3 ms·
Istio is point to point between services. It's not a boundary in the sense you're thinking.
by robertlagrant 2y ago
Istio is point to point between services. It's not a boundary in the sense you're thinking.
- bilekas 2y agoI will admit I don't know a lot about Kubernets at all, but as I see the Istio is supposed to be the proxy layer between services ? https://istio.io/latest/docs/ops/deployment/architecture/ https://istio.io/latest/docs/ops/deployment/architecture/ Being able to run as the Istio user (1337) renders the proxy itself moot right ?
- gbrayut 2y agoThere are a lot of other ways to bypass the Istio sidecar proxy, which is not designed to be a general egress boundary/firewall. See https://blog.howardjohn.info/posts/bypass-egress/ https://blog.howardjohn.info/posts/bypass-egress/