envoyproxy/envoy
Envoy
Envoy is a high-performance, cloud-native service proxy designed for service-to-service communication in distributed architectures. It functions as a service mesh data plane, providing a centralized mechanism for managing, securing, and observing network traffic between microservices.
The project is distinguished by its ability to perform dynamic traffic management and configuration updates in real-time without requiring service restarts or downtime. It utilizes a non-blocking, event-driven architecture to handle high-concurrency connections and supports hot-restart process management, which maintains continuous service availability by transferring active connection sockets during binary or configuration updates.
The proxy offers a comprehensive suite of operational capabilities, including advanced traffic routing, load balancing, and upstream health checking to ensure reliable distribution of requests. It also features a pluggable filter chain and extensibility modules that allow for custom request processing logic, alongside integrated tools for traffic tapping, mirroring, and the enforcement of transport layer security.
Extensive observability is built into the core, enabling the collection and export of granular metrics, logs, and distributed traces to monitor system health and performance. Administrative utilities are provided to manage proxy lifecycles, monitor operational status, and perform configuration changes through a centralized control plane.
Features
- Service Mesh - Functions as a high-performance service mesh data plane for managing, securing, and observing inter-service communication.
- Service Proxies - High-performance proxy designed for service-to-service communication providing advanced traffic management, observability, and security.
- Dynamic Configuration Managers - Supports real-time updates to routing, load balancing, and security policies via a centralized control plane.
- Network Traffic Management - Routes, balances, and secures network traffic in real-time without requiring service restarts or downtime.
- Event-Driven Networking - Utilizes a non-blocking event loop to handle high-concurrency network connections with minimal latency.
- Dynamic Service Proxies - Updates routing, security, and load balancing policies in real-time without interrupting active network connections.
- Service Communication Security - Enforces transport layer security and manages certificates to encrypt data and authenticate identities between services.
- Traffic Routing Engines - Evaluates incoming requests against configurable rules to dynamically direct traffic to appropriate backend services.
- Distributed Observability Systems - Collects and exports detailed metrics, logs, and distributed traces to monitor the health and performance of network traffic.
- Monitoring and Observability - Collects and exports granular metrics, logs, and distributed traces to provide real-time visibility into system performance.
- Distributed Observability Platforms - Aggregates telemetry data from network interactions to provide real-time visibility into service health and performance.
- Dynamic Routing - Enables real-time updates to routing, cluster, and listener settings without requiring service restarts.
- DevOps and Infrastructure - High-performance edge and service proxy.
- Load Balancing and Ingress - C++ front and service proxy.
- Hot Reloading - Maintains continuous service availability by transferring active connection sockets during binary or configuration updates.
- Dynamic Provider Discovery - Automates the discovery of service changes and updates routing tables in real-time via a centralized control plane.
- Load Balancers - Distributes incoming traffic across multiple upstream service instances using various algorithms to ensure high availability.
- Network Traffic Analyzers - Captures, mirrors, and inspects raw network traffic flows to troubleshoot communication issues.
- Proxy Scripting Extensions - Allows integration of custom logic to modify request processing and add unique filtering capabilities.
- Health Checks - Continuously monitors backend service availability to ensure reliable traffic distribution and load balancing.
- Proxy Lifecycle Management - Supports hot-restart process management and dynamic configuration updates to maintain continuous service availability.
- Request Handler Chains - Executes custom logic modules in a sequential pipeline to inspect or modify request and response data.
- CLI Administration Tools - Provides command-line utilities for monitoring status, updating configurations, and performing hot restarts.
- Cluster and Service Orchestration - Maintains a dynamic inventory of upstream service instances and performs continuous health checks to ensure reliable traffic distribution.
- Traffic Analysis Tools - Provides integrated tools for traffic tapping and mirroring to capture and inspect network flows for debugging and auditing.
- Shared Memory Management - Synchronizes internal proxy state and connection metadata across process boundaries to enable seamless restarts.
