alt.hn

12/31/2025 at 2:43:38 PM

Zero-Code Instrumentation of an Envoy TCP Proxy Using eBPF

https://sergiocipriano.com/beyla-envoy.html

by sergiocipriano

12/31/2025 at 4:00:35 PM

Could you not have gotten all this information by changing the Envoy log format to add the required fields? In your blog post, you show the default log format, and suggest that there was no way whatsoever to get this data from the logs. But according to the documentation, Envoy has rich support for many additional fields including detailed latency statistics.

I wonder if you added complexity to the architecture when a simple log format change would have sufficed.

by otterley

12/31/2025 at 4:40:20 PM

To my knowledge, Envoy does not provide this type of information for TCP proxying. I wanted request/response latency, but the available metrics are limited to connection-level information

by sergiocipriano

12/31/2025 at 4:42:23 PM

Why aren’t you using HTTP proxying if the underlying protocol is HTTP?

TCP proxying, in my experience, is typically only used for routing TLS or other non-HTTP TCP requests. In the former case, the proxy should not be able to observe the requests and responses.

by otterley

12/31/2025 at 5:20:01 PM

We currently only provide TCP load balancers, so HTTP-level proxying was not an option. Since the customer was not using TLS, this solution worked.

by sergiocipriano

12/31/2025 at 4:03:13 PM

Great article! What is the name of tool used for writing the block diagram?

by the_arun

12/31/2025 at 4:25:55 PM

Judging by the font embedded in the SVG file, it looks like it was created using Excalidraw. It's a great tool if you're looking for that hand-drawn aesthetic!

by ethaligan

12/31/2025 at 4:45:51 PM

Yes, I used Excalidraw!

by sergiocipriano

12/31/2025 at 3:58:11 PM

Great post, thanks for sharing! I appreciate all the details, including context for the problem, the complete setup, and the results. Bookmarked for future reference.

by chrisweekly

12/31/2025 at 3:19:38 PM

I was also on the verge of installing OBI to troubleshoot networking issue on one of our clusters. So maybe next time there’s a similar incident

by a012