Port capture FAQ entry (#4941)

This commit is contained in:
Frank Budinsky 2019-09-09 15:08:44 -04:00 committed by Istio Automation
parent 0b4077a0e4
commit b95373abb5
2 changed files with 9 additions and 6 deletions

View File

@ -1,6 +0,0 @@
---
title: Kubernetes - How can I enable Istio sidecar to actively capture the inbound traffic on port list instead of using the automatical inbound port detection?
weight: 20
---
You can restore the white list capture ports model by overriding pod annotation `traffic.sidecar.istio.io/includeInboundPorts` to port list. Contrarily, to bypass the interception on certain ports, you can add pod annotation `traffic.sidecar.istio.io/excludeOutboundPorts` with bypass port list.

View File

@ -0,0 +1,9 @@
---
title: On what ports does a sidecar proxy capture inbound traffic?
weight: 20
---
Istio captures inbound traffic on all ports by default.
You can override this behavior using the `traffic.sidecar.istio.io/includeInboundPorts` pod annotation
to specify an explicit list of ports to capture, or using `traffic.sidecar.istio.io/excludeOutboundPorts`
to specify a list of ports to bypass.