linkerd2/controller
Scott Fleener 156bf60ad7
feat(destination): introduce transport-protocol outbound TLS mode (#13699)
Non-opaque meshed traffic currently flows over the original destination port, which requires the inbound proxy to do protocol detection.

This adds an option to the destination controller that configures all meshed traffic to flow to the inbound proxy's inbound port. This will allow us to include more session protocol information in the future, obviating the need for inbound protocol detection.

This doesn't do much in the way of testing, since the default behavior should be unchanged. When this default changes, more validation will be done on the behavior here.

Signed-off-by: Scott Fleener <scott@buoyant.io>
2025-03-05 13:51:21 -08:00
..
api feat(destination): introduce transport-protocol outbound TLS mode (#13699) 2025-03-05 13:51:21 -08:00
cmd feat(destination): introduce transport-protocol outbound TLS mode (#13699) 2025-03-05 13:51:21 -08:00
gen chore: remove the bin/protoc script (#13459) 2024-12-11 16:24:07 -08:00
heartbeat build(deps): bump linkerd/dev from 39 to 40 (#10825) 2023-05-09 10:57:19 -07:00
identity core: use serviceAccountToken volume for pod authentication (#7117) 2021-11-03 02:03:39 +05:30
k8s fix(service-mirror): don't restart cluster watch upon Link status updates (#13579) 2025-01-22 12:35:15 -05:00
proxy-injector Add pod UID and container name to proxy env (#13501) 2024-12-19 09:39:31 -05:00
script Add `accessPolicy` field to Server CRD (#12845) 2024-07-22 09:01:09 -05:00
sp-validator Use metadata API in the proxy and tap injectors (#9650) 2022-11-16 09:21:39 -05:00
webhook Set minimum TLS version to 1.3 (#13500) 2024-12-19 09:19:09 -05:00
Dockerfile build(deps): bump linkerd/dev from v43 to v44 (#13428) 2024-12-06 11:38:36 -08:00