Envoy Proxy

Envoy Proxy is an open-source Layer 7 (and Layer 4) proxy. It runs as a sidecar next to services, as an edge proxy in front of a cluster, or as the data plane under a control plane. In a Service Mesh, every hop of east-west traffic can flow through Envoy so routing, retries, mutual TLS, and observability sit in one process instead of in each application. It does not execute application business logic and it does not run model weights.