envoyproxy / envoyproxy/envoy

mobile: stats cluster has empty SNI

Open
#27,462 7 comments 0 reactions 0 assignees View on GitHub
bug mobile no stalebot stale
Dominant language
C++
Stars
28.9k
Forks
5.6k
Avg merge
1d 22h
Merged PRs (30d)
430

Description

Tracking an issue found during enabling plaform-based cert validator for stats cluster by Lyft.

If `addGrpcStatsDomain()` is used, the connection to the gRPC stats server has empty SNI during the TLS handshake.

Fix: configuring `auto_sni` in typed_extension_protocol_options config won't work as the Host header of an HTTP request doesn't have a valid DNS domain name. So a potential fix would need to set `sni` with the specified DNS domain in `UpstreamTlsContext` config.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.