Envoy Proxy is a high-performance, open-source edge and service proxy designed for cloud-native applications, and with its versatile features, it has become an essential component in modern application architectures.
This is a curated knowledge repository of best practices, techniques, tools, tutorials and case studies that can help you learn more about Envoy Proxy.
- Getting Started Guide
- Videos
- Course & Certifications
- EnvoyCon
- Tools and Extensions
- Projects Built on Envoy Proxy
- Configuration Generator
- Case Studies
- Contributing
This section is dedicated to providing articles on how to get started with Envoy, an open-source edge and service proxy. Whether you're a beginner or looking to expand your knowledge, these articles will help you understand the basics and get started with Envoy.
- Getting started with Envoy Proxy for microservices resilience.
- Get started with Envoy Proxy in 5 minutes.
- Envoy threading model.
- Envoy hot restart.
- Envoy stats.
- Get Started with Envoy on your Laptop.
- I tried Getting Started with Envoy.
- How to use Envoy as a Load Balancer in Kubernetes.
- Architecture overview: Envoy Docs.
- What is Envoy.
- Envoy Proxy: Concepts, Architecture & Quick Tutorial.
- Anatomy of envoy proxy: the architecture of envoy and how it works.
- Service Mesh with Envoy.
- Service mesh data plane vs. control plane.
- Domain Driven Design - Clean Architecture using EnvoyProxy API Gateway.
- Envoy Proxy is Your Gateway to Service Mesh.
- Deploying Envoy in K8s and Configuring as Load Balancer.
- Load balancing and HTTP Routing with Envoy Proxy.
- What is Envoy Proxy and What you need it for Microservices.
- Understanding the Basics of Envoy Configuration.
- Developing Envoy Wasm Extensions.
- Envoy on Fire: A Practical Look at Debugging a Service Mesh.
- Envoy Fundamentals.
- Build an API Gateway with Envoy and use with .NET Core APIs.
- Hands-on Workshop: Envoy Metrics Demystified Workshop.
- Cloud-Native Building Blocks: An Interactive Envoy Proxy Workshop.
- Envoy Proxy Crash Course, Architecture, L7 & L4 Proxying, HTTP/2, Enabling TLS 1.2/1.3.
- Inside Envoy - The Proxy for the Future.
- Envoy Gateway: An in-Depth Guide of Its Benefits and Use Cases.
- A Practical Guide to Understanding and Configuring Envoy Filters.
- Get Started with Envoy Proxy - Free.
- Learn Envoy Fundamentals - Free.
- Learn Istio Fundamentals - Free.
- Certified Istio Administrator - Premium.
In this section, you will find a collection of talks that are focused on Envoy. These resources were presented at EnvoyCon, a conference dedicated to all things Envoy.
- Envoy Gateway Project Update.
- A Platform-Agnostic Approach to Securing Workloads.
- SLATE: Intelligent Request Routing.
- Leveraging Envoy to Implement Micro-Segmentation-Based Security Policies.
- Pushing Envoy Beyond the Edge.
- Envoy Gateway Project Update.
- Envoy Upstream Enhancements.
- Honey, I Broke the Things: Debugging Gray Failures in Production!.
- Manipulating HTTP Headers Using a Full Set of Substitution.
- How Lyft Used Envoy to Rethink Microservice Development.
- Extending Envoy for Our Use: An End User Adoption Story from Fidelity.
- Access Control and URI Path Normalization.
- More Intelligent Global Rate Limiting.
- Distributed Tracing Without the Pain!.
- Hardware Accelerated Service Mesh Overview.
- Using Envoy as an Egress Proxy for TLS Enabled Traffic.
- Lessons Learned: Four Years with Emissary-ingress and Envoy.
- Health Checks: A Boon or a Curse?.
- Dedicated Infrastructure in a Multitenant World.
- HTTP/3 in Envoy: End to End Acceleration.
- Connecting the (Proxy) Dots: A Beginners Guide to Reading Envoy Debug Logs.
- State of Go Control Plane: What Does the Future Behold?.
- Extending Envoy Using WebAssembly (Wasm).
- The Trials and Success of Adopting Envoy at Tinder.
- Speeding up Istio: Our Journey Implementing Delta xDS.
- Load Shedding for Evil Wizards.
- PostgreSQL Network Filter for EnvoyProxy.
- Hands-on WASM filters and singletons.
- CacheFilter: Flexible HTTP Caching in Envoy.
- xDS transport and versioning evolution.
- Envoy on Windows: Use-cases, roadmap, and more.
- xds-relay: Performance initiatives for control plane management.
- Authorization with Envoy at Square.
- Improving performance of RPCs with envoy at Wikimedia.
- Safely deploying a 100K line Envoy YAML configuration to production.
- Using Wasm to develop Envoy Filters for supporting Yahoo Headers.
- Failing forward to 1 million requests per second.
- How Niantic switched Pokémon GO to use Envoy.
- Changing Oil for a Fast Running (Side) Car Quickly and Safely.
- xDS Support in gRPC.
- Incrementally Building Incremental.
- Creating request buffering filters for edge devices.
- Support Arm64 platform in Envoy.
- Dynamic Request Routing With Envoy.
- Building Low Latency Topologies with Envoy.
- Overview of Authentication and Authorization Features in Envoy.
- Graph-based ML Anomaly Detection and Insights for Envoy Systems.
- Solving Microservice Murder Mysteries with Envoy's Tap Filter.
- Making Envoy Sustainable.
- Envoy Mobile in Depth: From Server to Multi-platform Library.
- Envoy’s Using 10GB of Memory and It’s All My Fault!.
- Envoy Namespaces - Operating an Envoy-based Service Mesh at a Fraction of the Cost.
- Spanning the Globe with Envoy at Stripe.
- Service Mesh in Kubernetes: It’s Not That Easy.
- Evolution of Envoy as a Dynamic Redis Proxy.
- Managing Tens of Thousands of Envoy: How We Do It.
- Building + operating a service mesh at a mid-size company.
- Using Envoy for data aware traffic routing in Azure Service Fabric.
- Integrating Envoy with DPDK-based virtual networks.
- Hardening Envoy.
- Debugging microservices applications with Envoy + Squash.
- Extending Envoy with Go.
- How to DDOS yourself with Envoy (and other tales of migration horror).
- Use Envoy + Knative to auto scale Java RPC micro service.
- Bridging the gap between on-prem and cloud.
You may need an Envoy configuration generator to simplify the process of configuring and deploying Envoy proxies in your infrastructure. An Envoy configuration generator can help automate this process by providing a user-friendly interface for defining your proxy's behavior, and then generating the corresponding configuration file automatically.
Supercharge your Envoy setup with these top-notch tools, extensions and example configurations
- K8s-native AuthN/AuthZ service to protect your APIs.
- Custom envoy extensions.
- Limitador: rate limiter.
- A plugin to enforce OPA policies with Envoy.
- Easy auth for reverse proxies.
- Starter Envoy configurations for various use cases.
- Example of consuming Envoy and adding a custom filter.
- Envoy Proxy Big Book of Examples.
- Envoy filters in Go.
- Istio/Envoy RBAC & ABAC authorization middleware based on Casbin.
- Ansible Role for Envoy Proxy.
- Envoy config linter.
- Teaching myself about Envoy on Kubernetes.
- Envoy config linter.
- Ambassador: an open source K8s-native API Gateway built on Envoy.
- Cilium : secure network connectivity between application workloads.
- Cloud Foundry: abstracts away infrastructure so you can focus on app innovation.
- Consul Connect service mesh: offers first-class support for using Envoy as a proxy.
- Contour: an Ingress controller for Kubernetes.
- Enroute Universal Gateway: an Open-Source Envoy powered Cloud-Native API Gateway.
- Gimbal: a layer 7 load balancing platform built on Kubernetes.
- Func-e: allows you to quickly see available versions of Envoy and try them out.
- Gloo Edge: an open-source function gateway built on top of the Envoy Proxy.
- Istio: provides a uniform way to connect, manage, and secure microservices.
- Kuma: an open-source control plane for Service Mesh and Microservices.
- Gloo Mesh: delivers connectivity, security, observability, and reliability for workloads.
- App Mesh: uses Envoy as its service proxy.
- Grey Matter: a cloud-native, cloud agnostic intelligent service mesh.
- Instana: is the Application Performance Management solution.
- Octarine: delivers total visibility, easy policy management, and strong app security.
- Solo.io: develops tools to help the enterprise adopt innovative cloud technologies.
- Tetrate: manage the complexity of modern, hybrid cloud application infrastructure.
- Datawire's toolkit: empowers developers to adopt a cloud-native development workflow for K8s services..
In this section, readers will find case studies that showcase how various organizations have implemented Envoy in their operations. These case studies provide insights into the practical applications and benefits of using Envoy in different contexts.
-
Slack: Migrating Millions of Concurrent Websockets to Envoy.
-
Snapchat: From Monolith to Multicloud Micro-Services: Inside Snap’s Service Mesh.
-
Spotify: How Spotify Migrated Ingress HTTP Systems to Envoy.
-
Tinder: How Tinder implemented Envoy global rate limiting at scaleVirtual.
Please take a look at the contribution guidelines first. Contributions are always welcome! If you have any question about this opinionated list, do not hesitate to contact me @cpuram1 on Twitter or open an issue on GitHub.