Ingress gateway on each node Ask Question

Networking
1

Hello,

In my cluster each node runs the same pods and all the nodes do the same. I am using Istio ingress gateway with the NodePort. I need traffic that enters NodePort to be routed to pods not leaving the node. I am unable to run istio-ingressgateway on each node to do that. Is it possible for each node to route its own traffic?

Bare-metal, k8s 1.19.4, Istio 1.8

Thank you for your help

2

I am unable to run istio-ingressgateway on each node to do that.

you have a single istio-ingressgateway for all nodes, or one per node?

  • if you have 1 per node you can use locality based routing in istio to keep the traffic per node.
  • If you have a single ingressgateway then i dont know how you would solve your problem.
3

If it is possible to run istio-ingressgateway on each node that would be perfect. Could you tell me how to do that? Only one instance of istio-ingressgateway is running in my cluster with the 2 worker nodes.

4

The easiest way would be to create your own Daemonset if ingressgateways. You can reference the yaml generated by istioctl manifest generate