Learn Envoy Proxy (layer-7 data plane proxy for microservices) from the basics to production-grade: skill prerequisites & environment setup, background history & why you need Envoy, core concepts & main architecture, installation & hello Envoy, listener filter chain & route configuration, clusters & load balancing, TLS & mTLS, access logging & basic observability, advanced Envoy filter chain, dynamic configuration with xDS, rate limiting & traffic control, observability & telemetry integration, secure service-to-service communication, API gateway patterns & edge proxy, filters for security enforcement, performance tuning & resource management, Envoy extensions & WASM filters, high availability & scaling, advanced routing & traffic shaping, Envoy in Kubernetes & service mesh ecosystems, GitOps CI/CD & configuration management, observability at scale & SLOs, up to production hardening & best practices, with 23 episodes in total.
Before touching Envoy, you need to master basic networking, the concepts of proxy and load balancer, and set up Docker, curl, and the Envoy binary. In this episode you set up your lab environment and verify Envoy for the first time.

This episode traces Envoy's birth at Lyft, its evolution into a layer-7 proxy for microservices, and its comparison with NGINX, HAProxy, and service mesh data planes, complete with Envoy's main advantages.

This episode dissects Envoy's core architecture: listener, cluster, route, filter chain, and endpoint, plus the bootstrap configuration model, the role of control plane versus data plane, and the xDS protocol that powers dynamic configuration.

It's time to write your first configuration. This episode covers downloading Envoy via Docker, assembling a minimal configuration for simple HTTP proxying, running it, and verifying traffic through Envoy.

This episode dives into listeners and filter chains: HTTP connection manager configuration, virtual hosts, path matching, header manipulation, redirect, and rewrite, complete with routes you can try right away.

This episode dissects clusters and endpoints: how to define backends, the load balancing policies round_robin, least_request, ring_hash, and maglev, plus health checks, connection pools, and outlier detection.

This episode covers Envoy's transport security: TLS termination at the listener, TLS origination to upstreams, mutual TLS between services, and certificate rotation with SDS integration for managing certificates.

This episode covers basic observability: enabling access logs, formatting logs with request metadata, setting up liveness and readiness health checks for Envoy, and exposing metrics in Prometheus format.

This episode deepens Envoy's filter chains: HTTP filters like ext_authz and the gRPC JSON transcoder, TCP filters like the tcp_proxy passthrough, and how to order filters and do matching correctly.

This episode opens the world of Envoy dynamic configuration: xDS principles, the roles of CDS, LDS, RDS, EDS, and SDS, Envoy as an xDS client, and basic integration with control planes like Gloo, Contour, and Istio.
