- Expose a workload
- Expose and secure a workload
- Cannot connect to a service exposed by an APIRule
- External DNS management
Connection refused errors
You get a
Connection reset by peer or a
GOAWAY response when you attempt to establish a connection between a service without a sidecar and a service with a sidecar.
By default, mutual TLS (mTLS) is enabled in the Service Mesh. As a result, every element of the Service Mesh must have an Istio sidecar with a valid TLS certificate to allow communication.
- To whitelist a service without a sidecar and disable mTLS traffic for it, create a DestinationRule.
- To allow connections between a service without a sidecar and a service with a sidecar, create a Peer Authentication in the