Skip to content

Update/old ambient redirect blog #17016

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Stevenjin8 wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Update/old ambient redirect blog #17016

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions content/en/blog/2023/traffic-for-ambient-and-sidecar/index.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,11 @@ attribution: "Steve Zhang (Intel), John Howard (Google), Yuxing Zeng(Alibaba), P
keywords: [traffic,ambient,sidecar,coexistence]
---

{{< warning >}}
Ambient redirection no longer configures the host network namespace as of Istio 1.21.
Copy link
Contributor

@sridhargaddam sridhargaddam Dec 2, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Personally, I think we should add a note explaining that the approach in this blog post no longer applies to the current Istio release, since Ambient no longer uses GENEVE tunnels.

Copy link
Contributor

@sridhargaddam sridhargaddam Dec 2, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

... no longer configures the host network namespace as of Istio 1.21.

FWIW, in ambient mode, we do program some iptable/nftable rules on the host network namespace to support kubelet health-checks - https://github.com/istio/istio/tree/master/tools/istio-nftables/pkg#ambient-mode-specific-details

See [Ztunnel traffic redirection](/docs/ambient/architecture/traffic-redirection/) for details on the new approach.
{{< /warning >}}

There are 2 deployment modes for Istio: ambient mode and sidecar mode. The former is still on the way, the latter is the classic one. Therefore, the coexistence of ambient mode and sidecar mode should be a normal deployment form and the reason why this blog may be helpful for Istio users.

## Background
Expand Down