Traffic Redirect Setup by istio-init

Traffic Redirect Setup by istio-init A sequence diagram generated by Archify. start init container set iptables rules redirect all traffic to Envoy done (exit 0) start application start Envoy outbound request redirect (15001) Envoy decides routing, then sends the real request send real request Envoy UID bypasses iptables (RETURN) 1. Pod start — istio-init 2. Container startup 3. Outbound request interception Kubernetes · kubelet · Sequence participant Kubernetes kubelet istio-init · init container · Sequence participant istio-init init container iptables · NAT table · Sequence participant iptables NAT table Application · app container · Sequence participant Application app container Envoy Proxy · UID 1337 · Sequence participant Envoy Proxy UID 1337 Legend request return security default message