Using istio 1.4.6 in a kubernetes cluster 1.15
When trying to access from a pod with sidecar istio-proxy to an external service like http://httpbin.org and
creating a service entry and a virtual service with timeout 3 seg everything works fine.
apiVersion: networking.istio.io/v1alpha3
kind: ServiceEntry
metadata:
name: httpbin-ext
spec:
hosts:
- httpbin.org
ports:
- number: 80
name: http
protocol: HTTP
resolution: DNS
location: MESH_EXTERNAL
EOF
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
name: httpbin-ext
spec:
hosts:
- httpbin.org
http:
- timeout: 3s
route:
- destination:
host: httpbin.org
weight: 100
EOF
This is right, like the documentation says.
But if I connect to https instead of http and modify the Virtual service and the service entry for this matter
Service Entry
apiVersion: networking.istio.io/v1alpha3
kind: ServiceEntry
metadata:
name: httpbin-ext
spec:
hosts:
- httpbin.org
ports:
- number: 443
name: https
protocol: HTTPS
resolution: DNS
location: MESH_EXTERNAL
EOF
Connection works , but the timeout is not being applied. It does not honor the config of Virtual services , neither timeout nor rate limiting…nothing.
Any ideas?
Working with the egressgateway happens the same.
Additional settings:
outboundTrafficPolicy:
mode: ALLOW_ANY
includeIPRanges: *