Version 2: Envoyfilter ext_authz #IstioCon Wise Platform #IstioCon Wise Platform Using envoy filter to handle things from platform level, reduce workload of developers. EnvoyFilter provides a mechanism mechanism to customize the Envoy configuration generated by Istio Pilot. Use EnvoyFilter to modify values for certain fields, add specific filters, or even add entirely new listeners, clusters, etc. #IstioCon number the filter will apply to #IstioCon Wise Platform – lua #IstioCon Wise Platform Using envoyfilter to implement requirements on platform level, reduces application workload. Intelligence Platform

16 ��������� ������������� ASMFilter Deployment 资源对象 Controller (Watch & Reconcile) Istio EnvoyFilter CR wasm filter二进 制文件 服务网格ASM Pod K8s集群 Proxy Service A Volume 挂载 Envoy配置 17 ASMFilterDeployment Custom Resource 18 生成的Istio Envoy Filter资源(1) apiVersion: networking.istio.io/v1alpha3 kind: EnvoyFilter metadata: …. spec: configPatches: - applyTo: HTTP_FILTER match: …. patch: …. workloadSelector: productpage version: v1 19 生成的Istio Envoy Filter资源(2) apiVersion: networking.istio.io/v1alpha3 kind: EnvoyFilter metadata: …. spec: configPatches: - applyTo: HTTP_FILTER match: …. patch: …. workloadSelector:

https://myurl/get 视为与 https://myurl/GeT 一样。在这些情况下，您可以使用如下所示的 EnvoyFilter。此过滤器将更改 用于比较的路径以及应用程序显示的路径。在本例中，istio-system 是 Service Mesh control plane 项目 的名称。 将 EnvoyFilter 保存到文件中并运行以下命令： spec: techPreview: global: pathNormalization: $ oc create -f apiVersion: networking.istio.io/v1alpha3 kind: EnvoyFilter metadata: name: ingress-case-insensitive namespace: istio-system spec: configPatches: - X 21 MAISTRA-2692 删除了 Mixer，在 Service Mesh 2.0.x 中定义的自定义指标无法在 2.1 中使用。可 以使用 EnvoyFilter 配置自定义指标。除非有明确记录，红帽不支持 EnvoyFilter 配置。这是因 为与底层 Envoy API 耦合紧密，这意味着无法维护向后兼容性。 MAISTRA-2648 ServiceMeshExtensions

of the service mesh by Lorenzo Fundaró SRE @ Omio #IstioCon What’s on the menu today ● EnvoyFilter in practice ● Demo ● Inspiration #IstioCon Questions #istiocon @ istio.slack.com @lfundaro Maintenance Why don’t you ? #IstioCon Can we do better ? #IstioCon What if ? #IstioCon EnvoyFilter - #IstioCon Envoy HTTP LuaFilter function envoy_on_request(request_handle) function envoy