Questions tagged [envoyproxy]

Use this tag for questions about the Envoy xDS APIs or Envoy internals.

Envoy is an L7 proxy and communication bus designed for large modern service oriented architectures. The project was born out of the belief that:

The network should be transparent to applications. When network and application problems do occur it should be easy to determine the source of the problem.

Envoy is hosted by the Cloud Native Computing Foundation (CNCF). If you are a company that wants to help shape the evolution of technologies that are container-packaged, dynamically-scheduled and microservices-oriented, consider joining the CNCF. For details about who's involved and how Envoy plays a role, read the CNCF announcement.

For official documentation, head to https://www.envoyproxy.io/

To get in touch with the envoy community, please see the contacts list.

823 questions
4
votes
1 answer

Why can envoy sidecar control my traffic?

I run istio on Kubernetes. I want to know how the envoy sidecar works. For example, after sidecar is injected into the pod, the original container cannot access the outer network without EgressRule. How does it work?
Haoyuan Ge
  • 3,379
  • 3
  • 24
  • 40
3
votes
0 answers

How to separate Upstream and downstream logs in Envoy?

I am using Envoy as a proxy in my architecture and I want to separate the access logs for upstream and downstream traffic. I am currently using Envoy version 1.18 I am using the following code in my configuration: access_log: -…
Pranav Choudhary
  • 2,726
  • 3
  • 18
  • 38
3
votes
0 answers

Envoy external processing filter: issues with Content-Length Header when processing request body

I'm having a bit of a struggle with using the External Processing filter for Envoy (described HERE. I'm currently using a similar setup to THIS EXAMPLE , where I want to do some processing on both the request and response bodies being sent to an…
3
votes
0 answers

How to represent google.protobuf.Any to JSON?

I have a request with a field of google.protobuf.Any type. I already checked if my gRPC service is working and I set up the envoy to transcode HTTP/JSON to gRPC. But the envoy keeps giving me an error because of the google.protobuf.Any…
Gunwoo Kim
  • 63
  • 8
3
votes
1 answer

What Envoy metric should be used to measure server latency?

My server is a service deployed to service mesh implemented by Envoy and Istio sidecars. I only have access to Envoy metrics. The HTTP server receives requests from clients external to the mesh as in the diagram below: I want to measure the average…
hitchhiker
  • 1,099
  • 5
  • 19
  • 44
3
votes
0 answers

Envoy setup for grpc-web

I'm a bit confused as to how to set up Envoy with gRPC web. According to the documentation, "we will use the Envoy proxy to forward the gRPC browser request to the backend server. You can see the complete config file in envoy.yaml". I have a JS FE…
user726350
  • 31
  • 2
3
votes
0 answers

Internal communication among services with app mesh in ECS

I have application stack consisting of three services in AWS ECS. I have been planning to implement service mesh using AWS App Mesh. I have followed the following instructions to setup the mTLS for my…
3
votes
1 answer

Envoy WASM failing to load due to missing import (using net/http Go module)

I'm trying to run my WASM Go filter to make an external HTTP call using the net/http module. Envoy fails to load the WASM code. Why is the import failing? Envoy/Istio version: istio/proxyv2:1.11.4 SDK version:…
enigma
  • 93
  • 1
  • 10
3
votes
1 answer

Using gRPC Web with Dart

I have a web application with the following stack: UI: Flutter Web/Dart Server: Go Communication Protocol: gRPC/gRPC-Web I have defined a few protobufs and compiled them into both Go and Dart successfully. When I run the Go server code, I am able…
Sal
  • 1,471
  • 2
  • 15
  • 36
3
votes
2 answers

Jwt verification fails by Envoy

I have a Laravel(Lumen) Login API, which generates a JWT using HS256. Then I sent my bearer token to Envoy Gateway and get from Envoy JWT verification fails On official JWT decode site I could successfully decode and verify my bearer token. Here I…
3
votes
1 answer

Envoy: "upstream connect error or disconnect/reset before headers. reset reason: connection failure"

I'm newbie in envoy. I have been struggling during a week with error below. So my downstream(server which requests for some data/update) receives response: Status code:…
sirsova
  • 31
  • 1
  • 5
3
votes
2 answers

Unable to make lua-based EnvoyFilter to work

I'm trying to make EnvoyFilters work in my installation. For test purposes I'm trying to set lua filter that logs dumb message and adds header to the resonse. Here's my configuration: apiVersion: networking.istio.io/v1alpha3 kind:…
Dm3Ch
  • 621
  • 1
  • 10
  • 26
3
votes
1 answer

Service Discovery with Envoy

How does it work with Envoy? Let's say I have configured an upstream cluster like this: clusters: - name: "service_a_cluster" connect_timeout: "0.25s" type: "strict_dns" lb_policy: "ROUND_ROBIN" hosts: -…
whowhenhow
  • 109
  • 1
  • 8
3
votes
1 answer

wasm rust base 64 support

I've created a program which works as expected: extern crate base64; // decode base64 let bytes = base64::decode(res[1]).unwrap(); [dependencies] base64 = "0.13.0" serde_json = "1.0.64" When I add this code to Webassembly for an Envoy filter with…
Jenney
  • 171
  • 6
  • 18
3
votes
0 answers

Istio request retry upstream selection algorithm

What is the request retry upstream selection algorithm? apiVersion: networking.istio.io/v1alpha3 kind: VirtualService metadata: name: rtest spec: hosts: - '*' http: - name: test match: - uri: prefix: / …
Jonas
  • 4,683
  • 4
  • 45
  • 81