Ingress Gateway - Decrypt then send to a POD listening on https

Security
1

Hi all, I was setting up an ingress gateway and VirtualService to send traffic to a pod and received this error: tls: first record does not look like a TLS handshake

After some troubleshooting and finding that log message I figured out the pod was listening on https; so I switched it to http and everything went fine.

But I wanted to know if there are any configurations options to allow Istio to terminate https then send traffic to a pod that is listening on https? I couldn’t find anything in the docs, tried a bunch of different methods also…

2

I think we currently does not support this feature,

3

cc @diemtvu @incfly @Oliver

4

Is their any resolution yet?