istio
/
istio.io
mirror of https://github.com/istio/istio.io.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Create automtls-exclude-port.md (#10688)

This commit is contained in:
yanrongshi 2022-07-05 20:06:01 +08:00 committed by GitHub
parent ce6480ab11
commit d8ed87d3d7
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
content/zh/about/faq/security/automtls-exclude-port.md Normal file
View File

@ -0,0 +1,9 @@
---
title: Auto 双向 TLS 是否排除使用 "excludeInboundPorts" 注释设置的端口？
weight: 80
---
不，当 `traffic.sidecar.istio.io/excludeInboundPorts` 用于服务器工作负载时，
Istio 仍然默认配置客户端 Envoy 以发送双向 TLS。要改变这一点，您需要配置一个目标规则，
将双向 TLS 模式设置为 `DISABLE`，
用以让客户端发送纯文本到这些端口。