Questions tagged [envoyproxy]

Use this tag for questions about the Envoy xDS APIs or Envoy internals.

Envoy is an L7 proxy and communication bus designed for large modern service oriented architectures. The project was born out of the belief that:

The network should be transparent to applications. When network and application problems do occur it should be easy to determine the source of the problem.

Envoy is hosted by the Cloud Native Computing Foundation (CNCF). If you are a company that wants to help shape the evolution of technologies that are container-packaged, dynamically-scheduled and microservices-oriented, consider joining the CNCF. For details about who's involved and how Envoy plays a role, read the CNCF announcement.

For official documentation, head to https://www.envoyproxy.io/

To get in touch with the envoy community, please see the contacts list.

823 questions
3
votes
0 answers

Proper way of handling connections to an external Microsoft SQL VM cluster

I have some dotnet core microservices running in my kubernetes cluster (1.19.1), they are all running the istio sidecar proxy (1.9.1), and I am seeing some flaky connection behavior when making calls to the microservice which connects to the…
3
votes
1 answer

Can gRPC method return a message with a field that could be string or null?

I'm designing a gRPC service written in Go. In front of the gRPC service is Envoy which converts incoming HTTP requests to gRPC and converts the gRPC responses to JSON. The requirement of this application is to have an endpoint that returns the…
Saqib Ali
  • 11,931
  • 41
  • 133
  • 272
3
votes
0 answers

Envoy: websocket redirect (ws -> wss)

In the envoy (configured as a reverse proxy) is there a way to redirect websocket connection to secure websocket (ws -> wss). It's possible to do https redirect but could not find a solution for websockets.
Alex R
  • 31
  • 1
3
votes
0 answers

Envoy and GRPC not working (no healthy upstream)

I have a Java back-end providing GRPC and it works quite well when using without Envoy, however for GRPC-web, it gives me 503 response. I've been trying for several days now without any success. Here's my envoy.yaml: admin: access_log_path:…
lemmer
  • 63
  • 1
  • 7
3
votes
2 answers

Istio EnvoyFilter rate limiting

We have to configure Istio with rate limiting. We are using istio 1.6. All the examples provided have rate limiting based on headers. Can we rate limit our application for all the requests irrespective of headers. Like istio should limit all the…
ans98
  • 96
  • 1
  • 5
3
votes
1 answer

simple envoy filter not being used

Hi I'm new to Envoy and Istio. I'm trying to write an envoy filter to rewrite/redirect HTTP(s) requests. Below is my configuration (yes, a toy example) and it's not working. apiVersion: networking.istio.io/v1alpha3 kind: EnvoyFilter metadata: …
user2309838
  • 197
  • 6
  • 13
3
votes
2 answers

Microservices Api gateway and Identity Server 4 kubernates

I have microsevices and SPA app. All of them run on docker with docker compose. I have ocelot api gateway. But gateway knows ip address or container names of microservices for reaching . I add a aggregater service inside ocelot app. And I can…
eren arslan
  • 197
  • 2
  • 11
3
votes
1 answer

Istio: sidecar EnvoyFilter workloadSelector not filtering

I'm having an issue where two EnvoyFilters with different workloadSelectors that are supposed to apply to different pods workloads, are instead both being applied to both workloads. More specifically, I'm using Istio 1.4.9 and I have two instances…
Joe J
  • 9,985
  • 16
  • 68
  • 100
3
votes
1 answer

Add Local rate limiting using EnvoyProxy

I setup Global rate limiting on a K8s cluster (with Istio on minikube). I followed this repo https://github.com/istio/istio/issues/22068#issuecomment-633036911 as it summarizes this issue well and makes global rate limiting work. It works really…
Harsha Reddy
  • 99
  • 1
  • 8
3
votes
0 answers

number of certificates, listeners and routes in envoy proxy

Hi I am looking for using envoy proxy for a multi tenant saas application, where we would like to let our customers have their own domains (kind of bring your own certificate model). I am currently looking at using nginx,envoy etc as our front…
3
votes
2 answers

GRPC-Web connectivity issue in TLS

I have a GRPC Web client and a GRPC Server and I am using envoy proxy from the conversion of HTTP 1.1 to HTTP2. My server creation Logic uses TLS. The code is as follows: var opts []grpc.ServerOption creds, err :=…
Anshu Kumar
  • 807
  • 1
  • 8
  • 27
3
votes
2 answers

Simple http request between two pods using Istio

My frontend pod is trying to talk to my backend pod to fetch all the users in a DB. The call is straightforward and works when I use curl inside BOTH the frontend and istio-proxy containers in the frontend pod: kubectl exec -it frontend-pod -c…
Johnny Metz
  • 5,977
  • 18
  • 82
  • 146
3
votes
1 answer

Istio Sidecar proxy fails to start due to Invalid path on certs mTLS

Auto inject is enabled on namespace and I am attempting to use Auto mTLS. Verified Istio pilot and citadel are running correctly. The Cert secret was properly created and mounted. The istio proxy fails to start with the following logs. The specific…
CodyK
  • 3,426
  • 4
  • 36
  • 52
3
votes
0 answers

envoyproxy returning 503 error, "UC, upstream connection termination", when attempt to read from Docker-hosted Tomcat

I am running straight Docker (no Kubernetes). In that Docker system, I am running two containers, one running an envoyproxy and the other running Tomcat. The goal is to have envoyproxy front-end all containers in this Docker system. I always get…
3
votes
1 answer

Envoy as a reverse proxy and load balancer for unix sockets

I have the following issue: envoy should do reverse proxy to numerous unix sockets such as: /var/run/node1.sock /var/run/node2.sock ... and so on. None of configuration i tried work, envoy even not start. Can someone explain how to reverse…