- Home
- Reverse Proxy Software
- Envoy Proxy
Envoy Proxy
What it is
Envoy Proxy is a free, open-source proxy for edge traffic and service-to-service communication in cloud-native and AI-native systems. It runs as a self-contained process outside the application and can work with software written in different languages. Supported protocols include HTTP/1.1, HTTP/2, gRPC, and HTTP/3, which the documentation labels alpha. Traffic features cover routing, retries, circuit breaking, rate limiting, request shadowing, and outlier detection. Envoy provides subsystem statistics, an administration interface, and distributed tracing through third-party providers. Security capabilities include TLS, JWT, role-based access control, and OAuth-related authentication and authorization. Operators must configure protections such as watermarks, overload management, and circuit breakers for availability resilience. Docker images are provided for amd64 and arm64, and native macOS installation is documented through Homebrew. Envoy Gateway and Istio are named compatible control planes. The project is a graduated Cloud Native Computing Foundation project.
For and against
For
- Free, open-source self-hosted proxy
- Supports HTTP, gRPC, and HTTP/3
- Includes routing and rate limiting
- Offers statistics and administration views
- Provides TLS and authorization features
Against
- HTTP/3 support is documented as alpha
- Operators must configure availability protections
- Distributed tracing uses third-party providers
- Self-hosted deployment requires operator management
The verdict
Envoy Proxy combines protocol handling, traffic controls, observability, and security for modern service architectures. Its self-hosted model and configuration requirements make it most suitable for teams managing their own proxy infrastructure.
Who it suits
It suits teams running self-hosted edge proxies or service-to-service traffic in large service-oriented architectures. Operators should be prepared to configure resource protections and deployment controls.
Plans and prices
Envoy Proxy
Open-source proxy; install using Docker, macOS Homebrew, or a static binary
Read 30 Sep 2026 · envoyproxy.io
On the record
- Architecture
- Envoy is a self-contained, out-of-process proxy that can work with applications written in different languages.envoyproxy.io · read 30 Sep 2026
- Audience
- Envoy is designed for edge proxy use and service-to-service communication in large modern service-oriented architectures.envoyproxy.io · read 30 Sep 2026
- Installation
- The project provides Docker images for amd64 and arm64, and documents native macOS installation through Homebrew.envoyproxy.io · read 30 Sep 2026
- Integrations
- The documentation names Envoy Gateway and Istio as control planes compatible with Envoy's API.envoyproxy.io · read 30 Sep 2026
- Observability
- Envoy provides subsystem statistics, an administration interface for viewing statistics, and distributed tracing through third-party providers.envoyproxy.io · read 30 Sep 2026
- Project status
- Envoy is a graduated project within the Cloud Native Computing Foundation.gateway.envoyproxy.io · read 30 Sep 2026
- Purpose
- Envoy is an open-source edge and service proxy designed for cloud-native and AI-native applications.envoyproxy.io · read 30 Sep 2026
- Security
- Envoy supports TLS, JWT, role-based access control, and OAuth-related authentication and authorization features.envoyproxy.io · read 30 Sep 2026
- Security limitation
- Envoy's threat model says operators must configure resource protections such as watermarks, overload management, and circuit breakers for availability resilience.envoyproxy.io · read 30 Sep 2026
- Traffic management
- Features include routing, retries, circuit breaking, rate limiting, request shadowing, and outlier detection.envoyproxy.io · read 30 Sep 2026
- Traffic protocols
- Envoy supports HTTP/1.1, HTTP/2, gRPC, and HTTP/3, with HTTP/3 described in the documentation as alpha.envoyproxy.io · read 30 Sep 2026
