Understanding a vital part of connecting Envoy Proxy to your applications

(Previously appeared on https://blog.envoyproxy.io)

Image by Steve Harvey

In modern environments, hosts don’t live for months or years. Cloud VMs may live for days, and Kubernetes pods may only live for minutes. Envoy’s dynamic configuration allows it to keep up-to-date on what infrastructure is available and healthy. Modern apps at any scale need a standardized approach for dealing with this ever-changing infrastructure. A well-built control plane easily integrates with service discovery and Envoy connects to it for data. …


Understanding a vital part of connecting Envoy Proxy to your applications

In modern environments, hosts don’t live for months or years. Cloud VMs may live for days, and Kubernetes pods may only live for minutes. Envoy’s dynamic configuration allows it to keep up-to-date on what infrastructure is available and healthy. Modern apps at any scale need a standardized approach for dealing with this ever-changing infrastructure. A well-built control plane easily integrates with service discovery and connects to Envoy. Routes and rules change as services are added and removed, and utilizing a control plane means each service team can fully utilize the power of your front and service mesh proxies.

What makes a great control plane?

Think of…


Welcome to my talk on tackling trans and queer issues and allying with us in your workplace. This talk aims to give you practical advice on how to help trans and queer folks at your company and in our industry, as well as how to advocate for us at the executive and interpersonal level.

Cat support

Whether you’re trans and queer, cis and straight, or some combination of a few of those things, I wanted to cover terminology first, so if you’ll direct your attention behind me, we’ll begin.

  • Birth Assignment
    Medical & state gender assignment at birth, often on a birth…


When serving any kind of traffic over the public internet, it’s best to secure it. When used as either a front proxy or a service mesh proxy, Envoy supports TLS and SSL to encrypt all communication between clients and the proxy.

Today we’ll show how to set up Envoy as a front proxy that terminates TLS. It builds off the code in On Your Laptop, which balances a single domain over two services. We’ll extend this to secure traffic to both services.

There are three steps to get this running:

  1. Specifying the certificate for Envoy to use
  2. Envoy for TLS


The front of the bag.

Bags are my thing. Well, bags and shoes. Traveling as much as I do, having a dependable, comfortable, and sleek bag is pretty important. For the past two or so years, I’ve depended on my Topo Designs Trip Pack for short trips, and then nested it inside of my Ryu QuickPack for longer trips abroad. This has worked out well, but walking around Copenhagen, and going through a variety of international airport security, I wondered if I could consolidate to one bag, with an easier way to access my laptop and other stuff. The Invisible One Mini seemed like a…


A distributed approach to preventing cascading failures in a service mesh

In the world of microservices, services often make calls to other services. But what happens when a service is busy, or unable to respond to that call? How do you avoid a failure in one part of your infrastructure cascading into other parts of your infrastructure? One approach is to use circuit breaking.

Azbuka MCCB By Alexey Pishchur [CC BY-SA 3.0 (https://creativecommons.org/licenses/by-sa/3.0)], from Wikimedia Commons

Circuit breaking lets you configure failure thresholds that ensure safe maximums after which these requests stop. This allows for a more graceful failure, and time to respond to potential issues before they become larger. It’s possible to implement circuit breaking in a few parts of your infrastructure…


A primer on Envoy routing compotents

This article discusses Envoy’s routing in more detail. You may have already seen how routing works on your laptop, but now you can see more of how routes, clusters, and listeners are configured with static files.

Routing components

Route—a set of rules that match virtual hosts to clusters and allow you to create traffic shifting rules. Routes are configured either via static definion, or via the route discovery service (RDS).

Cluster—a group of similar upstream hosts that accept traffic from Envoy. Clusters allow for load balancing of homogenous service sets, and better infrastructure resiliency. …


Traffic shifting and releases using the Envoy Proxy

This article was originally posted to learnenvoy.io.

One of most common workflows for any microservice is releasing a new version. Thinking about releases as a traffic management problem — as opposed to an infrastructure update — opens up new tools for protecting users from bad releases.

We’ll begin with the simple routes we set up previously on your laptop. Next, we’ll extend that config to release a new version of one of the services using traffic shifting. We’ll also cover header-based routing and weighted load balancing to show how to use traffic management to canary a release, first to special…


The debut short-story collection by Danny Ortberg

“Daughters are as good a thing as any…” begins The Merry Spinster by Danny Ortberg’s wild reimagining of the Little Mermaid that ends in such grim fashion as to make the reader nod solemnly and intone, “truly, these are the end of times.” And yet, what a romp of a dark timeline. Unlike Texts from Jane Eyre, his first book of imagined text conversations from literary characters, this reader at least felt prepared for these fables, stories, and tall-tales through study of European folklore. …


Welcome to my talk on tackling trans and queer issues. This talk aims to give you practical advice on how to help trans and queer folks at your workplace, as well as how to advocate for us at the executive and interpersonal level.

Whether you’re trans and queer, cis and straight, or some combination of a few of those things, I wanted to cover terminology first, so if you’ll direct your attention behind me, we’ll begin.

Being queer or trans isn’t a new thing in the world of business, but as folks are able to support each other, and occasionally…

Brook Shelley

dev rel/cooking/reading/music

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store