Istio-Proxy 400 DPE http1.codec_error
Issue
- The application running in a pod within a project managed by ServiceMesh is encountering a connection issue when attempting to reach an external service endpoint that belongs to a different project, not managed by ServiceMesh or located outside the cluster.
- The error encountered is related to an incompatible SSL protocol version.
- The problem may occur immediately for a new project as well as for an existing one, as long as it is a dynamic environment where the ServiceMeshMemberRoll object contains more than one namespace and certain modifications, such as adding new namespaces, have been made
-
After enabling additional debugging for Istio-Proxy, errors are observed in the Istio-Proxy logs related to communication with the external service from another project not managed by ServiceMesh. The logs show:
400 DPE http1.codec_error
Environment
- Red Hat OpenShift Container Platform (RHOCP) 4.y
- Red Hat OpenShift Service Mesh (OSSM) 2.y
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.