What problem are you trying to solve?

It is valuable to inject an ingress controller with LD2. As ingress, the host header tends to be the external host and most controllers just route directly back to the IP address of an endpoint. Unfortunately, this makes it so that Linkerd cannot discover the destination (as that works off the host header).

How should the problem be solved?

Add a new header that can be used for service discovery. My proposal is X-Forwarded-To.

Concerns

What are the security implications of this? Would we need to strip the X-Forwarded-To header on the server side and only use it on the client side?