Yi rijistar tafiyar TCP ta wakilin CONNECT na kamfani a cikin Istio

Yi amfani da tsarin ServiceEntry na wakili na waje a yanayin sidecar don mai sauraron wakili, yayin da zaɓin wakili na manhaja da izinin manufa su kasance daban.

Ga aikin da ya riga ya zaɓi wakilin CONNECT na kamfani, sidecar yana ganin haɗi zuwa wannan mai sauraro. Yi rijistar hanyar tafiya ta farko a matsayin TCP bisa tsarin da aka rubuta na wakili na waje a yanayin sidecar:

apiVersion: networking.istio.io/v1
kind: ServiceEntry
metadata:
  name: corporate-forward-proxy
spec:
  hosts:
    - proxy.corp.example
  addresses:
    - 203.0.113.10/32
  ports:
    - number: 3128
      name: tcp-proxy
      protocol: TCP
  location: MESH_EXTERNAL
  resolution: NONE

Maye gurbin IP da tashar da ainihin ƙarshen wakilin. Wannan misalin yana daidaita TCP ta adireshi; hosts ba ya zaɓar gidan yanar gizo mai ɓoyewa a cikin rami.

Manhajar har yanzu tana buƙatar shigarwar wakilinta da ake goyan bayan, kamar HTTPS_PROXY=http://203.0.113.10:3128 ga abokin ciniki mai jituwa. ServiceEntry ba ya sa manhajar da ba a daidaita ba ta aika buƙatun wakili.

Yi rijistar wannan hanyar wakili maimakon kowane gidan yanar gizo da za ta bi ta rami daga baya. Wakilin gaba yana buɗe haɗin gaba kuma yana yanke shawara ko an yarda da asusu da manufar da aka nema. Izinin mesh don tafiyar TCP ta farko ba ya ba da wannan izinin wakili ko umarnin zaɓin hanya ga manhaja.

Labarai masu alaƙa