Stack Overflow
Stack Overflow

Questions tagged [envoyproxy]

Use this tag for questions about the Envoy xDS APIs or Envoy internals.

Envoy is an L7 proxy and communication bus designed for large modern service oriented architectures. The project was born out of the belief that:

The network should be transparent to applications. When network and application problems do occur it should be easy to determine the source of the problem.

Envoy is hosted by the Cloud Native Computing Foundation (CNCF). If you are a company that wants to help shape the evolution of technologies that are container-packaged, dynamically-scheduled and microservices-oriented, consider joining the CNCF. For details about who's involved and how Envoy plays a role, read the CNCF announcement.

For official documentation, head to https://www.envoyproxy.io/

To get in touch with the envoy community, please see the contacts list.

823 questions
2
votes
1 answer

GRPC Load Balancing with Envoy

Might be a dumb question (apologies).... I currently have a microservice application written in GO and using GRPC for all service to service communication. I am currently using client side load balancing written in GRPC and would like to switch…
mornindew
  • 1,993
  • 6
  • 32
  • 54
2
votes
1 answer

SSL error ERR_CERT_AUTHORITY_INVALID when using Envoy proxy in front of gRPC service

I've developed a gRPC service that is deployed on a Kubernetes cluster, and I'm using grpc-web from nodejs clients to connect to it. This means I need a proxy in front of the service. Everything works perfectly with this envoy configuration without…
Diericx
  • 418
  • 8
  • 24
2
votes
3 answers

How to make a lua envoy filter work on the istio cluster?

I am trying to get a lua envoy filter to work with istio gateway, but I added to the cluster and it is working as if the filter does not exists. I have configured my istio cluster on GKE using this guide…
Rodrigo Valladares
  • 45
  • 1
  • 4
2
votes
1 answer

Istio OAuth2 with Keycloak

I am using Istio as API Gateway and Service Mesh. The plan is to have the authentication and authorization flow (oauth2) being managed by the Ingress Envoy Gateway in Istio. However, the usage of Envoy filters are not redirecting the URL request to…
Julia Bel
  • 337
  • 4
  • 18
2
votes
1 answer

How to use Envoy as a load balance for a Java web service?

I'm trying to set Envoy as a load balancer for a Java application. Following is the setup I'm trying to implement. I followed Envoy Tutorial to get some idea and found a code. There, they use a front end envoy container as a single front end…
Pasindu Tennage
  • 1,480
  • 3
  • 14
  • 31
2
votes
2 answers

Docker installed python 3.5.2 instead of python 3.6

I don't get it why python 3.5.2 is installed and not python 3.6. So I cannot execute my python file because I use f string literal syntax which is only available in python 3.6. Maybe someone can help me? FROM envoyproxy/envoy:latest RUN apt-get…
Oiletz Matze
  • 125
  • 1
  • 3
  • 11
2
votes
0 answers

How to debug envoy unit tests on VScode mac

I am working with envoy (https://github.com/envoyproxy/envoy). I got this project to build and debug on mac in VSCode using --spawn_strategy=standalone --genrule_strategy=standalone flags when I do bazel build. However, when I try the same with…
D. Rao
  • 423
  • 2
  • 6
  • 16
2
votes
1 answer

ISTIO sidecar causes Java grpc client throws "UNAVAILABLE: upstream connect error or disconnect/reset before headers" under high concurrency load

I have two gRPC services and one will call another one through normal gRPC method(no stream on either side), I'm using istio as service mesh and have sidecar injected into kubernetes pod of both services. The gRPC call works correctly under normal…
shizhz
  • 11,715
  • 3
  • 39
  • 49
2
votes
1 answer

Getting 403 Forbidden from envoy when attempting to curl between sidecar enabled pods

I'm using a Kubernetes/Istio setup and my list of pods and services are as below: NAME READY STATUS RESTARTS AGE hr--debug-deployment-86575cffb6-wl6rx 2/2 Running 0 …
Pasan W.
  • 674
  • 2
  • 10
  • 23
2
votes
3 answers

What is istio-proxy access log mean?

I am trying to troubleshoot my service by looking at the istio-proxy access log (it logs every access). However, I can't find any documentation that explains the meaning of each entry in the log. For example [2018-12-20T11:09:42.302Z] "GET /…
Agung Pratama
  • 3,666
  • 7
  • 36
  • 77
2
votes
1 answer

Can an Envoy Sidecar use an HTTP/HTTPS proxy for egress traffic

We have a service and an Envoy sidecar deployed in a K8S pod. All ingress and egress traffic goes through Envoy which works great. However our production environment is locked down and all HTTP/HTTPS traffic must go through a Proxy provided via the…
node42
  • 695
  • 4
  • 10
  • 19
2
votes
0 answers

Using istio-proxy with nginx pod errors out with 400 Request Header Or Cookie Too Large on kubernetes

I am trying to use nginx with istio sidecar-injection enabled in the namespace on my kubernetes cluster. This means that the pod is running with a composition of [istio-proxy, istio-init and nginx] containers. When I send a request (curl) to the…
nitimalh
  • 919
  • 10
  • 26
2
votes
1 answer

How to use Ambassador api gateway as a PostgreSQL-aware proxy?

I am using Ambassador to manage my Kubernetes services. My Kubernetes services consist of a few web servers and a few postgres. I followed the instructions hereto establish routes to my web servers. Here is an example: annotations: …
fanoffan
  • 41
  • 1
2
votes
1 answer

Reducing memory usage by ISTIO side car

We are evaluating ISTIO for one of the projects. In the project, we have around 200 containers and around 200 services. Each container might be brought up with replica set to 2. So, there could be 400 containers in total and hence 400 ISTIO side…
Srinivasa Addepalli
  • 21
  • 2
2
votes
2 answers

Using the same Istio GateWay with multiple ports and protocols

I am trying to configure an istio GateWay with two different protocols (GRPC and HTTP) Right now, I have two different gateways one each for GRPC and HTTP as below apiVersion: networking.istio.io/v1alpha3 kind: Gateway metadata: name:…
DoIt
  • 3,270
  • 9
  • 51
  • 103
1 2 3
…
54 55