Hi all! We adopted linkerd to support tls termination between pods inside our Kubernetes cluster. We have some services that communicating between each other using grpc over secure connection. When services communicating using public FQDN everything working fine since TLS is terminating on AWS NLB…

Hey @YuriiP , That’s super useful information! The short answer here is that is what you would expect because while Linkerd is encrypting your traffic in transit it is transparent to your application. The longer answer is when you use Linkerd you should continue to run your apps as if they are sendi…

Welcome @YuriiP ! :slight_smile: In general, cloud load balancers can’t be meshed: there’s not anything running inside the cluster to which Linkerd can attach its proxy. That means that the first hop from the LB to a meshed Pod will be unencrypted. All the communications between meshed Pods will sti…

@YuriiP Any communication between meshed pods in a Kubernetes clusters will be mTLS’d without you having to do any further configuration. You should not have to manually route traffic from K8s services to linkerd-proxy; that is all taken care of for you when you mesh the pods. Are you seeing behavi…

Hi @William . Yes, it seems that we have the contrary behaviour, all requests through grpc protocol between meshed pods are failing no matter if you use internal kubeservice domain or pod ip.

Please provide some log lines and further details about the failures. These calls should just work.

@william Ok. So there are two pods: service-1 and service-2, both in same namespace (services). Executing following command in pod-1: grpcurl service-2.example.com:443 HelloWorld return the following error Error invoking method "HelloWorld": given method name "HelloWorld" is not in expected form…

Does the command grpcurl service-2.services.svc.cluster.local:7233 HelloWorld work without Linkerd?

No, it’s not, because there is no TLS. It works only if I add —plaintext options to ignore secure connection

TLS not working as expected

Linkerd General Discussion

YuriiP October 26, 2023, 11:14am 10

Hey @jmo . Ohh, I misunderstood the concept of how Linkerd works but after your explanation it makes sense now.

Thank you!

Topic		Replies	Views
Using linkerd for multi cluster use with firewall Linkerd General Discussion configuration , mtls , certificates	2	154	August 9, 2024
Best practices for avoiding excessive TLS encryption/decryption? Linkerd General Discussion ingress , mtls	3	538	November 20, 2025
Ssl communication between kubernetes services Linkerd General Discussion certificates	2	561	April 22, 2024
EProto errors in meshed services Linkerd General Discussion configuration	1	477	June 26, 2023
Can external devices like F5 BIG-IP use MTLs certificates to talk to mTLS meshed pods? Linkerd General Discussion mtls , certificates	3	50	November 20, 2025

TLS not working as expected

Related topics