istio/ztunnel

Implement DNS-over-TCP redirection

Closed this issue · 1 comments

The ztunnel side already supports this, but we do not do redirection. This is critical for correctness, since Ztunnel's DNS server is giving alternative DNS responses

We could do this in the CNI or in ztunnel by having a bypass mode in outbound