Skip to content

shenxg13/istio-no-best-practice

BranchesTags

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

76 Commits
extras
extras
 
 
images
images
 
 
01-ingress-passthrough-tls-with-snihosts.md
01-ingress-passthrough-tls-with-snihosts.md
 
 
02-egress-passthrough-tls-with-snihosts.md
02-egress-passthrough-tls-with-snihosts.md
 
 
03-serviceentry-to-external-with-static.md
03-serviceentry-to-external-with-static.md
 
 
04-serviceentry-to-external-with-egress.md
04-serviceentry-to-external-with-egress.md
 
 
05-serviceentry-to-external-with-strictdns.md
05-serviceentry-to-external-with-strictdns.md
 
 
06-serviceentry-to-external-with-none.md
06-serviceentry-to-external-with-none.md
 
 
07-ingress-no-tls-single-host.md
07-ingress-no-tls-single-host.md
 
 
08-ingress-tls-single-host.md
08-ingress-tls-single-host.md
 
 
09-ingress-mtls-single-host.md
09-ingress-mtls-single-host.md
 
 
10-ingress-no-tls-multiple-hosts.md
10-ingress-no-tls-multiple-hosts.md
 
 
11-ingress-tls-multiple-hosts.md
11-ingress-tls-multiple-hosts.md
 
 
12-destinationrule-4-level-trafficpolicy.md
12-destinationrule-4-level-trafficpolicy.md
 
 
13-destinationrule-where-trafficpolicy-applied.md
13-destinationrule-where-trafficpolicy-applied.md
 
 
14-destinationrule-tls-to-external.md
14-destinationrule-tls-to-external.md
 
 
15-destinationrule-mtls-to-external-via-egressgateway.md
15-destinationrule-mtls-to-external-via-egressgateway.md
 
 
16-security-peer-mtls-authentication.md
16-security-peer-mtls-authentication.md
 
 
17-security-citadel-and-secure-naming.md
17-security-citadel-and-secure-naming.md
 
 
18-security-http-request-with-rbac.md
18-security-http-request-with-rbac.md
 
 
19-security-tcp-connection-with-rbac.md
19-security-tcp-connection-with-rbac.md
 
 
20-mesh-expansion-in-unrouteable-network-bare-metal.md
20-mesh-expansion-in-unrouteable-network-bare-metal.md
 
 
21-mesh-expansion-in-routeable-network-bare-metal.md
21-mesh-expansion-in-routeable-network-bare-metal.md
 
 
README.md
README.md
 
 

Repository files navigation

istio no best practice.

  1. Istio数据面配置解析01：在Ingress Gateway中对基于sniHosts的TLS请求进行路由
  2. Istio数据面配置解析02：在Egress Gateway中对基于sniHosts的TLS请求进行路由
  3. Istio数据面配置解析03：使用Service Entry的static模式将Http请求路由至外部
  4. Istio数据面配置解析04：使用Service Entry通过Egress Gateway将Http请求路由至外部
  5. Istio数据面配置解析05：使用Service Entry的strict_dns模式将Http请求路由至外部
  6. Istio数据面配置解析06：使用Service Entry的none模式将Http请求路由至外部
  7. Istio数据面配置解析07：使用Ingress Gateway对单主机非TLS请求进行路由
  8. Istio数据面配置解析08：使用Ingress Gateway对单主机TLS请求进行路由
  9. Istio数据面配置解析09：使用Ingress Gateway对单主机mTLS请求进行路由
  10. Istio数据面配置解析10：使用Ingress Gateway对多主机非TLS请求进行路由
  11. Istio数据面配置解析11：使用Ingress Gateway对多主机TLS请求进行路由
  12. Istio数据面配置解析12：在Destination Rule中配置4个级别的Traffic Policy
  13. Istio数据面配置解析13：Destination Rule中的Traffic Policy会被应用到哪里
  14. Istio数据面配置解析14：在Destination Rule中配置到外部的TLS
  15. Istio数据面配置解析15：在Destination Rule中通过Egress Gateway配置到外部的mTLS
  16. Istio数据面配置解析16：使用Policy配置Peer mTLS Authentication
  17. Istio数据面配置解析17：Citadel和Secure Naming
  18. Istio数据面配置解析18：使用RBAC对Http请求进行授权
  19. Istio数据面配置解析19：使用RBAC对Tcp连接进行授权（1.1）
  20. Istio数据面配置解析20：在网络路由不可达的Bare Metal环境中使用Mesh Expansion
  21. Istio数据面配置解析21：在网络路由可达的Bare Metal环境中使用Mesh Expansion

About

No description, website, or topics provided.

Resources

Readme
Activity

Stars

10 stars

Watchers

1 watching

Forks

1 fork
Report repository

Releases

No releases published

Packages

No packages published