503 upstream connect error or disconnect/reset before headers. reset reason: connection failure

1

I have installed istio 1.2.2 multi-cluster install using defaults and the sample certificates. I have setup the sample application as documented and all is running with istio-enabled.
Per the documentation I execute:
kubectl exec $SLEEP_POD -n foo -c sleep – curl -v httpbin.bar.global:8000/headers
which always returns failure

TCP_NODELAY set

  • Connected to httpbin.bar.global (127.255.0.2) port 8000 (#0)

GET /headers HTTP/1.1
Host: httpbin.bar.global:8000
User-Agent: curl/7.60.0
Accept: /
< HTTP/1.1 503 Service Unavailable
< content-length: 91
< content-type: text/plain
< date: Tue, 19 Nov 2019 19:57:22 GMT
< server: envoy
upstream connect error or disconnect/reset before headers. reset reason: connection failure

I do not see any error in any logs.

Any idea what is wrong? What can I look at to figure out what is causing the failure?

2

Hi,

Could you try curl with the following options:

curl --http2-prior-knowledge -lv

curl --http2 -Iv

curl --http1.1 -Iv

3

The cause of the 503 error was that port 15443 was not open in each cluster. Once I opened that port then I got a 200. I am using an OKE cluster.

4

How do you know the port was not open?