Nick Young

Okay, @rauanmayemir, I had a chance to try and reproduce this in kind, and I could not. I set up a kind cluster, installed the application and added the Gateway...

Yes, I've been testing for the other issue and have seen drops _from_ the ingress identity _to_ the external LB IP (since it's `world` identity). I'm just working up some...

Okay, I've found a ClusterwideNetworkPolicy that fixes the issue on my kind cluster. @rauanmayemir, could you try this out? ```yaml apiVersion: "cilium.io/v2" kind: CiliumClusterwideNetworkPolicy metadata: name: allow-ingress-to-cluster namespace: default spec:...

I agree timeouts are super important, and am in the process of working on a GEP (GEP-1742, kubernetes-sigs/gateway-api#1742, kubernetes-sigs/gateway-api#1744 is the PR to add the actual design.) Once I've got...

The upstream effort is still ongoing here, but this is definitely still relevant.

Not currently. Once we support GAMMA (see #22512 for that work), that will include the request timeout, which functions as a max connection duration.

Should be fixed by #25105 ?

I am currently working on implementing this, but not sure how long it will take, sorry. We're hoping to have it in for 1.16.

@michi-covalent ping, is this one still on your radar, or is there anyone else who should be looking at this? Going to pin this regardless, since we probably don't want...

I've pinned this issue, because it's required for the renovate bot to work properly.