https returns curl: (52) Empty reply from server #49219
Replies: 4 comments 3 replies
-
Have you installed the AWS LB add-on https://docs.aws.amazon.com/eks/latest/userguide/aws-load-balancer-controller.html? |
Beta Was this translation helpful? Give feedback.
-
In my case i have had to update the Gateway config. replace The reason is that AWS NLB performs the TLS termination before the request reaches the Istio Ingress. Since Istio Gateway expects the Below is the full gateway config after changes,
|
Beta Was this translation helpful? Give feedback.
-
But don't these solutions defeat the purpose of re-encrypting from the NLB to the Gateway? What if you want to terminate TLS using an ACM cert at the NLB, establish TLS between the NLB and the Gateway, allow TLS to terminate at the Gateway, and then rely on mTLS in the mesh? That's the goal of what I'm going for, and it seems to be the most basic out of the box offering for Istio, and I'm getting the same "empty reply from server" when I try to use HTTPS. FWIW, I used the AWS setup guide here which references a GitHub repository which results in an NLB. There's another blog post from AWS which, confusingly, uses an NLB and an ALB to achieve a similar effect, but I'm not trying to dive into the level of complexity it implies yet: https://aws.amazon.com/blogs/opensource/achieving-zero-trust-security-on-amazon-eks-with-istio/ It's really confusing trying to find a way to accomplish this seemingly simple task. |
Beta Was this translation helpful? Give feedback.
-
Thanks @rgaduput , your answer worked for me. @valimail-scott , you raised a valid point. This should be simply achievable out of the box. |
Beta Was this translation helpful? Give feedback.
-
Hi everyone,
I'm encountering an issue after installing Istio 1.20.2 on EKS 1.28. Here's a summary of what I've done:
I've provided all the installation steps and configuration files below.
Problem: When I perform a curl to HTTP, I receive a response. However, when I try HTTPS, I get the following error:
curl: (52) Empty reply from server
.Your assistance in resolving this issue would be greatly appreciated. Please find the details below.
Thank you for your help!
Beta Was this translation helpful? Give feedback.
All reactions