Envoy Proxy

What Envoy Proxy is

Envoy Proxy is a free, open-source proxy for edge traffic and communication between services in cloud-native and AI-native applications. It runs as a self-contained process outside the applications it serves, so it can work with software written in different languages. Envoy handles HTTP/1.1, HTTP/2, gRPC and HTTP/3; its documentation describes HTTP/3 as alpha. Traffic controls include routing, retries, circuit breaking, rate limiting, request shadowing and outlier detection. It provides subsystem statistics, an administration interface for viewing them, and distributed tracing through third-party providers. Security capabilities include TLS, JWT, role-based access control, and OAuth-related authentication and authorization. For installation, the project provides Docker images for amd64 and arm64, documents native macOS installation through Homebrew, and offers static binaries. Its API is compatible with control planes including Envoy Gateway and Istio. Envoy is self-hosted and can be configured through either of its documented configuration methods. Its threat model says operators need to configure protections such as watermarks, overload management and circuit breakers to support availability resilience.

Who it suits

Envoy Proxy suits teams building edge proxies or service-to-service communication for large, modern service-oriented architectures. It is intended for cloud-native and AI-native applications.

Limits

The free Envoy Proxy plan is an open-source proxy with self-hosted deployment. HTTP/3 is described as alpha, and operators must configure protections such as watermarks, overload management, and circuit breakers for availability resilience.

Getting started

1. Visit https://www.envoyproxy.io/ for the project documentation.
2. Choose an installation route: Docker for amd64 or arm64, Homebrew on macOS, or a static binary.
3. Deploy Envoy in your self-hosted environment.
4. Configure resource protections such as watermarks, overload management, and circuit breakers.

Verdict

Envoy Proxy offers broad traffic management and security capabilities for edge and service-to-service use. Operators should plan to configure resource protections, and note that HTTP/3 is identified as alpha.