How do you force the Envoy sidecar to listen on a specific interface?

Nomad
, ,
1

Following the start guide (Consul Service Mesh | Nomad by HashiCorp) here works great. However, in my proposed setup, all nomad nodes have a Wireguard mesh overlay (access to default interface is blocked), and I would like the count-api's sidecar to listen on the Wireguard interface instead of the default interface. Is that a possible configuration?

2

I think what you are looking for is this:

For instance:

client {
  host_network "wireguard" {
    cidr = "192.168.4.33/32"
  }
}

and then use that in your spec:

    network {
      mode = "bridge"
      port "inbound" {
        …
        host_network = "wireguard"
      }
    }