Envoy System
The Styra DAS Envoy System type helps you manage the ingress and egress network traffic permitted within your Envoy-based proxy. For example, permit egress traffic only to a predefined collection of endpoints to minimize the risk of data exfiltration or implement microservice API authorization.
![Figure 1 - Envoy Architecture for Ingress traffic Figure 1 - Envoy Architecture for Ingress traffic](/img/envoy-opa-das-ingress.png)
![Figure 2 - Envoy Architecture for Egress traffic Figure 2 - Envoy Architecture for Egress traffic](/img/envoy-opa-das-egress.png)