Using argo tunnel + loadbalancer with istio

andreimc commented 4 years ago

I want to use the cloudflare loadbalancer with istio + argo tunnel, but I am not sure if this is possible, my current setup is Cloudflare DNS + SSL -> NLB (AWS) then origin certificate termination in Envoy.

I would love to get rid of NLB from AWS and use a cloudflare load balancer instead.

Do you guys have any ideas or examples?

markmssd commented 4 years ago

Hey did you figure something out?

Tapppi commented 4 years ago

According to https://github.com/cloudflare/cloudflare-ingress-controller/issues/172#issuecomment-541230988 this project is dead, so the recommended setup I would think is:

Cloudflare Load Balancer for domain control etc.
cloudflared sidecar that connects to your Cloudflare LB with argo tunnel
Traffic forwarded from cloudflared sidecar to Envoy for termination and further processing
- Or alternatively use another ingress controller in between if you want ingress features and don't want to use some Envoy / istio based ingress

cloudflare / cloudflare-ingress-controller

Using argo tunnel + loadbalancer with istio #173