John Howard

I don't see sufficient evidence to warrant the complexity of fine grained enablement beyond a per-pod basis for those use cases. For onboarding it does not make sense to skip...

> ./out/rust/debug/ztunnel You built Ztunnel in debug mode without optimizations. You need to add `--release` to the build to make it optimized

Also FWIW I did not state above you would see parity with HBONE, just (closed to) with plain TCP. Adding encryption has a cost: https://blog.howardjohn.info/posts/wireguard-tls/#throughput

No, all 7 of those do not work. I have concerns about support anything other than exclude devices and kubevirtinterfaces. On Tue, Oct 29, 2024, 2:12 AM Wayne Wong ***@***.***>...

You had to put those with sidecar, likely, to work around compatibility issues with sidecars. Ambient mode was designed to be 100% compatibile with any applications, so it's unlikely you...

Yeah this is expected behavior.

EnvoyFilter is a proto merge. lists "merge" is to append. You are merging 2 lists,so the results are appended together.

Yes, the same occurs in release mode: ``` $ cargo run --target x86_64-unknown-linux-musl --profile release Finished `release` profile [optimized] target(s) in 0.00s Running `target/x86_64-unknown-linux-musl/release/new` zsh: segmentation fault cargo run --target...

Ideally the current and the configured max streams on the connection - the max is dynamic based on the client/server SETTINGS. Without this we end up blocking when we have...

> @howardjohn have you considered using an atomic counter that a structure increments or decrements when it is created and dropped to track the count? Yes, that is our current...