AKS Istio Service Mesh and Ingress Controller(Istio gateway or NGINX)

pike liang 20 Reputation points
2024-10-19T01:04:20.9733333+00:00

Hi,

We are implementing AKS with service mesh enabled and we also want to support app routing in two ingress controller in different subnets, can you help with the following questions?

  1. Can Azure Istio addon Service Mesh work together with NGINX ingress controller?
  2. Can Azure Istio addon ingress gateway support multiple intranet gateway with different subnets?

Thanks a lot!

Azure Kubernetes Service
Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
2,461 questions
0 comments No comments
{count} votes

Accepted answer
  1. Anusree Nashetty 4,785 Reputation points Microsoft External Staff Moderator
    2024-10-21T06:53:27.02+00:00

    Hi pike liang,

    Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.

    1.Can Azure Istio addon Service Mesh work together with NGINX ingress controller?

    Yes, the Azure Istio Service Mesh add-on can operate alongside the NGINX ingress controller on Azure Kubernetes Service (AKS). They manage traffic in distinct ways: Istio enhances service-to-service communication, security, and observability, whereas the NGINX ingress controller is tasked with routing HTTP/S traffic into your cluster.

    2.Can Azure Istio addon ingress gateway support multiple intranet gateway with different subnets?

    The Azure Istio add-on for AKS does have specific limitations regarding the configuration of ingress gateways. While Istio itself can be configured to use multiple ingress gateways for different traffic patterns or subnets in a standard deployment, the Azure-managed Istio add-on currently does not support deploying multiple internal ingress gateways in different subnets.

    If you need to set up multiple ingress controllers in different subnets, you might need to manage Istio manually instead of using the Azure Istio add-on, as the add-on is optimized for simpler scenarios and does not yet support complex multi-gateway configurations.

    For more information, please look into:

    https://docs.nginx.com/nginx-ingress-controller/tutorials/nginx-ingress-istio/

    https://learn.microsoft.com/en-us/azure/aks/istio-deploy-ingress?source=recommendations

    https://learn.microsoft.com/en-us/azure/aks/app-routing

    https://istio.io/latest/docs/tasks/traffic-management/ingress/ingress-control/

    If you have any further queries, please do let us know.

    If the answer is helpful, please click "Accept Answer" and "Upvote it" as it can be helpful to others in the community. User's image

    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.