You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This PR is auto-generated from hashicorp#21703 to be assessed for backporting due to the inclusion of the label backport/1.19.
The below text is copied from the body of the original PR.
Description
When creating an envoy cluster the default DNS Lookup Family defaults to AUTO, for inter-cluster communication this is not an issue but when creating a cluster that access external sources (like we do for JWTProviders) this can cause an issue. The AUTO setting prefers using ipv6, so if a user has a cluster that is not setup to handle ipv6 they will get an ipv6 address back for the external source and will be unable to connect.
To handle this we will be using the V4_PREFERRED lookup family when STRICT_DNS is enabled (STRICT_DNS will grab all addresses for the target and attempt to make a host for each and load balance between them).
When LOGICAL_DNS is enabled (LOGICAL_DNS will grab all the addresses and only use the first when a new connection is needed) we will use the ALL lookup family, which fetches all the ip addresses for a given hostname and cycles through them to find the first one that is reachable using happy eyeballs
If any other DNS Discovery Type is used we fallback to the default of AUTO because envoy ignores the Lookup Family for all other cluster types.
Backport
This PR is auto-generated from hashicorp#21703 to be assessed for backporting due to the inclusion of the label backport/1.19.
The below text is copied from the body of the original PR.
Description
When creating an envoy cluster the default DNS Lookup Family defaults to AUTO, for inter-cluster communication this is not an issue but when creating a cluster that access external sources (like we do for
JWTProviders
) this can cause an issue. TheAUTO
setting prefers usingipv6
, so if a user has a cluster that is not setup to handle ipv6 they will get an ipv6 address back for the external source and will be unable to connect.To handle this we will be using the
V4_PREFERRED
lookup family when STRICT_DNS is enabled (STRICT_DNS
will grab all addresses for the target and attempt to make a host for each and load balance between them).When
LOGICAL_DNS is enabled (
LOGICAL_DNS
will grab all the addresses and only use the first when a new connection is needed) we will use theALL
lookup family, which fetches all the ip addresses for a given hostname and cycles through them to find the first one that is reachable using happy eyeballsIf any other DNS Discovery Type is used we fallback to the default of
AUTO
because envoy ignores the Lookup Family for all other cluster types.Testing & Reproduction
Links
PR Checklist
Overview of commits
The text was updated successfully, but these errors were encountered: