Redundant EnvoyProxy

[Cory Isaacson]

We are setting up a service mesh and I want to know what we can do to ensure each envoyproxy instance is reliable. We could use `keepalived` to share the same IP address across 2 instances for each logical cluster. Is there another recommended way to do this?

It seems like of a single proxy goes down it could shut us down across the entire service mesh.

[Cory Isaacson]

In doing more research it does seems like keepalived is the way to go. We will try that. We have used it before with other proxies.

 

Cory

--
Cory Isaacson
http://www.coryisaacson.com

On Jul 29, 2025 at 3:40 PM -0400, Cory Isaacson <cory.m....@gmail.com>, wrote:

We are setting up a service mesh and I want to know what we can do to ensure each envoyproxy instance is reliable. We could use `keepalived` to share the same IP address across 2 instances for each logical cluster. Is there another recommended way to do this?

It seems like of a single proxy goes down it could shut us down across the entire service mesh.

--
You received this message because you are subscribed to a topic in the Google Groups "envoy-users" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/envoy-users/jCCVaMF_dDs/unsubscribe.
To unsubscribe from this group and all its topics, send an email to envoy-users...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/envoy-users/424d1261-4868-47a3-b45e-1749aad7f68bn%40googlegroups.com.

[Yan Avlasov]

This is a good approach with an L4 loadbalancer in front of Envoys and health checks.

You received this message because you are subscribed to the Google Groups "envoy-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to envoy-users...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/envoy-users/fbe9254d-490e-4fd2-bc1a-51bc5f86f3cd%40Spark.

[Cory Isaacson]

Thanks Yan, but then we have to keep the envoy L4 proxy in keepalived too? If we did that then we would only need keepalived in one place, nice idea.

--
Cory Isaacson
http://www.coryisaacson.com