Josune Cordoba

> @josunect I've take a first stab at the backend changes. They're a bit crude, and currently untested (for complicated reasons I don't currently have an easy way to test...

Docs PR: https://github.com/kiali/kiali.io/pull/764

Tested in minikube: 

I think we could focus first in the ztunnel logs. At the moment, the ztunnel logs are looking like this (INFO): ``` 2024-04-04T07:16:36.301267Z INFO proxy{uid=66fe00fe-93a1-45b9-a966-5e4b9d3ea4cf}: ztunnel::proxy::inbound_passthrough: accepted connection source=10.244.0.7:39864 destination=10.244.0.15:9080...

Additional information: http related queries: ``` istio_requests_total{reporter="source",source_workload_namespace="sidecars"} istio_requests_total{app="debugbox", connection_security_policy="unknown", destination_app="unknown", destination_canonical_revision="latest", destination_canonical_service="unknown", destination_cluster="unknown", destination_principal="unknown", destination_service="archive.ubuntu.com", destination_service_name="PassthroughCluster", destination_service_namespace="unknown", destination_version="unknown", destination_workload="unknown", destination_workload_namespace="unknown", instance="10.244.1.12:15020", job="kubernetes-pods", namespace="sidecars", networking_istio_io_tunnel="http", pod="debugbox-779fbc4bb7-rmzzg", pod_template_hash="779fbc4bb7", reporter="source", request_protocol="http", response_code="200", response_flags="-", ...

Thanks for having a look, @jmazzitelli ! I can see there are some metrics to tcpserver in the Ambient namespace: `istio_tcp_received_bytes_total{app="ztunnel", connection_security_policy="mutual_tls", controller_revision_hash="7f94f58597", destination_app="tcpserver", destination_canonical_revision="latest", destination_canonical_service="tcpserver", destination_cluster="Kubernetes", destination_principal="spiffe://cluster.local/ns/ambient/sa/default", destination_service="unknown", destination_service_name="unknown",...

Thanks for the findings, @jmazzitelli So, this can be a related issue https://github.com/kiali/kiali/issues/5978

With that fixed Istio PR https://github.com/istio/istio/issues/46169:  `istio_tcp_received_bytes_total{reporter="destination",destination_workload_namespace="ambient"}` `istio_tcp_received_bytes_total{app="ztunnel", connection_security_policy="mutual_tls", controller_revision_hash="77465d57c6", destination_app="httpserver", destination_canonical_revision="v1", destination_canonical_service="httpserver", destination_cluster="Kubernetes", destination_principal="spiffe://cluster.local/ns/ambient/sa/default", destination_service="unknown", destination_service_name="unknown", destination_service_namespace="unknown", destination_version="v1", destination_workload="httpserver", destination_workload_namespace="ambient", instance="10.244.1.3:15020", job="kubernetes-pods", namespace="istio-system", pod="ztunnel-2psjp", pod_template_generation="1", reporter="destination", request_protocol="tcp", response_flags="-",...

It looks to be the same after https://github.com/istio/ztunnel/pull/630  ``` istio_tcp_received_bytes_total{reporter="destination",destination_workload_namespace="ambient"} istio_tcp_received_bytes_total{app="ztunnel", connection_security_policy="mutual_tls", controller_revision_hash="6649cbcfcb", destination_app="httpserver", destination_canonical_revision="v1", destination_canonical_service="httpserver", destination_cluster="Kubernetes", destination_principal="spiffe://cluster.local/ns/ambient/sa/default", destination_service="httpserver.ambient.svc.cluster.local", destination_service_name="httpserver", destination_service_namespace="ambient", destination_version="v1", destination_workload="httpserver", destination_workload_namespace="ambient", instance="10.244.2.4:15020", job="kubernetes-pods", namespace="istio-system", pod="ztunnel-7g228", pod_template_generation="1", ...

https://github.com/kiali/kiali/blob/master/graph/telemetry/istio/istio.go#L235 ### Sidecars: `istio_tcp_received_bytes_total{reporter="source",source_workload_namespace="sidecars"} ` `istio_tcp_received_bytes_total{app="debugbox", connection_security_policy="unknown", destination_app="unknown", destination_canonical_revision="latest", destination_canonical_service="tcpserver", destination_cluster="Kubernetes", destination_principal="unknown", destination_service="tcpserver.sidecars.svc.cluster.local", destination_service_name="tcpserver", destination_service_namespace="sidecars", destination_version="unknown", destination_workload="tcpserver", destination_workload_namespace="sidecars", instance="10.244.1.9:15020", job="kubernetes-pods", namespace="sidecars", networking_istio_io_tunnel="http", pod="debugbox-779fbc4bb7-pxllh", pod_template_hash="779fbc4bb7", reporter="source", request_protocol="tcp", response_flags="-", security_istio_io_tlsMode="istio", service_istio_io_canonical_name="debugbox", service_istio_io_canonical_revision="latest",...