Questions tagged [envoyproxy]

Use this tag for questions about the Envoy xDS APIs or Envoy internals.

Envoy is an L7 proxy and communication bus designed for large modern service oriented architectures. The project was born out of the belief that:

The network should be transparent to applications. When network and application problems do occur it should be easy to determine the source of the problem.

Envoy is hosted by the Cloud Native Computing Foundation (CNCF). If you are a company that wants to help shape the evolution of technologies that are container-packaged, dynamically-scheduled and microservices-oriented, consider joining the CNCF. For details about who's involved and how Envoy plays a role, read the CNCF announcement.

For official documentation, head to https://www.envoyproxy.io/

To get in touch with the envoy community, please see the contacts list.

823 questions
4
votes
2 answers

How to wait until EXTERNAL-IP is assigned?

When I deploy https://projectcontour.io/ ingress controller on my Digital Ocean K8S cluster, a load balancer gets created automatically. I consider to use Ansible as management tool for K8S to automate the deployment. After the following tasks: -…
softshipper
  • 32,463
  • 51
  • 192
  • 400
4
votes
1 answer

Can istio invoke lambda functions?

I have some external services running on AWS with lambda and API gateway I'm using istio and i've configure a service entry to api gateway and it works. I'm wondering if i can use envoy filter in istio to invoke the lambda function directly like on…
4
votes
0 answers

Envoy Filter with a Lua script to fetch data from other API

I've got a Envoy Filter in which I add a header to every HTTP request. The header's value comes from API. Let's assume two configurations of the filter. In the configuration below I added a hardcoded version of my header. It was checked in the logs…
uiguyf ufdiutd
  • 142
  • 1
  • 10
4
votes
1 answer

Istio envoy proxy request loop causing OOM

I have an interesting problem. I think I've found an infinite request loop that's causing my istio-proxy to crash with an OOM error in a specific circumstance. When I submit the request locally to the app directly from inside the application…
blankenshipz
  • 365
  • 2
  • 10
4
votes
2 answers

Is there a way to prevent envoy from adding specific headers?

According to the docs here https://www.envoyproxy.io/docs/envoy/latest/configuration/http/http_conn_man/headers#x-forwarded-proto Envoy proxy adds the Header X-Forwarded-Proto to the request, for some reason the header value is wrong; it set it as…
yakout
  • 782
  • 3
  • 9
  • 24
4
votes
1 answer

Envoy Proxy as Explicit proxy

I am trying to configure Envoy as an explicit proxy to handle connect, tried using config given at https://github.com/envoyproxy/envoy/blob/de757584e65da842dee5bddee3893a66b9a6219c/configs/terminate_connect.v3.yaml is there any example of…
Arun Yadav
  • 41
  • 3
4
votes
0 answers

How can I augment the default metrics in Istio 1.6?

As described here I am trying to add the destination_ip label to the istio_tcp_connections_closed_total metric so that I can observe which IPs are being blocked by my mesh. Since the introduction of Istiod these metrics are exposed directly by Envoy…
dippynark
  • 2,743
  • 20
  • 58
4
votes
2 answers

istio: VirtualService rewrite to the root url

I have an Istio 1.4.6 VirtualService with a match and a url rewrite defined as follows: match: - authority: prefix: example.com uri: prefix: /foo/bar rewrite: uri: / route: - destination: host:…
Joe J
  • 9,985
  • 16
  • 68
  • 100
4
votes
2 answers

k8s/istio - What's the alternative to HTTP caching between services while Envoy doesn't support it?

I'm looking for a fast HTTP response of cacheable data between services in Kubernetes. Since my apps are already container-native, I don't want to code in my application the logic of caching, neither via cache lib. The apps are focused mainly on…
ethanxyz_0
  • 713
  • 12
  • 37
4
votes
1 answer

Consul & Envoy Integration

Background I came from HAproxy background and recently there is a lot of hype around "Service Mesh" Architecture. Long story short, I began to learn "Envoy" and "Consul". I develop an understanding that Envoy is a proxy software but using sidecar…
Mistletoe
  • 235
  • 1
  • 3
  • 11
4
votes
2 answers

How can I config envoy proxy to failover when some upstream being unreachable

I am new to envoy proxy, what I need is using envoy as sidecar proxy between grpc client and server. So far, I have connected a grpc client and two server, with lb_policy set as ROUND_ROBIN. But when I close one of the servers, grpc client call…
Ian.Zhang
  • 151
  • 1
  • 10
4
votes
1 answer

How to disable istio readiness probe

I want to disable istio readiness probe from doing health check.. on running service. Is there a way to disable http readiness probe and later enable it
pappu_kutty
  • 2,378
  • 8
  • 49
  • 93
4
votes
1 answer

Envoy and statsd Error: node 'id' and 'cluster' id are required

I am trying to configure stats sink to collect stats into statsd. I have configured the envoy.yaml as follows: admin: access_log_path: /logs/envoy_access.log address: socket_address: protocol: TCP address: 0.0.0.0 …
coder_bro
  • 10,503
  • 13
  • 56
  • 88
4
votes
1 answer

Configuring Envoy to use SRV records generated by AWS ECS and Route53

I'm using AWS ECS to deploy multiple web services (via Docker images) that are behind an Envoy front proxy. Some of these docker images have multiple deployed instances. I'm currently using the service discovery features of ECS to generate DNS…
JohnP
  • 49,507
  • 13
  • 108
  • 140
4
votes
1 answer

Istio End User Authentication with JWT on a GRPC service

I would like to set up an auth policy on a GRPC service through Istio. Currently, it's possible to add the policy on regular HTTP services, as you can use the Authorization header to pass the JWT token to the service. I'm a bit lost as it doesn't…
odino
  • 1,069
  • 11
  • 27