The compatibility of Lazyload with Istio

[cywang1905]

Update (2022.04.25)

It has been verified that Istio 1.13.3 has fixed all relevant problems. We currently recommend versions 1.13.3+, 1.11.3 or 1.10.4.

经过验证，Istio 1.13.3已经修复了所有相关问题。目前我们推荐使用的版本为1.13.3+, 1.11.3或1.10.4。

Update (2022.03.22)

There are still some bugs with Envoyfilter REMOVE operation in Istio releases 1.13.1 ~ 1.13.2. The last bugfix commit is fix filter removal for http filter at 2022.03.16, not contained by any istio realease.

Lazyload with prometheus metric cannot run on these versions, while lazyload with accesslog metric has no problem.

We provide a new istiod image registry.cn-hangzhou.aliyuncs.com/slimeio/pilot:1.13.2-bugfix based on istio 1.13.2 in order to run lazyload with prometheus metric.

This problem will be solved in future istio 1.13.3+ so far as we know.

Update (2022.03.08)

It has been verified that this issue has been fixed in istio 1.13.
The current recommended versions of istio are

• 1.13 All official versions
• 1.11.0 ~ 1.11.3
• 1.10.0 ~ 1.10.4
• 1.9.0 ~ 1.9.8

Versions not recommended for use are

• 1.12 All versions
• 1.11.4+
• 1.10.5 ~ 1.10.6
• 1.9.9

经过验证，目前istio 1.13已经修复此问题。
目前推荐使用的Istio版本为：

• 1.13 所有正式版本
• 1.11.0 ~ 1.11.3
• 1.10.0 ~ 1.10.4
• 1.9.0 ~ 1.9.8

不推荐使用的版本为：

• 1.12 所有版本
• 1.11.4+
• 1.10.5 ~ 1.10.6
• 1.9.9

---

After testing, there are currently compatibility issues with the latest Istio version for Lazyload. The cause of the problem, most likely, is that the new code in Istio causes an error in EnvoyFilter's REMOVE operation on VIRTUAL_HOST. This will affect the EnvoyFilter/to-global-sidecar of Lazyload module from taking effect.

Issue of the Istio community to follow up on this issue EnvoyFilter VIRTUAL_HOST REMOVE patch operation will destroy route configuration #36357

Code PR suspected of introducing problems do not build catch all virtual host every time #35449

Theoretically, any version of Istio released after October 2, 2021 could have the problem. The versions currently known to be affected are

• 1.12.0，1.12.1
• 1.11.4，1.11.5
• 1.10.5，1.10.6
• 1.9.9

We are currently recommending versions 1.11.3 or 1.10.4. We will continue to follow up on this issue and update this issue when there is progress.

经过测试，目前懒加载与最新的Istio版本存在兼容性问题。问题的原因，很有可能是Istio的新代码导致EnvoyFilter对VIRTUAL_HOST的REMOVE操作出现错误。这会影响懒加载模块兜底EnvoyFilter to-global-sidecar的生效。

Istio社区跟进此问题的Issue EnvoyFilter VIRTUAL_HOST REMOVE patch operation will destroy route configuration #36357

怀疑引入问题的代码PR do not build catch all virtual host every time #35449

理论上，2021年10月2号之后发布的Istio版本都可能存在问题。目前已知受影响的版本为：

• 1.12.0，1.12.1
• 1.11.4，1.11.5
• 1.10.5，1.10.6
• 1.9.9

目前我们推荐使用的版本为1.11.3或1.10.4。我们会持续跟进这个问题，并在有进展时，及时更新本issue。

[YonkaFang]

relevant fix pr github.com/istio/istio/pull/36404

[YonkaFang]

seems to not been cherry-picked to released versions. maybe will only be fixed in new-coming 1.13.

[cywang1905]

It has been verified that this issue has been fixed in istio 1.13.
The current recommended versions of istio are

• 1.13 All official versions
• 1.11.0 ~ 1.11.3
• 1.10.0 ~ 1.10.4
• 1.9.0 ~ 1.9.8
  Versions not recommended for use are
• 1.12.0 All versions
• 1.11.4 ~ 1.11.7
• 1.10.5 ~ 1.10.6
• 1.9.9

经过验证，目前istio 1.13已经修复此问题。
目前推荐使用的Istio版本为：

• 1.13 所有正式版本
• 1.11.0 ~ 1.11.3
• 1.10.0 ~ 1.10.4
• 1.9.0 ~ 1.9.8
  不推荐使用的版本为：
• 1.12.0 所有版本
• 1.11.4 ~ 1.11.7
• 1.10.5 ~ 1.10.6
• 1.9.9