Proxy

As explained in Effective Platform Engineering

A proxy server is an intermediary that forwards, filters, modifies, or manages network traffic between applications or services.

A proxy server sits between applications and manages their TCP/IP connections. It forwards traffic and can filter or modify it according to its configuration. In a service mesh, proxies add communication controls without requiring changes to application code. section 8.4.2

Configure a proxy for the behavior a service needs:

• Validate a web token before a request reaches an API. section 8.4.2
• Retry a connection before returning a failure to the calling application. section 8.4.2
• Encrypt traffic between proxies in front of communicating services. section 8.4.2

In Kubernetes, proxies run on top of the container network defined by the Container Network Interface (CNI). Deployment choices include a proxy per pod, one shared by pods on a node, or one for the cluster. Sharing makes service-specific policies, fine-grained traffic control, isolation, and granular observability harder. Choose the placement according to the control and visibility each service requires. section 8.4.2

Figure 8.5 A service mesh acts as a control plane for proxy servers, deploying and configuring them based on our instructions, creating a standardized way of utilizing this integration point.

The diagram shows how a service mesh deploys and configures proxies as a standardized integration point. section 8.4.2

How Effective Platform Engineering covers it

How deep it goes

Defines traffic handling and compares Kubernetes deployment placements, but does not detail proxy configuration syntax.

Examples

Illustrates token validation, connection retries, and encryption between proxies.

What it assumes

Assumes familiarity with APIs, microservices, and Kubernetes pods while defining what a proxy and service mesh do.

What you can do after

Evaluate/understand proxy placement against service-specific policy, isolation, and observability needs.

How it connects

Connects proxies to service meshes, sidecars, Kubernetes pods, the Container Network Interface, and observability.

liveBookmanning.com

Read Effective Platform Engineering on liveBook Get the book at manning.com

Also explained in

• 

  liveBookmanning.com
  The Joy of JavaScriptA Proxy is a JavaScript object that wraps a target object and intercepts fundamental operations on it through handler traps.
• 

  liveBookmanning.com
  Java Persistence with Spring Data and Hibernate epubA proxy is a substitute object that represents another object and defers or controls access to that object's state or behavior.

Compare how 3 books explain proxy →

Related concepts

• Spring Data JPAproduced by · Spring Data JPA is a Spring module that provides repository abstractions and query support for accessing relational data through JPA implementations.
• network isolationused by · Network isolation is the restriction or separation of network communication so that systems or processes can communicate only across permitted paths or boundaries.
• trapuses · A JavaScript Proxy trap is a handler function that intercepts a specific operation performed through the proxy.
• Envoyincludes · Envoy is an open-source, high-performance proxy for service-to-service communication, edge traffic management, and distributed application networking.
• routingincludes · Routing is the selection of a path, destination, or processing component to direct an item, request, or flow toward an intended endpoint.

This explainer was generated by Manning's knowledge graph from the text of Effective Platform Engineering. The section links point to the parts of the book it draws on.