Questions tagged [envoyproxy]

Use this tag for questions about the Envoy xDS APIs or Envoy internals.

Envoy is an L7 proxy and communication bus designed for large modern service oriented architectures. The project was born out of the belief that:

The network should be transparent to applications. When network and application problems do occur it should be easy to determine the source of the problem.

Envoy is hosted by the Cloud Native Computing Foundation (CNCF). If you are a company that wants to help shape the evolution of technologies that are container-packaged, dynamically-scheduled and microservices-oriented, consider joining the CNCF. For details about who's involved and how Envoy plays a role, read the CNCF announcement.

For official documentation, head to https://www.envoyproxy.io/

To get in touch with the envoy community, please see the contacts list.

823 questions
1
vote
0 answers

How can I make 5 streams at 1 TCP connection. Envoy. gRPC

I have gRPC service and Envoy proxy gateway. The main problem that when I'am tring to make more than 6 tcp streams, all another streams are pending: If I andrstood well, it happens because each browsers has a tcp limits: Consequently I'am looking…
limeniye
  • 31
  • 1
  • 6
1
vote
0 answers

Envoy TLS config causes SSL WRONG_VERSION_NUMBER error

I've set up an Envoy config which connects to Trino on localhost port 11610. It adds TLS configs and redirects to a host. When I call the API, I see the envoy logs resolve the host to the correct IP address, but I get this…
covfefe
  • 2,485
  • 8
  • 47
  • 77
1
vote
1 answer

why can not access service by ip when using istio tcp route?

when i use this VS, i can access my http service by 1.2.3.4, but when i change http to tcp,i can not access my http service by 1.2.3.4,what happened? apiVersion: networking.istio.io/v1alpha3 kind: VirtualService metadata: name: httpbin-vir spec: …
LB zhang
  • 11
  • 1
1
vote
0 answers

Send client certificate to my origin server with cloudflare

I wanna secure my microservices communication with client certificate. I generated a client certificate in cloudflare dashboard and added a subdomain (y.xxx.com) to dns with Full (strict) mode and enabled mTLS for subdomain (y.xxx.com). I send…
1
vote
1 answer

How we can use two headers with "and" logical in envoy proxy

Use Case: I need to send a request to the server (cluster) after matching two headers with "AND" logic. Is this possible in Envoy? if yes please help with syntax or solution- my envoy configmap looks like- kind: ConfigMap metadata: name:…
gaurav agnihotri
  • 259
  • 1
  • 5
  • 14
1
vote
1 answer

Envoy with AWS E2C instance. "No healthy upstream" error

I have a simple Greeter client-server repository: https://github.com/limeniye/GreeterGrpcWebGateway And it works for both cases on my local machine: var channel = GrpcChannel.ForAddress("http://localhost:5001"); // gRPC service var channel =…
limeniye
  • 31
  • 1
  • 6
1
vote
0 answers

Istio - How to differentiate between normal call and retried call?

I have ISTIO Access logging enabled. If a service A calls service B, and if Service B returns say 5xx, then istio from service A will retry the call. This will result in 2 access logs, one for the first call and one for the retried call. How can I…
Jerald Baker
  • 1,121
  • 1
  • 12
  • 48
1
vote
0 answers

Not able to transcode gRPC to HTTP/JSON using Envoy

I am trying to access gRPC service using REST. I have setup an envoy server; but neither I am able to access envoy admin console nor able to access gRPC service from REST. Please find below envoy-config.yml file. admin: access_log_path:…
Pushpak
  • 147
  • 8
1
vote
0 answers

gRPC Bidirectional Streaming Rate Limit Istio

Istio supports Rate Limits for http requests. The documentation suggests that this also works for gRPC endpoints. What is unclear is how it behaves when I have a bidirectional streaming request, for example: rpc PingPong(stream Ping) returns (stream…
cmcnealy
  • 312
  • 1
  • 7
1
vote
0 answers

grpc stream: Cannot check peer: missing selected ALPN property

I'm using c++ to develop a pair of grpc stream server and client without any certificate. It worked as expected. Then I want to use Envoy as the gateway of the server. Here is what I'm trying to do: secure insecure client…
Yves
  • 11,597
  • 17
  • 83
  • 180
1
vote
1 answer

Laravel Envoy with Laravel Sail problem - envoy not running

I have a Laravel Sail project, and I am trying to use Envoy to deploy. I followed the guidelines of the Laravel documentation, I installed Envoy, created the Envoy.blade.php file in the root, but when I try to call: sail envoy run…
Tamás László
  • 139
  • 1
  • 8
1
vote
1 answer

Safe Regex not working for External Authorization Filter in Envoy

I do not want to apply external authorization filter for routes starting with /css, /img, /assets. While it is working fine if I put 3 entries using prefix but its not working with safe_regex. static_resources: listeners: - name:…
Rakesh Goyal
  • 3,117
  • 8
  • 39
  • 69
1
vote
0 answers

Prometheus: Cannot scrape different metric ports/metric paths on single EKS pod

I am attempting to scrape metrics from a single pod that has my web application deployed with a sidecar envoy proxy as part of an AWS App Mesh implementation. I would like to retrieve metrics from both for greater visibility, but so far I've only…
Emma Kelly
  • 29
  • 6
1
vote
0 answers

How to use fault injection in proxyless gRPC?

I'm trying to add a fault injection "filter" using proxyless gRPC but wasn't sure how to. Any ideas on how to do it? Thanks in advance! It did not work if I used the istio template - for example: apiVersion: networking.istio.io/v1alpha3 kind:…
1
vote
1 answer

validate claims inside JWT using envoy

{ "aud": "123123-1232-123123-2323-123", "iss": "https://url", "iat": 2112, "nbf": 1212, "exp": 1212, "aio": "ewq32ee23e2e=", "azp": "123123-1232-123123-2323-123", "azpacr": "1", "oid": "123123-1232-123123-2323-123", "rh":…