# Envoy

## Configuration

Envoy can be configured dynamically in real time without any downtime.

* Listener discovery service  —  configures on what ports envoy listens on, and the action to take on the incoming connections.
* Cluster discovery service  —  configures the upstream clusters. Envoy will route incoming connections/requests to these clusters.
* Route discovery service  —  configures L7 routes for incoming requests.
* Endpoint discovery service  —  allows envoy to dynamically discover cluster membership and health information.
* Secret discovery service  —  allows envoy to discover ssl secrets. This is used to configure ssl secrets independently of the listener, and allows to provide ssl secrets from a local node, instead of a centralized control plane.

**Best Practice:** Here we are using partitioned file-based dynamic configuration.

## Start

```bash
# minikube mount /Users/schintha/Developer/Work:/Work
# mount '/Work/SPA/yeti/envoy.yaml:/etc/envoy/envoy.yaml'
docker compose up envoy

# (or) start standalone envoy container
docker run -it --rm --name envoy2 \
-p 9901:9901 -p 9090:9090 -p 9444:9443  \
-v `pwd`/config/base/envoy/config/:/etc/envoy:ro \
-v `pwd`/config/certs/:/etc/certs:ro \
envoyproxy/envoy-alpine:v1.14.1
# ssh if needed
docker exec -it envoy /bin/bash
```

## Test

admin [http://localhost:9901/](http://localhost:9901/)

```bash
 curl '<http://localhost:9090/greetersrv/Greeter.Hello'> \
 -H 'Content-Type: application/grpc-web+proto' \
 -H 'X-Grpc-Web: 1' \
 -H 'custom-header-1: value1' \
 -H 'Accept: */*' \
 -H 'Connection: keep-alive' \
 --data-binary $'\x00\x00\x00\x00\x05\n\x03abc' --compressed

 curl '<http://localhost:9090/greetersrv/Greeter.Hello'> \
 -H 'Content-Type: application/json' \
 -d '{
    "name": "sumo"
   }'

curl '<http://localhost:9090/yeti.EchoService/Echo'> \
 -H 'Content-Type: application/grpc-web+proto' \
 -H 'X-Grpc-Web: 1' \
 -H 'custom-header-1: value1' \
 -H 'Accept: */*' \
 -H 'Connection: keep-alive' \
 --data-binary $'\x00\x00\x00\x00\x05\n\x03abc' --compressed

curl '<http://localhost:9090/yeti.EchoService/Echo'> \
-H 'Accept: application/grpc-web-text' \
-H 'Content-Type: application/grpc-web-text' \
-H 'X-Grpc-Web: 1' \
-H 'Connection: keep-alive' \
-H 'Accept-Encoding: gzip, deflate, br' \
-d '{
  "message": "sumo"
  }'

curl '<http://localhost:8080/travelbob.blogs.BlogsAPI/GetAllBlogs'> \
-H 'Accept: application/grpc-web-text' \
-H 'Content-Type: application/grpc-web-text' \
-H 'X-Grpc-Web: 1' \
-H 'Connection: keep-alive' \
-H 'Accept-Encoding: gzip, deflate, br' \
--data-binary 'AAAAAAA=' --compressed
```

### Reference

1. [https://github.com/jrockway/jrock.us/blob/master/ingress/envoy.yaml](https://github.com/jrockway/jrock.us/blob/master/ingress/envoy.yaml)
2. [https://github.com/jrockway/jrock.us/blob/master/ingress/envoy.yaml](https://github.com/jrockway/jrock.us/blob/master/ingress/envoy.yaml)
3. [https://blog.turbinelabs.io/setting-up-ssl-with-envoy-f7c5aa06a5ce](https://blog.turbinelabs.io/setting-up-ssl-with-envoy-f7c5aa06a5ce)
4. [How To Write Modern React App Using gRPC And Envoy](https://medium.com/effective-development/how-to-write-modern-react-app-using-grpc-and-envoy-a9d9a4f2785e)
5. [angular-nest-grpc](https://github.com/kmturley/angular-nest-grpc)
6. [Using gRPC with NestJS and Angular](https://medium.com/creative-technology-concepts-code/using-grpc-with-nestjs-and-angular-b60b444bc3ab)
7. [Using Envoy Proxy to load-balance gRPC services on GKE](https://github.com/GoogleCloudPlatform/grpc-gke-nlb-tutorial)
   1. [https://cloud.google.com/solutions/exposing-grpc-services-on-gke-using-envoy-proxy](https://cloud.google.com/solutions/exposing-grpc-services-on-gke-using-envoy-proxy)
