跳至內容
使用 AWS re:Post 即表示您同意 AWS re:Post 使用條款
AWS re:Postre:Post
關於 re:Post

AWS ECS Fargate, redirect traffic to sidecar proxy like envoy

0

I have a use case that I need to redirect incoming traffic and outgoing traffic to and from Fargate Task thru a sidecar proxy, to do so I need to manipulate ip table rules in the host level my questions : 1- is there any why to manipulate fargate host potable 2- is there any alternative solution to achieve the same use case (I not that ECS service connect dose the same thing, but since it doesn't support TLS, so I need to inject my own custom envoy proxy)

thank in advance for your feedback yes

主題
容器
標籤
AWS Fargate
語言
English

已提問 3 年前檢視次數 4046 次

1 個回答
0

Hi,

Using an Envoy sidecar with ECS / Fargate has been possible for a long time: see this very detailled blog post about such a setup https://aws.amazon.com/blogs/compute/setting-up-an-envoy-front-proxy-on-amazon-ecs/

But, AWS recently proposed new options to achieve same goal with Amazon ECS Service Connect enabling easy Communication between microservices. That it what you probably should analyze first: https://aws.amazon.com/blogs/aws/new-amazon-ecs-service-connect-enabling-easy-communication-between-microservices/

Hope it helps!

DIdier

專家

已回答 3 年前

  • Youez
    3 年前

    Thanks for you answer, I have read this article, my question is how to capture traffic and redirect it to upstream, let's say that I have a container that expose endpoint on port 8080, I want to inject sidecar that listen to port 15020, and route all traffic coming to the task including 8080 to localhost:15020, by doing so I force all coming traffic to go thru envoy proxy. same thing for outgoing traffic, force all traffic out of container, let's say to googole.com to got through envoy proxy. As I said AWS service connect do pretty the some thing, but it has some limitation like TLS support and static service discovery

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋，同時有助於提問者的專業成長。

相關內容