mayong99 opened a new issue, #2802:
URL: https://github.com/apache/apisix-ingress-controller/issues/2802

   ### Current Behavior
   
   The TCPRoute matches all configured TCP listeners.
   Example:
   9093 -> backend
   9092 -> backend
   although sectionName only references test1.
   
   ### Expected Behavior
   
   A TCPRoute bound to:
   parentRefs:
   - name: apisix
     sectionName: test1
   should only match the corresponding Gateway listener.
   Example:
   Gateway
   listener test1 -> 9093
   
   Gateway
   listener test2 -> 9092
   
   TCPRoute
   parentRefs:
     sectionName: test1
   Expected:
   9093 -> backend
   9092 -> connection refused / no route
   
   ### Error Logs
   
   Experiment 1
   
   Delete TCPRoute #2.
   
   Result:
   
   9092 still reaches backend
   
   Experiment 2
   
   Delete Gateway #2.
   
   Result:
   
   All TCP routes disappear.
   
   Re-apply TCPRoute.
   
   Result:
   
   9092 -> backend
   9093 -> backend
   
   This indicates that reconciliation is working, but the generated StreamRoute 
is not restricted to the selected Gateway listener.
   
   ### Steps to Reproduce
   
   Create Gateway #1
   
   listener
   9093
   
   Create Gateway #2
   
   listener
   9092
   
   Create only ONE TCPRoute
   
   parentRefs:
     sectionName: test1
   
   Result:
   
   9093 -> backend
   9092 -> backend
   
   ### Environment
   
   **APISIX Version**
   APISIX: 3.17.0
   APISIX Ingress Controller: 2.1.0
   Kubernetes: 1.31
   Deployment mode: API-driven
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to