Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

PILOT_ENABLE_FALLTHROUGH_ROUTE doesn't work for https #13386

Closed
howardjohn opened this issue Apr 17, 2019 · 4 comments

Comments

2 participants
@howardjohn
Copy link
Member

commented Apr 17, 2019

The problem seems to be external traffic over https when you have mtls enabled. If you have mtls not enabled http and https work. With mtls enabled only http works.

 $ curl https://www.google.com
curl: (35) OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to www.google.com:443

@howardjohn howardjohn self-assigned this Apr 17, 2019

@howardjohn

This comment has been minimized.

Copy link
Member Author

commented Apr 17, 2019

Original assessment was wrong. Failure is from having a service entry with protocol HTTPS. These don't go through RDS which is where the fix is applied. Possible fix adding a filter_chain_match with * that directs to passthrough?

@howardjohn howardjohn added the kind/bug label Apr 17, 2019

@howardjohn howardjohn changed the title PILOT_ENABLE_FALLTHROUGH_ROUTE fails for https+mtls enabled PILOT_ENABLE_FALLTHROUGH_ROUTE fails for in some virtual service setups Apr 17, 2019

@howardjohn howardjohn changed the title PILOT_ENABLE_FALLTHROUGH_ROUTE fails for in some virtual service setups PILOT_ENABLE_FALLTHROUGH_ROUTE doesn't work for https Apr 17, 2019

@geeknoid geeknoid removed the kind/bug label Apr 18, 2019

@howardjohn

This comment has been minimized.

Copy link
Member Author

commented Apr 20, 2019

Need to cherry pick to 1.1

@howardjohn howardjohn reopened this Apr 20, 2019

@howardjohn

This comment has been minimized.

Copy link
Member Author

commented Apr 23, 2019

Fixed #13510

@howardjohn

This comment has been minimized.

Copy link
Member Author

commented Apr 23, 2019

@howardjohn howardjohn closed this Apr 23, 2019

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.