[GitHub] [apisix] bzp2010 commented on issue #7377: bug: requests with Istio mTLS enabled fail with connection termination

[GitBox <gi...@apache.org>]

bzp2010 commented on issue #7377:
URL: https://github.com/apache/apisix/issues/7377#issuecomment-1303022226

   @svilenvul 
   
   I notice that you are trying to proxy a gRPC service, that means the request has to be HTTP/2 with TLS, anyway the mTLS provided by Sidecar is no substitute for this TLS, because it is transparent to both C/S sides. For the server, it provides an H2C service, which is not the same as HTTP/2. 
   
   For APISIX, if you want to use plaintext HTTP-based HTTP2, i.e. H2C, you have to manually turn on that switch, and note that it cannot coexist with regular HTTP.
   
   My suggestion for now is to try proxying a normal HTTP service first, and if it does work, try the following scenario, turn on H2C support for APISIX, and expose it in the kubernetes service.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org