Istio 环境模式连接到 ipv4 端点

Question

我只有 ipv6 EKS 集群和带有 sidecar 代理容器的 istio 服务网格。在此设置中，我可以直接连接 ipv4 端点，例如

curl -v -4 https://sts.eu-central-1.amazonaws.com

，这个标志给出了这种可能性：

ISTIO_ENABLE_IPV4_OUTBOUND_LISTENER_FOR_IPV6_CLUSTERS = true

。我最近将 istio 升级到版本 1.23.2 并切换到环境模式。使用环境模式此curl命令返回：

* Host sts.eu-central-1.amazonaws.com:443 was resolved.
* IPv6: (none)
* IPv4: 54.239.54.197
*   Trying 54.239.54.197:443...
* Connected to sts.eu-central-1.amazonaws.com (54.239.54.197) port 443
* ALPN: curl offers h2,http/1.1
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
*  CAfile: /etc/ssl/certs/ca-certificates.crt
*  CApath: /etc/ssl/certs
* Recv failure: Connection reset by peer
* OpenSSL SSL_connect: Connection reset by peer in connection to sts.eu-central-1.amazonaws.com:443 
* closing connection #0
curl: (35) Recv failure: Connection reset by peer

是否可以使用 istio 环境网格直接连接到 ipv4 端点？

Answer 1

这是一个bug，将在1.24版本中修复。