Proxy Traffic Flow

Proxy Traffic Flow A sequence diagram generated by Archify. HTTP Request iptables redirect (port 4140) mTLS handshake connect after destination lookup → load balancing (EWMA) Encrypted Request iptables redirect (port 4143) HTTP Request forward after mTLS verification → policy check HTTP Response Encrypted Response HTTP Response Outbound — destination lookup · load balancing · mTLS handshake mTLS hop — inbound verification · policy check Response return Client App · application container · Sequence participant Client App application container Client Proxy · linkerd-proxy (Outbound) · Sequence participant Client Proxy linkerd-proxy (Outbound) Server Proxy · linkerd-proxy (Inbound) · Sequence participant Server Proxy linkerd-proxy (Inbound) Server App · application container · Sequence participant Server App application container Legend request return security default message