Questions tagged [envoyproxy]

Use this tag for questions about the Envoy xDS APIs or Envoy internals.

Envoy is an L7 proxy and communication bus designed for large modern service oriented architectures. The project was born out of the belief that:

The network should be transparent to applications. When network and application problems do occur it should be easy to determine the source of the problem.

Envoy is hosted by the Cloud Native Computing Foundation (CNCF). If you are a company that wants to help shape the evolution of technologies that are container-packaged, dynamically-scheduled and microservices-oriented, consider joining the CNCF. For details about who's involved and how Envoy plays a role, read the CNCF announcement.

For official documentation, head to https://www.envoyproxy.io/

To get in touch with the envoy community, please see the contacts list.

823 questions
5
votes
1 answer

What is the difference between Envoy Proxy and Consul?

I am having tough time understanding the distinction between Envoy and Consul. What are the use cases for each one and what are the advantages ? They both seem to be providing service mesh, observability and load balancing.
freakomonk
  • 574
  • 1
  • 5
  • 15
5
votes
2 answers

In Istio Envoy access log, what is upstream and downstream remote, local

Scenario I'm using Istio 1.5 From this question I know the default envoy access log format that Istio uses, which is \[%{TIMESTAMP_ISO8601:timestamp}\] \"%{DATA:method} (?:%{URIPATH:uri_path}(?:%{URIPARAM:uri_param})?|%{DATA:}) %{DATA:protocol}\"…
Tran Triet
  • 1,257
  • 2
  • 16
  • 34
5
votes
0 answers

Envoy shows no healthy upstream

I'm trying to build an envoy proxy by the help a blog and I'm getting a bit of problem there. First of all, the blogs fixes the ip address and also it wildcard matches with any URL keeping the only thing important as port but when I tried to run…
Alohomora
  • 417
  • 1
  • 5
  • 12
5
votes
3 answers

How to configure TLS origination in ISTIO?

Istio does not route to external HTTPs service via TLS origination. I have a pod containing two containers: - Application - ISTIO Proxy Application makes a call to external third party API which resides on…
vikp
  • 151
  • 1
  • 9
5
votes
2 answers

Envoy behind company proxy

We're planning to use Envoy on my project, so I started fooling around with the simple examples provided on the Envoy github, and I'm facing difficulties with my company proxy. The first thing I tried is quite simple, serve a website www.onisep.fr…
Neumann
  • 551
  • 2
  • 6
  • 17
5
votes
1 answer

Istio envoy is dropping requests with Host header

I having an issue trying to get Istio working on my cluster. My infrastructure looks like this: I have a Magento Store with a varnish as front cache. It was working before istio installation. I have already enabled envoy injection. Varnish is…
AndresJ
  • 51
  • 5
5
votes
3 answers

Starting a container/pod after running the istio-proxy

I am trying to implement a service mesh to a service with Kubernetes using Istio and Envoy. I was able to set up the service and istio-proxy but I am not able to control the order in which the container and istio-proxy are started. My container is…
DoIt
  • 3,270
  • 9
  • 51
  • 103
5
votes
1 answer

Istio (1.0) intra ReplicaSet routing - support traffic between pods in a Kubernetes Deployment

How does Istio support IP based routing between pods in the same Service (or ReplicaSet to be more specific)? We would like to deploy a Tomcat application with replica > 1 within an Istio mesh. The app runs Infinispan, which is using JGroups to sort…
5
votes
1 answer

Istio mTLS flow

I am little confused about the mTLS flow of istio. In the bookinginfo example, I see that services are doing calls over http instead of https. If there is mTLS between services then service make http calls? Can it be that HTTP from service goes to…
user1138406
  • 71
  • 1
  • 4
5
votes
1 answer

Communicating with Redis server from a container behind Envoy

I have deployed envoy containers as part of an Istio deployment over k8s. Each Envoy proxy container is installed as a "sidecar" next to the app container within the k8s's pod. I'm able to initiate HTTP traffic from within the application, but when…
Zvika
  • 83
  • 8
4
votes
1 answer

Helm install fails on K3s : ensure CRDs are installed first

My team and I are new to Kubernetes and are experimenting with running a few applications on it. For proof of concept, we have a running Lightweight Kubernetes (K3s) install, which presumably does not have the full range of CRDs available on a…
arimbun
  • 3,885
  • 2
  • 19
  • 16
4
votes
0 answers

Envoy based header to metadata filtering regex not working

My use case is to remove query parameters from the path so the envoy ISTIO filter can filter on the basis of just APIs. I am using the below configuration it is a filtering route but also takes query parameters in the path not truncating it. The…
NecessaryDevil
  • 105
  • 1
  • 10
4
votes
2 answers

Add header with EnvoyFilter does not work

I am testing istio 1.10.3 to add headers with minikube but I am not able to do so. Istio is installed in the istio-system namespaces. The namespace where the deployment is deployed is labeled with istio-injection=enabled. In the config_dump I can…
Little crazy
  • 113
  • 2
  • 7
4
votes
2 answers

HTTP Live Streaming proxy setup

I'm currently deciding on what route to take for setting up load balancing and scaling for HLS. My intuition is to have a custom component (that will auto-scale) and load-balance to it using sticky balancing based on the stream ID. So basically one…
Šimon Tóth
  • 35,456
  • 20
  • 106
  • 151
4
votes
1 answer

envoy - assert failure: interface_index == 0

I'm getting an error when trying to run envoy with envoy --bootstrap-version 2 -c ./config.yaml Envoy version: 1.17.1 installed with homebrew OS: macOS Big Sur Version: 11.2.3 (20D91) Error: [2021-04-01 22:57:39.064][105033][info][main]…
shotex
  • 349
  • 5
  • 10
1 2
3
54 55