We run istio 1.0.6 with Ingress configured as NodePort, we also have ALB configured for those ports. After about 24 hours or
--conntrack-tcp-timeout-established timeout configured in kube-proxy settings we’re getting 502 errors on the ALB. It happens due to non graceful tcp connection termination by conntrack module that kube-proxy configures. The only option I found on how to fix it is to patch istio pilot to configure idle_timeout of the ingress. Unfortunately istio does not expose it.
Does anyone use istio with ALB? If yes, how do you deal with those timeouts? Is there a configuration I’m missing on how to configure it?