How to get insight into blocked external mesh requests due to missing ServiceEntry?

Networking
1

We were troubleshooting an issue today where one of our applications tried reaching a host that wasn’t allowed to be reached as it was lacking a ServiceEntry.
The envoy logs didn’t reveal anything helpful and neither did mixer.
What’s the best way to get a hold of these type of issues?

Thanks!

Istio: 1.4.7

1 Like
2

I had similar experience and istioctl pc cluster pod.namespace --fqdn example.com was quite helpful to debug this. Also if you enable logs envoy will help you out.