Sidecar proxy concept (Envoy) in Kubernetes - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is a sidecar proxy in Kubernetes?

A sidecar proxy is a helper container that runs alongside the main application container in the same pod. It manages network traffic, security, and communication without changing the main app.

beginner

What role does Envoy play as a sidecar proxy?

Envoy acts as a sidecar proxy to handle service-to-service communication, load balancing, and security features like encryption, making apps more reliable and secure.

intermediate

Why use a sidecar proxy instead of modifying the application?

Using a sidecar proxy lets you add features like traffic control and security without changing the app code. It keeps the app simple and focuses on its main job.

intermediate

How does Envoy improve security in a Kubernetes environment?

Envoy encrypts traffic between services and can enforce policies, helping protect data and control who talks to whom inside the cluster.

beginner

What is the main benefit of running Envoy as a sidecar proxy in a pod?

It provides consistent network features like retries, timeouts, and monitoring for the app without changing the app itself.

What does a sidecar proxy typically run alongside in Kubernetes?

A The Kubernetes master node

B A separate pod in the cluster

C The main application container in the same pod

D A different namespace

A sidecar proxy runs in the same pod as the main application container to manage its network traffic.

Which of the following is a key feature of Envoy as a sidecar proxy?

A Running database queries

B Storing application data

C Scheduling pods

D Managing service-to-service communication

Envoy manages service-to-service communication, including load balancing and security.

Why is a sidecar proxy preferred over modifying the application for network features?

A It avoids changing the app code

B It makes the app slower

C It requires more resources

D It disables security

Sidecar proxies add features without changing the application code.

How does Envoy enhance security between services?

A By encrypting traffic and enforcing policies

B By storing passwords

C By running antivirus scans

D By blocking all traffic

Envoy encrypts traffic and enforces communication policies to improve security.

What is NOT a responsibility of a sidecar proxy like Envoy?

A Load balancing

B Application business logic

C Traffic routing

D Monitoring network traffic

Sidecar proxies do not handle application business logic; they focus on network and communication tasks.

Explain the concept of a sidecar proxy and why Envoy is commonly used for this purpose in Kubernetes.

Think about how adding helpers can improve communication without changing the main worker.

Describe how Envoy as a sidecar proxy improves security and reliability in a Kubernetes environment.

Consider how Envoy acts like a traffic controller and security guard for app communication.