<p>I have istio 1.1.3 with mtls and service-registry on a kubespray k8 cluster. I want to secure all outgoing traffic, hence I create service-entries for each external service that my services want to talk to.</p>

<p>I would like to use istio-proxy logs to see the blocked communication attempts for all sort of traffic.</p>

<p>If i curl from within container to a (blocked) <a href="http://google.com" rel="nofollow noreferrer">http://google.com</a> i see  404 NR in istio-proxy logs. Also curl receives 404. As expected</p>

<p>If i change call to use https, and curl (still blocked) <a href="https://google.com" rel="nofollow noreferrer">https://google.com</a>, i see the following curl error
(35) Unknown SSL protocol error in connection to google.com:443
and nothing shows up in istio-proxy logs (why nothing?)</p>

<p>How can i see all connection attempts in istio-proxy? I have a pretty convoluted bunch of services that do covert-ops outgoing calls and i need to figure out what hostnames/ips/ports they are trying to hit</p>

strzelecki.maciek
<p>If I understand you correctly you can try to set different logging levels with:</p>

<pre><code>--log_output_level &lt;string&gt; 
</code></pre>

<blockquote>
  <p>Comma-separated minimum per-scope logging level of messages to output,
  in the form of :,:,... where scope can be
  one of [all, default, model, rbac] and level can be one of [debug,
  info, warn, error, fatal, none] (default <code>default:info</code>)</p>
</blockquote>

<p>More info can be found <a href="https://istio.io/docs/reference/commands/pilot-agent/" rel="nofollow noreferrer">here</a></p>

<p>Please let me know if that helped. </p>
