static_resources:
  listeners:
  - name: listener_0
    address:
      socket_address: { address: 0.0.0.0, port_value: 80 } # Envoy 监听在所有 IP 的 80 端口
    filter_chains:
    - filters:
      - name: envoy.filters.network.http_connection_manager
        typed_config:
          "@type": type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
          stat_prefix: ingress_http
          route_config: # 路由配置
            name: local_route
            virtual_hosts: # 基于 Host 头的虚拟主机列表
            - name: web_service_1
              domains: ["*.hihihiai.com", "hihihiai.com"] # 匹配 hihihiai.com 及其子域名
              routes:
              - match: { prefix: "/" } # 匹配所有路径
                route: { cluster: local_cluster } # 路由到 local_cluster
            - name: web_service_2
              domains: ["*.test.com","test.com"] # 匹配 test.com 及其子域名
              routes:
                - match: { prefix: "/test.html" } # 匹配 /test.html 路径
                  route: { cluster: nginx_service_1 } # 路由到 nginx_service_1
                - match: { prefix: "/" } # 匹配所有其他路径 (作为默认)
                  redirect: # 执行重定向
                    host_redirect: "www.hihihiai.com" # 重定向到 www.hihihiai.com (路径不变)
          http_filters:
          - name: envoy.filters.http.router # 最终的 HTTP 路由过滤器
            typed_config:
              "@type": type.googleapis.com/envoy.extensions.filters.http.router.v3.Router

  clusters: # 上游服务集群定义
  - name: nginx_service_1 # 名为 nginx_service_1 的集群
    type: LOGICAL_DNS # 通过 DNS 发现服务 (如 Docker 服务名)
    load_assignment:
      cluster_name: nginx_service_1
      endpoints:
      - lb_endpoints:
        - endpoint:
            address:
              socket_address:
                address: nginx1 # 上游服务主机名 (如 Docker service 'nginx1')
                port_value: 80  # 上游服务端口

  - name: local_cluster # 名为 local_cluster 的集群
    type: STATIC # 静态配置上游主机地址
    load_assignment:
      cluster_name: local_cluster
      endpoints:
      - lb_endpoints:
        - endpoint:
            address:
              socket_address: { address: 172.31.2.11, port_value: 80 } # 后端服务实例1
        - endpoint:
            address:
              socket_address: { address: 172.31.2.12, port_value: 80 } # 后端服务实例2

version: '3.8'

services:
  nginx1:
    image: nginx:latest
    container_name: nginx_server_1
    volumes:
      - ./nginx1:/usr/share/nginx/html:ro
    networks:
      envoy_network:
        ipv4_address: 172.20.0.10 # 为 nginx1 分配静态 IP
    # ports: # 不需要直接暴露 Nginx 端口，流量通过 Envoy
    #   - "8081:80"

  nginx2:
    image: nginx:latest
    container_name: nginx_server_2
    volumes:
      - ./nginx2:/usr/share/nginx/html:ro
    networks:
      envoy_network:
        ipv4_address: 172.20.0.11 # 为 nginx2 分配静态 IP
    # ports: # 不需要直接暴露 Nginx 端口，流量通过 Envoy
    #   - "8082:80"

  envoy:
    image: envoyproxy/envoy:v1.29-latest # 建议使用具体的版本标签
    container_name: envoy_proxy
    volumes:
      - ./envoy.yaml:/etc/envoy/envoy.yaml:ro
    ports:
      - "80:80" # Envoy 外部端口
      - "9901:9901" # Envoy admin 端口
    networks:
      - envoy_network # Envoy 也连接到这个网络
    depends_on:
      - nginx1
      - nginx2

networks:
  envoy_network:
    driver: bridge
    ipam: # IP Address Management
      driver: default
      config:
        - subnet: 172.20.0.0/16 # 定义网络的子网
          # gateway: 172.20.0.1 # 可以选择性地指定网关