consul

History

Paul Glass 77ecff3209 Permissive mTLS (#17035 ) This implements permissive mTLS , which allows toggling services into "permissive" mTLS mode. Permissive mTLS mode allows incoming "non Consul-mTLS" traffic to be forward unmodified to the application. * Update service-defaults and proxy-defaults config entries with a MutualTLSMode field * Update the mesh config entry with an AllowEnablingPermissiveMutualTLS field and implement the necessary validation. AllowEnablingPermissiveMutualTLS must be true to allow changing to MutualTLSMode=permissive, but this does not require that all proxy-defaults and service-defaults are currently in strict mode. * Update xDS listener config to add a "permissive filter chain" when MutualTLSMode=permissive for a particular service. The permissive filter chain matches incoming traffic by the destination port. If the destination port matches the service port from the catalog, then no mTLS is required and the traffic sent is forwarded unmodified to the application.		2 years ago
..
accesslogs	copyright headers for agent folder (#16704 )	2 years ago
extensionruntime	Wasm Envoy HTTP extension (#16877 )	2 years ago
testcommon	copyright headers for agent folder (#16704 )	2 years ago
testdata	Permissive mTLS (#17035 )	2 years ago
validateupstream-test	copyright headers for agent folder (#16704 )	2 years ago
clusters.go	add order by locality failover to Consul enterprise (#16791 )	2 years ago
clusters_test.go	copyright headers for agent folder (#16704 )	2 years ago
config.go	copyright headers for agent folder (#16704 )	2 years ago
config_test.go	copyright headers for agent folder (#16704 )	2 years ago
delta.go	copyright headers for agent folder (#16704 )	2 years ago
delta_envoy_extender_oss_test.go	Wasm Envoy HTTP extension (#16877 )	2 years ago
delta_test.go	copyright headers for agent folder (#16704 )	2 years ago
endpoints.go	add order by locality failover to Consul enterprise (#16791 )	2 years ago
endpoints_test.go	copyright headers for agent folder (#16704 )	2 years ago
failover_policy.go	add order by locality failover to Consul enterprise (#16791 )	2 years ago
failover_policy_oss.go	add order by locality failover to Consul enterprise (#16791 )	2 years ago
golden_test.go	copyright headers for agent folder (#16704 )	2 years ago
listeners.go	Permissive mTLS (#17035 )	2 years ago
listeners_ingress.go	copyright headers for agent folder (#16704 )	2 years ago
listeners_test.go	Permissive mTLS (#17035 )	2 years ago
naming.go	copyright headers for agent folder (#16704 )	2 years ago
net_fallback.go	copyright headers for agent folder (#16704 )	2 years ago
net_linux.go	copyright headers for agent folder (#16704 )	2 years ago
protocol_trace.go	copyright headers for agent folder (#16704 )	2 years ago
rbac.go	copyright headers for agent folder (#16704 )	2 years ago
rbac_test.go	copyright headers for agent folder (#16704 )	2 years ago
resources.go	copyright headers for agent folder (#16704 )	2 years ago
resources_oss_test.go	copyright headers for agent folder (#16704 )	2 years ago
resources_test.go	add order by locality failover to Consul enterprise (#16791 )	2 years ago
response.go	copyright headers for agent folder (#16704 )	2 years ago
routes.go	copyright headers for agent folder (#16704 )	2 years ago
routes_test.go	copyright headers for agent folder (#16704 )	2 years ago
secrets.go	copyright headers for agent folder (#16704 )	2 years ago
server.go	copyright headers for agent folder (#16704 )	2 years ago
server_oss.go	copyright headers for agent folder (#16704 )	2 years ago
testing.go	copyright headers for agent folder (#16704 )	2 years ago
xds.go	copyright headers for agent folder (#16704 )	2 years ago
xds_protocol_helpers_test.go	copyright headers for agent folder (#16704 )	2 years ago
z_xds_packages.go	Add connection limit setting to service defaults	3 years ago
z_xds_packages_test.go	copyright headers for agent folder (#16704 )	2 years ago