External Service Entry to support ldap,netconf

We have a Pod which needs to connect to our network and execute some netconf commands/ssh command/ldap commands how do i setup an external service entry for the above protocols.

Thanks & regards,
Hari

You probably need a ServiceEntry for TCP protocols, see https://istio.io/blog/2018/egress-tcp/.

hello,I have the some needs like you, my services in my istio cluster need to communicatewith some devices according netconf protocol, but when I try to config a service Entry with TCP protocol, it seems not work, have you done this?

I try to use serviceEntry with TCP,but it doesn’t work,I got te log like this:
[Envoy (Epoch 0)] [2020-06-12 06:46:32.240][15][trace][connection] [external/envoy/source/common/network/raw_buffer_socket.cc:38] [C1] read error: Resource temporarily unavailable

Is there any other logs to need to debug this problem?

You want to enable Envoy access logging and check Envoy’s logs - see https://istio.io/latest/docs/tasks/observability/logs/access-log/#enable-envoy-s-access-logging

Sad to say that I have enabled Envoy access logging, but I can’t get any error in the log except
[Envoy (Epoch 0)] [2020-06-12 06:46:30.241][15][trace][connection] [external/envoy/source/common/network/raw_buffer_socket.cc:38] [C1] read error: Resource temporarily unavailable
And the service doesn’t work.

I am unable to get a service entry for ldaps protocol to work with TCP, TLS, or HTTPS.