Istio Ingress-Gateway problem with virtualservice

Networking
1

Hi All,
I encountered some problems while using ingress-gateway and virtualservice.

In my case,
I apply a service with deployment and virtualservice, usually can get a normal response of 200, but sometimes will get 503.
“upstream connect error or disconnect/reset before headers. reset reason: connect”

In ingress-gateway logs, you can see two situations.

  1. I have created a new service and confirmed that it is working properly,
    but in logs you will see “-” - - , it mean the virtualservice doesn’t match any service.
  2. When I configure an existing service, in logs can see it’s virtualservice redirect to the old pod ip.

In this situations, the current temporary solution is to delete the virtualservice and use the same yml apply again, or configure virtualservice and rollback configure (Similar refresh).
Both methods worked.

Does anyone have experience like this…?

2

You will need to debug what is happening with your configuration. I would recommend the steps listed here https://www.tetrate.io/blog/debugging-your-istio-networking-configuration/