Questions tagged [envoyproxy]

Envoy proxy is a L7 proxy.

Envoy proxy is a L7 edge and service proxy, written in C++. It is geared towards cloud-native services and is e.g. used by the istio project.

16 questions
3
votes
0 answers

error unmarshalling config dump when trying to view my Istio Envoy config

I'm running Istio on Google Kubenetes Engine. I've been following this post to enable gRPC-web in Istio. I want to view the config of my Istio Envoy proxy to check that envoy.grpc_web is in it, but it gives me an error: $ kubectl get pods -n…
Toby 1 Kenobi
  • 287
  • 2
  • 13
1
vote
1 answer

Istio : HTTPS Traffic converted to HTTP with port set as 443

Bug description We have setup an istio over on eks cluster & a java app is hosted in it. The pod has been created along with service with type ClusterIP We have created Virtual Service, Gateway & set the istio ingress gateway as a NodePort. In front…
1
vote
0 answers

How to configure dynamic routing of gRPC requests with envoy, nomad and consul

We use nomad to deploy our applications - which provide gRPC endpoints - as tasks. The tasks are then registered to Consul, using nomad's service stanza. The routing for our applications is achieved with envoy proxy. We are running central envoy…
DaDaDom
  • 532
  • 6
  • 17
1
vote
1 answer

Fan out to other hosts when already using Serial in ansible

I have 80+ hosts that run my application, and I'm updating a long existing ansible playbook to change our load balancer. In our current load balancer setup, hosts can be added / removed from the load balancer in one ansible play by shelling out to…
Mike
  • 113
  • 3
1
vote
0 answers

Envoy to envoy TLS for TLS proxy

Assume this artitecture ................................................ . . . …
1
vote
1 answer

Istio Keeps On Showing TcpProxyValidationError Errors

I initially created an EnvoyFilter to apply idle_timeout of 5s to outbound requests originating from workloads with label app: mecha-dev. apiVersion: networking.istio.io/v1alpha3 kind: EnvoyFilter metadata: name: tcp-idle-timeout spec: …
bakadevops
  • 43
  • 1
  • 5
1
vote
1 answer

Why is My Istio EnvoyFilter with TCP Idle Timeout Setting not working?

I have created an EnvoyFilter to apply TCP idle timeout to outbound requests. Here's my filter configuration: apiVersion: networking.istio.io/v1alpha3 kind: EnvoyFilter metadata: name: tcp-idle-timeout spec: workloadSelector: labels: …
bakadevops
  • 43
  • 1
  • 5
1
vote
1 answer

istio-proxy 403 error:'upstream connect error or disconnect/reset before headers. reset reason: connection failure'

We have deployed an application behind the istio ingress gateway and is accessible at test.domain.com/jenkinscore.We have used istio 1.4.5. The domain name is created for the istio ingress gateway service IP. As per the below logs, when we hit this…
0
votes
1 answer

integrate envoy with consul for service discovery

Edit - Is it even possible to achieve it or I should be looking into something else? How can I integrate envoy with consul for automatic service discovery and routing? I've the containers running in docker and each container is registering with the…
AppDeveloper
  • 123
  • 4
0
votes
1 answer

When I run envoyproxy I get a GLIBC_2.29 and GLIBC_2.30 not found error | Oracle Cloud (ARM - Ampere Processor) with Oracle Linux 8

When I try to execute envoy then I get the following error on Oracle Cloud ARM processor (ARM - Ampere Processor) on Oracle Linux 8: envoy: /lib64/libm.so.6: version `GLIBC_2.29' not found (required by envoy) envoy: /lib64/libpthread.so.0: version…
sm-a
  • 3
  • 1
  • 1
  • 3
0
votes
0 answers

Envoy proxy random load balancing option is not random

We are using the below Envoy load balancing YAML file. It is working but it is NOT randomly distributing requests across nodes 1, 2, and 3. In our use case, we have high load coming from a single source IP address (customer server). We want to…
A X
  • 469
  • 4
  • 10
  • 31
0
votes
0 answers

How to redirect to already opened port using Ip tables

I am using envoy proxy(8001). Current Situation : when I curl localhost:8001, envoy will inject some data in packets and send the result to remoteip:32100 What i want is like Expectation: when I curl remoteip:32100 it should redirect through…
JibinNajeeb
  • 101
  • 1
0
votes
1 answer

Is it possible, with Envoy Proxy, to apply an HTTP filter based on the URL?

As the title says, I would like an HTTP filter to apply only if the request is for a certain URL path. Doing this at the route level is not possible, because my route is defined like this: - match: prefix: "/api/" route: cluster:…
Pablote
  • 187
  • 2
  • 6
0
votes
0 answers

Can a local proxy 'improve' network reliability?

Apologies for the fairly vague question but I have been working with Envoy as part of Istio recently and was wondering about one of the benefits of sidecar proxies in general By configuring a proxy locally (as Istio does) in the same network…
dippynark
  • 233
  • 3
  • 13
0
votes
1 answer

Envoy/Istio as reverse-proxy to explicit IP

I'd like to route like this (nginx pseudo-config): server_name fou.example.com; location "/Forskning" { upstream https://185.102.32.26/; } location "/" { upstream http://fou-web.fou.svc.cluster.local; } How do I do this with VirtualService,…
Henrik
  • 386
  • 2
  • 4
  • 13
1
2