Transparent proxy for the service that is outside of service mesh via Terminating gateway

[Shige99011]

Hi, I'm using Transparent Proxy (that's really good feature!) with the latest consul helm chart (0.32.1).

This is just a quick question.
Is it possible to access like Transparent proxy to an external service that is running outside of the service mesh via terminating gateway?
Currently it needs the upstream annotation with the service name and port like 'consul.hashicorp.com/connect-service-upstreams': 'external-service:9001'
Then a service in the service mesh accesses to the external service by using local host address and the port like "http://127.0.0.1:9001/external-service".

Thanks for your help.

[david-yu]

Hi @Shige99011 this looks like a Consul Core feature request for Terminating GWs so I'll transfer this over to the hashicorp/consul.

[blake]

Hi @Shige99011, this now supported as of Consul 1.11.2.

IMPROVEMENTS:

• connect: Add support for connecting to services behind a terminating gateway when using a transparent proxy. [OSS: Add virtual IP generation for terminating gateway backed services #12049]

After you associate the external service with the terminating gateway, apps in your mesh can reach it via transparent proxy by connecting to the IP address returned from the virtual IP service lookup for the service (e.g., external-service.virtual.consul).

[Shige99011]

Thanks for the notification!