Hi,
After a fresh install of Istio (1.5.0) with the default profile, I noticed that there are some differences between envoy and istiod listeners. Why? Is it bad?
Clusters Match
--- Pilot Listeners
+++ Envoy Listeners
@@ -1,10 +1,11 @@
{
"dynamicListeners": [
{
+ "name": "0.0.0.0_15010",
"activeState": {
"listener": {
"@type": "type.googleapis.com/envoy.api.v2.Listener",
"name": "0.0.0.0_15010",
"address": {
"socketAddress": {
"address": "0.0.0.0",
@@ -179,14 +180,15 @@
"bindToPort": false
},
"trafficDirection": "OUTBOUND"
}
}
},
{
+ "name": "0.0.0.0_15014",
"activeState": {
"listener": {
"@type": "type.googleapis.com/envoy.api.v2.Listener",
"name": "0.0.0.0_15014",
"address": {
"socketAddress": {
"address": "0.0.0.0",
@@ -361,14 +363,15 @@
"bindToPort": false
},
"trafficDirection": "OUTBOUND"
}
}
},
{
+ "name": "0.0.0.0_80",
"activeState": {
"listener": {
"@type": "type.googleapis.com/envoy.api.v2.Listener",
"name": "0.0.0.0_80",
"address": {
"socketAddress": {
"address": "0.0.0.0",
@@ -543,14 +546,15 @@
"bindToPort": false
},
"trafficDirection": "OUTBOUND"
}
}
},
{
+ "name": "0.0.0.0_8080",
"activeState": {
"listener": {
"@type": "type.googleapis.com/envoy.api.v2.Listener",
"name": "0.0.0.0_8080",
"address": {
"socketAddress": {
"address": "0.0.0.0",
@@ -725,14 +729,15 @@
"bindToPort": false
},
"trafficDirection": "OUTBOUND"
}
}
},
{
+ "name": "0.0.0.0_9080",
"activeState": {
"listener": {
"@type": "type.googleapis.com/envoy.api.v2.Listener",
"name": "0.0.0.0_9080",
"address": {
"socketAddress": {
"address": "0.0.0.0",
@@ -907,14 +912,15 @@
"bindToPort": false
},
"trafficDirection": "OUTBOUND"
}
}
},
{
+ "name": "0.0.0.0_9090",
"activeState": {
"listener": {
"@type": "type.googleapis.com/envoy.api.v2.Listener",
"name": "0.0.0.0_9090",
"address": {
"socketAddress": {
"address": "0.0.0.0",
@@ -1089,14 +1095,15 @@
"bindToPort": false
},
"trafficDirection": "OUTBOUND"
}
}
},
{
+ "name": "10.0.1.36_15020",
"activeState": {
"listener": {
"@type": "type.googleapis.com/envoy.api.v2.Listener",
"name": "10.0.1.36_15020",
"address": {
"socketAddress": {
"address": "10.0.1.36",
@@ -1151,14 +1158,15 @@
"listenerFiltersTimeout": "0.100s",
"continueOnListenerFiltersTimeout": true,
"trafficDirection": "INBOUND"
}
}
},
{
+ "name": "10.0.1.36_9090",
"activeState": {
"listener": {
"@type": "type.googleapis.com/envoy.api.v2.Listener",
"name": "10.0.1.36_9090",
"address": {
"socketAddress": {
"address": "10.0.1.36",
@@ -1573,14 +1581,15 @@
"listenerFiltersTimeout": "0.100s",
"continueOnListenerFiltersTimeout": true,
"trafficDirection": "INBOUND"
}
}
},
{
+ "name": "10.0.2.10_53",
"activeState": {
"listener": {
"@type": "type.googleapis.com/envoy.api.v2.Listener",
"name": "10.0.2.10_53",
"address": {
"socketAddress": {
"address": "10.0.2.10",
@@ -1627,14 +1636,15 @@
"bindToPort": false
},
"trafficDirection": "OUTBOUND"
}
}
},
{
+ "name": "10.0.2.151_15012",
"activeState": {
"listener": {
"@type": "type.googleapis.com/envoy.api.v2.Listener",
"name": "10.0.2.151_15012",
"address": {
"socketAddress": {
"address": "10.0.2.151",
@@ -1681,14 +1691,15 @@
"bindToPort": false
},
"trafficDirection": "OUTBOUND"
}
}
},
{
+ "name": "10.0.2.151_443",
"activeState": {
"listener": {
"@type": "type.googleapis.com/envoy.api.v2.Listener",
"name": "10.0.2.151_443",
"address": {
"socketAddress": {
"address": "10.0.2.151",
@@ -1735,14 +1746,15 @@
"bindToPort": false
},
"trafficDirection": "OUTBOUND"
}
}
},
{
+ "name": "10.0.2.167_15011",
"activeState": {
"listener": {
"@type": "type.googleapis.com/envoy.api.v2.Listener",
"name": "10.0.2.167_15011",
"address": {
"socketAddress": {
"address": "10.0.2.167",
@@ -1789,14 +1801,15 @@
"bindToPort": false
},
"trafficDirection": "OUTBOUND"
}
}
},
{
+ "name": "10.0.2.167_15012",
"activeState": {
"listener": {
"@type": "type.googleapis.com/envoy.api.v2.Listener",
"name": "10.0.2.167_15012",
"address": {
"socketAddress": {
"address": "10.0.2.167",
@@ -1843,14 +1856,15 @@
"bindToPort": false
},
"trafficDirection": "OUTBOUND"
}
}
},
{
+ "name": "10.0.2.167_443",
"activeState": {
"listener": {
"@type": "type.googleapis.com/envoy.api.v2.Listener",
"name": "10.0.2.167_443",
"address": {
"socketAddress": {
"address": "10.0.2.167",
@@ -1897,14 +1911,15 @@
"bindToPort": false
},
"trafficDirection": "OUTBOUND"
}
}
},
{
+ "name": "10.0.2.1_443",
"activeState": {
"listener": {
"@type": "type.googleapis.com/envoy.api.v2.Listener",
"name": "10.0.2.1_443",
"address": {
"socketAddress": {
"address": "10.0.2.1",
@@ -1951,14 +1966,15 @@
"bindToPort": false
},
"trafficDirection": "OUTBOUND"
}
}
},
{
+ "name": "10.0.2.34_15020",
"activeState": {
"listener": {
"@type": "type.googleapis.com/envoy.api.v2.Listener",
"name": "10.0.2.34_15020",
"address": {
"socketAddress": {
"address": "10.0.2.34",
@@ -2142,14 +2158,15 @@
"listenerFiltersTimeout": "0.100s",
"continueOnListenerFiltersTimeout": true,
"trafficDirection": "OUTBOUND"
}
}
},
{
+ "name": "10.0.2.34_15029",
"activeState": {
"listener": {
"@type": "type.googleapis.com/envoy.api.v2.Listener",
"name": "10.0.2.34_15029",
"address": {
"socketAddress": {
"address": "10.0.2.34",
@@ -2333,14 +2350,15 @@
"listenerFiltersTimeout": "0.100s",
"continueOnListenerFiltersTimeout": true,
"trafficDirection": "OUTBOUND"
}
}
},
{
+ "name": "10.0.2.34_15030",
"activeState": {
"listener": {
"@type": "type.googleapis.com/envoy.api.v2.Listener",
"name": "10.0.2.34_15030",
"address": {
"socketAddress": {
"address": "10.0.2.34",
@@ -2524,14 +2542,15 @@
"listenerFiltersTimeout": "0.100s",
"continueOnListenerFiltersTimeout": true,
"trafficDirection": "OUTBOUND"
}
}
},
{
+ "name": "10.0.2.34_15031",
"activeState": {
"listener": {
"@type": "type.googleapis.com/envoy.api.v2.Listener",
"name": "10.0.2.34_15031",
"address": {
"socketAddress": {
"address": "10.0.2.34",
@@ -2715,14 +2734,15 @@
"listenerFiltersTimeout": "0.100s",
"continueOnListenerFiltersTimeout": true,
"trafficDirection": "OUTBOUND"
}
}
},
{
+ "name": "10.0.2.34_15032",
"activeState": {
"listener": {
"@type": "type.googleapis.com/envoy.api.v2.Listener",
"name": "10.0.2.34_15032",
"address": {
"socketAddress": {
"address": "10.0.2.34",
@@ -2906,14 +2926,15 @@
"listenerFiltersTimeout": "0.100s",
"continueOnListenerFiltersTimeout": true,
"trafficDirection": "OUTBOUND"
}
}
},
{
+ "name": "10.0.2.34_15443",
"activeState": {
"listener": {
"@type": "type.googleapis.com/envoy.api.v2.Listener",
"name": "10.0.2.34_15443",
"address": {
"socketAddress": {
"address": "10.0.2.34",
@@ -2960,14 +2981,15 @@
"bindToPort": false
},
"trafficDirection": "OUTBOUND"
}
}
},
{
+ "name": "10.0.2.34_443",
"activeState": {
"listener": {
"@type": "type.googleapis.com/envoy.api.v2.Listener",
"name": "10.0.2.34_443",
"address": {
"socketAddress": {
"address": "10.0.2.34",
@@ -3014,14 +3036,15 @@
"bindToPort": false
},
"trafficDirection": "OUTBOUND"
}
}
},
{
+ "name": "10.0.2.53_443",
"activeState": {
"listener": {
"@type": "type.googleapis.com/envoy.api.v2.Listener",
"name": "10.0.2.53_443",
"address": {
"socketAddress": {
"address": "10.0.2.53",
@@ -3205,14 +3228,15 @@
"listenerFiltersTimeout": "0.100s",
"continueOnListenerFiltersTimeout": true,
"trafficDirection": "OUTBOUND"
}
}
},
{
+ "name": "virtualInbound",
"activeState": {
"listener": {
"@type": "type.googleapis.com/envoy.api.v2.Listener",
"name": "virtualInbound",
"address": {
"socketAddress": {
"address": "0.0.0.0",
@@ -3875,14 +3899,15 @@
"listenerFiltersTimeout": "1s",
"continueOnListenerFiltersTimeout": true,
"trafficDirection": "INBOUND"
}
}
},
{
+ "name": "virtualOutbound",
"activeState": {
"listener": {
"@type": "type.googleapis.com/envoy.api.v2.Listener",
"name": "virtualOutbound",
"address": {
"socketAddress": {
"address": "0.0.0.0",
Routes Don't Match (RDS last loaded at Fri, 27 Mar 2020 11:19:04 CET)
--- Pilot Routes
+++ Envoy Routes
@@ -1,14 +1,31 @@
{
"dynamicRouteConfigs": [
{
"routeConfig": {
"@type": "type.googleapis.com/envoy.api.v2.RouteConfiguration",
"name": "15010",
"virtualHosts": [
+ {
+ "name": "allow_any",
+ "domains": [
+ "*"
+ ],
+ "routes": [
+ {
+ "match": {
+ "prefix": "/"
+ },
+ "route": {
+ "cluster": "PassthroughCluster",
+ "timeout": "0s"
+ }
+ }
+ ]
+ },
{
"name": "istio-pilot.istio-system.svc.cluster.local:15010",
"domains": [
"istio-pilot.istio-system.svc.cluster.local",
"istio-pilot.istio-system.svc.cluster.local:15010",
"istio-pilot",
"istio-pilot:15010",
@@ -46,15 +63,24 @@
"maxGrpcTimeout": "0s"
},
"decorator": {
"operation": "istio-pilot.istio-system.svc.cluster.local:15010/*"
}
}
]
- },
+ }
+ ],
+ "validateClusters": false
+ }
+ },
+ {
+ "routeConfig": {
+ "@type": "type.googleapis.com/envoy.api.v2.RouteConfiguration",
+ "name": "15014",
+ "virtualHosts": [
{
"name": "allow_any",
"domains": [
"*"
],
"routes": [
{
@@ -63,24 +89,15 @@
},
"route": {
"cluster": "PassthroughCluster",
"timeout": "0s"
}
}
]
- }
- ],
- "validateClusters": false
- }
- },
- {
- "routeConfig": {
- "@type": "type.googleapis.com/envoy.api.v2.RouteConfiguration",
- "name": "15014",
- "virtualHosts": [
+ },
{
"name": "istio-pilot.istio-system.svc.cluster.local:15014",
"domains": [
"istio-pilot.istio-system.svc.cluster.local",
"istio-pilot.istio-system.svc.cluster.local:15014",
"istio-pilot",
"istio-pilot:15014",
@@ -118,15 +135,24 @@
"maxGrpcTimeout": "0s"
},
"decorator": {
"operation": "istio-pilot.istio-system.svc.cluster.local:15014/*"
}
}
]
- },
+ }
+ ],
+ "validateClusters": false
+ }
+ },
+ {
+ "routeConfig": {
+ "@type": "type.googleapis.com/envoy.api.v2.RouteConfiguration",
+ "name": "80",
+ "virtualHosts": [
{
"name": "allow_any",
"domains": [
"*"
],
"routes": [
{
@@ -135,24 +161,15 @@
},
"route": {
"cluster": "PassthroughCluster",
"timeout": "0s"
}
}
]
- }
- ],
- "validateClusters": false
- }
- },
- {
- "routeConfig": {
- "@type": "type.googleapis.com/envoy.api.v2.RouteConfiguration",
- "name": "80",
- "virtualHosts": [
+ },
{
"name": "default-http-backend.kube-system.svc.cluster.local:80",
"domains": [
"default-http-backend.kube-system.svc.cluster.local",
"default-http-backend.kube-system.svc.cluster.local:80",
"default-http-backend.kube-system",
"default-http-backend.kube-system:80",
@@ -234,15 +251,24 @@
"maxGrpcTimeout": "0s"
},
"decorator": {
"operation": "istio-ingressgateway.istio-system.svc.cluster.local:80/*"
}
}
]
- },
+ }
+ ],
+ "validateClusters": false
+ }
+ },
+ {
+ "routeConfig": {
+ "@type": "type.googleapis.com/envoy.api.v2.RouteConfiguration",
+ "name": "8080",
+ "virtualHosts": [
{
"name": "allow_any",
"domains": [
"*"
],
"routes": [
{
@@ -251,24 +277,15 @@
},
"route": {
"cluster": "PassthroughCluster",
"timeout": "0s"
}
}
]
- }
- ],
- "validateClusters": false
- }
- },
- {
- "routeConfig": {
- "@type": "type.googleapis.com/envoy.api.v2.RouteConfiguration",
- "name": "8080",
- "virtualHosts": [
+ },
{
"name": "istio-pilot.istio-system.svc.cluster.local:8080",
"domains": [
"istio-pilot.istio-system.svc.cluster.local",
"istio-pilot.istio-system.svc.cluster.local:8080",
"istio-pilot",
"istio-pilot:8080",
@@ -306,15 +323,24 @@
"maxGrpcTimeout": "0s"
},
"decorator": {
"operation": "istio-pilot.istio-system.svc.cluster.local:8080/*"
}
}
]
- },
+ }
+ ],
+ "validateClusters": false
+ }
+ },
+ {
+ "routeConfig": {
+ "@type": "type.googleapis.com/envoy.api.v2.RouteConfiguration",
+ "name": "9080",
+ "virtualHosts": [
{
"name": "allow_any",
"domains": [
"*"
],
"routes": [
{
@@ -323,24 +349,15 @@
},
"route": {
"cluster": "PassthroughCluster",
"timeout": "0s"
}
}
]
- }
- ],
- "validateClusters": false
- }
- },
- {
- "routeConfig": {
- "@type": "type.googleapis.com/envoy.api.v2.RouteConfiguration",
- "name": "9080",
- "virtualHosts": [
+ },
{
"name": "details.default.svc.cluster.local:9080",
"domains": [
"details.default.svc.cluster.local",
"details.default.svc.cluster.local:9080",
"details.default",
"details.default:9080",
@@ -508,15 +525,24 @@
"maxGrpcTimeout": "0s"
},
"decorator": {
"operation": "reviews.default.svc.cluster.local:9080/*"
}
}
]
- },
+ }
+ ],
+ "validateClusters": false
+ }
+ },
+ {
+ "routeConfig": {
+ "@type": "type.googleapis.com/envoy.api.v2.RouteConfiguration",
+ "name": "9090",
+ "virtualHosts": [
{
"name": "allow_any",
"domains": [
"*"
],
"routes": [
{
@@ -525,24 +551,15 @@
},
"route": {
"cluster": "PassthroughCluster",
"timeout": "0s"
}
}
]
- }
- ],
- "validateClusters": false
- }
- },
- {
- "routeConfig": {
- "@type": "type.googleapis.com/envoy.api.v2.RouteConfiguration",
- "name": "9090",
- "virtualHosts": [
+ },
{
"name": "prometheus.istio-system.svc.cluster.local:9090",
"domains": [
"prometheus.istio-system.svc.cluster.local",
"prometheus.istio-system.svc.cluster.local:9090",
"prometheus",
"prometheus:9090",
@@ -580,31 +597,14 @@
"maxGrpcTimeout": "0s"
},
"decorator": {
"operation": "prometheus.istio-system.svc.cluster.local:9090/*"
}
}
]
- },
- {
- "name": "allow_any",
- "domains": [
- "*"
- ],
- "routes": [
- {
- "match": {
- "prefix": "/"
- },
- "route": {
- "cluster": "PassthroughCluster",
- "timeout": "0s"
- }
- }
- ]
}
],
"validateClusters": false
}
},
{
"routeConfig": {
(cf https://istio.io/docs/ops/diagnostic-tools/proxy-cmd/#retrieve-diffs-between-envoy-and-istiod).
Thanks,
Hugo