Envoy, the high performance open source L7 proxy and communication bus, preinstalled and running as a system service behind nginx with a working sample configuration that reverse-proxies HTTP traffic to an upstream. Edit a single bootstrap config to route, load balance, observe and secure your services within minutes of launch. Backed by 24/7 cloudimg support.
This is a repackaged open source software product wherein additional charges apply for cloudimg support services.
Overview
Envoy is a high performance, open source edge and service proxy written in C++, and a graduated project of the Cloud Native Computing Foundation. It is an L7 proxy and communication bus designed for large modern service-oriented architectures: it handles HTTP/1.1, HTTP/2, HTTP/3 and gRPC, does advanced routing and load balancing, and exposes deep observability into the traffic flowing through it. This image delivers Envoy fully installed and running as a system service behind an nginx reverse proxy, with a working sample configuration, so an L7 proxy appliance is routing traffic within minutes of launch.
L7 Proxy Service
The envoy daemon installed from the official statically-linked release binary and run by a systemd service as an unprivileged user, started on boot and restarted on failure. Envoy reads one bootstrap configuration file that describes its listeners, filter chains, routes and upstream clusters. A working sample configuration ships ready to run: a front HTTP listener with an HTTP connection manager and router filter chain that reverse-proxies every request to a local upstream cluster, so you can confirm Envoy is proxying the moment you launch by curling the front and watching the backend response come back through the proxy.
Route and Load Balance
Envoy routes on host, path, headers and more, and load balances across upstream endpoints with round robin, least request, ring hash, Maglev and weighted strategies, backed by active and passive health checking, outlier detection, circuit breakers, retries and timeouts. It terminates and originates TLS, speaks HTTP/1.1, HTTP/2, HTTP/3 and gRPC, and supports gRPC-JSON transcoding, rate limiting, external authorization and a rich filter chain you compose declaratively.
Deep Observability
Envoy is built for observability. The admin interface exposes live statistics, cluster and endpoint health, the running configuration and readiness, and Envoy emits detailed stats, access logs and distributed tracing spans for every request. The sample configuration writes structured access logs to a dedicated data disk and binds the admin interface to loopback so its readiness and stats endpoints answer on the instance without being exposed to the network.
Ready To Use
Connect over SSH and the proxy is already serving behind nginx on port 80. Read the welcome notes, curl the front to see a request routed through Envoy to the upstream, inspect the admin stats and clusters on loopback, then edit the single bootstrap configuration file, point the clusters at your own services and reload. The access log and runtime content live on a dedicated, independently resizable data disk.
cloudimg Support
24/7 technical support by email and chat. Help with listener and route configuration, upstream clusters and load balancing, health checking and outlier detection, TLS termination, rate limiting and external authorization, the filter chain, the admin interface and observability, and upgrade planning.
Use Cases
An edge proxy terminating TLS and routing traffic into a service backend. A reverse proxy and load balancer in front of a set of upstream services with health checking and retries. An API and gRPC gateway doing advanced L7 routing and transcoding. A service-mesh data plane, or an observability-rich proxy tier emitting stats, access logs and traces for every request.
All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.