Replies: 2 comments
-
Check this one https://tetrate.io/blog/istio-source-ip-transparency/, especially in the |
Beta Was this translation helpful? Give feedback.
0 replies
-
Actually i already read that post and tried everything there without luck. I believe numTrustedProxies would apply if we were talking about L7 (ex: HTTP), but this is a plain tcp service. |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Hi,
I have a pod with rsyslog running as a central logging system, and i need that the logs that arrive at my rsyslog pod from external network arrive with the original source ip address, but i have not been able to make it work with istio.
I've set the ingressgateway service externalTrafficPolicy="Local" as explained all over the internet and in the istio docs.
rsyslog pod is running without sidecar injection, though i also tried with sidecar injection and still no correct source ip.
Example
I have a VM with ip 192.168.0.6 which is sending logs to my rsyslog pod service (syslog.apps.k8s.mydomain.com - 192.168.0.115) but the logs arrive with ip 10.32.80.13 which is the ip of the istio-ingressgateway
Relevant configs:
Anyone as any idea what might be wrong?
Beta Was this translation helpful? Give feedback.
All reactions