istio cni stealing and outbound on same port hangs

[aviramha]

User steals port 9000, then connects to another gRPC service on 9000- the outbound connection hangs forever (no response) but we see request being sent.

istioctl version
client version: 1.24.1
control plane version: 1.23.0
data plane version: 1.23.0 (782 proxies)

Server Version: v1.27.16-eks-7f9249a

[linear]

MBE-640 istio cni stealing and outbound on same port hangs

[DmitryDodzin]

Hey @jboykin-bread what kind of interception method are you using with istio? I'm mainly wondering what is the value for sidecar.istio.io/interceptionMode annotation if present, I just feel we might need to have stricter conditions when selecting MeshVendor

[jboykin-bread]

Hey @jboykin-bread what kind of interception method are you using with istio? I'm mainly wondering what is the value for sidecar.istio.io/interceptionMode annotation if present, I just feel we might need to have stricter conditions when selecting MeshVendor

@DmitryDodzin Sure thing! Let me know if there's anything else I can provide or do to help out.

sidecar.istio.io/interceptionMode: REDIRECT