Skip to content

How to confirm pod port secured by ztunnel? #52014

Answered by howardjohn
kminder asked this question in Q&A
Discussion options

You must be logged in to vote

There are a few ways:

  1. the TLS is on port 15008. Presence of TLS port does not prove non-mtls is denied though
  2. Runtime inspection of actual traffic: access logs indicate if mtls was used. Tcpdump could as well, though less ergonomic
  3. Attempt to access outside the mesh like you did
  4. Policy inspection to show the config state: istioctl zc

Replies: 1 comment 3 replies

Comment options

You must be logged in to vote
3 replies
@kminder
Comment options

@howardjohn
Comment options

@kminder
Comment options

Answer selected by kminder
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Category
Q&A
Labels
None yet
2 participants