{"action":"opened","issue":{"url":"https://api.github.com/repos/istio/istio/issues/3867","repository_url":"https://api.github.com/repos/istio/istio","labels_url":"https://api.github.com/repos/istio/istio/issues/3867/labels{/name}","comments_url":"https://api.github.com/repos/istio/istio/issues/3867/comments","events_url":"https://api.github.com/repos/istio/istio/issues/3867/events","html_url":"https://github.com/istio/istio/issues/3867","id":301422419,"number":3867,"title":"Istio ingress behind Aws NLB","user":{"login":"jsenon","id":15340544,"avatar_url":"https://avatars3.githubusercontent.com/u/15340544?v=4","gravatar_id":"","url":"https://api.github.com/users/jsenon","html_url":"https://github.com/jsenon","followers_url":"https://api.github.com/users/jsenon/followers","following_url":"https://api.github.com/users/jsenon/following{/other_user}","gists_url":"https://api.github.com/users/jsenon/gists{/gist_id}","starred_url":"https://api.github.com/users/jsenon/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jsenon/subscriptions","organizations_url":"https://api.github.com/users/jsenon/orgs","repos_url":"https://api.github.com/users/jsenon/repos","events_url":"https://api.github.com/users/jsenon/events{/privacy}","received_events_url":"https://api.github.com/users/jsenon/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-03-01T14:23:47Z","updated_at":"2018-03-01T14:23:47Z","closed_at":null,"author_association":"CONTRIBUTOR","body":"Hi,\r\n\r\nI tried to implement istio ingress behind AWS NLB. It needs to have healthcheck TCP or HTTP to works. I ve tried with `externalTrafficPolicy: Local` or  `externalTrafficPolicy: Cluster`\r\n\r\n```\r\napiVersion: v1\r\nkind: Service\r\nmetadata:\r\n  name: istio-ingress\r\n  namespace: istio-system\r\n  labels:\r\n    istio: ingress\r\n  annotations:\r\n    service.beta.kubernetes.io/aws-load-balancer-type: \"nlb\"\r\nspec:\r\n  type: LoadBalancer\r\n  externalTrafficPolicy: Local\r\n  ports:\r\n  - port: 80\r\n    name: http\r\n    protocol: TCP\r\n    targetPort: 80\r\n  - port: 443\r\n    name: https\r\n    protocol: TCP\r\n    targetPort: 443\r\n  selector:\r\n    istio: ingress\r\n```\r\n\r\nIf we use `externalTrafficPolicy: Local` HTTP endpoint needs to be available on ingress POD, but I think that we don't have one.\r\nIf we use `externalTrafficPolicy: Cluster`, TCP endpoint needs to be available.\r\n\r\nDoes istio is compatible with AWS NLB?\r\n\r\nThanks "}}
{"actor":{"display_login":"jsenon"}}