Envoy Proxy

Configure Envoy, the high-performance L4/L7 proxy behind Istio and modern service meshes. Set up API gateways, sidecars, and load balancers with routing, circuit breaking, rate limiting, TLS termination, gRPC, and rich observability.

This skill helps you configure Envoy for cloud-native traffic. It writes listener, filter chain, cluster, and route configuration (static and xDS), sets up Envoy as an API gateway or service mesh sidecar, tunes load balancing and outlier detection, adds circuit breakers and rate limiting, terminates and originates TLS, and enables gRPC and HTTP/2. It also wires access logs, stats, and distributed tracing so you can debug latency and failures.

When to use

Use when configuring Envoy proxy — listeners, clusters, and routes, API gateway or sidecar setup, circuit breaking, rate limiting, TLS, gRPC, or observability via xDS and stats.

Examples

HTTP routing gateway

Route by path with retries

Write an Envoy static config with a listener on 8080 that routes /api to an upstream cluster with a 3-retry policy on 5xx, and /web to a second cluster, both with round-robin load balancing

Circuit breaking + outlier detection

Protect against bad backends

Configure an Envoy cluster with circuit breakers limiting max connections and pending requests, plus outlier detection that ejects hosts after 5 consecutive 5xx responses