Questions tagged [envoyproxy]

Use this tag for questions about the Envoy xDS APIs or Envoy internals.

Envoy is an L7 proxy and communication bus designed for large modern service oriented architectures. The project was born out of the belief that:

The network should be transparent to applications. When network and application problems do occur it should be easy to determine the source of the problem.

Envoy is hosted by the Cloud Native Computing Foundation (CNCF). If you are a company that wants to help shape the evolution of technologies that are container-packaged, dynamically-scheduled and microservices-oriented, consider joining the CNCF. For details about who's involved and how Envoy plays a role, read the CNCF announcement.

For official documentation, head to https://www.envoyproxy.io/

To get in touch with the envoy community, please see the contacts list.

823 questions
7
votes
2 answers

Service mesh and Async services

I am planning to introduce K8s/Istio into my infra. Right now I have plenty of services which communicate with each other using RabbitMQ. Service mesh concept seems to assume all services should be synchronous. I'd like to keep at least some of my…
arkadiy kraportov
  • 3,679
  • 4
  • 33
  • 42
6
votes
3 answers

Http response at 400 or 500 level

I'm novice in gRPC. My program is written with ‍‍nuxtjs and is a simple login page that receives the username and password and sends it to the server using gRPC. Everything is fine when I submit a request with BloomRPC. But when using the browser,…
Saeed
  • 3,294
  • 5
  • 35
  • 52
6
votes
1 answer

Enable http header logging for envoy in istio

I want to be able to capture (log) (at least some of) envoy's HTTP headers on my istio service mesh. I have gone through envoy's docs, and in the log levels' section, it does not mention any header-specific information. Currently, my istio-proxy log…
pkaramol
  • 16,451
  • 43
  • 149
  • 324
6
votes
1 answer

What is the difference VirtualService and Gateway in istio?

I am trying to understand the difference between the VirtualService and the Gateway in istio? As far I could understand, VirutalService is also used for the purpose of routing the traffic same as Gateway
Rajesh Kumar
  • 63
  • 1
  • 6
6
votes
1 answer

envoy configuration parsing error INVALID_ARGUMENT:Unexpected token

Im trying to setup a basic envoy proxy (using Docker) from the envoy documentations but I keep getting parsing error as below: [2019-09-30 11:16:05.313][1][info][main] [source/server/server.cc:238] initializing epoch 0 (hot restart…
Omid S
  • 181
  • 1
  • 7
6
votes
2 answers

Remove upstream headers in envoy proxy after external authentication

Is there any way to remove a header going upstream after the external authentication with the envoy proxy? We planned to migrate to envoy proxy for our internal API gateway, but this is a blocker now. For example: the external authentication service…
Ysak
  • 2,601
  • 6
  • 29
  • 53
6
votes
1 answer

Service proxy with affinity based on URL

I am looking for a service proxy (or load-balancer) with URL-based affinity. This is for using in Kubernetes, inside the cluster: I am looking for an "internal" load balancer, I don't need to expose the service outside. By default, the Service in…
TagadaPoe
  • 95
  • 8
6
votes
1 answer

Can Envoy Proxy be used to wrap a third-party API?

I'm looking for to utilize a more mainstream and language-agnostic API proxy/wrapper for implementing common patterns (eg, circuit breaker, health checks, etc.) and tracking stats for API calls. However, this wrapper would be for remote third-party…
Rob Olmos
  • 2,372
  • 15
  • 24
5
votes
0 answers

Envoy access logs duration fields

We are using access logs fields to provide durations type We are using the following totalDuration: '%DURATION%' upstreamTime: '%RESP(X-ENVOY-UPSTREAM-SERVICE-TIME)%' We are getting the values, however its identical value (exact same time ) in the…
JME
  • 881
  • 2
  • 11
  • 23
5
votes
1 answer

How to debug an EnvoyFilter in Istio?

I have the following filter: apiVersion: networking.istio.io/v1alpha3 kind: EnvoyFilter metadata: name: proper-filter-name-here namespace: istio-system spec: workloadSelector: labels: app: istio-ingressgateway configPatches: -…
2240
  • 1,547
  • 2
  • 12
  • 30
5
votes
1 answer

Python GRPC - Failed to pick subchannel

I'm trying to setup a GRPC client in Python to hit a particular server. The server is setup to require authentication via access token. Therefore, my implementation looks like this: def create_connection(target, access_token): credentials =…
Woody1193
  • 7,252
  • 5
  • 40
  • 90
5
votes
1 answer

Illegal map value with envoy v3 about typed_config http connection manager

I am following this tutorial, in order to have a gRPC service transcoded to HTTP. However, it is not up to date, since it uses envoy API v2, but this is not anymore available (I am getting an error saying this), they are now using the v3. Therefore,…
TheTisiboth
  • 1,431
  • 1
  • 6
  • 13
5
votes
0 answers

Connecting react web client to gRPC server through Envoy docker doesn't work

I have gRPC server in scala Play Framework which exposes gRPC hello world example service on port 9000. I'm trying to connect it with React web client. It seems that I'm having connection issues with Envoy proxy which is deployed to docker container…
zoran jeremic
  • 2,046
  • 4
  • 21
  • 47
5
votes
2 answers

Use Envoy to setup a tunnel between networks

For a hybrid-cloud use-case we are looking into the suitability of EnvoyProxy to act as a solution to move data across an on-premise firewall. The intended setup is as follows: App A is located in an on premise network with no direct outbound or…
Joost Reuzel
  • 308
  • 1
  • 10
5
votes
0 answers

Apply envoyfilter ext_authz per virtual hosts

I have ext_authz filter as this: kind: EnvoyFilter metadata: name: authn-filter namespace: istio-system spec: workloadSelector: labels: istio: ingressgateway configPatches: - applyTo: HTTP_FILTER match: context:…
1
2
3
54 55