Questions tagged [envoyproxy]

Use this tag for questions about the Envoy xDS APIs or Envoy internals.

Envoy is an L7 proxy and communication bus designed for large modern service oriented architectures. The project was born out of the belief that:

The network should be transparent to applications. When network and application problems do occur it should be easy to determine the source of the problem.

Envoy is hosted by the Cloud Native Computing Foundation (CNCF). If you are a company that wants to help shape the evolution of technologies that are container-packaged, dynamically-scheduled and microservices-oriented, consider joining the CNCF. For details about who's involved and how Envoy plays a role, read the CNCF announcement.

For official documentation, head to https://www.envoyproxy.io/

To get in touch with the envoy community, please see the contacts list.

823 questions
2
votes
0 answers

How to configure envoy proxy for 2 grpc services?

I am using a envoy proxy for grpc-web and everything was working fine with one service but now I am registering other services I ran into problems. I thought a routed configuration would work but when I try to hit the endpoint it gives me a DNS…
Luis Liz
  • 1,939
  • 4
  • 20
  • 31
2
votes
0 answers

Set request buffer for Istio EnvoyFilter in YAML

Can you help me please to specify YAML Istio EnvoyFilter to have the request buffer, analog of Nginx request buffer. I tried apiVersion: networking.istio.io/v1alpha3 kind: EnvoyFilter metadata: name: connection namespace: my-test spec: …
2
votes
2 answers

Configuring envoy to skip mTLS on a specific http route

I am using envoy has an edge proxy. Basically I want mTLS downstream on all http paths except for one. I have the following config: Notice how I set require_client_certificate: false in the first route admin: access_log_path: /dev/stdout …
kosta
  • 4,302
  • 10
  • 50
  • 104
2
votes
1 answer

Looking for Envoy example for "proxy_set_header" in reverse proxy

I'm migrating Nginx to Envoy and I couldn't figure out how to replace those settings: proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Host $http_host; I have read Envoy's…
xudesheng
  • 1,082
  • 11
  • 25
2
votes
1 answer

Istio | TLS mutual-auth without using Istio ingress gateway

I want to achieve TLS mutual auth between my different services running in a kubernetes cluster and I have found that Istio is a good solution to achieve this without making any changes in code. I am trying to use Istio sidecar injection to do TLS…
2
votes
1 answer

Multiple prefix matches for routing to same cluster in envoy

For envoy routing, I've multiple prefix matches for routing to different clusters. For routing to same cluster, I have to repeat the match section. For e.g., this is a section of routes in enovy-config.yaml - match: prefix:…
Wander3r
  • 1,801
  • 17
  • 27
2
votes
0 answers

how to query istio metadata exchange data in envoy access log?

I know with the latest istio version, it start to integrate the metadata-exchange extension to envoy proxy, so that when communicate between each pod, envoy will potential use the "x-envoy-peer-metadata" header to exchange the pod metadata and save…
winterTTr
  • 1,739
  • 1
  • 10
  • 30
2
votes
1 answer

istio exclude service from ext-auth

Hi guys i have set up istio on minikube and set envoy ext-auth filter on the gateways . i have two microservices running in different pods exposing virtual services /auther and /appone to outside world . the ext-auth filter i set will send every…
faramarz
  • 84
  • 1
  • 11
2
votes
1 answer

Amazon certificates with envoy front-proxy

I am trying to use an amazon SSL certificate for my app. Currently, I have dockerized application hosting on the AWS server with envoy front-proxy. I am using lets-encrypt SSL certificates for a trusted domain certificate. Now I want to switch it…
2
votes
0 answers

Configuring EnvoyFilter for Forwarding Client Certs In Istio

Here is how my configuration looks like (referenced from github’s common examples for XFCC) : apiVersion: networking.istio.io/v1alpha3 kind: EnvoyFilter metadata: name: xfcc-forward namespace: istio-system spec: configPatches: - applyTo:…
Jim
  • 355
  • 7
  • 20
2
votes
1 answer

Traffic does not go through the Egress if loadBalancing.simple: PASSTHROUGH

I have Kafka cluster with two nodes. node1 with ip 1.1.1.1, and node2 with ip 2.2.2.2 All traffic must go through Egres Controller. If a client from the application addresses a node with ip 1.1.1.1, then he should contact it without any balancing…
asrocket
  • 21
  • 1
2
votes
1 answer

x-forwarded-for header is not shown on Envoy response

I have a working LDS.yaml file, and I want to add x-forwarded-for in the header since in the envoy documentation says it should be shown if Envoy works as edge server. But when I use this best practice configuration…
2
votes
1 answer

What is the difference between envoy.filters.http.ext_authz and envoy.ext_authz?

I have been using Envoy within the context of Istio and have been configuring the external authorization filter to offload service authorisation to the Istio mesh. My understanding is that when configuring Envoy envoy.filters.http.ext_authz and…
dippynark
  • 2,743
  • 20
  • 58
2
votes
2 answers

Adding custom response headers using Istio's (1.6.0) envoy lua filter

I am running Istio 1.6.0. I wanted to add some custom headers to all the outbound responses originating from my service. So I was trying to use lua envoyfilter to achieve that. However, I don't see my proxy getting properly configured. The envoy…
PDP
  • 151
  • 1
  • 5
  • 14
2
votes
1 answer

Envoy sidecar proxy session persistence?

I recently came across envoy and it fits very well for my new project. However, I cannot find out if envoy supports something like Sticky Session. Does envoy support session persistence?