Diiwaangeli tallaabada TCP ee boroksee CONNECT shirkadeed Istio

Isticmaal qaabka ServiceEntry ee boroksee dibadda ee habka sidecar ee dhegeysanaha boroksee, halka doorashada boroksee ee abka iyo oggolaanshaha bartilmaameedka ay gaar yihiin.

Shaqada hore u dooratay boroksee CONNECT shirkadeed, sidecar wuxuu arkaa xiriirka dhegeysanahaas. Diiwaangeli wadada tallaabada koowaad sida TCP qaabka la diiwaangeliyay ee boroksee dibadda sidecar:

apiVersion: networking.istio.io/v1
kind: ServiceEntry
metadata:
  name: corporate-forward-proxy
spec:
  hosts:
    - proxy.corp.example
  addresses:
    - 203.0.113.10/32
  ports:
    - number: 3128
      name: tcp-proxy
      protocol: TCP
  location: MESH_EXTERNAL
  resolution: NONE

Ku beddel IP-da iyo dekedda barta dhammaadka boroksee dhabta ah. Tusaale tani waxay TCP ku habboonaysiisaa cinwaanka; hosts ma doorato website sir ah oo ku dhex jira tunnel-ka.

Abka wali wuxuu u baahan yahay gelinta boroksee la taageeray, sida HTTPS_PROXY=http://203.0.113.10:3128 macmiil ku habboon. ServiceEntry ma keento in ab aan la habayn uu diraayo codsiyada boroksee.

Diiwaangeli wadadan boroksee halkii website kasta oo ay mar dambe tunnel-gelinayso. Boroksee hore wuxuu furaa xiriirka xiga oo go'aamiyaa haddii akoonka iyo meesha la codsaday loo oggolaaday. Oggolaanshaha mesh ee tallaabada TCP koowaad ma bixiyo oggolaanshahaas boroksee ama tilmaanta doorashada wadada abka.

Maqaallo la xiriira