Questions tagged [envoyproxy]

Use this tag for questions about the Envoy xDS APIs or Envoy internals.

Envoy is an L7 proxy and communication bus designed for large modern service oriented architectures. The project was born out of the belief that:

The network should be transparent to applications. When network and application problems do occur it should be easy to determine the source of the problem.

Envoy is hosted by the Cloud Native Computing Foundation (CNCF). If you are a company that wants to help shape the evolution of technologies that are container-packaged, dynamically-scheduled and microservices-oriented, consider joining the CNCF. For details about who's involved and how Envoy plays a role, read the CNCF announcement.

For official documentation, head to https://www.envoyproxy.io/

To get in touch with the envoy community, please see the contacts list.

823 questions
2
votes
1 answer

Istio Envoy Proxy forwarding client certificate info

We have a Kubernetes cluster with Istio 1.0 (with Envoy proxy) and some other stuff. We use Istio's Gateway to verify client certificates. We would like to pass client certificate's subject to the internal services. Here in Envoy's documentation I…
Szymig
  • 555
  • 5
  • 9
2
votes
1 answer

heptio-contour external ip on bare metal

I've setup a kubernetes cluster using kubespray, and now I am trying to follow this guide root@node1 ~ # kubectl get -n heptio-contour service contour -o wide NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE …
nha
  • 17,623
  • 13
  • 87
  • 133
2
votes
1 answer

maximum no of websocket connection with a container running with istio envoy proxy

I seem to be hitting a limit on maximum no of websocket connection within a container with istio proxy It seems to run out at 1024 (which seems like default) I also tried increasing my --default-ulimit for nofiles to 102400:102400 but am suspecting…
Amit Shah
  • 751
  • 1
  • 5
  • 7
2
votes
1 answer

what is the use of service_cluster and service_node in Envoy RDS REST API?

I am trying to develop RDS (Route Discovery Service) to be used with lyft/envoy. As per docs RDS API URL should follow GET /v1/routes/(string: route_config_name)/(string: service_cluster)/(string: service_node). What I want to know is the usage of…
wannamit
  • 117
  • 3
  • 9
2
votes
1 answer

Routing internal traffic in Kubernetes?

We presently have a setup where applications within our mesos/marathon cluster want to reach out to services which may or may not reside in our mesos/marathon cluster. Ingress for external traffic into the cluster is accomplished via an Amazon ELB…
Bruce L
  • 53
  • 1
  • 5
1
vote
0 answers

Why explicit protocol setting cause traffic routing error?

I write a virtual service to test header based routing apiVersion: networking.istio.io/v1beta1 kind: VirtualService metadata: name: http-app namespace: default spec: hosts: - http-app.default.svc.cluster.local http: - match: …
blastz
  • 525
  • 5
  • 14
1
vote
0 answers

In proxy-wasm-rust-sdk, how can I use plugin configuration in httpContext

My plugin configuration is quite large, and I don't want to clone the plugin configuration every time When I create an httpContext. Can I use Rc::clone() inside Wasm? (Is it may cause memory leak? Im sorry not good at rust) . Or is there any other…
1
vote
1 answer

How to make an Istio EnvoyFfilter apply to two different workloads using workloadSelector

I've written an Istio EnvoyFilter. I need to apply this to multiple different workloads in my cluster. It already uses the workloadSelector property to choose one of these using the app label on the pod, but I can't see how to extend this to select…
Scottm
  • 7,004
  • 8
  • 32
  • 33
1
vote
1 answer

Customizing Istio metrics results in duplicated metrics

I want to add request.url_path and request.method information to the istio_request_total metric by using an EnvoyFilter. Istio Version: 1.8.5 Using my EnvoyFilter duplicates istio_requests_total metric by adding…
ezileli
  • 174
  • 2
  • 6
1
vote
1 answer

envoy proxy does not give error even if pod crashes

My 2 microservices are talking to each other via GRPC and I am using envoy proxy. Microservice A is calling Microservice B and envoy container is inside Mircoservice A's pod. My problem is that if because of any issue Microservice B pod crashed I…
Afzal Khan
  • 83
  • 7
1
vote
1 answer

envoy: grpc-web takes a few requests until it no longer times out

Context: I run envoy with grpc-web. I have a bunch of gRPC servers to route to. Each server has a dedicated route and cluster (see config below). Envoy runs inside a docker-container with no special changes (only config and SSL). Envoy and the gRPC…
Pungrammer
  • 165
  • 2
  • 10
1
vote
0 answers

Does argo rollout support header based traffic control in AWS App Mesh

Our service deployed on AWS EKS with AppMesh, ArgoCD is our CD tool, we need header based traffic management, we know Argo Rollout support traffic management with istio..., not sure AppMesh. Is possible Argo Rollout support header based traffic…
Jiang Nan
  • 11
  • 2
1
vote
0 answers

what will be the updated Istio handler, instance and rule configuration

The following istio configuration was being used in a legacy kuernetes cluster with old istio version to do the connection from microservices running in kubernetes an erlang virtual machine on websocket. I am working on a lift and shift of the…
1
vote
1 answer

How to access attributes in envoy configuration

I am trying to set up a front proxy in envoy where I pass the path in a header (test-header in below example). - filters: - name: envoy.filters.network.http_connection_manager typed_config: "@type":…
Shawon0418
  • 181
  • 1
  • 3
  • 12
1
vote
0 answers

How to push updates to EnvoyProxy dynamic configuration using control plane?

I'm trying to write a control plane which can dynamically update many Envoy instances. From what I can tell, the easiest way to do this is by using Envoy's dynamic resources. The problem I'm encountering is how to push the updates. Because I have…