How to get insight into blocked external mesh requests due to missing ServiceEntry?

We were troubleshooting an issue today where one of our applications tried reaching a host that wasn’t allowed to be reached as it was lacking a ServiceEntry.
The envoy logs didn’t reveal anything helpful and neither did mixer.
What’s the best way to get a hold of these type of issues?


Istio: 1.4.7

1 Like

I had similar experience and istioctl pc cluster pod.namespace --fqdn was quite helpful to debug this. Also if you enable logs envoy will help you out.