search

aboullaite / service-mesh

Demoing Service Mesh (istio) capabilities in a microservices app
87 stars 36 forks source link

Rate Limiting for external services #10

Open jdomag opened 3 years ago

jdomag commented 3 years ago

Hi! First of all, thanks for sharing this repo, I find it very useful!

I think that it would be great to add a scenario when outbound traffic from cluster to external service needs to be rate limited.

andrascz commented 3 years ago

Wouldn't simply applying the envoy filters to the egress gatway instead of the ingress gateway solve this problem?

bivrantoshakil commented 3 years ago

Hi! Thank you for sharing your hard work. This helped us a lot.

I am trying this demo with Istio 1.7.6 and the rate limiting is not working. All of the requests are returning 200. As a beginner, I am having difficulties debugging this issue. Do you have any idea what needs to be updated.

Thanks in advance!

andrascz commented 3 years ago

Check #7 for ideas. TL;DR: you need to have a typed config and also the cluster configuration needs some tweaks.

jdomag commented 3 years ago

@bivrantoshakil You may read my article regarding limiting access to external services. It also contains some basics of Envoy so maybe you will find some answers there: https://domagalski-j.medium.com/istio-rate-limits-for-egress-traffic-8697df490f68