Istio and Envoy work at the Application traffic layer (L7), allowing you to direct and load-balance traffic based on attributes like HTTP headers. This example shows how to direct traffic based on the request URI path.
In this example,
myapp is the server backend for a website, used by the
frontend. An engineering team has implemented a new user authentication service,
auth, which now operates as a separate service.
Using an Istio match rule, we redirect any request with the
/login prefix to the new
auth service, and direct all other
myapp requests to the existing backend.
apiVersion: networking.istio.io/v1alpha3 kind: VirtualService metadata: name: auth-redirect spec: hosts: - myapp http: - match: - uri: prefix: "/login" route: - destination: host: auth - route: - destination: host: myapp