Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Multi-Cluster: Can only reach local Headless service #27342

Closed
stevenctl opened this issue Sep 16, 2020 · 1 comment · Fixed by #32515
Closed

Multi-Cluster: Can only reach local Headless service #27342

stevenctl opened this issue Sep 16, 2020 · 1 comment · Fixed by #32515
Assignees
Labels
area/networking feature/Multi-cluster issues related with multi-cluster support kind/test failure lifecycle/automatically-closed Indicates a PR or issue that has been closed automatically.

Comments

@stevenctl
Copy link
Contributor

stevenctl commented Sep 16, 2020

With in-agent DNS, we should be able to support headless services having multiple IPs.

For headless Services that define selectors, the endpoints controller creates Endpoints records in the API, and modifies the DNS configuration to return records (addresses) that point directly to the Pods backing the Service.

@stevenctl stevenctl added kind/test failure feature/Multi-cluster issues related with multi-cluster support labels Sep 16, 2020
@stevenctl stevenctl self-assigned this Sep 16, 2020
@stevenctl stevenctl changed the title headless services don't work with multicluster Multi-Cluster: Can only reach local Headless service Sep 29, 2020
@istio-policy-bot istio-policy-bot added the lifecycle/stale Indicates a PR or issue hasn't been manipulated by an Istio team member for a while label Dec 15, 2020
@istio-policy-bot istio-policy-bot added the lifecycle/automatically-closed Indicates a PR or issue that has been closed automatically. label Dec 30, 2020
@stevenctl
Copy link
Contributor Author

stevenctl commented Mar 18, 2021

Headless services do not work. In a single network, we send directly to the pod's IP using ORIGINAL_DST. When we do ORIGINAL_DST, we never get redirected to the gateway. Even if we did get redirected to the gateway, once we got there we have no way to route to the intended destination.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/networking feature/Multi-cluster issues related with multi-cluster support kind/test failure lifecycle/automatically-closed Indicates a PR or issue that has been closed automatically.
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants