Skip to content

Latest commit

 

History

History
106 lines (86 loc) · 13.5 KB

features.md

File metadata and controls

106 lines (86 loc) · 13.5 KB

Features supported according to Istio resources

The list of supported fields on Citrix ADC as per the Istio CRDs (Destination Rule, Virtual Service, Policy, Gateway, and Service Entry) is specified as follows:

Destination Rule

Destination rule allows you to define policies that apply to traffic intended for a service after routing has occurred.

The following table describes the destination rule settings supported by Citrix ADC with Istio.

Field xDS-adaptor version Citrix ADC Version
trafficPolicy.connectionPool.tcp.maxConnections 0.9.5 or later 13.0–37.16+
trafficPolicy.connectionPool.http.http2MaxRequests 0.9.5 or later 13.0–37.16+
trafficPolicy.connectionPool.http.maxRequestsPerConnection 0.9.5 or later 13.0–37.16+
trafficPolicy.loadBalancer.simple = ROUND_ROBIN 0.9.5 or later 13.0–37.16+
trafficPolicy.loadBalancer.simple = LEAST_CONN 0.9.5 or later 13.0–37.16+
trafficPolicy.loadBalancer.simple = RANDOM 0.9.5 or later 13.0–37.16+
trafficPolicy.loadBalancer.consistentHash.httpHeaderName 0.9.5 or later 13.0–37.16+
trafficPolicy.loadBalancer.consistentHash.httpCookie.name 0.9.5 or later 13.0–37.16+
trafficPolicy.loadBalancer.consistentHash.httpCookie.ttl  0.9.5 or later 13.0–37.16+
trafficPolicy.loadBalancer.consistentHash.useSourceIp 0.9.5 or later 13.0–37.16+
trafficPolicy.tls.mode = DISABLE 0.9.5 or later 13.0–37.16+
trafficPolicy.tls.mode = SIMPLE 0.9.5 or later 13.0–37.16+
trafficPolicy.tls.mode = MUTUAL 0.9.5 or later 13.0–37.16+
trafficPolicy.tls.mode = ISTIO_MUTUAL 0.9.5 or later 13.0–37.16+
trafficPolicy.tls.clientCertificate 0.9.5 or later 13.0–37.16+
trafficPolicy.tls.mode = MUTUAL 0.9.5 or later 13.0–37.16+
trafficPolicy.tls.privateKey 0.9.5 or later 13.0–37.16+
trafficPolicy.tls.caCertificates 0.9.5 or later 13.0–37.16+
trafficPolicy.tls.sni  0.9.5 or later 13.0–37.16+
host 0.9.5 or later 13.0–37.16+
subsets 0.9.5 or later 13.0–37.16+

Virtual Service

Using the virtual service, you can define a set of traffic routing rules to apply when a host is addressed. The following table describes the virtual service configuration settings supported by Citrix ADC with Istio.

Field xDS-adaptor version Citrix ADC Version
host 0.9.5 or later 13.0–37.16+
subset 0.9.5 or later 13.0–37.16+
port 0.9.5 or later 13.0–37.16+
http.fault.abort.percentage 0.9.5 or later 13.0–37.16+
http.fault.abort.httpStatus 0.9.5 or later 13.0–37.16+
http.match.uri 0.9.5 or later 13.0–37.16+
http.match.scheme 0.9.5 or later 13.0–37.16+
http.match.method 0.9.5 or later 13.0–37.16+
http.match.authority 0.9.5 or later 13.0–37.16+
http.match.headers 0.9.5 or later 13.0–37.16+
http.match.port 0.9.5 or later 13.0–37.16+
http.redirect.uri 0.9.5 or later 13.0–37.16+
http.redirect.authority 0.9.5 or later 13.0–37.16+
http.rewrite.uri 0.9.5 or later 13.0–37.16+
http.rewrite.authority 0.9.5 or later 13.0–37.16+
tcp.route.destination 0.9.5 or later 13.0–37.16+
tcp.route.weight 0.9.5 or later 13.0–37.16+
http.route.mirror 0.9.5 or later 13.0–47.22+

Note: http.route.mirrorPercentage will be supported in the next release.

Gateway

Gateway specification describes a set of ports that must be exposed. It also provides details about the type of protocol to use, SNI configuration for the load balancer, and so on. The following table describes the gateway configuration settings supported by Citrix ADC with Istio.

Field xDS-adaptor version Citrix ADC Version
gateway.servers.port.number 0.9.5 or later 13.0–37.16+
gateway.servers.port.protocol 0.9.5 or later 13.0–37.16+
gateway.servers.port.name 0.9.5 or later 13.0–37.16+
gateway.servers.hosts 0.9.5 or later 13.0–37.16+
gateway.servers.tls.serverCertificate 0.9.5 or later 13.0–37.16+
gateway.servers.tls.privateKey 0.9.5 or later 13.0–37.16+
gateway.servers.tls.caCertificates 0.9.5 or later 13.0–37.16+
gateway.servers.tls.credentialName 0.9.5 or later 13.0–37.16+
gateway.servers.tls.mode.SIMPLE 0.9.5 or later 13.0–37.16+
gateway.servers.tls.mode.MUTUAL 0.9.5 or later 13.0–37.16+

Service Entry

You can use the service entry to enable adding more entries into Istio’s internal service registry. Once you enable it, auto-discovered services in the mesh can access or route to these manually specified services.

Field xDS-adaptor version Citrix ADC Version
serviceentry.hosts 0.9.5 or later 13.0–37.16+
serviceentry.ports 0.9.5 or later 13.0–37.16+
serviceentry.location.MESH_EXTERNAL 0.9.5 or later 13.0–37.16+
serviceentry.location.MESH_INTERNAL 0.9.5 or later 13.0–37.16+
serviceentry.resolution.DNS 0.9.5 or later 13.0–37.16+
serviceentry.exportTo 0.9.5 or later 13.0–37.16+
serviceentry-endpoint.weight 0.9.5 or later 13.0–47.22+

Authentication Policy

Using authentication policies you can specify authentication requirements for services receiving requests in an Istio service mesh. The following table describes the authentication policy settings supported by Citrix ADC with Istio.

Field xDS-adaptor version Citrix ADC Version
jwt 0.9.5 or later 13.0–37.16+
jwt.issuer 0.9.5 or later 13.0–37.16+
jwt.audiences 0.9.5 or later 13.0–38.13+
jwt.jwksUri 0.9.5 or later 13.0–37.16+
mtls 0.9.5 or later 13.0–37.16+
mutualtls.mode.strict 0.9.5 or later 13.0–37.16+