DCOS linkerd-to-linkerd with egress

[rogoman]

I've been trying to come up with a good configuration for my DCOS setup where I use linkerd-to-linkerd routing. I was hoping to find some examples for how to setup egress traffic to the outside world, but wasn't successful. Is there any chance an example like this could be provided in the repo?

[franziskagoltz]

Hi @rogoman, thanks for reaching out. We have an example config file here and short instructions here.

[rogoman]

@franziskagoltz this was specifically about having egress rules in that setup so that my cluster can access external internet. The current DC/OS example only lets route the traffic internally. Please re-open the issue.

[KZachariassen]

We have the same issue. We need to use a squid proxy for external internet requests, but we are using http_proxy to send everything to linkerd. How can we tell us linkerd to send requests to another proxy for internet traffic?

[wmorgan]

You may be able to crib from this: https://github.com/linkerd/linkerd-examples/blob/master/k8s-daemonset/k8s/servicemesh.yml#L131

That config is for K8s, but the dtab (esp the rinet bits, which deal with egress) is not K8s-specific.

That's for egress directly from the nodes. As for making Linkerd itself talk through a proxy for egress, I'll leave that for the experts.

[KZachariassen]

Thx @wmorgan i played with it and it works fine, if you have direct internet access. I can't get it to work when you need to use a proxy for internet access.