Closed stevenctl closed 2 years ago
Would we consider using envoy's dns filter instead of the pilot-agent implementation?
We used to use it and moved off for a few reasons. TBH I forget all of them but it crashed a lot and ran OOM often.
On Thu, Dec 2, 2021, 7:45 PM Kebe @.***> wrote:
Would we consider using envoy's dns filter https://www.envoyproxy.io/docs/envoy/latest/configuration/listeners/udp_filters/dns_filter instead of the pilot-agent implementation?
— You are receiving this because your review was requested. Reply to this email directly, view it on GitHub https://github.com/istio/enhancements/pull/111#issuecomment-985191127, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAEYGXKPRGYQNGXVGIZF2UDUPA4OHANCNFSM5JIW7A4Q . Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.
DNS Filter is under active development and should be considered alpha and not production ready.
Envoy doc
@howardjohn @smawson @linsun any objections to this?
The only thing yet to be checked off is inclusion in our security tests + perf testing. Must communicate that DNS_AUTO_ALLOCATE isn't promoted? (or should it be...?? the current solution isn't optimal)