mandarjog

# 
# $ tree
# 
# ├── Dockerfile
# └── gcp_envoy_bootstrap.json. --> update and copy the file here.
# To build an image
# $ export IMAGE_NAME=gcr.io/gke-release/asm/proxyv2:1.11.2-asm.17-modified-1
# $ docker build -t  ${IMAGE_NAME} .
# $ docker push ${IMAGE_NAME}

mandarjog

admin:
  address:
    socket_address:
      protocol: TCP
      address: 127.0.0.1
      port_value: 9901
static_resources:
  listeners:
  - name: listener_0
    address:

mandarjog

sudo nsenter -t $PROXY_PID -n -m -a  sudo cat /proc/net/nf_conntrack
ipv4     2 tcp      6 86398 ESTABLISHED src=10.60.2.21 dst=10.64.9.165 sport=37094 dport=15012 src=10.64.9.165 dst=10.60.2.21 sport=15012 dport=37094 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 19 TIME_WAIT src=10.44.40.158 dst=10.60.2.21 sport=34714 dport=15021 src=10.60.2.21 dst=10.44.40.158 sport=15021 dport=34714 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 17 TIME_WAIT src=10.44.40.158 dst=10.60.2.21 sport=34692 dport=15021 src=10.60.2.21 dst=10.44.40.158 sport=15021 dport=34692 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 73 TIME_WAIT src=10.44.40.158 dst=10.60.2.21 sport=35050 dport=15021 src=10.60.2.21 dst=10.44.40.158 sport=15021 dport=35050 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 57 TIME_WAIT src=10.44.40.158 dst=10.60.2.21 sport=34952 dport=15021 src=10.60.2.21 dst=10.44.40.158 sport=15021 dport=34952 [ASSURED] mark=0 zone=0 use=2
ipv4     2 tcp      6 51 TIME_WAIT src=10.44.40.158 dst=10.60.2.21 

mandarjog

{
  "insertId": "au42bxg5qfqm84",
  "httpRequest": {
    "requestMethod": "GET",
    "requestUrl": "http://svc00-0-0-0:8080/",
    "requestSize": "938",
    "status": 200,
    "responseSize": "2426",
    "remoteIp": "10.24.5.116:35006",
    "serverIp": "10.24.5.58:8080",

mandarjog

admin:
  access_log_path: "/dev/null"
  address:
    socket_address:
      protocol: TCP
      address: 127.0.0.1
      port_value: 9901

layered_runtime:
  layers:

mandarjog

admin:
  access_log_path: "/dev/null"
  address:
    socket_address:
      protocol: TCP
      address: 127.0.0.1
      port_value: 9901

layered_runtime:
  layers:

mandarjog

apiVersion: networking.istio.io/v1alpha3
kind: EnvoyFilter
metadata:
  name: metadata-exchange-1.4
  namespace: istio-system
spec:
  configPatches:
    - applyTo: HTTP_FILTER
      match:
        context: ANY # inbound, outbound, and gateway

mandarjog

{
  "insertId": "13eox5eg3sm2c21",
  "httpRequest": {
    "requestMethod": "GET",
    "requestUrl": "://details:9080/details/0",
    "requestSize": "743",
    "status": 403,
    "responseSize": "1811",
    "remoteIp": "10.20.1.14:35972",
    "serverIp": "10.20.1.13:9080",

mandarjog

apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
spec:
  addonComponents:
    grafana:
      enabled: true
    prometheus:
      enabled: true
    kiali:
      enabled: true

mandarjog

apiVersion: networking.istio.io/v1alpha3
kind: EnvoyFilter
metadata:
  name: disable-ingress-h2
  namespace: istio-system
spec:
  workloadSelector:
    labels:
      istio: ingressgateway
  configPatches: