Production notes on Kubernetes, OpenShift, and OVHcloud: observability, log archiving, service mesh, LLM inference, and digital sovereignty. Zola 2026-04-19T00:00:00+00:00 https://blog.none.at/tags/xds/atom.xml 2026-04-19T00:00:00+00:00 2026-04-19T00:00:00+00:00 aleks https://blog.none.at/blog/2026/2026-04-19-envoy-gateway-global-ratelimit/

<p>Global rate limiting in <a rel="noopener external" target="_blank" href="https://gateway.envoyproxy.io/">Envoy Gateway (EG)</a> can be set up in two ways: the easy path (EG manages its own <code>envoy-ratelimit</code> container) and the flexible path (you bring your own <a rel="noopener external" target="_blank" href="https://github.com/envoyproxy/ratelimit">envoyproxy/ratelimit</a> service). This post covers the flexible path — <strong>Option B</strong> — and documents the three xDS patches required to wire it up, the EG v1.7 breaking changes that affect the approach, and a namespace-admin self-service deployment model.</p>