https://blog.none.at Production notes on Kubernetes, OpenShift, and OVHcloud: observability, log archiving, service mesh, LLM inference, and digital sovereignty. Zola en Sun, 19 Apr 2026 00:00:00 +0000 Sun, 19 Apr 2026 00:00:00 +0000 aleks https://blog.none.at/blog/2026/2026-04-19-envoy-gateway-global-ratelimit/ https://blog.none.at/blog/2026/2026-04-19-envoy-gateway-global-ratelimit/ <p>Global rate limiting in <a rel="noopener external" target="_blank" href="https://gateway.envoyproxy.io/">Envoy Gateway (EG)</a> can be set up in two ways: the easy path (EG manages its own <code>envoy-ratelimit</code> container) and the flexible path (you bring your own <a rel="noopener external" target="_blank" href="https://github.com/envoyproxy/ratelimit">envoyproxy/ratelimit</a> service). This post covers the flexible path — <strong>Option B</strong> — and documents the three xDS patches required to wire it up, the EG v1.7 breaking changes that affect the approach, and a namespace-admin self-service deployment model.</p>