Istio and Envoy work at the Application traffic layer (L7), allowing you to direct and load-balance traffic based on attributes like HTTP headers. This example shows how to direct traffic based on the request URI path.
In this example, myapp is the server backend for a website, used by the frontend. An engineering team has implemented a new user authentication service, auth, which now operates as a separate service.
Using an Istio match rule, we redirect any request with the /login prefix to the new auth service, and direct all other myapp requests to the existing backend.
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
name: auth-redirect
spec:
hosts:
- myapp
http:
- match:
- uri:
prefix: "/login"
route:
- destination:
host: auth
- route:
- destination:
host: myapp