Path-Based Routing

Istio and Envoy work at the Application traffic layer (L7), allowing you to direct and load-balance traffic based on attributes like HTTP headers. This example shows how to direct traffic based on the request URI path.

In this example, myapp is the server backend for a website, used by the frontend. An engineering team has implemented a new user authentication service, auth, which now operates as a separate service.

Using an Istio match rule, we redirect any request with the /login prefix to the new auth service, and direct all other myapp requests to the existing backend.

URI Match with Istio

kind: VirtualService
  name: auth-redirect
  - myapp
  - match:
    - uri:
        prefix: "/login"
    - destination:
        host: auth
  - route:
    - destination:
        host: myapp