Envoy is a high-performance edge and service proxy designed for cloud-native applications and distributed systems. It provides a consistent networking layer for routing traffic between applications, managing connections and observing service communication.
The software can be deployed as a sidecar alongside individual services, as a gateway at the network edge or as a central proxy for application traffic. This flexibility makes it particularly useful in microservice environments where networking requirements change frequently.
Envoy separates traffic processing from application logic, allowing administrators to configure routing, security and resilience policies without modifying individual services. Its extensible architecture includes support for HTTP response caching alongside a broad range of networking functionality.
This is free and open source software.
Key Features
- Layer 3/4 proxying – handles TCP connections and network traffic through configurable listeners and filters.
- HTTP proxying – supports HTTP/1.1, HTTP/2 and HTTP/3 traffic.
- Dynamic configuration – uses xDS APIs to update routing, clusters, listeners and other settings.
- Service discovery – maintains upstream endpoint information using static and dynamic discovery mechanisms.
- Load balancing – distributes traffic across upstream services using configurable algorithms.
- Traffic resilience – provides timeouts, retries, circuit breaking and outlier detection.
- HTTP response caching – uses cache filters to store eligible responses and reduce upstream requests.
- Configurable cache storage – supports in-memory and filesystem-backed HTTP cache implementations.
- Extensible filters – customises HTTP processing, authentication, routing and other traffic-handling behaviour.
- TLS termination – manages encrypted client and upstream connections.
- Rate limiting – supports local rate limiting and integration with external rate-limit services.
- Observability – exports statistics, access logs and distributed tracing information.
- Traffic mirroring – duplicates selected requests to additional upstream services for testing or analysis.
- Administrative interface – exposes operational information and management facilities.
Website: github.com/envoyproxy/envoy
Support:
Developer: Envoy Project Authors
License: Apache License 2.0
Envoy is written in C++. Learn C++ with our recommended free books and free tutorials.
Related Software
| Web Caches | |
|---|---|
| Vinyl | Web accelerator written with performance and flexibility in mind |
| HAProxy | High availability load balancer and proxy server |
| nginx | Very powerful and efficient web server and reverse proxy |
| Traffic Server | High-performance building block for cloud services |
| Memcached | Distributed memory object caching system |
| Squid | High-performance proxy caching server and web cache daemon |
| Envoy | High performance edge and service proxy |
| nuster | High-performance HTTP proxy cache server |
| Apache | Hugely popular web server with caching modules |
| Souin | HTTP cache system |
Read our verdict in the software roundup.
| Load Balancers | |
|---|---|
| Traefik | Modern HTTP reverse proxy and load balancer |
| HAProxy | High availability layer 7 load balancer and proxy server for TCP and HTTP |
| Cilium | eBPF-based Networking, Observability, Security |
| nginx | Includes a L7 load balancer |
| RoadRunner | High-performance PHP application server, load balancer, and process manager |
| fabio | Fast, modern, zero-conf load balancing HTTP(S) and TCP router |
| BFE | Modern L7 load balancer |
| Envoy | High-performance edge and service proxy built for cloud-native applications |
| APISIX | Real-time API gateway with routing, security and extensive plugin support |
| gobetween | Modern and minimalistic L4 load balancer and reverse-proxy |
| MetalLB | Adds external network service support to bare-metal Kubernetes clusters |
| Seesaw | Linux Virtual Server (LVS) based load balancing platform. L4 load balancer |
| Skipper | HTTP router and reverse proxy with flexible filters and route matching |
| LoxiLB | Cloud-native networking proxy with eBPF acceleration and observability |
| kube-vip | Provides virtual IPs and service networking across Kubernetes clusters |
| nuster | High-performance HTTP proxy cache server and HTTP/TCP load balancer |
| GLB Director | Set of stateless L4 load balancer servers |
| Balance | Generic TCP proxy with round robin load balancing and failover capabilities |
Read our verdict in the software roundup.
Explore our carefully curated directory of recommended free and open source software, covering every major software category.The directory forms part of our extensive collection of articles for Linux enthusiasts. It includes hundreds of detailed reviews, together with free and open source alternatives to proprietary software from companies such as Google, Microsoft, Apple, Adobe, IBM, Cisco, Oracle, and Autodesk. LinuxLinks also covers interesting projects worth exploring, Linux-compatible hardware, free programming books and tutorials, and much more. Know a useful free and open source Linux application that we haven’t covered? Tell us about it using our submission form. |


Please read our Comment Policy before commenting.