John Howard
John Howard
https://github.com/istio/ztunnel/pull/868 helps a bit
Maybe long term, but I don't think its a high priority currently. kube-proxy operates with "random" and for most cases its good enough. If we introduce alternatives, we have a...
thanks!
oof the test wasn't running locally since requires root
Yes agreed. Memory is basically a no concern at that point - but brings some new complexity
https://github.com/istio/ztunnel/commit/7b11e3954b165f1fe6ffd8826de9a8e7e5adc137
After https://github.com/istio/ztunnel/pull/820 this should no longer be required by default. If you want to build with boringssl you would need to still, though.
Yes I have some concerns about it too. Might not be feasible. Btw I did send a PR to the splice library so we can at least get metrics once...
We have realm copy and tokio copy, both are very similar code, and we get the metrics once it is complete.
This is implemented