Istio-ingressgateway - 容器端口监听问题咨询

操作系统信息
虚拟机,Centos7.9,4C/8G

Kubernetes 版本 v1.22.10

istio : 1.11

KubeSphere版本信息  v3.3.0
离线安装; 在已有K8s上安装;

问题:
部署 istio-1.11,开启istio-ingressgateway 后,查看svc 有映射80:8080端口的配置。 实际在容器中查看查看监听的端口,并没有监听8080端口 。 咨询一下这状态正常吗? 附上日志文件..

2022-10-19T07:03:20.858529Z info Initialization took 1.023750137s

2022-10-19T07:03:20.858567Z info Envoy proxy is ready

2022-10-19T07:33:39.894271Z warning envoy config StreamAggregatedResources gRPC config stream closed: 14, closing transport due to: connection error: desc = “error reading from server: EOF”, received prior goaway: code: NO_ERROR, debug data:

2022-10-19T07:33:40.223570Z info xdsproxy connected to upstream XDS server: istiod-1-11-2.istio-system.svc:15012

2022-10-19T08:01:01.901888Z warning envoy config StreamAggregatedResources gRPC config stream closed: 14, closing transport due to: connection error: desc = “error reading from server: EOF”, received prior goaway: code: NO_ERROR, debug data:

2022-10-19T08:01:02.323165Z info xdsproxy connected to upstream XDS server: istiod-1-11-2.istio-system.svc:15012

2022-10-19T08:33:52.463304Z warning envoy config StreamAggregatedResources gRPC config stream closed: 14, closing transport due to: connection error: desc = “error reading from server: EOF”, received prior goaway: code: NO_ERROR, debug data:

2022-10-19T08:33:52.947060Z info xdsproxy connected to upstream XDS server: istiod-1-11-2.istio-system.svc:15012

    这样的状态不太正常。没有监听 8080 端口是正常的,80:8080 这是容器与服务的端口映射,但会监听 8080 端口映射的 nodeport 端口。比如对应 nodeport 端口是 32493 查到的会是大概是这样的。
    $ netstat -tunlp |grep 32493
    tcp 0 0 0.0.0.0:32493 0.0.0.0:* LISTEN 7412/kube-proxy

    chengjun

    1 年 后