Source for the istio.io site
Go to file
Vadim Eisenberg 535f68b81d Blog Post about HTTPS Egress Traffic in Istio (#881)
* added initial version of Egress HTTPS blog, including adding blog section for 2018

* replace dash with comma

* that has Istio installed -> with Istio installed

* route rule -> Route Rule

* app -> application

* restructured error propagation

* could have gone wrong -> might have gone wrong

* which -> that

* the same -> the previous

* moved "now" after "accessing"

* rephrased "the previous error..."

* rewrote the passage about dynamically defined egress rules, marked some terms in bold

* rephrased "written or configured differently"

* IP -> destination IP

* removed "to secure Egress Rules"

* "to add applying" -> "to enable applying"

* rephrased the passage about no tracing, telemetry, mixer checks

* checkss -> checks, tracing/telemetry -> tracing, telemetry

* logging -> tracing

* rephrased the conclusion section

* e.g -> for example

* added "currently" to "Istio cannot perform filtering"

* allow Istio perform -> allow Istio to perform

* "true" string -> _"true"_

* "Egress Rule" is, it enables -> "Egress Rules" are, they enable, just -> only

* rewrote the sentence about the malicious attack

* ... Mixer checks -> ... Mixer checks for the egress traffic

* updated the date to be 26-th of January

* App -> Application

* cluster -> Kubernetes cluster

* added graceful service degradation

* BookInfo -> Bookinfo

* BookInfo -> Bookinfo in a second place

* Book Details displayed without error -> Book Details displayed correctly

* The issues -> Issues

* no Mixer Checks -> No Mixer Checks in section's title

* on the egress traffic -> for the egress traffic

* on the egress traffic -> for the egress traffic, in the second place

* we achieve -> we have

* added Envoy proxy in parenthesis when talking about Istio sidecar proxy

* completed the https from the app diagram, inside/outside of Istio

* added a figure with HTTPS traffic, from inside/outside of Istio

* added a paragraph about the HTTPS traffic figure

* added a paragraph about the port 443

* added "differently," after configured

* replaced places of "from inside" and "from outside"

since "from outside" appears first on the diagram

* container spec -> the `container` spec

* fixed two links

* moved "to external services" after "traffic"

* the Istio Service Mesh -> an Istio Service Mesh

* traffic between the proxy -> traffic between the pod

* the Istio Service Mesh -> an Istio Service Mesh

* has/have to -> must

* the microservice code -> the code of the microservices

* inside/outside of -> inside/outside

* outside of -> outside (removed of)

* Egress Requests -> egress requests

* added derived from the URL's schema

* URL -> URI, added (https://)

* remove .DS_Store, submitted accidentially

* to outside the cluster -> to destinations outside the cluster

* made "block all the traffic to destinations outside the cluster"

* extended the example about the wildcard match of Egress Rules

www.googleapis.com and fcm.googleapis.com

* replaced "now" with "after deleting the Egress Rule"

* fixed calculating the latest blog, thanks to Martin Teillefer

* removed using istio initializer, since starting from 0.5.0 it requires Kubernetes 1.9

* added mentioning of the Istio version for this blog post

* updated the date to be 31 January 2018

* added mentioning that the example work with or without mTLS

* added a sub-section on a relation to Istio Mutual TLS

* Added: The TLS origination for the external services will work, whether the Istio mutual TLS is enabled or not.

* fixed a link to Egress Rules reference

* added a migration use cases for external services
2018-01-31 09:58:18 -05:00
.circleci Attempt at fixing circleci failure (#756) 2017-12-07 10:40:06 -08:00
_about Fix a few links. (#897) 2018-01-30 08:16:52 -08:00
_blog Blog Post about HTTPS Egress Traffic in Istio (#881) 2018-01-31 09:58:18 -05:00
_data Simplify how FAQ categories and blog posts are hsndled. (#805) 2017-12-17 14:54:33 -08:00
_docs clarify `sidecar.istio.io/inject` annotation usage (#899) 2018-01-30 12:27:38 -08:00
_faq Major update of the web site's infrastructure. (#826) 2018-01-03 08:16:28 -08:00
_glossary Expand the glossary. (#739) 2017-11-26 05:54:14 -08:00
_help Add Envoy high CPU troubleshooting section. (#867) 2018-01-25 14:35:23 -05:00
_includes Blog Post about HTTPS Egress Traffic in Istio (#881) 2018-01-31 09:58:18 -05:00
_layouts Prepare for new generated reference content. (#889) 2018-01-29 06:44:07 -08:00
_sass Prepare for new generated reference content. (#889) 2018-01-29 06:44:07 -08:00
css Prepare for new generated reference content. (#889) 2018-01-29 06:44:07 -08:00
favicons [ImgBot] optimizes images (#804) 2017-12-17 12:02:37 -08:00
img Major update of the web site's infrastructure. (#826) 2018-01-03 08:16:28 -08:00
js Prepare for new generated reference content. (#889) 2018-01-29 06:44:07 -08:00
scripts Prepare for new generated reference content. (#889) 2018-01-29 06:44:07 -08:00
talks Rename Istio-Manager to Pilot (#360) 2017-06-08 16:46:36 -04:00
.firebaserc versioned docs: add build scripts to be driven thru jenkins (#368) 2017-06-12 09:23:11 -07:00
.gitignore Attempt at fixing circleci failure (#756) 2017-12-07 10:40:06 -08:00
404.md Major update of the web site's infrastructure. (#826) 2018-01-03 08:16:28 -08:00
BingSiteAuth.xml Bing ownership validation. 2017-06-19 12:20:59 -07:00
CNAME update CNAME 2017-03-15 14:43:09 -04:00
CONTRIBUTING.md Fix broken links to CONTRIBUTING.md (#717) 2017-11-17 17:03:21 -08:00
Gemfile Fix to run new htmlproofer from docker (https instead of ssh url needed) (#779) 2017-12-07 17:23:30 -08:00
Gemfile.lock Fix to run new htmlproofer from docker (https instead of ssh url needed) (#779) 2017-12-07 17:23:30 -08:00
LICENSE extend copyright to 2018 (#843) 2018-01-06 12:28:55 -08:00
README.md add couple edits to get working on guest OS -- expose on non-localhost (#857) 2018-01-08 18:31:14 -08:00
Rakefile Fix to run new htmlproofer from docker (https instead of ssh url needed) (#779) 2017-12-07 17:23:30 -08:00
_config.yml Prepare for new generated reference content. (#889) 2018-01-29 06:44:07 -08:00
browserconfig.xml Site cleanup 2017-11-26 13:37:14 -08:00
community.md Major update of the web site's infrastructure. (#826) 2018-01-03 08:16:28 -08:00
feed.xml Fix feed.xml generation. (#813) 2017-12-20 11:27:52 -08:00
firebase.json versioned docs: add build scripts to be driven thru jenkins (#368) 2017-06-12 09:23:11 -07:00
index.html Adjust the height of the header based on the height of the page, instead of on its width. 2018-01-03 16:43:27 -08:00
manifest.json Site cleanup 2017-11-26 13:37:14 -08:00
robots.txt Delete *.old files (#635) 2017-10-05 17:05:33 -07:00
search.md Major update of the web site's infrastructure. (#826) 2018-01-03 08:16:28 -08:00

README.md

istio.github.io

This repository contains the source code for the istio.io web site.

Please see the main Istio README file to learn about the overall Istio project and how to get in touch with us. To learn how you can contribute to any of the Istio components, please see the Istio contribution guidelines.

The website uses Jekyll templates and is hosted on GitHub Pages. Please make sure you are familiar with these before editing.

To run the site locally with Docker, use the following command from the toplevel directory for this git repo (e.g. pwd must be ~/github/istio.github.io if you were in ~/github when you issued git clone https://github.com/istio/istio.github.io.git)

# First time: (slow)
docker run --name istio-jekyll --volume=$(pwd):/srv/jekyll  -it -p 4000:4000 jekyll/jekyll:3.5.2 sh -c "bundle install && rake test && bundle exec jekyll serve --incremental --host 0.0.0.0"
# Then open browser with url 127.0.0.1:4000 to see the change.
# Subsequent, each time you want to see a new change and you stopped the previous run by ctrl+c: (much faster)
docker start istio-jekyll -a -i
# Clean up, only needed if you won't be previewing website changes for a long time or you want to start over:
docker rm istio-jekyll

The rake test part is to make sure you are not introducing html errors or bad links, you should see

HTML-Proofer finished successfully.

in the output

Local/Native Jekyll install:

Alternatively, if you just want to develop locally w/o Docker/Kubernetes/Minikube, you can try installing Jekyll locally. You may need to install other prerequisites manually (which is where using the docker image shines). Here's an example of doing so for Mac OS X:

xcode-select --install
sudo xcodebuild -license
brew install ruby
gem update --system
gem install bundler
gem install jekyll
cd istio.github.io
bundle install
bundle exec rake test
bundle exec jekyll serve