Stack Overflow
Stack Overflow

Questions tagged [envoyproxy]

Use this tag for questions about the Envoy xDS APIs or Envoy internals.

Envoy is an L7 proxy and communication bus designed for large modern service oriented architectures. The project was born out of the belief that:

The network should be transparent to applications. When network and application problems do occur it should be easy to determine the source of the problem.

Envoy is hosted by the Cloud Native Computing Foundation (CNCF). If you are a company that wants to help shape the evolution of technologies that are container-packaged, dynamically-scheduled and microservices-oriented, consider joining the CNCF. For details about who's involved and how Envoy plays a role, read the CNCF announcement.

For official documentation, head to https://www.envoyproxy.io/

To get in touch with the envoy community, please see the contacts list.

480 questions
16
votes
1 answer

Is it possible to use Istio without kubernetes or docker?

I have 4 microservices running on my laptop listening at various ports. Can I use Istio to create a service mesh on my laptop so the services can communicate with each other through Istio? All the links on google about Istio include kubernetes but I…
user674669
  • 6,969
  • 7
  • 54
  • 83
14
votes
1 answer

Istio(0.7.1) : Circuit Breaker Doesn't work for httpConsecutiveErrors

Circuit breaker doesn't trip on httpConsecutiveErrors: 1 (for 500 response). All requests pass through and give a 500 instead . Circuit breaker should trip and should return 503(Service Unavailable) instead . Follow the steps Circuit breaker…
Jeson Dias
  • 755
  • 2
  • 8
  • 26
12
votes
0 answers

How to diagnose/fix envoy proxy "upstream connect error or disconnect/reset before headers. reset reason: connection failure"

I have a service mesh envoy proxy configuration issue. The configuration is based on this example from the official envoy proxy site: https://www.envoyproxy.io/docs/envoy/latest/start/sandboxes/front_proxy, and this ssl lesson:…
Eric Steen
  • 651
  • 8
  • 17
11
votes
4 answers

Is it possible to rewrite HOST header in k8s Ingress Controller?

Due to some legacy application that relies on Host header to function correctly, I need to have an Ingress (proxy, etc) that capable of rewrite Host header and pass that to downstream (backend). Is there any Ingress Controller that supports this…
Agung Pratama
  • 3,056
  • 4
  • 29
  • 65
9
votes
1 answer

Accessing service using istio ingress gives 503 error when mTLS is enabled

I have a mutual TLS enabled Istio mesh. My setup is as follows A service running inside a pod (Service container + envoy) An envoy gateway which stays in front of the above service. An Istio Gateway and Virtual Service attached to this. It routes…
Pasan W.
  • 610
  • 1
  • 9
  • 19
8
votes
1 answer

how can I use environment variables in the envoyproxy config file?

Until now the only solution that I found is use --config-yaml, something like that envoy -c /etc/service-envoy.yaml \ --config-yaml "'static_resources': { 'clusters': [ { 'name': 'jaeger', 'connect_timeout': '1s', …
JuanPablo
  • 21,182
  • 32
  • 102
  • 155
6
votes
0 answers

What are the causes of various Envoy RESPONSE_FLAGS

I'm trying to debug a mesh of services, with Envoy sat in the middle. The access logs are showing a lot of 503s, which vary in their %RESPONSE_FLAGS%. Other than the access logging docs, I can't find any explaination of what the flags actually…
mt165
  • 178
  • 7
6
votes
1 answer

How log request and response body in Istio

I'd like to log request and response body from incoming traffic to each my microservice. Is it possible in Istio (Envoy) out-of-the-box? I don't see body attribute for mapping in Mixer's EntryLog. Maybe it will be added in future version of…
montana202
  • 61
  • 1
  • 4
6
votes
1 answer

How istio send tracing spans to jaeger?

I want to use istio with existing jaeger tracing system in K8S, I began with installing jaeger system following the official link with cassandra as backend storage. Then installed istio by the helm way, but with only some selected components…
shizhz
  • 9,521
  • 3
  • 33
  • 44
6
votes
1 answer

Can Envoy Proxy be used to wrap a third-party API?

I'm looking for to utilize a more mainstream and language-agnostic API proxy/wrapper for implementing common patterns (eg, circuit breaker, health checks, etc.) and tracking stats for API calls. However, this wrapper would be for remote third-party…
Rob Olmos
  • 2,214
  • 12
  • 21
6
votes
1 answer

Why is envoy proxy required for grpc-web?

If the browser supports http/2, why does grpc-web require envoy proxy? Is it just required for older browsers that do not support http/2?
Deep Vora
  • 178
  • 1
  • 11
6
votes
2 answers

Service mesh and Async services

I am planning to introduce K8s/Istio into my infra. Right now I have plenty of services which communicate with each other using RabbitMQ. Service mesh concept seems to assume all services should be synchronous. I'd like to keep at least some of my…
arkadiy kraportov
  • 3,519
  • 4
  • 29
  • 38
5
votes
2 answers

istio-proxy closing long running TCP connection after 1 hour

TL;DR: How can we configure istio sidecar injection/istio-proxy/envoy-proxy/istio egressgateway to allow long living (>3 hours), possibly idle, TCP connections? Some details: We're trying to perform a database migration to PostgreSQL which is being…
Yayotrón
  • 1,122
  • 11
  • 20
5
votes
0 answers

Envoy shows no healthy upstream

I'm trying to build an envoy proxy by the help a blog and I'm getting a bit of problem there. First of all, the blogs fixes the ip address and also it wildcard matches with any URL keeping the only thing important as port but when I tried to run…
Alohomora
  • 147
  • 1
  • 9
5
votes
3 answers

How to configure TLS origination in ISTIO?

Istio does not route to external HTTPs service via TLS origination. I have a pod containing two containers: - Application - ISTIO Proxy Application makes a call to external third party API which resides on…
vikp
  • 142
  • 1
  • 8
1
2 3
…
31 32