Use Envoy as a front proxy

Envoy is a high-performance, open-source network proxy designed for cloud-native applications. When used with Deephaven, it acts as a front proxy, routing traffic from a single external port to the various internal Deephaven services. This simplifies network configuration, enhances security by exposing only one port, and provides a central point for managing traffic.

Note

Since Envoy routes all inbound and outbound network traffic through the proxy, this may impact performance, particularly on high-throughput systems.

Below is a simple network diagram of a Deephaven system configured with Envoy as a front proxy.

img

Get Started with Envoy

To learn how to set up and use Envoy with Deephaven, see the following guides:

  • Installing Envoy: Step-by-step instructions for installing Envoy using Docker or apt-get.
  • Configuring Envoy: Detailed guide on both automatic and manual configuration of Envoy to work with Deephaven services.
  • Running and Managing Envoy: Learn how to run Envoy in a Docker container and manage it as a systemd service.
  • Troubleshooting Envoy: Find solutions to common problems, check logs, and use the admin interface to diagnose issues.