Questions tagged [envoyproxy]

Use this tag for questions about the Envoy xDS APIs or Envoy internals.

Envoy is an L7 proxy and communication bus designed for large modern service oriented architectures. The project was born out of the belief that:

The network should be transparent to applications. When network and application problems do occur it should be easy to determine the source of the problem.

Envoy is hosted by the Cloud Native Computing Foundation (CNCF). If you are a company that wants to help shape the evolution of technologies that are container-packaged, dynamically-scheduled and microservices-oriented, consider joining the CNCF. For details about who's involved and how Envoy plays a role, read the CNCF announcement.

For official documentation, head to https://www.envoyproxy.io/

To get in touch with the envoy community, please see the contacts list.

823 questions
2
votes
1 answer

How to use rate limit descriptors for local rate limiting in Envoy?

I am trying to add local rate limit filter to front-proxy example. The default token bucket works as expected, but local descriptor's token bucket doesn't. Here is my route_config changes in front-envoy.yaml: route_config: name: local_route …
alexfv
  • 1,826
  • 2
  • 19
  • 22
2
votes
1 answer

How to get CPU usage of Envoy (istio-proxy) container from another container in the POD

POD consist: my-app-container and envoy (istio-proxy) container I want to get cpu_usage of envoy-container from may-app-container. Info from: http://localhost:1500/stats and http://localhost:1500/stats/prometheus doesn't contain CPU_usage. Thanks
srg321
  • 105
  • 7
2
votes
1 answer

Disable Istio default retry strategy (at least on POST requests)

I have an application (microservices-based) running on kubernets with Istio 1.7.4 The microservices has its own mechanisms of transaction compensation on integration failures. But Istio is retrying requests, when some integrations has 503 status…
2
votes
1 answer

Istio ingress gateway randomly returns 507 response

Ingress gateway is retrying if the upstream returns 502. Most of the time it is working as expected. Sometimes gateway returns 507 "exceeded request buffer limit while retrying upstream" without retrying. From the logs I can see this: app 502 ->…
Jonas
  • 4,683
  • 4
  • 45
  • 81
2
votes
2 answers

dynamic envoy configuration from k8s configmap

I tried to configure envoy in my kubernetes cluster by following this example: https://www.envoyproxy.io/docs/envoy/latest/start/quick-start/configuration-dynamic-filesystem My static envoy config: node: cluster: test-cluster id:…
2
votes
1 answer

Envoy "http_connection_manager" setup issue

I am new to the Envoy proxy. I am trying to understand the filters basic config for "http_connection_manager" I have this code : filter_chains: - filters: - name: envoy.filters.network.http_connection_manager typed_config: …
1101 tech
  • 45
  • 1
  • 4
2
votes
0 answers

Envoy Proxy HTTP 503 Connection Local Reset error

I'm using envoy proxy as a reverse proxy in a container for my loadbalanced application. We recently had a network outage which caused envoy proxy to return 503 to our downstream clients. Normally, when the network outage recovers, envoy proxy will…
Choon Ming
  • 21
  • 1
2
votes
1 answer

envoy container fails to start

envoy container failing while startup with the below error Configuration does not parse cleanly as v3. v2 configuration is deprecated and will be removed from Envoy at the start of Q1 2021: Unknown field in:…
karan
  • 65
  • 7
2
votes
0 answers

I install Primary-Remote on different networks ,But Cross cluster's pod access failure

I followed the official documents to deploy two Kubernetes clusters and install istio Primary-Remote on different networks. I find that the endpoints in the pod's outbound is the pod IP corresponding to the two clusters, which seems to mean that…
g dy
  • 21
  • 2
2
votes
0 answers

Istio response compression filter warning

For some reason, Istio 1.8.1 stopped accepting gzip filter for Envoy. Warning: Envoy filter: can't unmarshal Any nested proto type.googleapis.com/envoy.extensions.filters.http.compressor.v3.Compressor: unknown field "response_direction_config" in…
Jonas
  • 4,683
  • 4
  • 45
  • 81
2
votes
0 answers

istio somehow overriding default access logging format of envoy

As is very well explained in this elaborate answer, you can customise istio's logging format in IstioOperator. In my case, IstioOperator (when it comes to access logging configuration) looks like this meshConfig: accessLogEncoding: JSON …
pkaramol
  • 16,451
  • 43
  • 149
  • 324
2
votes
0 answers

Apply EnvoyFilter for specific routes or paths

I would like to use EnvoyFilter in Istio to specify behavior for specific routes or paths. For example if the Pod has multiple access paths like /foo and /bar, denies access to /foo and responds with status 500, but allows access to /bar. I only…
Anna Lee
  • 21
  • 3
2
votes
1 answer

" server closed the stream without sending trailers" error when calling grpc endpoints over ambassador with TLS

I'm getting the error "server closed the stream without sending trailers" on the GRPC client side, when calling the GRPC endpoint exposed in Ambassador. So my stack is : Client GRPC code -> Ambassador -> grpc-service-envoy -> grpc-service I can see…
Yonoss
  • 1,242
  • 5
  • 25
  • 41
2
votes
0 answers

Istio 1.8 : Envoy external auth filter is not working

I am using envoy external auth filter in istio. It works version 1.6 and 1.7. But in version 1.8 it is not working anymore. I want to use version 1.8 but i could not manage to work with this version. What should be problem ? apiVersion:…
Taha Ergun
  • 566
  • 2
  • 7
  • 17
2
votes
1 answer

AWS APP MESH ENVOY sidecar [error] Could not retrieve credentials listing from the instance metadata

I'm using AWS App Mesh with ECS Fargate. Unfortunately in the logs of the envoy sidecar I see errors like: [error][aws] [source/extensions/common/aws/credentials_provider_impl.cc:94] Could not retrieve credentials listing from the instance…
lilfra92
  • 41
  • 2