Scenario 07 - Stateless TCP application communication with with "SIMPLE", "ISTIO_MUTUAL" and without TLS

Owned by Pramod Raghavendra Jayathirth (Deactivated)
Last updated: Feb 10, 2020
1 min read

Description: - Connect two TXP microservices belonging to stateless applications

In this scenario, Unlike HTTP, instead of the service URL, ports are exposed. 

The services hosted behind Istio service mesh has the sidecar proxy installed with each pod of the service.

Diagram





NOTE - For this scenario, the default mesh wide policy must be set to "PERMISSIVE" on both the clusters. It will not work if the default Mesh Policy is "STRICT"

Important Info - cert-chain.pem is Envoy’s cert that needs to be presented to the other side. key.pem is Envoy’s private key paired with Envoy’s cert in cert-chain.pem. root-cert.pem is the root cert to verify the peer’s cert. In this example, we only have one Citadel in a cluster, so all Envoys have the same root-cert.pem.