service-mesh icon indicating copy to clipboard operation
service-mesh copied to clipboard

Rate Limiting for external services

Open jdomag opened this issue 5 years ago • 4 comments

Hi! First of all, thanks for sharing this repo, I find it very useful!

I think that it would be great to add a scenario when outbound traffic from cluster to external service needs to be rate limited.

jdomag avatar Oct 23 '20 13:10 jdomag

Wouldn't simply applying the envoy filters to the egress gatway instead of the ingress gateway solve this problem?

andrascz avatar Nov 17 '20 19:11 andrascz

Hi! Thank you for sharing your hard work. This helped us a lot.

I am trying this demo with Istio 1.7.6 and the rate limiting is not working. All of the requests are returning 200. As a beginner, I am having difficulties debugging this issue. Do you have any idea what needs to be updated.

Thanks in advance!

bivrantoshakil avatar Dec 24 '20 03:12 bivrantoshakil

Check #7 for ideas. TL;DR: you need to have a typed config and also the cluster configuration needs some tweaks.

andrascz avatar Dec 24 '20 09:12 andrascz

@bivrantoshakil You may read my article regarding limiting access to external services. It also contains some basics of Envoy so maybe you will find some answers there: https://domagalski-j.medium.com/istio-rate-limits-for-egress-traffic-8697df490f68

jdomag avatar Dec 28 '20 06:12 jdomag