# S6 — connectionPool.tcp.connectTimeout: 1s  (host: blackhole.lab.internal)
#   Envoy 매핑: Cluster.connect_timeout (cluster 옵션 — circuit breaker 아님)
#   발동: TCP handshake 가 1s 안에 안 끝나면 커넥션 시도 실패 → 503, response flag UF
#         (upstream connection failure). blackhole(198.51.100.10)이 SYN 을 드롭해 재현.
#   관측: 카운터 upstream_cx_connect_timeout > 0, client istio-proxy 액세스 로그의 UF, fortio 503.
#   부하: fortio -c 1 -n 5 -timeout 5s http://blackhole.lab.internal/  (연결당 1s 에 connectTimeout 선발동)
apiVersion: networking.istio.io/v1
kind: DestinationRule
metadata:
  name: conn-blackhole-dr
  namespace: conn-lab
spec:
  host: blackhole.lab.internal
  trafficPolicy:
    connectionPool:
      tcp:
        connectTimeout: 1s
