Questions tagged [envoyproxy]

Use this tag for questions about the Envoy xDS APIs or Envoy internals.

Envoy is an L7 proxy and communication bus designed for large modern service oriented architectures. The project was born out of the belief that:

The network should be transparent to applications. When network and application problems do occur it should be easy to determine the source of the problem.

Envoy is hosted by the Cloud Native Computing Foundation (CNCF). If you are a company that wants to help shape the evolution of technologies that are container-packaged, dynamically-scheduled and microservices-oriented, consider joining the CNCF. For details about who's involved and how Envoy plays a role, read the CNCF announcement.

For official documentation, head to https://www.envoyproxy.io/

To get in touch with the envoy community, please see the contacts list.

823 questions
2
votes
1 answer

k8s user container is getting shut down by envoy/istio sigterm without completing process

Envoy sending TERM signal and closing my application before the process completion. Increasing Drain Duration preventing the pod from going down after the completion.(its waiting for the grace duration to be over and not allowing any new…
2
votes
1 answer

Envoy multiple ports per listener

I am not sure whether its feasible to create a listeners in the envoy.yaml with multiple ports to bind for incoming traffic and then forward to a service on the same ports but a different address? Example All HTTP traffic on port 9200 -> Use server…
KeithMac
  • 111
  • 7
2
votes
1 answer

How to route on basis of Http headers in Envoy Proxy

I am sending an http request with below header. Header = {"InstanceId" : "1"} How to route to an cluster(endpoint) using this header value i.e. 1 What i actually want to do in envoy.yaml : If (header. InstanceId == 1) Route to cluster A Else If…
2
votes
2 answers

Istio EnvoyFilter Lua HttpCall doesn't work with HTTPS?

I need to decrypt the body of a request in an external API. But, when I try to do it with an EnvoyFilter using lua it doesn't work. If I try the same code that I'm posting here, but without HTTPS, works. But with HTTPS returns 503. apiVersion:…
V.Junior
  • 29
  • 2
2
votes
1 answer

Envoy proxy: 503 Service Unavailable

State of Servies: Client (nuxt) is up on http://localhost:3000 and the client sends requests to http://localhost:8080. Server (django) is running on 0.0.0.0:50051. Also docker is up 78496fef541f 5f9773709483 "/docker-entrypoint.…" 29…
Saeed
  • 3,294
  • 5
  • 35
  • 52
2
votes
0 answers

does envoy queue request if max connection on upstream reach a limit?

lets say we deployed envoy with a single upstream server . and now want envoy to queue request if active http request reached a particular limit , if yes how to do it. What i understood is that it rejects request after a max connection limit is…
techagrammer
  • 1,291
  • 8
  • 19
2
votes
2 answers

Remove "server" header from Envoy Proxy responses

I'm currently trying to configure an Envoy route to remove the server header placed there by Envoy. I've tried using the response_headers_to_remove[1] field. It works for many fields (x-content-type-options, x-powered-by, etc), but not with…
Brian Luong
  • 538
  • 3
  • 15
2
votes
1 answer

How to set Hash Key value in envoy proxy for RING_HASH load balancing

I am trying to set up RING_HASH load balancing on the envoy proxy based on some request header. From documentation it looks like I have to set hash key in filter_metadata filter_metadata: envoy.lb: hash_key: "YOUR HASH KEY" But, I am not…
dnsh
  • 3,516
  • 2
  • 22
  • 47
2
votes
0 answers

How to redirect only one domain instead of all on 401 with envoy front proxy

Status Quo: We are using envoyproxy for filtering timed-out (and thus unauthorized) traffic with a status 401 to redirect to login.domain.tld on all .*\\.domain\\.de(:3000)? Thus, in envoy.yaml, inline_code: | function…
niolm
  • 73
  • 6
2
votes
1 answer

Envoy Proxy with GRPC Server Streaming throwing UNAVAILABLE: upstream request timeout

We are having GRPC client and GRPC server with service side streaming support. rpc LotsOfReplies(HelloRequest) returns (stream HelloResponse); GRPC server is running behind the Envoy proxy with GRPC configuration. The problem is when we connect…
Rahul Tokase
  • 1,048
  • 9
  • 25
2
votes
1 answer

Istio - envoy updates content-type header

I have deployed a spring boot application in the Kubernetes cluster and configured the Istio controller. When I hit the request from the client, the client sends the content-type header multiple times. But envoy is merging all the duplicate headers…
Dinesh Kumar
  • 483
  • 8
  • 24
2
votes
0 answers

Is there any way to disable sampling decision made by istio envoy proxy (zipking)?

Is there any way to disable sampling decision made by istio envoy proxy (zipking) ?
2
votes
1 answer

Envoy configuration

I am trying to set up an envoy for k8s. But the envoy service does not start and I see the following error in the log: "The v2 xDS major version is deprecated and disabled by default. Support for v2 will be removed from Envoy at the start of Q1…
2
votes
0 answers

Istio strips header when added via EnvoyFilter

I'm trying to add a specific "x-envoy..." header on the inbound request to a specific workload. More precisely it's the x-envoy-max-retries header. I do it like this: apiVersion: networking.istio.io/v1alpha3 kind: EnvoyFilter metadata: name:…
Mr. Nicky
  • 1,519
  • 3
  • 18
  • 34
2
votes
0 answers

Envoy always getting SSL Error for grpc-web and grpc

I have using Envoy for grpc-web and grpc service, but it is always getting SSL error. envoy version: 98c1c9e9a40804b93b074badad1cdf284b47d58b/1.18.3/clean-getenvoy-b76c773-envoy/RELEASE/BoringSSL stating command : sudo envoy -c…
shufilkhan
  • 521
  • 2
  • 6
  • 22