<p>In plain nginx, I can use the <a href="http://nginx.org/en/docs/http/ngx_http_geo_module.html" rel="nofollow noreferrer">nginx geo module</a> to set a variable based on the remote address. I can use this variable in the ssl path to choose a different SSL certificate and key for different remote networks accessing the server. This is necessary because the different network environments have different CAs.</p>
<p>How can I reproduce this behavior in a Kubernetes nginx ingress? or even Istio?</p>

Pit Wegner
<p>You can customize the generated config both for the base and for each Ingress. I'm not familiar with the config you are describing but some mix of the various *-snippet configmap options (<a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#server-snippet" rel="nofollow noreferrer">https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#server-snippet</a>) or a custom template (<a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/custom-template/" rel="nofollow noreferrer">https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/custom-template/</a>)</p>
