Add LDS to Envoy YAML
@@ -15,6 +15,13 @@ dynamic_resources:
envoy_grpc:
cluster_name: cds_server_mtls
+ lds_config:
+ api_config_source:
+ api_type: GRPC
+ grpc_services:
+ envoy_grpc:
+ cluster_name: lds_server_mtls
+
static_resources:
listeners:
@@ -80,7 +87,7 @@ static_resources:
clusters:
- name: httpbin_service___EDS
- connect_timeout: 5s
+ connect_timeout: 0.25s
lb_policy: ROUND_ROBIN
type: EDS
eds_cluster_config:
@@ -92,7 +99,7 @@ static_resources:
cluster_name: eds_server_mtls
- name: httpbin_service
- connect_timeout: 5s
+ connect_timeout: 0.25s
type: LOGICAL_DNS
# Comment out the following line to test on v6 networks
dns_lookup_family: V4_ONLY
@@ -100,7 +107,7 @@ static_resources:
hosts: [{ socket_address: { address: httpbin, port_value: 80 }}]
- name: eds_server_mtls
- connect_timeout: 5s
+ connect_timeout: 0.25s
type: LOGICAL_DNS
http2_protocol_options: {}
tls_context:
@@ -121,7 +128,7 @@ static_resources:
socket_address: { address: 0.0.0.0, port_value: 15124 }
- name: sds_server_mtls
- connect_timeout: 5s
+ connect_timeout: 0.25s
type: LOGICAL_DNS
http2_protocol_options: {}
tls_context:
@@ -142,7 +149,7 @@ static_resources:
socket_address: { address: 0.0.0.0, port_value: 15123 }
- name: cds_server_mtls
- connect_timeout: 5s
+ connect_timeout: 0.25s
type: LOGICAL_DNS
http2_protocol_options: {}
tls_context:
@@ -162,8 +169,30 @@ static_resources:
address:
socket_address: { address: 0.0.0.0, port_value: 15125 }
+ - name: lds_server_mtls
+ connect_timeout: 0.25s
+ type: LOGICAL_DNS
+ http2_protocol_options: {}
+ tls_context:
+ common_tls_context:
+ tls_params:
+ tls_minimum_protocol_version: TLSv1_2
+ tls_maximum_protocol_version: TLSv1_3
+ cipher_suites: "[ECDHE-ECDSA-AES128-GCM-SHA256|ECDHE-ECDSA-CHACHA20-POLY1305]"
+ tls_certificates:
+ - certificate_chain: { filename: "./certificates/cert.pem" }
+ private_key: { filename: "./certificates/key.pem" }
+ load_assignment:
+ cluster_name: lds_server_mtls
+ endpoints:
+ - lb_endpoints:
+ - endpoint:
+ address:
+ socket_address: { address: 0.0.0.0, port_value: 15127 }
+
+
- name: rds_server_mtls
- connect_timeout: 5s
+ connect_timeout: 0.25s
type: LOGICAL_DNS
http2_protocol_options: {}
tls_context:
