Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Failing to start http3 or quic service #5005

Open
aaronschif opened this issue Jan 5, 2025 · 1 comment
Open

Failing to start http3 or quic service #5005

aaronschif opened this issue Jan 5, 2025 · 1 comment
Labels

Comments

@aaronschif
Copy link

aaronschif commented Jan 5, 2025

Description:

h3 connections cannot be made.

I have made h3 connections using nginx, so I know that this is a problem with envoy-gateway or the envoy build it is using. If I go into the config dump, I find the error messge: "Didn't find a registered implementation for 'envoy.filters.listener.tls_inspector' with type URL: 'envoy.extensions.filters.listener.tls_inspector.v3.TlsInspector'".

Repro steps:

  • Install envoy-gateway (kubectl appy -f https://github.com/envoyproxy/gateway/releases/download/v1.2.4/install.yaml)
  • Configure a gateway
  • Apply a ClientTrafficPolicy to enable h3
  • Notice that the Service now forwards UDP traffic
  • Notice that the Alt-Srv headers are present
  • Notice that the h3 connections are not being created. (podman run --net=host --rm ghcr.io/macbre/curl-http3 curl -kv --http3 https://example.com:8443)

Debugging

  • Port forward port 19000 to the envoy pod
  • Go to the config_dump
  • Go to the gateway/public/https-quic dynamic listener
  • Notice error message "Didn't find a registered implementation for 'envoy.filters.listener.tls_inspector' with type URL: 'envoy.extensions.filters.listener.tls_inspector.v3.TlsInspector'"

Note: If there are privacy concerns, sanitize the data prior to
sharing.

Environment:

Logs:

I can provide this, but they don't seem interesting.

@aaronschif
Copy link
Author

aaronschif commented Jan 5, 2025

The server_info endpoint seems to say that this extension does exist

   {
    "name": "envoy.filters.listener.tls_inspector",
    "category": "envoy.filters.listener",
    "type_descriptor": "",
    "disabled": false,
    "type_urls": [
     "envoy.extensions.filters.listener.tls_inspector.v3.TlsInspector"
    ]
   },

So I am stumped.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant