1

I need the URI of requests that reach my myapp pods to be rewritten to remove the prefix /foo from the path. For example, a URI /foo/bar should be received as /bar. I am using a GCP load balancer that routes traffic directly to pods. I am not using Istio ingress, so Istio has no control over the load balancer's behavior.

I tried creating a VirtualService to handle the path rewrite:

apiVersion: networking.istio.io/v1beta1
kind: VirtualService
metadata:
  name: myapp-route
spec:
  hosts:
  - myapp
  http:
  - match:
    - uri:
        prefix: "/foo/"
    rewrite:
      uri: "/"
    route:
    - destination:
        host: myapp

(This may not be exactly correct as I adapted/simplified what I tried for the question.)

This works when sending requests from a pod with an Istio sidecar to the myapp service, but not from the load balancer. I can see the URI is being rewritten as it goes out from any other pod, not when it's coming into a myapp pod.

How can I get URI rewriting as an incoming rule?

Drago Rosson
  • 75
  • 4

2 Answers2

1

I found https://github.com/istio/istio/issues/22290#issuecomment-1317595537 which shows how to write a custom EnvoyFilter to do path rewriting and adapted it to my needs. I'm not at all sure if the directives to specify how and where the filter should be applied are correct, but it at least does the prefix rewrite as an inbound rule.

apiVersion: networking.istio.io/v1alpha3
kind: EnvoyFilter
metadata:
  name: myapp-rewrite-filter
spec:
  workloadSelector:
    labels:
      app: myapp
  configPatches:
    # The first patch adds the lua filter to the listener/http connection manager
  - applyTo: HTTP_FILTER
    match:
      context: SIDECAR_INBOUND
      listener:
        filterChain:
          filter:
            name: "envoy.filters.network.http_connection_manager"
            subFilter:
              name: "envoy.filters.http.router"
    patch:
      operation: INSERT_BEFORE
      value: # lua filter specification
       name: envoy.filters.http.lua
       typed_config:
          "@type": "type.googleapis.com/envoy.extensions.filters.http.lua.v3.Lua"
          inlineCode: |
            function remove_prefix(s, prefix)
              return (s:sub(0, #prefix) == prefix) and s:sub(#prefix+1) or s
            end
            function envoy_on_request(request_handle)
              local filter_name = "SIMPLE_PATH_REWRITER"
              request_handle:logDebug(filter_name .. ": Starting")

              local prefix = "/foo"
              local path = request_handle:headers():get(":path")
              local unprefixed = remove_prefix(path, prefix)

              request_handle:headers():replace(":path", unprefixed)

              local msg = filter_name .. ": Path " .. path .. " rewritten to " .. unprefixed
              request_handle:logDebug(msg)
            end
Drago Rosson
  • 75
  • 4
0

or simply use:

apiVersion: networking.istio.io/v1alpha3
kind: EnvoyFilter
metadata:
  name: url-rewrite
  namespace: istio-system
spec:
  configPatches:
    - applyTo: HTTP_ROUTE
      match:
        routeConfiguration:
          vhost:
            name: "inbound|http|8080"
      patch:
        operation: MERGE
        value:
          route:
            # See https://www.envoyproxy.io/docs/envoy/latest/api-v3/type/matcher/v3/regex.proto
            regex_rewrite:
              pattern:
                google_re2:
                  max_program_size: 100
                # each expr inside () is considered a regex numbered group. groups can be used in substitution using \\GROUP_INDEX
                regex: "^/api/bad/(.+)/(a|ca|b)"
              substitution: "/api/good/p/any/\\1/\\2"
  workloadSelector:
    labels:
      app: myapp
taitelman
  • 612
  • 5
  • 9