Proxy with service mesh
As shown in the diagram below, User A
and User B
use the kubevpn proxy
command to proxy the same service authors
respectively:
- User A:
kubevpn proxy deployment/authors --headers user=A
- User B:
kubevpn proxy deployment/authors --headers user=B
When the authors
service in the cluster receives traffic:
- Traffic with
user: A
in theHTTP header
will hitUser A
's local computer. - Traffic with
user: B
in theHTTP header
will hitUser B
's local computer. - Unmatched traffic in the
HTTP header
will hit the originalauthors
service in the cluster.
The principle is to use envoy
as the data plane and implement a control plane for envoy
.