Costin Manolache

BTW - as follow-up on a comment from John about 'nobody using ProxyConfig CRD' - I was actually thinking it is the best place to put the equivalent of the...

Typical use cases are: - an app that natively implements mesh ( proxyless / native implementations ). - an app that hits a bug or can't tolerate the latency (...

Yes, Nginx LB for inbound - squid for outbound ( disable outbound capture ). On Thu, Mar 2, 2023 at 8:31 AM John Howard ***@***.***> wrote: > Per-direction customization seems...

On Thu, Mar 2, 2023 at 8:38 AM Ben Leggett ***@***.***> wrote: > Per-direction customization seems like a really complex potential footgun > - what would be a valid scenario...

I think we may be talking about 2 different things. This is not about ztunnel IMO - no change to ztunnel needed for this. I am only talking about istio-cni...

I would agree with you for gateways. But as I mentioned, proxyless / native implementations are far more important use cases. And even for gateways - we can't force users...

Agreed, my proposal is to just support the current annotations ( or at least a subset ). We do want this interception to be implementable at lower level, so it...

There are 2 more - traffic.sidecar.istio.io/kubevirtInterfaces traffic.sidecar.istio.io/excludeInterfaces First is used on some kubevirt use cases, the other is useful on VMs ( we probably don't use CNI on VMs )...

Lin - I would delay the renaming, we can document we keep supporting them for backwards compat. The proper solution is to define a new CRD ( in GAMMA WG...

I hit it while doing some tests - confirmed with the code and docs. It is not something that would happen routinely or be very noticeable, in particular in an...