Istio-Proxy 400 DPE http1.codec_error

Solution Verified - Updated -

Issue

  • The application running in a pod within a project managed by ServiceMesh is encountering a connection issue when attempting to reach an external service endpoint that belongs to a different project, not managed by ServiceMesh or located outside the cluster.
  • The error encountered is related to an incompatible SSL protocol version.
  • The problem may occur immediately for a new project as well as for an existing one, as long as it is a dynamic environment where the ServiceMeshMemberRoll object contains more than one namespace and certain modifications, such as adding new namespaces, have been made
  • After enabling additional debugging for Istio-Proxy, errors are observed in the Istio-Proxy logs related to communication with the external service from another project not managed by ServiceMesh. The logs show:

    400 DPE http1.codec_error
    

Environment

  • Red Hat OpenShift Container Platform (RHOCP) 4.y
  • Red Hat OpenShift Service Mesh (OSSM) 2.y

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content