Envoy System

The Styra DAS Envoy System type helps you manage the ingress and egress network traffic permitted within your Envoy-based proxy. For example, permit egress traffic only to a predefined collection of endpoints to minimize the risk of data exfiltration or implement microservice API authorization.

Figure 1 - Envoy Architecture for Ingress traffic

Figure 2 - Envoy Architecture for Egress traffic