Connection refused or timeout


After all the steps required to set up your custom domain are finished, you receive the connection refused or connection timeout error when you try to expose a service. It shows up when you call the service endpoint by sending a GET request. The error looks as follows:

Click to copy
curl: (7) Failed to connect to port 443: Connection refused


DNS resolves to an incorrect IP address.


Check if the IP address provided as the value of the spec.targets parameter of the DNSEntry custom resource (CR) is the IP address of the Ingress Gateway you are using. To check the Ingress Gateway IP, run:

Click to copy
kubectl -n istio-system get service istio-ingressgateway -o jsonpath='{.status.loadBalancer.ingress[0].ip}'`

In addition, ensure that your OS resolves the target host name to the same Ingress Gateway IP address. Run:

Click to copy

NOTE YOUR_SUBDOMAIN specifies the name of your subdomain, for example,