Skip to content

Vip overlap bug#1829

Open
ilrudie wants to merge 4 commits intoistio:masterfrom
ilrudie:vip-overlap-bug
Open

Vip overlap bug#1829
ilrudie wants to merge 4 commits intoistio:masterfrom
ilrudie:vip-overlap-bug

Conversation

@ilrudie
Copy link
Copy Markdown
Contributor

@ilrudie ilrudie commented Apr 7, 2026

It's possible for istiod to send multiple services which have address overlap. The clearest way I can envision this happening is two SE of resolution NONE in different namespaces. Right now ztunnel handles this scenario poorly, by overwriting by_vip with the most recently updated Service. This updates by_vip to be a hashmap keyed on VIP which contains a vec of Service instead of a single Service. When performing VIP lookups in outbound (to determine which Service a client is trying to reach) we will prefer the Service in the same namespace, otherwise the canonical is used matching DNS lookup semantics more closely for this "reverse lookup" behavior.

ilrudie added 2 commits April 7, 2026 17:33
Signed-off-by: Ian Rudie <ian.rudie@solo.io>
Signed-off-by: Ian Rudie <ian.rudie@solo.io>
@ilrudie ilrudie requested a review from a team as a code owner April 7, 2026 21:42
@istio-testing istio-testing added the size/L Denotes a PR that changes 100-499 lines, ignoring generated files. label Apr 7, 2026
ilrudie added 2 commits April 7, 2026 17:47
Signed-off-by: Ian Rudie <ian.rudie@solo.io>
Signed-off-by: Ian Rudie <ian.rudie@solo.io>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size/L Denotes a PR that changes 100-499 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants