Questions tagged [envoyproxy]

Use this tag for questions about the Envoy xDS APIs or Envoy internals.

Envoy is an L7 proxy and communication bus designed for large modern service oriented architectures. The project was born out of the belief that:

The network should be transparent to applications. When network and application problems do occur it should be easy to determine the source of the problem.

Envoy is hosted by the Cloud Native Computing Foundation (CNCF). If you are a company that wants to help shape the evolution of technologies that are container-packaged, dynamically-scheduled and microservices-oriented, consider joining the CNCF. For details about who's involved and how Envoy plays a role, read the CNCF announcement.

For official documentation, head to https://www.envoyproxy.io/

To get in touch with the envoy community, please see the contacts list.

823 questions
3
votes
2 answers

How can I ensure that TCP traffic is proxied by the Envoy sidecar when using Istio on Kubernetes?

Istio on Kubernetes injects an Envoy sidecar to run alongside Pods and implement a service mesh, however Istio itself cannot ensure traffic does not bypass this proxy; if that happens Istio security policy is no longer applied. Therefore, I am…
3
votes
1 answer

How does Knative Serving's Activator intercept requests to scaled down revisions?

As described here, Knative's Activator receives and buffers requests to inactive revisions. How is this routing implemented? All I see in the Namespace of my application is a VirtualService routing requests to the revisions, so I don't see how…
dippynark
  • 2,743
  • 20
  • 58
3
votes
2 answers

Multiple exact matches within envoy proxy

I was wondering if there's a way to perform multiple exact matches within envoy ? For e.g. interested in directing traffic to two different clusters based on a header attribute, - match: prefix: "/service/2" headers: - name:…
user1427026
  • 861
  • 2
  • 16
  • 32
3
votes
0 answers

How to put Prometheus behind Envoy front-proxy

I'm trying to put Envoy in front of our Prometheus docker container, but haven't been able to successfully get the routing to work properly. I get the error: "upstream connect error or disconnect/reset before headers. reset reason: overflow " I've…
Sam Jay
  • 51
  • 1
  • 6
3
votes
0 answers

How do I specify the host argument to configure scripts in Bazel?

I'm trying to cross-compile envoy (uses Bazel) on lubuntu 16.04 LTS for an aarch64 variant by using the Linaro toolchain at…
3
votes
1 answer

Capturing groups in istio

How can I use a part of matched URI in destination rule in istio? Trying to achieve something like this: apiVersion: networking.istio.io/v1alpha3 kind: VirtualService spec: http: - match: - uri: regex: "^/foo/(.+)/?$" route: …
Maklaus
  • 538
  • 2
  • 16
  • 37
3
votes
0 answers

gRPC-web cannot connect to server (proxy configuration problem)

I am trying to create a grpc-web client to connect to my grpc server. I already have my grpc server written in C++ and it works well with C# client, everything is okay and tested. Right now I am trying to create a js client to connect to my service.…
3
votes
1 answer

Istio gives 404 NR response when it should be giving 200

Related issue Istio envoy is dropping requests with Host header The above issue is the only one that's even remotely similar to my issue. However, the Host in my header is service-b.myns.svc.cluster.local and I don't see why that should be a…
meh
  • 2,591
  • 4
  • 20
  • 33
3
votes
2 answers

Update Envoy Dockerfile base image to python 3.6+

I try to update the python version in the envoy base image to python-3.6. But it doesn’t work. Here is the base image I have to use (Envoy Proxy) which have python-3.5.2 by…
Oiletz Matze
  • 125
  • 1
  • 3
  • 11
3
votes
2 answers

OpenShift access service in other namespace without network join

I'm new to OpenShift. I have two projects|namespaces. In each I have a rest service. What I want is service from NS1 access service from NS2 without joining projects networks. Also SDN with multi tenant plugin. I found example on how to add external…
Vito Karleone
  • 355
  • 1
  • 6
  • 17
3
votes
1 answer

Envoy's Logical DNS connection management

On its documentation ( https://www.envoyproxy.io/docs/envoy/latest/intro/arch_overview/service_discovery#logical-dns ) for Logical DNS service discovery, Envoy says: "only uses the first IP address returned when a new connection needs to be…
andresp
  • 1,624
  • 19
  • 31
3
votes
0 answers

Envoy routing based on gRPC method and paremeter

I have a Protobuf file Routing.proto used in a gRPC service. I also have an Envoy simple.yaml file. I am trying to gRPC route match on method service_B_hello(1) where 1 is a camera_id value wrapped inside CopyImageRequest. How can i do this route…
Vijay
  • 595
  • 1
  • 13
  • 27
3
votes
1 answer

How to resolve this node affinity with Envoy

I provide a gRPC service that unfortunately has to have node affinity between BeginTransaction and Commit API Calls. The Consumer API calls sequence is typically: BeginTransaction() returns txnID DoStuff(txnID, moreParams...) DoStuff(txnID,…
cvigo
  • 415
  • 3
  • 10
3
votes
1 answer

Istio distributed tracing with Jaeger not working

I'm trying to set up a local k8s cluster and on minikube with installed istio and I have an issue with enabling distributed tracing with Jaeger. I have 3 microservices A -> B -> C. I am propagating the all the headers that are…
Sergii Bishyr
  • 8,331
  • 6
  • 40
  • 69
3
votes
1 answer

Envoy rate limit config

I am trying to figure out how to set the rate limit in front-envoy to other services. I referred their documentation but was unable to see how the configuration actually works. Also came across lyft ratelimit but here also how to use this config is…
Ananthu R V
  • 428
  • 4
  • 17