Envoy Proxy
Following adds this technology to your private workspace so related learning is easier to organise and revisit.
Lifecycle status for Envoy Proxy: Current
What is Envoy Proxy?
Envoy is an open-source, high-performance proxy designed for service-to-service and edge traffic in distributed systems. This profile connects the concept to KBY's practical engineering guidance.
Envoy separates traffic policy from application code through listeners, filters, clusters and dynamic xDS configuration. It commonly runs as a sidecar, gateway or front proxy and supports HTTP, gRPC, load balancing, retries, circuit breaking, observability and transport security.
Control, secure and observe application traffic through a programmable network proxy.
- Service mesh sidecar proxy
- Edge API gateway
- L7 load balancing
4 resources for Envoy Proxy
Browse by purpose, from definitions and learning through operations, diagnostics and controlled recovery.
Learn and operate with Envoy Proxy
Ordered as a reader progression -- from core definitions through to operational reference -- using only the content already connected in the technology registry.
Lexicon Definitions(1)
Start here: understand the core vocabulary.
Systems Engineering(2)
Learn the architecture, concepts and engineering context.
- Fixing gRPC Load Balancing Behind L4 ProxiesWhy HTTP/2 multiplexing pins gRPC traffic to single backends behind L4 proxies, and how DNS resolvers, round_robin policy, and Envoy EDS fix it. Open
- Ambient Mesh: L7 Policy Without SidecarsHow ztunnel and waypoint proxies replace sidecars, with HBONE tunnelling, mTLS termination, and the failure domains this two-layer split creates. Open
Daily Triage(1)
Practise diagnosis through bounded engineering scenarios.