istio-traffic-management

Configure Istio VirtualService and DestinationRule resources for traffic routing and resilience.

Updated Apr 5, 2026
One-click install
npx skills add https://github.com/Jhabbig/Habbig --skill istio-traffic-management-jhabbig
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: istio-traffic-management
Source: https://github.com/Jhabbig/Habbig/tree/main/.claude/plugins/wshobson/cloud-infrastructure/skills/istio-traffic-management
Command: npx skills add https://github.com/Jhabbig/Habbig --skill istio-traffic-management-jhabbig

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps you design and troubleshoot Istio traffic behavior so you can route requests safely, protect services from overload, and roll out changes without disrupting users.

Core Features & Use Cases

  • Traffic Routing: Direct requests with host-based rules, header matches, and path matching using VirtualService and DestinationRule resources.
  • Resilience Controls: Configure retries, timeouts, circuit breaking, outlier detection, and load balancing to improve reliability under failure or load.
  • Progressive Delivery: Support canary releases, blue-green style shifts, traffic mirroring, and fault injection for controlled testing in production-like environments.
  • Ingress and External Access: Set up gateways and service entries to manage mesh edge traffic and integrate external services.
  • Use Case: A platform team can gradually shift 10 percent of production traffic to a new version, mirror requests to a test subset, and enforce retry and timeout policies while monitoring the rollout.

Quick Start

Use this Skill to create an Istio routing policy for a service that needs a canary rollout with retries, timeouts, and load balancing.

Frequently Asked Questions about istio-traffic-management

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure Istio traffic management for a canary deployment?

Istio traffic routing directs requests using VirtualService and DestinationRule resources with host-based rules, header matches, and path matching. This mechanism allows precise control over traffic flow between service mesh subsets based on request attributes.

How do I set up retries, timeouts, and circuit breakers in a service mesh?

Set up retries, timeouts, and circuit breakers by configuring traffic policies within Istio DestinationRule resources. These resilience controls protect services from overload and improve reliability under failure by automatically dropping failing endpoints through outlier detection.

Can I use Istio fault injection and traffic mirroring for production testing?

Configure Istio ingress gateways and ServiceEntry resources to manage mesh edge traffic and integrate external services. This setup controls external access routing and defines how internal services interact with APIs outside the mesh boundary.

Why is my Istio VirtualService not routing traffic to the correct subset?

Istio VirtualService routing failures often stem from incorrect host matching or missing subset definitions in the DestinationRule. Debug traffic behavior by verifying traffic policies, host configurations, and subset labels align across your routing resources.