github
/
consul
mirror of https://github.com/hashicorp/consul
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Use strict DNS for mesh gateways with hostnames

pull/19268/head
Andrew Stucki 2023-10-18 10:25:23 -04:00
parent a6c990c6fe
commit e9eabcb3b3
2 changed files with 9 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
agent/xds/clusters.go
View File

@ -641,10 +641,13 @@ func (s *ResourceGenerator) makePeerServerClusters(cfgSnap *proxycfg.ConfigSnaps
var cluster *envoy_cluster_v3.Cluster var cluster *envoy_cluster_v3.Cluster
if servers.UseCDS { if servers.UseCDS {
// we use strict DNS here since multiple gateways with hostnames
// would result in an invalid cluster due to logical DNS requiring
// only a single host
cluster = s.makeExternalHostnameCluster(cfgSnap, clusterOpts{ cluster = s.makeExternalHostnameCluster(cfgSnap, clusterOpts{
name: name, name: name,
addresses: servers.Addresses, addresses: servers.Addresses,
}) }, envoy_cluster_v3.Cluster_STRICT_DNS)
} else { } else {
cluster = s.makeGatewayCluster(cfgSnap, clusterOpts{ cluster = s.makeGatewayCluster(cfgSnap, clusterOpts{
name: name, name: name,
@ -842,7 +845,7 @@ func (s *ResourceGenerator) makeDestinationClusters(cfgSnap *proxycfg.ConfigSnap
if structs.IsIP(address) { if structs.IsIP(address) {
cluster = s.makeExternalIPCluster(cfgSnap, opts) cluster = s.makeExternalIPCluster(cfgSnap, opts)
} else { } else {
cluster = s.makeExternalHostnameCluster(cfgSnap, opts) cluster = s.makeExternalHostnameCluster(cfgSnap, opts, envoy_cluster_v3.Cluster_LOGICAL_DNS)
} }
if err := s.injectGatewayDestinationAddons(cfgSnap, cluster, svcName); err != nil { if err := s.injectGatewayDestinationAddons(cfgSnap, cluster, svcName); err != nil {
return nil, err return nil, err
@ -1865,8 +1868,8 @@ func (s *ResourceGenerator) makeExternalIPCluster(snap *proxycfg.ConfigSnapshot,
} }
// makeExternalHostnameCluster creates an Envoy cluster for hostname endpoints that will be resolved with DNS // makeExternalHostnameCluster creates an Envoy cluster for hostname endpoints that will be resolved with DNS
// This is used by both terminating gateways for Destinations, and Mesh Gateways for peering control plane traffice // This is used by both terminating gateways for Destinations, and Mesh Gateways for peering control plane traffic
func (s *ResourceGenerator) makeExternalHostnameCluster(snap *proxycfg.ConfigSnapshot, opts clusterOpts) *envoy_cluster_v3.Cluster { func (s *ResourceGenerator) makeExternalHostnameCluster(snap *proxycfg.ConfigSnapshot, opts clusterOpts, discoveryType envoy_cluster_v3.Cluster_DiscoveryType) *envoy_cluster_v3.Cluster {
cfg, err := config.ParseGatewayConfig(snap.Proxy.Config) cfg, err := config.ParseGatewayConfig(snap.Proxy.Config)
if err != nil { if err != nil {
// Don't hard fail on a config typo, just warn. The parse func returns // Don't hard fail on a config typo, just warn. The parse func returns
@ -1881,7 +1884,7 @@ func (s *ResourceGenerator) makeExternalHostnameCluster(snap *proxycfg.ConfigSna
// Having an empty config enables outlier detection with default config. // Having an empty config enables outlier detection with default config.
OutlierDetection: &envoy_cluster_v3.OutlierDetection{}, OutlierDetection: &envoy_cluster_v3.OutlierDetection{},
ClusterDiscoveryType: &envoy_cluster_v3.Cluster_Type{Type: envoy_cluster_v3.Cluster_LOGICAL_DNS}, ClusterDiscoveryType: &envoy_cluster_v3.Cluster_Type{Type: discoveryType},
DnsLookupFamily: envoy_cluster_v3.Cluster_V4_ONLY, DnsLookupFamily: envoy_cluster_v3.Cluster_V4_ONLY,
} }

2
agent/xds/testdata/clusters/mesh-gateway-with-peer-through-mesh-gateway-enabled.latest.golden vendored
View File

@ -53,7 +53,7 @@
}, },
"name": "server.dc3.peering.f622dc37-7238-4485-ab58-0f53864a9ae5", "name": "server.dc3.peering.f622dc37-7238-4485-ab58-0f53864a9ae5",
"outlierDetection": {}, "outlierDetection": {},
"type": "LOGICAL_DNS" "type": "STRICT_DNS"
} }
], ],
"typeUrl": "type.googleapis.com/envoy.config.cluster.v3.Cluster", "typeUrl": "type.googleapis.com/envoy.config.cluster.v3.Cluster",