From b7de0f82057182a98da16c5131811fdea8483eeb Mon Sep 17 00:00:00 2001 From: savagebidoof Date: Sat, 1 Jul 2023 15:54:38 +0200 Subject: [PATCH] Sorted some folders. Quality improvements for 01-Service_Entry --- .../Deployment.yaml | 0 .../Gateway.yaml | 0 .../README.md | 0 .../Service.yaml | 0 .../VirtualService.yaml | 0 .../Deployment.yaml | 0 .../Gateway.yaml | 0 .../README.md | 2 +- .../Service.yaml | 0 .../VirtualService.yaml | 0 .../Deployment.yaml | 0 .../Gateway.yaml | 0 .../README.md | 2 +- .../Service.yaml | 0 .../VirtualService.yaml | 0 .../{10-TCP-FORWARDING => 05-TCP-FORWARDING}/README.md | 2 +- .../deployment.yaml | 0 .../{10-TCP-FORWARDING => 05-TCP-FORWARDING}/gateway.yaml | 0 .../{11-TLS-PASSTHROUGH => 06-TLS-PASSTHROUGH}/README.md | 2 +- .../deployment.yaml | 0 .../gateway.yaml | 0 .../Gateway.yaml | 0 .../README.md | 2 +- .../{05-Service_Entry => 01-Service_Entry}/Gateway.yaml | 0 .../{05-Service_Entry => 01-Service_Entry}/README.md | 7 ++++--- .../ServiceEntry.yaml | 0 .../VirtualService.yaml | 0 .../{09-HTTPS-backend => 02-HTTPS-backend}/README.md | 2 +- .../authentication.yaml | 0 .../{09-HTTPS-backend => 02-HTTPS-backend}/deployment.yaml | 0 .../{09-HTTPS-backend => 02-HTTPS-backend}/gateway.yaml | 0 10-mTLS_PeerAuthentication/01-disable-mTLS/README.md | 2 +- 90-MixConfigs/06-HTTPS-Gateway_Service_Entry/README.md | 6 +++--- 33 files changed, 14 insertions(+), 13 deletions(-) rename 03-Gateway_Ingress/{07-HTTPS-Gateway-Simple-TLS => 03-HTTPS-Gateway-Simple-TLS}/Deployment.yaml (100%) rename 03-Gateway_Ingress/{07-HTTPS-Gateway-Simple-TLS => 03-HTTPS-Gateway-Simple-TLS}/Gateway.yaml (100%) rename 03-Gateway_Ingress/{07-HTTPS-Gateway-Simple-TLS => 03-HTTPS-Gateway-Simple-TLS}/README.md (100%) rename 03-Gateway_Ingress/{07-HTTPS-Gateway-Simple-TLS => 03-HTTPS-Gateway-Simple-TLS}/Service.yaml (100%) rename 03-Gateway_Ingress/{07-HTTPS-Gateway-Simple-TLS => 03-HTTPS-Gateway-Simple-TLS}/VirtualService.yaml (100%) rename 03-Gateway_Ingress/{08a-HTTPS-min-TLS-version => 04a-HTTPS-min-TLS-version}/Deployment.yaml (100%) rename 03-Gateway_Ingress/{08a-HTTPS-min-TLS-version => 04a-HTTPS-min-TLS-version}/Gateway.yaml (100%) rename 03-Gateway_Ingress/{08a-HTTPS-min-TLS-version => 04a-HTTPS-min-TLS-version}/README.md (98%) rename 03-Gateway_Ingress/{08a-HTTPS-min-TLS-version => 04a-HTTPS-min-TLS-version}/Service.yaml (100%) rename 03-Gateway_Ingress/{08a-HTTPS-min-TLS-version => 04a-HTTPS-min-TLS-version}/VirtualService.yaml (100%) rename 03-Gateway_Ingress/{08b-HTTPS-max-TLS-version => 04b-HTTPS-max-TLS-version}/Deployment.yaml (100%) rename 03-Gateway_Ingress/{08b-HTTPS-max-TLS-version => 04b-HTTPS-max-TLS-version}/Gateway.yaml (100%) rename 03-Gateway_Ingress/{08b-HTTPS-max-TLS-version => 04b-HTTPS-max-TLS-version}/README.md (98%) rename 03-Gateway_Ingress/{08b-HTTPS-max-TLS-version => 04b-HTTPS-max-TLS-version}/Service.yaml (100%) rename 03-Gateway_Ingress/{08b-HTTPS-max-TLS-version => 04b-HTTPS-max-TLS-version}/VirtualService.yaml (100%) rename 03-Gateway_Ingress/{10-TCP-FORWARDING => 05-TCP-FORWARDING}/README.md (98%) rename 03-Gateway_Ingress/{10-TCP-FORWARDING => 05-TCP-FORWARDING}/deployment.yaml (100%) rename 03-Gateway_Ingress/{10-TCP-FORWARDING => 05-TCP-FORWARDING}/gateway.yaml (100%) rename 03-Gateway_Ingress/{11-TLS-PASSTHROUGH => 06-TLS-PASSTHROUGH}/README.md (99%) rename 03-Gateway_Ingress/{11-TLS-PASSTHROUGH => 06-TLS-PASSTHROUGH}/deployment.yaml (100%) rename 03-Gateway_Ingress/{11-TLS-PASSTHROUGH => 06-TLS-PASSTHROUGH}/gateway.yaml (100%) rename 03-Gateway_Ingress/{12-HTTP-to-HTTPS-traffic-redirect => 07-HTTP-to-HTTPS-traffic-redirect}/Gateway.yaml (100%) rename 03-Gateway_Ingress/{12-HTTP-to-HTTPS-traffic-redirect => 07-HTTP-to-HTTPS-traffic-redirect}/README.md (98%) rename 04-Backends/{05-Service_Entry => 01-Service_Entry}/Gateway.yaml (100%) rename 04-Backends/{05-Service_Entry => 01-Service_Entry}/README.md (90%) rename 04-Backends/{05-Service_Entry => 01-Service_Entry}/ServiceEntry.yaml (100%) rename 04-Backends/{05-Service_Entry => 01-Service_Entry}/VirtualService.yaml (100%) rename 04-Backends/{09-HTTPS-backend => 02-HTTPS-backend}/README.md (99%) rename 04-Backends/{09-HTTPS-backend => 02-HTTPS-backend}/authentication.yaml (100%) rename 04-Backends/{09-HTTPS-backend => 02-HTTPS-backend}/deployment.yaml (100%) rename 04-Backends/{09-HTTPS-backend => 02-HTTPS-backend}/gateway.yaml (100%) diff --git a/03-Gateway_Ingress/07-HTTPS-Gateway-Simple-TLS/Deployment.yaml b/03-Gateway_Ingress/03-HTTPS-Gateway-Simple-TLS/Deployment.yaml similarity index 100% rename from 03-Gateway_Ingress/07-HTTPS-Gateway-Simple-TLS/Deployment.yaml rename to 03-Gateway_Ingress/03-HTTPS-Gateway-Simple-TLS/Deployment.yaml diff --git a/03-Gateway_Ingress/07-HTTPS-Gateway-Simple-TLS/Gateway.yaml b/03-Gateway_Ingress/03-HTTPS-Gateway-Simple-TLS/Gateway.yaml similarity index 100% rename from 03-Gateway_Ingress/07-HTTPS-Gateway-Simple-TLS/Gateway.yaml rename to 03-Gateway_Ingress/03-HTTPS-Gateway-Simple-TLS/Gateway.yaml diff --git a/03-Gateway_Ingress/07-HTTPS-Gateway-Simple-TLS/README.md b/03-Gateway_Ingress/03-HTTPS-Gateway-Simple-TLS/README.md similarity index 100% rename from 03-Gateway_Ingress/07-HTTPS-Gateway-Simple-TLS/README.md rename to 03-Gateway_Ingress/03-HTTPS-Gateway-Simple-TLS/README.md diff --git a/03-Gateway_Ingress/07-HTTPS-Gateway-Simple-TLS/Service.yaml b/03-Gateway_Ingress/03-HTTPS-Gateway-Simple-TLS/Service.yaml similarity index 100% rename from 03-Gateway_Ingress/07-HTTPS-Gateway-Simple-TLS/Service.yaml rename to 03-Gateway_Ingress/03-HTTPS-Gateway-Simple-TLS/Service.yaml diff --git a/03-Gateway_Ingress/07-HTTPS-Gateway-Simple-TLS/VirtualService.yaml b/03-Gateway_Ingress/03-HTTPS-Gateway-Simple-TLS/VirtualService.yaml similarity index 100% rename from 03-Gateway_Ingress/07-HTTPS-Gateway-Simple-TLS/VirtualService.yaml rename to 03-Gateway_Ingress/03-HTTPS-Gateway-Simple-TLS/VirtualService.yaml diff --git a/03-Gateway_Ingress/08a-HTTPS-min-TLS-version/Deployment.yaml b/03-Gateway_Ingress/04a-HTTPS-min-TLS-version/Deployment.yaml similarity index 100% rename from 03-Gateway_Ingress/08a-HTTPS-min-TLS-version/Deployment.yaml rename to 03-Gateway_Ingress/04a-HTTPS-min-TLS-version/Deployment.yaml diff --git a/03-Gateway_Ingress/08a-HTTPS-min-TLS-version/Gateway.yaml b/03-Gateway_Ingress/04a-HTTPS-min-TLS-version/Gateway.yaml similarity index 100% rename from 03-Gateway_Ingress/08a-HTTPS-min-TLS-version/Gateway.yaml rename to 03-Gateway_Ingress/04a-HTTPS-min-TLS-version/Gateway.yaml diff --git a/03-Gateway_Ingress/08a-HTTPS-min-TLS-version/README.md b/03-Gateway_Ingress/04a-HTTPS-min-TLS-version/README.md similarity index 98% rename from 03-Gateway_Ingress/08a-HTTPS-min-TLS-version/README.md rename to 03-Gateway_Ingress/04a-HTTPS-min-TLS-version/README.md index 76708e4..74374f7 100644 --- a/03-Gateway_Ingress/08a-HTTPS-min-TLS-version/README.md +++ b/03-Gateway_Ingress/04a-HTTPS-min-TLS-version/README.md @@ -5,7 +5,7 @@ include_toc: true # Based on -- [07-HTTPS-Gateway-Simple-TLS](../07-HTTPS-Gateway-Simple-TLS) +- [07-HTTPS-Gateway-Simple-TLS](../03-HTTPS-Gateway-Simple-TLS) # Description diff --git a/03-Gateway_Ingress/08a-HTTPS-min-TLS-version/Service.yaml b/03-Gateway_Ingress/04a-HTTPS-min-TLS-version/Service.yaml similarity index 100% rename from 03-Gateway_Ingress/08a-HTTPS-min-TLS-version/Service.yaml rename to 03-Gateway_Ingress/04a-HTTPS-min-TLS-version/Service.yaml diff --git a/03-Gateway_Ingress/08a-HTTPS-min-TLS-version/VirtualService.yaml b/03-Gateway_Ingress/04a-HTTPS-min-TLS-version/VirtualService.yaml similarity index 100% rename from 03-Gateway_Ingress/08a-HTTPS-min-TLS-version/VirtualService.yaml rename to 03-Gateway_Ingress/04a-HTTPS-min-TLS-version/VirtualService.yaml diff --git a/03-Gateway_Ingress/08b-HTTPS-max-TLS-version/Deployment.yaml b/03-Gateway_Ingress/04b-HTTPS-max-TLS-version/Deployment.yaml similarity index 100% rename from 03-Gateway_Ingress/08b-HTTPS-max-TLS-version/Deployment.yaml rename to 03-Gateway_Ingress/04b-HTTPS-max-TLS-version/Deployment.yaml diff --git a/03-Gateway_Ingress/08b-HTTPS-max-TLS-version/Gateway.yaml b/03-Gateway_Ingress/04b-HTTPS-max-TLS-version/Gateway.yaml similarity index 100% rename from 03-Gateway_Ingress/08b-HTTPS-max-TLS-version/Gateway.yaml rename to 03-Gateway_Ingress/04b-HTTPS-max-TLS-version/Gateway.yaml diff --git a/03-Gateway_Ingress/08b-HTTPS-max-TLS-version/README.md b/03-Gateway_Ingress/04b-HTTPS-max-TLS-version/README.md similarity index 98% rename from 03-Gateway_Ingress/08b-HTTPS-max-TLS-version/README.md rename to 03-Gateway_Ingress/04b-HTTPS-max-TLS-version/README.md index e3833f4..ae1d63d 100644 --- a/03-Gateway_Ingress/08b-HTTPS-max-TLS-version/README.md +++ b/03-Gateway_Ingress/04b-HTTPS-max-TLS-version/README.md @@ -5,7 +5,7 @@ include_toc: true # Based on -- [08a-HTTPS-min-TLS-version](../08a-HTTPS-min-TLS-version) +- [08a-HTTPS-min-TLS-version](../04a-HTTPS-min-TLS-version) # Description diff --git a/03-Gateway_Ingress/08b-HTTPS-max-TLS-version/Service.yaml b/03-Gateway_Ingress/04b-HTTPS-max-TLS-version/Service.yaml similarity index 100% rename from 03-Gateway_Ingress/08b-HTTPS-max-TLS-version/Service.yaml rename to 03-Gateway_Ingress/04b-HTTPS-max-TLS-version/Service.yaml diff --git a/03-Gateway_Ingress/08b-HTTPS-max-TLS-version/VirtualService.yaml b/03-Gateway_Ingress/04b-HTTPS-max-TLS-version/VirtualService.yaml similarity index 100% rename from 03-Gateway_Ingress/08b-HTTPS-max-TLS-version/VirtualService.yaml rename to 03-Gateway_Ingress/04b-HTTPS-max-TLS-version/VirtualService.yaml diff --git a/03-Gateway_Ingress/10-TCP-FORWARDING/README.md b/03-Gateway_Ingress/05-TCP-FORWARDING/README.md similarity index 98% rename from 03-Gateway_Ingress/10-TCP-FORWARDING/README.md rename to 03-Gateway_Ingress/05-TCP-FORWARDING/README.md index 9b250eb..34d1ce3 100644 --- a/03-Gateway_Ingress/10-TCP-FORWARDING/README.md +++ b/03-Gateway_Ingress/05-TCP-FORWARDING/README.md @@ -5,7 +5,7 @@ include_toc: true # Based on -- [08a-HTTPS-min-TLS-version](../08a-HTTPS-min-TLS-version) +- [08a-HTTPS-min-TLS-version](../04a-HTTPS-min-TLS-version) # Description diff --git a/03-Gateway_Ingress/10-TCP-FORWARDING/deployment.yaml b/03-Gateway_Ingress/05-TCP-FORWARDING/deployment.yaml similarity index 100% rename from 03-Gateway_Ingress/10-TCP-FORWARDING/deployment.yaml rename to 03-Gateway_Ingress/05-TCP-FORWARDING/deployment.yaml diff --git a/03-Gateway_Ingress/10-TCP-FORWARDING/gateway.yaml b/03-Gateway_Ingress/05-TCP-FORWARDING/gateway.yaml similarity index 100% rename from 03-Gateway_Ingress/10-TCP-FORWARDING/gateway.yaml rename to 03-Gateway_Ingress/05-TCP-FORWARDING/gateway.yaml diff --git a/03-Gateway_Ingress/11-TLS-PASSTHROUGH/README.md b/03-Gateway_Ingress/06-TLS-PASSTHROUGH/README.md similarity index 99% rename from 03-Gateway_Ingress/11-TLS-PASSTHROUGH/README.md rename to 03-Gateway_Ingress/06-TLS-PASSTHROUGH/README.md index c7b16d4..1172b82 100644 --- a/03-Gateway_Ingress/11-TLS-PASSTHROUGH/README.md +++ b/03-Gateway_Ingress/06-TLS-PASSTHROUGH/README.md @@ -5,7 +5,7 @@ include_toc: true # Based on -- [10-TCP-FORWARDING](../10-TCP-FORWARDING) +- [10-TCP-FORWARDING](../05-TCP-FORWARDING) # Description diff --git a/03-Gateway_Ingress/11-TLS-PASSTHROUGH/deployment.yaml b/03-Gateway_Ingress/06-TLS-PASSTHROUGH/deployment.yaml similarity index 100% rename from 03-Gateway_Ingress/11-TLS-PASSTHROUGH/deployment.yaml rename to 03-Gateway_Ingress/06-TLS-PASSTHROUGH/deployment.yaml diff --git a/03-Gateway_Ingress/11-TLS-PASSTHROUGH/gateway.yaml b/03-Gateway_Ingress/06-TLS-PASSTHROUGH/gateway.yaml similarity index 100% rename from 03-Gateway_Ingress/11-TLS-PASSTHROUGH/gateway.yaml rename to 03-Gateway_Ingress/06-TLS-PASSTHROUGH/gateway.yaml diff --git a/03-Gateway_Ingress/12-HTTP-to-HTTPS-traffic-redirect/Gateway.yaml b/03-Gateway_Ingress/07-HTTP-to-HTTPS-traffic-redirect/Gateway.yaml similarity index 100% rename from 03-Gateway_Ingress/12-HTTP-to-HTTPS-traffic-redirect/Gateway.yaml rename to 03-Gateway_Ingress/07-HTTP-to-HTTPS-traffic-redirect/Gateway.yaml diff --git a/03-Gateway_Ingress/12-HTTP-to-HTTPS-traffic-redirect/README.md b/03-Gateway_Ingress/07-HTTP-to-HTTPS-traffic-redirect/README.md similarity index 98% rename from 03-Gateway_Ingress/12-HTTP-to-HTTPS-traffic-redirect/README.md rename to 03-Gateway_Ingress/07-HTTP-to-HTTPS-traffic-redirect/README.md index fc7e371..2eb8e66 100644 --- a/03-Gateway_Ingress/12-HTTP-to-HTTPS-traffic-redirect/README.md +++ b/03-Gateway_Ingress/07-HTTP-to-HTTPS-traffic-redirect/README.md @@ -5,7 +5,7 @@ include_toc: true # Based on -- [07-HTTPS-Gateway-Simple-TLS](../07-HTTPS-Gateway-Simple-TLS) +- [07-HTTPS-Gateway-Simple-TLS](../03-HTTPS-Gateway-Simple-TLS) # Description diff --git a/04-Backends/05-Service_Entry/Gateway.yaml b/04-Backends/01-Service_Entry/Gateway.yaml similarity index 100% rename from 04-Backends/05-Service_Entry/Gateway.yaml rename to 04-Backends/01-Service_Entry/Gateway.yaml diff --git a/04-Backends/05-Service_Entry/README.md b/04-Backends/01-Service_Entry/README.md similarity index 90% rename from 04-Backends/05-Service_Entry/README.md rename to 04-Backends/01-Service_Entry/README.md index cadf166..a9a340f 100755 --- a/04-Backends/05-Service_Entry/README.md +++ b/04-Backends/01-Service_Entry/README.md @@ -143,7 +143,7 @@ virtualservice.networking.istio.io/helloworld-vs created ### Get LB IP ```shell -$ kubectl get svc -l istio=ingressgateway -A +kubectl get svc -l istio=ingressgateway -A ``` ```text NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE @@ -177,14 +177,15 @@ curl 192.168.1.50/external We don't receive any output. -This could be due, even if we resolve the destination IP for the URL `info.cern.ch`, the destination might have a Reverse Proxy or any other ingress resource that could condition handling this request. +Even if we resolve the destination IP for the URL `info.cern.ch`, the destination might have a **Reverse Proxy** or any other ingress resource that could condition handling this request. -Due to the `HOST` field not being modified after we set the request, it might not be able to pass the filtering set, weather it is security wise, for example, requiring such field to allow the request; or it being a routing condition, which due not having this field specified, it's not able to route the request towards the destination desired. +Due to the `HOST` field not being modified after we set the request, it might not be able to pass the filtering rules set on the destination server, on this scenario being the service responsible for receiving requests with the URL `info.cern.ch`. ```shell curl 192.168.1.50/external-noh ``` ```text + ``` ## Cleanup diff --git a/04-Backends/05-Service_Entry/ServiceEntry.yaml b/04-Backends/01-Service_Entry/ServiceEntry.yaml similarity index 100% rename from 04-Backends/05-Service_Entry/ServiceEntry.yaml rename to 04-Backends/01-Service_Entry/ServiceEntry.yaml diff --git a/04-Backends/05-Service_Entry/VirtualService.yaml b/04-Backends/01-Service_Entry/VirtualService.yaml similarity index 100% rename from 04-Backends/05-Service_Entry/VirtualService.yaml rename to 04-Backends/01-Service_Entry/VirtualService.yaml diff --git a/04-Backends/09-HTTPS-backend/README.md b/04-Backends/02-HTTPS-backend/README.md similarity index 99% rename from 04-Backends/09-HTTPS-backend/README.md rename to 04-Backends/02-HTTPS-backend/README.md index 8eefa08..901a345 100644 --- a/04-Backends/09-HTTPS-backend/README.md +++ b/04-Backends/02-HTTPS-backend/README.md @@ -5,7 +5,7 @@ include_toc: true # Based on -- [08a-HTTPS-min-TLS-version](../../03-Gateway_Ingress/08a-HTTPS-min-TLS-version) +- [08a-HTTPS-min-TLS-version](../../03-Gateway_Ingress/04a-HTTPS-min-TLS-version) # Description diff --git a/04-Backends/09-HTTPS-backend/authentication.yaml b/04-Backends/02-HTTPS-backend/authentication.yaml similarity index 100% rename from 04-Backends/09-HTTPS-backend/authentication.yaml rename to 04-Backends/02-HTTPS-backend/authentication.yaml diff --git a/04-Backends/09-HTTPS-backend/deployment.yaml b/04-Backends/02-HTTPS-backend/deployment.yaml similarity index 100% rename from 04-Backends/09-HTTPS-backend/deployment.yaml rename to 04-Backends/02-HTTPS-backend/deployment.yaml diff --git a/04-Backends/09-HTTPS-backend/gateway.yaml b/04-Backends/02-HTTPS-backend/gateway.yaml similarity index 100% rename from 04-Backends/09-HTTPS-backend/gateway.yaml rename to 04-Backends/02-HTTPS-backend/gateway.yaml diff --git a/10-mTLS_PeerAuthentication/01-disable-mTLS/README.md b/10-mTLS_PeerAuthentication/01-disable-mTLS/README.md index 52cbaf7..e7a94c7 100644 --- a/10-mTLS_PeerAuthentication/01-disable-mTLS/README.md +++ b/10-mTLS_PeerAuthentication/01-disable-mTLS/README.md @@ -558,7 +558,7 @@ On this scenario, we met a fatal error, not allowing us to access the service, u From my understanding, not only from this interaction, but from investigating through Istio forums (yet I don't have the link handy, so take this words with some grains of salt), **the traffic cannot be double terminated**, for such if we have an `HTTPS` backend, we might require to disable `mTLS` in order to communicate with it. We also would need to set a [Destination Rule like we did further above](#destination-rule), to specify that the traffic must be terminated with the backend (`tls.mode: STRICT`). -Yet this depends on which would be our architecture, due also being able to set up [TLS Passthrough](../../03-Gateway_Ingress/11-TLS-PASSTHROUGH), or use a [TCP Forwarding](../../03-Gateway_Ingress/10-TCP-FORWARDING). +Yet this depends on which would be our architecture, due also being able to set up [TLS Passthrough](../../03-Gateway_Ingress/06-TLS-PASSTHROUGH), or use a [TCP Forwarding](../../03-Gateway_Ingress/05-TCP-FORWARDING). ```shell curl 192.168.1.50/https-mTLS diff --git a/90-MixConfigs/06-HTTPS-Gateway_Service_Entry/README.md b/90-MixConfigs/06-HTTPS-Gateway_Service_Entry/README.md index 3a1f688..c88f6df 100755 --- a/90-MixConfigs/06-HTTPS-Gateway_Service_Entry/README.md +++ b/90-MixConfigs/06-HTTPS-Gateway_Service_Entry/README.md @@ -8,7 +8,7 @@ The page used as a destination is my own [GitHub page](https://github.com/). # Based on -- [05-hello_world_1_Service_Entry](../../04-Backends/05-Service_Entry) +- [05-hello_world_1_Service_Entry](../../04-Backends/01-Service_Entry) # Configuration @@ -75,7 +75,7 @@ The path `/external` will forward the request towards the destination URL `githu Highlight that the destination is `github.com`, which is the same as the contents set on the field `host` from the [ServiceEntry resource configured above](#serviceentry). -As seen [in the previous example, where the host that didn't have the `HOST` header wasn't able to receive a response by the destination](../../04-Backends/05-Service_Entry/#external-noh), we configured the `HOST` header to match the URL from the external service. +As seen [in the previous example, where the host that didn't have the `HOST` header wasn't able to receive a response by the destination](../../04-Backends/01-Service_Entry/#external-noh), we configured the `HOST` header to match the URL from the external service. ```yaml apiVersion: networking.istio.io/v1alpha3 @@ -108,7 +108,7 @@ spec: ## DestinationRule -As seen in the example [02-Traffic_management/09-HTTPS-backend](../../04-Backends/09-HTTPS-backend), where we configure Istio to use an `HTTPS` backend, the same configuration is applied on this case (yes, I am aware that a `ServiceEntry` is also a backend). +As seen in the example [02-Traffic_management/09-HTTPS-backend](../../04-Backends/02-HTTPS-backend), where we configure Istio to use an `HTTPS` backend, the same configuration is applied on this case (yes, I am aware that a `ServiceEntry` is also a backend). For such, we deploy a `DestinationRule` setting to expect to terminate the TLS traffic, for the traffic with resource destination `github.com`, and port `8443`, which matches the settings set in our [ServiceEntry](#serviceentry) deployed.