Envoy is an open source edge and service proxy, designed for cloud-native applications. Envoy is hosted by the Cloud Native Computing Foundation (CNCF). If you are a company that wants to help shape the evolution of technologies that are container-packaged, dynamically-scheduled and microservices-oriented, consider joining the CNCF. For details about who’s involved and how Envoy plays a role, read the CNCF announcement.


Modernize visitor management

Sleek iPad sign-in brings the wow factor to your front desk—and smart features enhance your security and make compliance efforts a breeze.

Discover delivery management: Companies are getting more deliveries than ever, and they often end up cluttering the lobby. Do you need a way to deal with deliveries?

Make a great impression: Look modern and polished with sleek iPad sign-in and a clutter-free lobby.

Enhance security: To protect your people, property, and ideas, you need to know who’s onsite.

Meet compliance regulations: Support your compliance efforts with features for recordkeeping, badging, and beyond.

Boost office efficiency: Automate daily tasks like alerting employees about their guests and packages.

OUT OF PROCESS ARCHITECTURE: Envoy is a self contained, high performance server with a small memory footprint. It runs alongside any application language or framework.

HTTP/2 AND GRPC SUPPORT: Envoy has first class support for HTTP/2 and gRPC for both incoming and outgoing connections. It is a transparent HTTP/1.1 to HTTP/2 proxy.

ADVANCED LOAD BALANCING: Envoy supports advanced load balancing features including automatic retries, circuit breaking, global rate limiting, request shadowing, zone local load balancing, etc.

APIS FOR CONFIGURATION MANAGEMENT: Envoy provides robust APIs for dynamically managing its configuration.

OBSERVABILITY: Deep observability of L7 traffic, native support for distributed tracing, and wire-level observability of MongoDB, DynamoDB, and more.


As on the ground microservice practitioners quickly realize, the majority of operational problems that arise when moving to a distributed architecture are ultimately grounded in two areas: networking and observability. It is simply an order of magnitude larger problem to network and debugs a set of intertwined distributed services versus a single monolithic application.

Originally built at Lyft, Envoy is a high-performance C++ distributed proxy designed for single services and applications, as well as a communication bus and “universal data plane” designed for large microservice “service mesh” architectures. Built on the learnings of solutions such as NGINX, HAProxy, hardware load balancers, and cloud load balancers, Envoy runs alongside every application and abstracts the network by providing common features in a platform-agnostic manner. When all service traffic in an infrastructure flows via an Envoy mesh, it becomes easy to visualize problem areas via consistent observability, tune overall performance, and add substrate features in a single place.

How fast is Envoy?

We are frequently asked how fast is Envoy? or how much latency will Envoy add to my requests? The answer is: it depends. Performance depends a great deal on which Envoy features are being used and the environment in which Envoy is run. In addition, doing accurate performance testing is an incredibly difficult task that the project does not currently have resources for.

Although we have done quite a bit of performance tuning of Envoy in the critical path and we believe it performs extremely well, because of the previous points we do not currently publish any official benchmarks. We encourage users to benchmark Envoy in their own environments with a configuration similar to what they plan on using in production.

Tell us about a new Kubernetes application


Never miss a thing! Sign up for our newsletter to stay updated.


Discover and learn about everything Kubernetes