search

envoyproxy / envoy

Cloud-native high-performance edge/middle/service proxy
https://www.envoyproxy.io
Apache License 2.0
25k stars 4.81k forks source link

Documentation / examples for DynamoDB HTTP Filter #6426

Open catkins opened 5 years ago

catkins commented 5 years ago

Description:

We're interested in trying out the HTTP DynamoDB filter, but the documentation is a bit light on. I'd love to see a more end-to-end example of what's involved in using it.

For example, are the teams at Lyft overriding the endpoint to localhost:<PORT> and setting a Host header? Is there an Envoy sidecar capturing all outgoing traffic from a process/container using a network policy? Is there special handling for TLS?

Also, if anyone can help point me in the right direction, I'm happy to open a PR updating the documentation with a more concrete example.

Thanks!

Relevant Links

Architecture Docs: https://www.envoyproxy.io/docs/envoy/latest/intro/arch_overview/dynamo Current configuration examples: https://github.com/envoyproxy/envoy/blob/ed9e04277328486d397ce074517516824a877922/configs/envoy_service_to_service_v2.template.yaml#L262-L266 https://github.com/envoyproxy/envoy/blob/ed9e04277328486d397ce074517516824a877922/configs/configgen.py#L44-L66 Mention of external service egress listeners: https://www.envoyproxy.io/docs/envoy/latest/intro/deployment_types/service_to_service#optional-external-service-egress-listeners

catkins commented 5 years ago

I'm seeing some mention of using iptables & original_dst – is that the appropriate path?

https://groups.google.com/forum/#!topic/envoy-dev/nmPwnSid9UA

mattklein123 commented 5 years ago

@danielhochman @moderation for folks that might be willing to help with an example. I think we could put together a nice sandbox using the DynamoDB local container.

catkins commented 5 years ago

Thanks @mattklein123. Even if those folks been point me in the right direction, I'm happy to help with the legwork.

shreedharn commented 5 years ago

We are also interested in DynamoDB sniffing filter. Happy to help on this effort as well. Thank you.

moderation commented 5 years ago

I tried to use the DynamoDB filter but couldn't work out how to have my Rust control plane https://github.com/cookpad/sds proxy locally through an Envoy instead of talking directly to DynamoDB. So unfortunately I don't have any examples I can share.

catkins commented 5 years ago

Hi there, any updates on this?

nickfun commented 2 years ago

I am also curious for examples of Envoy -> DynamoDB proxy configs & usage. I'm exploring having Envoy used as a circuit breaker in the event of DynamoDB is degraded.

dakshinai commented 2 years ago

Hi, any updates or pointers for the DynamoDB filter example?