M
let me get back to you, testing it now
tried curl from the got the same output as above.
and there is no logs from sidecar container.
Size: a a a
2021 May 30
M
M
this is the snap. but there is this log from the main container while doing curl and response during that is 503
M
M
ID
May be 503 is response code from main container? 🤔
M
it worked I don't know why, but it worked.
M
do I have to create new gateway for each of the services I want to load balance?
ID
We usually create one gateway and use it on all our services
M
let me redo it again to confirm if it works or not.
I am not sure why it worked that time 🙁
I am not sure why it worked that time 🙁
M
could you may be verify one more config for me if you don't mind.
I have almost 5/10 grpc services to route the traffic to, I will just add one more service to it and if that looks good I will do the rest.
I have almost 5/10 grpc services to route the traffic to, I will just add one more service to it and if that looks good I will do the rest.
ID
okay but bit later:)
ID
🖖🏻🖖🏻🖖🏻
M
sure boss whenever you are there please give it a look.
ID
btw If you have no plans to expose your services externally so you don’t need to configure gateways or virtual services
M
then how do I achieve it internally ?
what should I use in that case?
what should I use in that case?
ID
svc name and port
M
you mean this
this does not distribute traffic in grpc at all.
nlp-topic.default.svc.cluster.local:50051 this does not distribute traffic in grpc at all.
M
I also figured out
1. ingress is not required internally
2. simply installing istiod and istio-base as in documentation will work for grpc
3. only virtual service is required to route the traffic for grpc
4. need to setup peerauthentication to disable to disable mtls
5. can set to auth-policy to allow for communication between services
1. ingress is not required internally
2. simply installing istiod and istio-base as in documentation will work for grpc
3. only virtual service is required to route the traffic for grpc
4. need to setup peerauthentication to disable to disable mtls
5. can set to auth-policy to allow for communication between services