@@ -21,57 +21,58 @@ This feature is under active development and should not be used in production en
2121{{< /warning >}}
2222
2323Before proceeding with ambient multicluster installation, it's critical to understand
24- the current state and limitations of this feature:
25-
26- ### Supported Configurations
27-
28- Currently, ambient multicluster only supports:
29- Before proceeding with an ambient multicluster installation, it is critical to understand
3024the current state and limitations of this feature.
3125
3226### Critical Limitations
3327
3428#### Network Topology Restrictions
3529
36- ** Multi-cluster single-network configurations are untested, and may be broken**
37- - Use caution when deploying ambient across clusters that share the same network
38- - Only multi-network configurations are supported
30+ Multicluster single-network configurations are untested, and may be broken:
31+
32+ - Use caution when deploying ambient across clusters that share the same network
33+ - Only multi-network configurations are supported
3934
4035#### Control Plane Limitations
4136
42- ** Primary remote configuration is not currently supported**
43- - You can only have multiple primary clusters
44- - Configurations with one or more remote clusters will not work correctly
37+ Primary remote configuration is not currently supported:
38+
39+ - You can only have multiple primary clusters
40+ - Configurations with one or more remote clusters will not work correctly
4541
4642#### Waypoint Requirements
4743
48- ** Universal waypoint deployments are assumed across clusters**
49- - All clusters must have identically named waypoint deployments
50- - Waypoint configurations must be synchronized manually across clusters (e.g. using Flux, ArgoCD, or similar tools)
51- - Traffic routing relies on consistent waypoint naming conventions
44+ Universal waypoint deployments are assumed across clusters:
45+
46+ - All clusters must have identically named waypoint deployments
47+ - Waypoint configurations must be synchronized manually across clusters (e.g. using Flux, ArgoCD, or similar tools)
48+ - Traffic routing relies on consistent waypoint naming conventions
5249
5350#### Service Visibility and Scoping
5451
55- ** Service scope configurations are not read from across clusters**
56- - Only the local cluster's service scope configuration is used as the source of truth
57- - Remote cluster service scopes are not respected, which can lead to unexpected traffic behavior
58- - Cross-cluster service discovery may not respect intended service boundaries
52+ Service scope configurations are not read from across clusters:
5953
60- ** If a service's waypoint is marked as global, that service will also be global**
61- - This can lead to unintended cross-cluster traffic if not managed carefully
62- - The solution to this issue is tracked [ here] ( https://github.com/istio/istio/issues/57710 )
54+ - Only the local cluster's service scope configuration is used as the source of truth
55+ - Remote cluster service scopes are not respected, which can lead to unexpected traffic behavior
56+ - Cross-cluster service discovery may not respect intended service boundaries
57+
58+ If a service's waypoint is marked as global, that service will also be global:
59+
60+ - This can lead to unintended cross-cluster traffic if not managed carefully
61+ - The solution to this issue is tracked [ here] ( https://github.com/istio/istio/issues/57710 )
6362
6463#### Load Distribution on Remote Network
6564
66- ** Traffic going to a remote network is not equally distributed between endpoints**
67- - When failing over to a remote network, a single endpoint on a remote network may get a disproportionate number of requests
68- due to multiplexing of HTTP requests and connection pooling
69- - The solution to this issue is tracked [ here] ( https://github.com/istio/istio/issues/58039 )
65+ Traffic going to a remote network is not equally distributed between endpoints:
66+
67+ - When failing over to a remote network, a single endpoint on a remote network may get a disproportionate number of requests
68+ due to multiplexing of HTTP requests and connection pooling
69+ - The solution to this issue is tracked [ here] ( https://github.com/istio/istio/issues/58039 )
7070
7171#### Gateway Limitations
7272
73- ** Ambient east-west gateways currently only support meshed mTLS traffic**
74- - Cannot currently expose ` istiod ` across networks using ambient east-west gateways. You can still use a classic e/w gateway for this.
73+ Ambient east-west gateways currently only support meshed mTLS traffic:
74+
75+ - Cannot currently expose ` istiod ` across networks using ambient east-west gateways. You can still use a classic e/w gateway for this.
7576
7677{{< tip >}}
7778As ambient multicluster matures, many of these limitations will be addressed.
0 commit comments