Add support for FDS #1039
Labels
blocked/needs-design
Categorizes the issue or PR as blocked because it needs a design document.
blocked/needs-envoy
Categorizes the issue or PR as blocked because it needs changes in Envoy.
kind/feature
Categorizes issue or PR as related to a new feature.
lifecycle/stale
Denotes an issue or PR has remained open with no activity and has become stale.
priority/important-longterm
Important over the long term, but may not be staffed and/or may need multiple releases to complete.
Currently any change to the TLS listener requires updating the
ingress_https
LDS entry. Updating this entry will cause the previous listener definition to move into draining mode for--drain-time-s
(default, 10 min) time. During that time listener structs sit around in memory. After that time any connections established via a draining listener are forcibly closed.The solution to this upstream is FDS, a new xDS endpoint that will serve FilterChain configuration -- the magic that makes the TLS listener work with SNI -- and remove the need to reload the object that holds the TLS socket.
Blocked:
The text was updated successfully, but these errors were encountered: