To Envoy or not to Envoy

Wed, 05 Mar 2025 00:00:00 +0000

I recently came across the need for a reusable microservice in the form of an OCI / Docker image to meet different authentication and authorization requirements depending on the end project and environment. While the current limited set of possible security configurations is handled by the microservice itself, I analyzed the possibility of delegating this aspect to a specialized sidecar container living in the same Kubernetes pod.

After a bit of prompt engineering and wanting to consider something else than NGINX I decided to first try Envoy Proxy. Long story short, here’s a Docker Compose setup:

Envoy on paval.io

To Envoy or not to Envoy