Skip to content
Envoy Proxy Documentation
On Trove · from yotam fromm

Envoy Proxy Documentation

Envoy Proxy (the data-plane proxy itself): architecture, listeners and filters, clusters, xDS, auth filters, observability, operations.

Read a preview

You can read the contents and the first 2,000 characters.
Free accounts get the whole book.

  • By yotam fromm
  • 28 chapters
  • Updated Nov 4, 2026
  • 32 readers

What’s inside

  • Introduction & Design Philosophy
  • Process & Threading Architecture
  • Listeners & Network Filter Chains
  • HTTP Connection Manager & HTTP Filter Chain
  • Life of a Request
  • Upstream Clusters — Service Discovery

What is Envoy Proxy Documentation?

Envoy Proxy (the data-plane proxy itself): architecture, listeners and filters, clusters, xDS, auth filters, observability, operations. For Envoy Gateway see the Envoy Gateway Documentation book.

markdown · Listed Mar 16, 2026

  • kubernetes
  • devops
  • gateway

From the first page

Envoy version: 1.40. The latest stable release is v1.40.2 (released 2026-10-27); the main branch is now 1.41.0-dev. This book's content was checked against the 1.40.0-dev source tree, so 1.40 patch-release fixes are not reflected chapter by chapter.

A comprehensive, source-grounded reference for understanding, deploying, and operating Envoy Proxy in modern service-oriented architectures.

This edition is sourced directly from the Envoy proxy repository (docs/root/, api/envoy/, source/), checked against Envoy 1.40.0-dev (VERSION.txt). Every technical claim in this book is either cited to a specific file path in that tree, or explicitly flagged as unconfirmed where the source could not settle it. A material limitation of the source checkout used for this revision: it is a partial/sparse clone. docs/root/ is complete (499 .rst files), but large parts of api/envoy/service/, api/envoy/extensions/common/, api/envoy/extensions/loadbalancingpolicies/, and most of source/common/ and source/server/ are absent from this checkout. Wherever a claim depends on one of those missing paths, this book says so explicitly rather than filling the gap from memory. Treat any such note as a real gap to close with a fuller checkout or the public Envoy documentation site, not as settled fact.

Preview · 2,000 of 158,195 characters

FluxCD Official Documentation: The Complete Guide to GitOps on Kubernetes
Kubernetes: Official Documentation
Writing Books for AI Agents
Prisma ORM 7 Complete Reference

Contents

  1. 01Envoy Proxy Documentationp.1
  2. 02Decision Matrixp.2
  3. 03Introduction & Design Philosophyp.3
    1. Narrativep.3
    2. Agent rulesp.3
  4. 04Process & Threading Architecturep.4
    1. Narrativep.4
    2. Agent rulesp.4
  5. 05Listeners & Network Filter Chainsp.5
    1. Narrativep.5
    2. Agent rulesp.5
  6. 06HTTP Connection Manager & HTTP Filter Chainp.6
    1. Narrativep.6
    2. Agent rulesp.6
  7. 07Life of a Requestp.7
    1. Narrativep.7
    2. Agent rulesp.7
  8. 08Upstream Clusters — Service Discoveryp.8
    1. Narrativep.8
    2. Agent rulesp.8
See all 28 parts
  1. 09Load Balancingp.9
    1. Narrativep.9
    2. Agent rulesp.9
  2. 10Health Checking, Circuit Breaking & Outlier Detectionp.10
    1. Narrativep.10
    2. Agent rulesp.10
  3. 11xDS Dynamic Configurationp.11
    1. Narrativep.11
    2. Agent rulesp.11
  4. 12TLS & Certificate Managementp.12
    1. Narrativep.12
    2. Agent rulesp.12
  5. 13Authentication & Authorization Landscapep.13
    1. Narrativep.13
    2. Agent rulesp.13
  6. 14ext_authz Deep Divep.14
    1. Narrativep.14
    2. Agent rulesp.14
  7. 15JWT Authentication & JWKS Cachingp.15
    1. Narrativep.15
    2. Agent rulesp.15
  8. 16Composing Auth Filters — Ordering, AND/OR, and the Matcher APIp.16
    1. Narrativep.16
    2. Agent rulesp.16
  9. 17api_key_auth Filterp.17
    1. Narrativep.17
    2. Agent rulesp.17
  10. 18Lua Filter & Scripting Crypto Surfacep.18
    1. Narrativep.18
    2. Agent rulesp.18
  11. 19Rate Limiting — Local & Globalp.19
    1. Narrativep.19
    2. Agent rulesp.19
  12. 20Observability — Statistics & Admin Interfacep.20
    1. Narrativep.20
    2. Agent rulesp.20
  13. 21Observability — Access Logging & Per-Request Timingp.21
    1. Narrativep.21
    2. Agent rulesp.21
  14. 22Observability — Distributed Tracingp.22
    1. Narrativep.22
    2. Agent rulesp.22
  15. 23Deployment Patternsp.23
    1. Narrativep.23
    2. Agent rulesp.23
  16. 24Hot Restart & Listener Drainp.24
    1. Narrativep.24
    2. Agent rulesp.24
  17. 25Extension Mechanisms — Wasm & ext_procp.25
    1. Narrativep.25
    2. Agent rulesp.25
  18. 26Overload Manager & Retry Policyp.26
    1. Narrativep.26
    2. Agent rulesp.26
  19. 27Operational Best Practices & Sizingp.27
    1. Narrativep.27
    2. Agent rulesp.27
  20. 28Appendix — Quick Referencep.28
    1. Narrativep.28
    2. Agent rulesp.28