823 questions
- Bountied 0
- Unanswered
- Frequent
- Score
- Trending
- Week
- Month
- Unanswered (my tags)
0
votes
0
answers
24
views
CloudFront Lambda@Edge causing originConnectError - even with no-op function
I'm experiencing a persistent issue where associating any Lambda@Edge function with my CloudFront distribution causes
originConnectError
(502) responses, even when using a minimal no-op function.
...
0
votes
0
answers
45
views
Can't use EnvoyFilter to remove header x-envoy-peer-metatada-id from Istio Envoy Sidecar
I would like to remove the header x-envoy-peer-metadata-id from outbound traffic of my pod on istio using EnvoyFilter.
Here's EnvoyFilter
apiVersion: networking.istio.io/v1alpha3
kind: EnvoyFilter
...
1
vote
0
answers
40
views
Why does Envoy route the first HTTPS request correctly but send later ones to passthrough?
I’m running Envoy in Kubernetes and redirecting all HTTPS traffic for a given host into it with iptables:
iptables -t nat -A OUTPUT -d example.com -p tcp --dport 443 -j REDIRECT --to-port 15000
Envoy ...
1
vote
1
answer
88
views
Envoy auth extension not hitting auth service
I'm trying to put an Envoy proxy in front of my ConnectRPC microservices. I've got the following setup:
static_resources:
listeners:
# Main listener
- name: main
address:
...
0
votes
1
answer
157
views
Local rate limiter with multiple keys in descriptor entry not being processed [closed]
I'm having trouble making local rate limiter work with multiple keys in descriptor entry.
Here is a full EnvoyFilter:
apiVersion: networking.istio.io/v1alpha3
kind: EnvoyFilter
metadata:
labels:
...
0
votes
0
answers
77
views
Adding downstream api rate limiting in Istio service mesh
I'm working on configuring a service mesh using Istio v1.2 with Envoy Proxy.
Scenario:
I have two services within the mesh:
Service A → Service B
Service A makes HTTP calls to specific endpoints of ...
0
votes
0
answers
56
views
Can't connect React frontend to gRPC C++ backend via Envoy proxy (port 50051)
I'm working on a project where I need to connect a React frontend (built using Vite) to a gRPC backend written in C++ running on port 50051. Since gRPC-Web is not natively supported by browsers, I'm ...
0
votes
0
answers
32
views
How to match JWT claims with a header using dynamically?
I am working with envoygateway. And I am trying to authorize a request using the claims mentioned in the JWT token. https://gateway.envoyproxy.io/docs/tasks/security/jwt-claim-authorization/
The ...
0
votes
1
answer
163
views
Unable to limit streamed request size using Envoy lua filter
I have implemented an envoy filter that aims to limit layer size for upload to a registry (CNCF), I cannot use the pre-exisiting max_request_body_bytes filter because the size limit is huge and I do ...
0
votes
1
answer
255
views
Envoy proxy keeps rejecting client's requests with CANCELLED despite setting infinite values everywhere in config
This issue has been happening for months now and the only possible way to "mitigate" it is to overpower the server (60 instances for 30 max concurrent client requests).
Here is the envoy ...
0
votes
1
answer
691
views
Istio: X-Forwarded-For and X-Real-IP Headers Show Internal IP Instead of Client's Real IP
I'm encountering an issue where the X-Forwarded-For and X-Real-IP headers are showing internal IP addresses instead of the client's real IP when traffic is routed through Istio.
Problem:
In the logs, ...
0
votes
0
answers
79
views
Can't get Envoy UpstreamTlsContext to work properly
I've been trying to get this Envoy config working properly. I am attempting to us the OAuth client credentials injector to fetch a token from an endpoint that requires client TLS auth. I have the ...
1
vote
0
answers
92
views
Deploy a pod with envoy as sidecar. How can I access it?
I have created the following simple Dockerfile
FROM envoyproxy/envoy:v1.19.0
COPY envoy.yaml /etc/envoy/envoy.yaml
RUN chmod go+r /etc/envoy/envoy.
For which I build locally a custom envoy image with ...
0
votes
0
answers
48
views
Envoy JWT Auth Filter Fails When Placed After Lua Filter
I am using Envoy's JWT authentication HTTP filter, and it works fine when no Lua filters are placed before it. However, if I place a Lua filter before the JWT auth filter, I get the following error:
&...
-1
votes
1
answer
374
views
When configuring kubernetes gateway api specifying the hostname causes istio to error when using TLS
I have a manually deployed istio gateway (from this helm chart) and I'm trying to configure a kubernetes api gateway resource using TLS. However whenever I set the hostname: field on the gateway ...