5 posts with tag #envoy
Istio AuthorizationPolicy & HTTP/2 Coalescing
Two Istio/Envoy pitfalls: AuthorizationPolicy IP matching (direct_remote_ip vs. remote_ip) and HTTP/2 connection coalescing across per-hostname listeners.
SigNoz on OVH MKS: Access Log Reports with Vector and ClickHouse
Collect Envoy access logs with Vector into ClickHouse, generate monthly awffull reports, and serve them via Istio ExternalName route to S3. Part 3 of 3.
ClickHouse Use Case: Vector, Istio, nginx, Java on OVH MKS
Vector → ClickHouse on OVH MKS: Envoy/Istio, nginx, Java, Go and Kubernetes logs with hot-to-cold S3 tiering. Monthly awffull reports via SQL export. Part 5 of 5.
Istio vs. Envoy Gateway: Gateway API on Kubernetes
Comparing Istio and Envoy Gateway as Gateway API implementations: mTLS, egress, Cilium, managed cloud specifics (AKS, GKE, OVH MKS), and real client IP.
Envoy Gateway v1.7: Global Rate Limiting with a Custom ratelimit Service
How to wire envoyproxy/ratelimit as a self-hosted service into Envoy Gateway v1.7 using EnvoyPatchPolicy — three xDS patches, namespace-admin self-service, and the pitfalls to avoid.