istio/istio

Internal listener access logging in Envoy

オープン

#50,321 opened on 2024/04/08

 (7 件のコメント) (0 件のリアクション) (0 人の担当者)Go (8,300 件のフォーク)batch import
area/ambienthelp wantedlifecycle/staleproof

Repository metrics

Stars
 (38,199 個のスター)
PR merge metrics
 (平均マージ 4d 3h) (30d で 189 merged PRs)

説明

When we use HBONE in envoy, we get access logs showing unexpected info

Without hbone:

[2024-04-08T20:53:05.142Z] "GET / HTTP/1.1" 200 - via_upstream - "-" 0 1648 0 0 "10.244.0.1" "curl/8.7.1" "d68f23d1-02a2-4999-8572-6f154573c74c" "172.18.0.101" "10.244.0.10:80" outbound|80||echo.default.svc.cluster.local 10.244.0.7:53060 10.244.0.7:8080 10.244.0.1:59040 - 

With hbone:

[2024-04-08T20:44:12.363Z] "GET / HTTP/1.1" 200 - via_upstream - "-" 0 1648 3 2 "10.244.0.1" "curl/8.7.1" "66dc2115-b7f5-45eb-96c2-2a2b221559f7" "172.18.0.101" "envoy://connect_originate/10.244.0.10:80" outbound|80||echo.default.svc.cluster.local envoy://internal_client_address/ 10.244.0.7:8080 10.244.0.1:27113 -

Probably we can tweak these to avoid exposing internals

コントリビューターガイド