Back to Istio Io

How can I verify that traffic is using mutual TLS encryption?

content/en/about/faq/security/verify-mtls-encryption.md

latest482 B
Original Source

If you installed Istio with values.global.proxy.privileged=true, you can use tcpdump to determine encryption status. Also in Kubernetes 1.23 and later, as an alternative to installing Istio as privileged, you can use kubectl debug to run tcpdump in an ephemeral container. See Istio mutual TLS migration for instructions.