Forukọsilẹ ipa TCP ti proxy CONNECT ile-iṣẹ ni Istio

Lo apẹẹrẹ ServiceEntry ti proxy ita ni ipo sidecar fun olugbọ proxy, nigba ti yiyan proxy ti app ati aṣẹ ibi-afẹde wa lọtọ.

Fun ẹrù iṣẹ ti o ti yan proxy CONNECT ile-iṣẹ, sidecar ri asopọ si olugbọ yẹn. Forukọsilẹ ipa akọkọ naa gẹgẹbi TCP ninu apẹẹrẹ proxy ita sidecar ti a kọ silẹ:

apiVersion: networking.istio.io/v1
kind: ServiceEntry
metadata:
  name: corporate-forward-proxy
spec:
  hosts:
    - proxy.corp.example
  addresses:
    - 203.0.113.10/32
  ports:
    - number: 3128
      name: tcp-proxy
      protocol: TCP
  location: MESH_EXTERNAL
  resolution: NONE

Rọpo IP ati ebute pẹlu opin proxy gidi. Apẹẹrẹ yii ba TCP pẹlu adirẹsi; hosts ko yan oju-iwe wẹẹbu ti a fi ọrọ pamọ ninu tunnel.

App naa tun nilo titẹ sii proxy ti o ṣe atilẹyin, gẹgẹbi HTTPS_PROXY=http://203.0.113.10:3128 fun alabara ti o baamu. ServiceEntry ko jẹ ki app ti ko ni iṣeto firanṣẹ awọn ibeere proxy.

Forukọsilẹ ipa proxy yii dipo gbogbo oju-iwe wẹẹbu ti yoo gba tunnel lọ si nigbamii. Proxy iwaju ṣii asopọ ti o tẹle o si pinnu boya akọọlẹ ati ibi-afẹde ti a beere ni a gba laaye. Aṣẹ mesh fun ipa TCP akọkọ ko funni ni aṣẹ proxy yẹn tabi itọnisọna yiyan ipa fun app naa.

Àwọn àpilẹ̀kọ tó jọra