {
                    "tagName": "cache",
                    "regex": "(cache\\.(.+?)\\.)"
                },
                {
                    "tagName": "component",
                    "regex": "(component\\.(.+?)\\.)"
                },
                {
                    "tagName": "tag",
                    "regex": "(tag\\.(.+?);\\.)"
                },
                {
                    "tagName": "wasm_filter",
                    "regex": "(wasm_filter\\.(.+?)\\.)"
                }
            ],
            "useAllDefaultTags": false,
            "statsMatcher": {
                "inclusionList": {
                    "patterns": [
                        {
                            "prefix": "reporter="
                        },
                        {
                            "prefix": "cluster_manager"
                        },
                        {
                            "prefix": "listener_manager"
                        },
                        {
                            "prefix": "http_mixer_filter"
                        },
                        {
                            "prefix": "tcp_mixer_filter"
                        },
                        {
                            "prefix": "server"
                        },
                        {
                            "prefix": "cluster.xds-grpc"
                        },
                        {
                            "prefix": "wasm"
                        },
                        {
                            "prefix": "component"
                        }
                    ]
                }
            }
        },
        "tracing": {
            "http": {
                "name": "envoy.zipkin",
                "typedConfig": {
                    "@type": "type.googleapis.com/envoy.config.trace.v2.ZipkinConfig",
                    "collectorCluster": "zipkin",
                    "collectorEndpoint": "/api/v2/spans",
                    "traceId128bit": true,
                    "sharedSpanContext": false,
                    "collectorEndpointVersion": "HTTP_JSON"
                }
            }
        },
        "admin": {
            "accessLogPath": "/dev/null",
            "profilePath": "/var/lib/istio/data/envoy.prof",
            "address": {
                "socketAddress": {
                    "address": "127.0.0.1",
                    "portValue": 15000
                }
            }
        }
    },
    "lastUpdated": "2020-06-20T15:49:29.381Z"
}%
Array
本作品采用 知识共享署名-非商业性使用 4.0 国际许可协议 进行许可
标签: envoy istio sidecar
最后更新:2020年06月21日

纳米

linjing.io

打赏 点赞
< 上一篇
下一篇 >

文章评论

razz evil exclaim smile redface biggrin eek confused idea lol mad twisted rolleyes wink cool arrow neutral cry mrgreen drooling persevering
取消回复

这个站点使用 Akismet 来减少垃圾评论。了解你的评论数据如何被处理。

页面AI聊天助手

纳米

linjing.io

☁️迈向Cloud Native ADC ☁️

认证获得:
TOGAF: ID 152743
Kubernetes: CKA #664
Microsoft: MCSE MCDBA
Cisco: CCNP
Juniper: JNCIS
F5:
F5 Certified Solution Expert, Security
F5 Certified Technology Specialist, LTM/GTM/APM/ASM
F5 Certified BIG-IP Administrator
  • 点击查看本博技术要素列表
  • 归档
    分类
    • AI
    • Automation
    • Avi Networks
    • Cisco ACI
    • CISCO资源
    • F5 with ELK
    • F5-Tech tips
    • F5技术
    • Juniper
    • Linux
    • NGINX
    • SDN
    • ServiceMesh
    • WEB编程
    • WINDOWS相关
    • 业界文章
    • 交换机技术
    • 化云为雨/Openstack
    • 协议原理
    • 容器/k8s
    • 我的工作
    • 我的生活
    • 网站技术
    • 路由器技术
    • 项目案例
    标签聚合
    envoy DNS api flannel network nginx k8s F5 gtm istio bigip docker openstack irule neutron
    最近评论
    Abeny 发布于 8 个月前(02月20日) Very good!
    lz 发布于 2 年前(02月26日) 66666666666666
    汤姆 发布于 2 年前(09月10日) 嗨,楼主,里面的json怎么下载啊,怎么收费啊?
    汤姆 发布于 2 年前(09月09日) 大佬,kib的页面可以分享下吗?谢谢
    zhangsha 发布于 2 年前(05月12日) 资料发给我下,谢谢纳米同志!!!!lyx895@qq.com
    浏览次数
    • Downloads - 196,246 views
    • 联系我 - 137,285 views
    • 迄今为止最全最深入的BIGIP-DNS/GTM原理及培训资料 - 126,945 views
    • Github - 115,480 views
    • Sniffer Pro 4 70 530抓包软件 中文版+视频教程 - 91,549 views
    • F5常见log日志解释 - 90,848 views
    • 迄今为止最全最深入的BIGIP-DNS/GTM原理及培训资料 - 88,883 views
    • 从传统ADC迈向CLOUD NATIVE ADC - 下载 - 87,842 views
    • 关于本站 - 76,613 views
    • F5利用Elastic stack(ELK)进行应用数据挖掘系列(2)-DNS - 65,066 views
    链接表
    • F5SE创新
    • Jimmy Song‘s Blog
    • SDNlab
    • Service Mesh社区
    • 三斗室
    • 个人profile
    • 云原生社区

    COPYRIGHT © 2023 Cloud Native 应用交付. ALL RIGHTS RESERVED.

    Theme Kratos Made By Seaton Jiang

    京ICP备14048088号-1

    京公网安备 11010502041506号