Scenario: You have an application that uses Consul service discovery to connect to backend services in order to process data submitted by end-users. The front-end web
service consists of 3 containers, while the backend service consists of 5 static virtual machines. All of the front-end web servers and the backend servers are registered
with Consul.
During normal operations, a user complains that the data processing is taking too long. To troubleshoot, you run a DNS query against the DNS name for the backend
service, but discover that the response only contains three of the virtual machines. Why would Consul only respond with three servers rather than all five?
You need to deny communication between the customer-db service and the payment service using an intention. You open the command line and issue the following
command:
$ consul intention create customer-db payment
However, the two services can still initiate new connections even after the intention is created. What would explain this?