Server Fault
Server Fault

Questions tagged [envoyproxy]

Envoy proxy is a L7 proxy.

Envoy proxy is a L7 edge and service proxy, written in C++. It is geared towards cloud-native services and is e.g. used by the istio project.

19 questions
3
votes
0 answers

error unmarshalling config dump when trying to view my Istio Envoy config

I'm running Istio on Google Kubenetes Engine. I've been following this post to enable gRPC-web in Istio. I want to view the config of my Istio Envoy proxy to check that envoy.grpc_web is in it, but it gives me an error: $ kubectl get pods -n…
Toby 1 Kenobi
  • 317
3
votes
1 answer

Is it possible, with Envoy Proxy, to apply an HTTP filter based on the URL?

As the title says, I would like an HTTP filter to apply only if the request is for a certain URL path. Doing this at the route level is not possible, because my route is defined like this: - match: prefix: "/api/" route: cluster:…
Pablote
  • 217
2
votes
1 answer

Why is My Istio EnvoyFilter with TCP Idle Timeout Setting not working?

I have created an EnvoyFilter to apply TCP idle timeout to outbound requests. Here's my filter configuration: apiVersion: networking.istio.io/v1alpha3 kind: EnvoyFilter metadata: name: tcp-idle-timeout spec: workloadSelector: labels: …
bakadevops
  • 53
  • 1
  • 1
  • 5
2
votes
1 answer

istio-proxy 403 error:'upstream connect error or disconnect/reset before headers. reset reason: connection failure'

We have deployed an application behind the istio ingress gateway and is accessible at test.domain.com/jenkinscore.We have used istio 1.4.5. The domain name is created for the istio ingress gateway service IP. As per the below logs, when we hit this…
Meghana B Srinath
  • 145
1
vote
1 answer

Istio : HTTPS Traffic converted to HTTP with port set as 443

Bug description We have setup an istio over on eks cluster & a java app is hosted in it. The pod has been created along with service with type ClusterIP We have created Virtual Service, Gateway & set the istio ingress gateway as a NodePort. In front…
sarathprasath
  • 111
1
vote
0 answers

How to configure dynamic routing of gRPC requests with envoy, nomad and consul

We use nomad to deploy our applications - which provide gRPC endpoints - as tasks. The tasks are then registered to Consul, using nomad's service stanza. The routing for our applications is achieved with envoy proxy. We are running central envoy…
DaDaDom
  • 532
1
vote
1 answer

Fan out to other hosts when already using Serial in ansible

I have 80+ hosts that run my application, and I'm updating a long existing ansible playbook to change our load balancer. In our current load balancer setup, hosts can be added / removed from the load balancer in one ansible play by shelling out to…
Mike
  • 113
1
vote
0 answers

Envoy to envoy TLS for TLS proxy

Assume this artitecture ................................................ . . . …
M.A. Heshmat Khah
  • 113
1
vote
1 answer

Istio Keeps On Showing TcpProxyValidationError Errors

I initially created an EnvoyFilter to apply idle_timeout of 5s to outbound requests originating from workloads with label app: mecha-dev. apiVersion: networking.istio.io/v1alpha3 kind: EnvoyFilter metadata: name: tcp-idle-timeout spec: …
bakadevops
  • 53
  • 1
  • 1
  • 5
0
votes
1 answer

integrate envoy with consul for service discovery

Edit - Is it even possible to achieve it or I should be looking into something else? How can I integrate envoy with consul for automatic service discovery and routing? I've the containers running in docker and each container is registering with the…
AppDeveloper
  • 123
0
votes
0 answers

How do you enable `envoy.reloadable_features` in Istio?

I use Istio to manage Envoy. I want to enable a feature gated behind an envoy.reloadable_features flag. How do I do this?
Derek Brown
  • 113
0
votes
0 answers

How to configure Envoy as a caching forward proxy with HTTP CONNECT support

Does anyone know if there's a way to configure Envoy as a caching forward proxy? I've been trying to come to a config that would do that by following the samples and documentation for: dynamic_forward_proxy_filter cache_filter, connectmatcher My…
Nilvap
  • 1
0
votes
1 answer

Is it possible to filter local network traffic based on the URL?

What I'm planning to do is e.g. allow: https://website.com/a/ but block: https://website.com/b/. Research on proxy servers seems like they filter based on only domain names website.com. Since most request are encrypted (https), a proxy cannot view…
EODAV
  • 3
0
votes
1 answer

When I run envoyproxy I get a GLIBC_2.29 and GLIBC_2.30 not found error | Oracle Cloud (ARM - Ampere Processor) with Oracle Linux 8

When I try to execute envoy then I get the following error on Oracle Cloud ARM processor (ARM - Ampere Processor) on Oracle Linux 8: envoy: /lib64/libm.so.6: version `GLIBC_2.29' not found (required by envoy) envoy: /lib64/libpthread.so.0: version…
sm-a
  • 33
  • 1
  • 1
  • 4
0
votes
0 answers

How to redirect to already opened port using Ip tables

I am using envoy proxy(8001). Current Situation : when I curl localhost:8001, envoy will inject some data in packets and send the result to remoteip:32100 What i want is like Expectation: when I curl remoteip:32100 it should redirect through…
JibinNajeeb
  • 101
1
2