Having 502 or https redirect loop (hard-mesh-time)

[msaustral]

Having 502 or https redirect loop (hard-mesh-time)

[msaustral]

Hi @jlbutler we just hangup with support and finally made it.

For anybody having this issue, it was the application that was causing the redirecting loop, this was because the envoy gateway by default change the request hostname to the namespace's hostname once the traffic gets inside the namespace.

To get to this issue we started by using a plain index.html, then php info and then the full app.

We manage to solve the issue using a new virtual gateway route option that goes on the action:

apiVersion: appmesh.k8s.aws/v1beta2
kind: GatewayRoute
metadata:
  name: desuper-cl-nginx-gr
  namespace: desuper-cl
spec:
  httpRoute:
    match:
      prefix: "/"
    action:
      rewrite: #****THIS LINE****
        hostname: #****THIS LINE****
          defaultTargetHostname: DISABLED #****THIS LINE****
      target:
        virtualService:
          virtualServiceRef: 
            name: nginx-srv

here is the documentation

https://aws.github.io/aws-app-mesh-controller-for-k8s/reference/api_spec/#appmesh.k8s.aws/v1beta2.GatewayRouteHostnameRewrite

IMPORTANT: the documentation has an error the value must be DISABLED with D at the end

It was difficult, it took a while, but it worth it, all that we have learn these months is priceless.

We are really thank you for all the help, I forgot to get the AWS team (5) names to thank them here, great team!

Have all a good weekend!!

[cgchinmay]

Hi @jlbutler we just hangup with support and finally made it.

For anybody having this issue, it was the application that was causing the redirecting loop, this was because the envoy gateway by default change the request hostname to the namespace's hostname once the traffic gets inside the namespace.

To get to this issue we started by using a plain index.html, then php info and then the full app.

We manage to solve the issue using a new virtual gateway route option that goes on the action:

apiVersion: appmesh.k8s.aws/v1beta2
kind: GatewayRoute
metadata:
  name: desuper-cl-nginx-gr
  namespace: desuper-cl
spec:
  httpRoute:
    match:
      prefix: "/"
    action:
      rewrite: #****THIS LINE****
        hostname: #****THIS LINE****
          defaultTargetHostname: DISABLED #****THIS LINE****
      target:
        virtualService:
          virtualServiceRef: 
            name: nginx-srv

here is the documentation

https://aws.github.io/aws-app-mesh-controller-for-k8s/reference/api_spec/#appmesh.k8s.aws/v1beta2.GatewayRouteHostnameRewrite

IMPORTANT: the documentation has an error the value must be DISABLED with D at the end

It was difficult, it took a while, but it worth it, all that we have learn these months is priceless.

We are really thank you for all the help, I forgot to get the AWS team (5) names to thank them here, great team!

Have all a good weekend!!

Updated the documentation with Correct ENUMs

(Appears on: GrpcGatewayRouteRewrite, HTTPGatewayRouteRewrite)

GatewayRouteHostnameRewrite refers to https://docs.aws.amazon.com/app-mesh/latest/APIReference/API_GatewayRouteHostnameRewrite.html Accepted values: ENABLED or DISABLED for default behavior of Hostname rewrite

Glad to see that new feature for Hostname came to use in a timely manner. Closing this issue now.

[jlbutler]

@msaustral I apologize for your experience so far in getting resolution on this issue. I'll follow up internally and see if I can help drive things.

[msaustral]

Hi @jlbutler thank you for your time