Bhalisa i-TCP hop ye-CONNECT proxy yebhizinisi ku-Istio

Sebenzisa iphethini ye-ServiceEntry yeproxy yangaphandle kumodi ye-sidecar kusilaleli seproxy, kuyilapho ukukhetha iproxy kohlelo lokusebenza nokugunyazwa kwendawo kuhlala kwehlukile.

Kumthwalo womsebenzi osele ukhetha i-CONNECT proxy yebhizinisi, i-sidecar ibona ukuxhumana nalelo silaleli. Bhalisa indlela yehop yokuqala njenge-TCP ngokwephethini ye-sidecar yeproxy yangaphandle ebhaliwe:

apiVersion: networking.istio.io/v1
kind: ServiceEntry
metadata:
  name: corporate-forward-proxy
spec:
  hosts:
    - proxy.corp.example
  addresses:
    - 203.0.113.10/32
  ports:
    - number: 3128
      name: tcp-proxy
      protocol: TCP
  location: MESH_EXTERNAL
  resolution: NONE

Shintsha i-IP kanye ne-port ngendawo yokugcina yeproxy yangempela. Lesi sibonelo sihambisa i-TCP ngokwekheli; hosts ayikhethi iwebhusayithi ebethelwe ngaphakathi komhubhe.

Uhlelo lokusebenza lusadinga okokufaka kwayo kweproxy okusekelwayo, njenge-HTTPS_PROXY=http://203.0.113.10:3128 kuklayenti ehambisanayo. I-ServiceEntry ayikwenzi uhlelo olungakhethiweyo luthume izicelo zeproxy.

Bhalisa le ndlela yeproxy esikhundleni sayo yonke iwebhusayithi ezohamba ngomhubhe iye kuyo kamuva. I-proxy yokuqhubekela phambili ivula ukuxhumana okulandelayo futhi inquma ukuthi i-akhawunti kanye nendawo eceliwe zivunyelwe yini. Imvume ye-mesh yehop yokuqala ye-TCP ayinikezi lokho kugunyazwa kweproxy noma umyalo wokukhetha indlela kuhlelo lokusebenza.

Izihloko ezihlobene