John Howard
John Howard
This will need to take into account 421 status code and **certificates** as well. SNI and Host headers are not the only variables. "Gateway API implementations enforce that the SNI...
Why not just set `all:debug` if you want everything?
Depending on the settings, Istio can run different 'concurrency' which is number of threads. A lot of the internals are replicated on each thread, so more threads == more memory....
Yes, ` "concurrency": 64,`. I would ideally recommend upgrading to a newer Istio version (1.21 ideally) which I am fairly sure will just automatically fix it. Or you can mess...
> If i set concurrency = 8 at proxy level while my nodes have 64 vcpu. Will this setting, lead to possible problems and misconfigurations when a proxy interacts with...
ROUND_ROBIN is "0" so it cannot be distinguished in our current impl.
IMO a first class field is still highly desirable. `parameterRef` is a vendor-specific escape hatch; we shouldn't settle to make every vendor implement core functionality in different ways
Generally understanding what is "in mesh" vs "external" is hard to do accurately, or at least in ways that align with users expectations
> 1. x-forwarded-client-cert needs an actual API about the propagation of client identity. This is probably a good idea anyways given that ambient might use a different mechanism. > 2....
> Having a disjoint API to override VS API feels like a more restricted EnvoyFilter to me. It's useful, but not principled enough to justify a future stable API IMHO....