Ingress Gateway - Decrypt then send to a POD listening on https


#1

Hi all, I was setting up an ingress gateway and VirtualService to send traffic to a pod and received this error: tls: first record does not look like a TLS handshake

After some troubleshooting and finding that log message I figured out the pod was listening on https; so I switched it to http and everything went fine.

But I wanted to know if there are any configurations options to allow Istio to terminate https then send traffic to a pod that is listening on https? I couldn’t find anything in the docs, tried a bunch of different methods also…


#2

I think we currently does not support this feature,