socket leak with time-wait

[nnntlh]

When I use Istio's ambient mode with Aliyun ALB, this make socket leaks and generates many time-wait for the pod.

is this a bug？ this‘s my test

[Stevenjin8]

@nnntlh what version of istio are you using? I think we fixed it about two months ago #1694 #1629

[Stevenjin8]

wait, isn't this expected? If you're making thousands of calls each with a different TCP connection, then you will naturally get a bunch of sockets in TIME_WAIT. Do these sockets stay around for a long time?

[nnntlh]

@nnntlh what version of istio are you using? I think we fixed it about two months ago #1694 #1629

istio 1.28.3

[nnntlh]

wait, isn't this expected? If you're making thousands of calls each with a different TCP connection, then you will naturally get a bunch of sockets in TIME_WAIT. Do these sockets stay around for a long time?

not expected,Since gRPC is designed to use long-lived connections, I would not expect to see such a large number of connections in the TIME-WAIT state.
When the istio.io/dataplane-mode=ambient label is removed, there are only around 100 ESTABLISHED connections.

Once the istio.io/dataplane-mode=ambient label is applied, the number of TIME-WAIT connections increases to around 2000.In addition, as the load increases, the number of TIME-WAIT connections continues to grow. And the time-wait connection will dispear in 15s

[Stevenjin8]

hmm, for the TIME_WAIT sockets, what are the local/peer addresses.

[nnntlh]

嗯，对于 TIME_WAIT 套接字，本地/对等地址是什么？

10.212.12.242 is lb ip,and 10.212.13.97 is pod ip

[nnntlh]

ignore this issue，i found alb to pod create many connections without long-lived connections，I’ll follow up with the cloud provider to confirm.

[patelprayag1990]

@Stevenjin8 I have raised issue here #1629 (comment)