istio / enhancements

Enhancement Tracking and Backlog Repo for Istio Releases
14 stars 42 forks source link

DNS Proxying to Beta #111

Closed stevenctl closed 2 years ago

stevenctl commented 3 years ago

The only thing yet to be checked off is inclusion in our security tests + perf testing. Must communicate that DNS_AUTO_ALLOCATE isn't promoted? (or should it be...?? the current solution isn't optimal)

kebe7jun commented 3 years ago

Would we consider using envoy's dns filter instead of the pilot-agent implementation?

howardjohn commented 3 years ago

We used to use it and moved off for a few reasons. TBH I forget all of them but it crashed a lot and ran OOM often.

On Thu, Dec 2, 2021, 7:45 PM Kebe @.***> wrote:

Would we consider using envoy's dns filter https://www.envoyproxy.io/docs/envoy/latest/configuration/listeners/udp_filters/dns_filter instead of the pilot-agent implementation?

— You are receiving this because your review was requested. Reply to this email directly, view it on GitHub https://github.com/istio/enhancements/pull/111#issuecomment-985191127, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAEYGXKPRGYQNGXVGIZF2UDUPA4OHANCNFSM5JIW7A4Q . Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.

hzxuzhonghu commented 2 years ago

DNS Filter is under active development and should be considered alpha and not production ready.

Envoy doc

stevenctl commented 2 years ago

@howardjohn @smawson @linsun any objections to this?