Envoy

https://kgateway.dev/docs
Admin
Envoy provides documentation for a high-performance open-source edge and service proxy, enabling...
Tokens:593,292
Snippets:4,254
Trust Score:8.4
Update:2 weeks ago
Show doc for...
Tokens:
Raw
### cards shortcode example

Source: https://kgateway.dev/docs/envoy/latest/reference/contribution/add-docs

Use this shortcode to display a card that links to a specific topic within or outside the documentation. The example shows a card linking to the quickstart page with the title "Get started".

```markdown
{{< cards >}}
{{< card link="../../../quickstart" title="Get started" >}}
{{< /cards >}}
```

--------------------------------

### Example output for kgateway Helm installation

Source: https://kgateway.dev/docs/envoy/latest/install/helm

Shows the expected output when installing the kgateway chart.

```txt
NAME: kgateway
LAST DEPLOYED: Thu Feb 13 14:03:51 2025
NAMESPACE: kgateway-system
STATUS: deployed
REVISION: 1
TEST SUITE: None
```

--------------------------------

### Example output for httpbin pod listing

Source: https://kgateway.dev/docs/envoy/latest/integrations/istio/ambient/ambient-ingress

Example output from the kubectl get pods command showing the httpbin pod and its node.

```console
NAME                       READY   STATUS    RESTARTS   AGE   IP           NODE                                                  NOMINATED NODE   READINESS GATES
httpbin-54cf575757-hdv8t   3/3     Running   0          22h   10.XX.X.XX   gke-ambient-default-pool-bb9a8da5-bdf4   <none>           <none>
```

--------------------------------

### Example output: Send test requests

Source: https://kgateway.dev/docs/envoy/latest/traffic-management/traffic-split

Shows a sample HTTP response from the traffic splitting setup, indicating a successful response from helloworld-v3.

```text
HTTP/1.1 200 OK
server: envoy
date: Wed, 12 Mar 2025 20:59:35 GMT
content-type: text/html; charset=utf-8
content-length: 60
x-envoy-upstream-service-time: 110

Hello version: v3, instance: helloworld-v3-55bfdf76cf-nv545
```

--------------------------------

### Example output for Gateway API CRD installation

Source: https://kgateway.dev/docs/envoy/latest/install/helm

Shows the expected output when applying the Gateway API CRDs.

```console
customresourcedefinition.apiextensions.k8s.io/gatewayclasses.gateway.networking.k8s.io created
customresourcedefinition.apiextensions.k8s.io/gateways.gateway.networking.k8s.io created
customresourcedefinition.apiextensions.k8s.io/httproutes.gateway.networking.k8s.io created
customresourcedefinition.apiextensions.k8s.io/referencegrants.gateway.networking.k8s.io created
customresourcedefinition.apiextensions.k8s.io/grpcroutes.gateway.networking.k8s.io created
```

--------------------------------

### Example output: Deploy Helloworld sample apps

Source: https://kgateway.dev/docs/envoy/latest/traffic-management/traffic-split

Shows the expected output when deploying the Helloworld sample apps, confirming creation of services and deployments.

```text
service/helloworld-v1 created
service/helloworld-v2 created
service/helloworld-v3 created
deployment.apps/helloworld-v1 created
deployment.apps/helloworld-v2 created
deployment.apps/helloworld-v3 created
```

--------------------------------

### Example output for TLS passthrough request

Source: https://kgateway.dev/docs/envoy/latest/integrations/aws-elb/nlb

Example output from the curl command showing a successful TLS handshake and an HTTP/2 200 response. Note the certificate verification warning (unable to get local issuer certificate) which is expected in this test setup.

```console
* Hostname https.example.com was found in DNS cache
*   Trying 3.XX.XXX.XX:443...
* Connected to https.example.com (3.XX.XXX.XX) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*  CAfile: /etc/ssl/cert.pem
*  CApath: none
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
* TLSv1.2 (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
* TLSv1.2 (IN), TLS handshake, Server finished (14):
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
* TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.2 (OUT), TLS handshake, Finished (20):
* TLSv1.2 (IN), TLS change cipher, Change cipher spec (1):
* TLSv1.2 (IN), TLS handshake, Finished (20):
* SSL connection using TLSv1.2 / ECDHE-RSA-CHACHA20-POLY1305
* ALPN, server accepted to use h2
* Server certificate:
*  subject: CN=*; O=any domain
*  start date: Jul 23 20:03:48 2024 GMT
*  expire date: Jul 23 20:03:48 2025 GMT
*  issuer: O=any domain; CN=*
*  SSL certificate verify result: unable to get local issuer certificate (20), continuing anyway.
* Using HTTP2, server supports multi-use
* Connection state changed (HTTP/2 confirmed)
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
* Using Stream ID: 1 (easy handle 0x14200fe00)
...
< HTTP/2 200 
HTTP/2 200
```

--------------------------------

### Create and navigate to the example_certs directory

Source: https://kgateway.dev/docs/envoy/latest/setup/listeners/mtls

Creates a directory named example_certs and changes into it. This is the first step before generating any certificates.

```sh
mkdir example_certs && cd example_certs
```

--------------------------------

### Get Keycloak Service port

Source: https://kgateway.dev/docs/envoy/latest/security/oauth/keycloak/setup

Checks the port on the Keycloak Service if you deployed Keycloak another way. The example values in the Backend match the Service created in the Install Keycloak step, which listens on port 8443.

```sh
kubectl get svc keycloak -n keycloak
```

--------------------------------

### Example output for GET request

Source: https://kgateway.dev/docs/envoy/latest/traffic-management/match/method

Example output from a successful GET request, showing a 200 OK response and the JSON body.

```text
* Mark bundle as not supporting multiuse
< HTTP/1.1 200 OK
HTTP/1.1 200 OK
< access-control-allow-credentials: true
access-control-allow-credentials: true
< access-control-allow-origin: *
access-control-allow-origin: *
< content-type: application/json; encoding=utf-8
content-type: application/json; encoding=utf-8
< date: Sat, 04 Nov 2023 03:34:12 GMT
date: Sat, 04 Nov 2023 03:34:12 GMT
< content-length: 422
content-length: 422
< x-envoy-upstream-service-time: 1
x-envoy-upstream-service-time: 1
< server: envoy
server: envoy

< 
{
  "args": {},
  "headers": {
    "Accept": [
      "*/*"
    ],
    "Host": [
      "match.example:8080"
    ],
    "User-Agent": [
      "curl/7.77.0"
    ],
    "X-Envoy-Expected-Rq-Timeout-Ms": [
      "15000"
    ],
    "X-Forwarded-Proto": [
      "http"
    ],
    "X-Request-Id": [
      "6823bc28-ba8e-47df-a3a0-1aa21628db0e"
    ]
  },
  "origin": "10.116.3.7:47022",
  "url": "http://match.example:8080/get"
}
```

--------------------------------

### Example output: Verify Helloworld pods

Source: https://kgateway.dev/docs/envoy/latest/traffic-management/traffic-split

Shows the expected pod status output, with all three Helloworld pods running and ready.

```text
NAME                             READY   STATUS    RESTARTS   AGE
helloworld-v1-5c457458f-rfkc7    3/3     Running   0          30s
helloworld-v2-6594c54f6b-8dvjp   3/3     Running   0          29s
helloworld-v3-8576f76d87-czdll   3/3     Running   0          29s
```

--------------------------------

### Deploy Helloworld sample apps

Source: https://kgateway.dev/docs/envoy/latest/traffic-management/traffic-split

Applies the Helloworld sample app manifest from a remote URL, creating three service and deployment resources.

```sh
kubectl -n helloworld apply -f https://raw.githubusercontent.com/solo-io/gloo-edge-use-cases/main/docs/sample-apps/helloworld.yaml
```

--------------------------------

### Install kgateway development build

Source: https://kgateway.dev/docs/envoy/latest/install/helm

Installs the development build v2.5.0-main with pullPolicy Always to get the latest image.

```sh
helm upgrade -i -n kgateway-system kgateway oci://cr.kgateway.dev/kgateway-dev/charts/kgateway \
--version v2.5.0-main \
--set controller.image.pullPolicy=Always
```

--------------------------------

### Example Gateway status output

Source: https://kgateway.dev/docs/envoy/latest/setup/listeners/tcp

Example output from the kubectl get gateway command showing the Gateway is accepted and programmed.

```console
status:
  addresses:
  - type: IPAddress
    value: ${INGRESS_GW_ADDRESS}
  conditions:
  - lastTransitionTime: "2024-11-20T16:01:25Z"
    message: ""
    observedGeneration: 2
    reason: Accepted
    status: "True"
    type: Accepted
  - lastTransitionTime: "2024-11-20T16:01:25Z"
    message: ""
    observedGeneration: 2
    reason: Programmed
    status: "True"
    type: Programmed
```

--------------------------------

### Example output of httpbin pods

Source: https://kgateway.dev/docs/envoy/latest/resiliency/outlier-detection

Example output showing two httpbin replicas running.

```console
NAME                                   READY   STATUS    RESTARTS   AGE
httpbin-577649ddb-lsgp8                2/2     Running   0          31d
httpbin-577649ddb-q9b92                2/2     Running   0          3s
```

--------------------------------

### Check and install OpenSSL version

Source: https://kgateway.dev/docs/envoy/latest/setup/listeners/tls-passthrough

Check the installed OpenSSL version and install the OpenSSL version (not LibreSSL) if needed. The output of the version command may show LibreSSL, which is not supported. The installation command is an example using Homebrew.

```sh
openssl version
```

```sh
brew install openssl
```

--------------------------------

### Build and serve the site locally

Source: https://kgateway.dev/docs/envoy/latest/reference/contribution/preview

Run this command to build the site and start a local development server. The local preview will be available at localhost:1313.

```sh
hugo server -D
```

--------------------------------

### Create root certificate for example.com

Source: https://kgateway.dev/docs/envoy/latest/setup/listeners/tls-passthrough

Creates a root certificate and key for the example.com domain, used to sign the server certificate later.

```shell
mkdir example_certs
openssl req -x509 -sha256 -nodes -days 365 -newkey rsa:2048 -subj '/O=example Inc./CN=example.com' -keyout example_certs/example.com.key -out example_certs/example.com.crt
```

--------------------------------

### Deploy httpbin app with kubectl apply

Source: https://kgateway.dev/docs/envoy/latest/install/sample-app

Creates the httpbin namespace, service account, service, and deployment from the kgateway example manifest.

```shell
kubectl apply -f https://raw.githubusercontent.com/kgateway-dev/kgateway/refs/heads/v2.4.x/examples/httpbin.yaml
```

```txt
namespace/httpbin created
serviceaccount/httpbin created
service/httpbin created
deployment.apps/httpbin created
```

--------------------------------

### Example output of istiod service

Source: https://kgateway.dev/docs/envoy/latest/integrations/istio/sidecar/ingress

Example output from the kubectl get services command showing the istiod-main service with its cluster IP and ports.

```text
NAME          TYPE        CLUSTER-IP     EXTERNAL-IP   PORT(S)                                 AGE
istiod-main   ClusterIP   10.102.24.31   <none>        15010/TCP,15012/TCP,443/TCP,15014/TCP   3h49m
```

--------------------------------

### Example output with foo header

Source: https://kgateway.dev/docs/envoy/latest/traffic-management/transformations/update-request-path

Example output after sending a request with the foo: bar header. Shows a 200 OK response and the url field rewritten to /post, confirming the path and method transformation.

```console
< HTTP/1.1 200 OK
HTTP/1.1 200 OK
...  
{
  "args": {},
  "headers": {
     "Accept": [
       "*/*"
     ],
     "Content-Length": [
     "0"
     ],
     "Foo": [
     "bar"
     ],
     "Host": [
     "www.example.com:8080"
     ],
     "User-Agent": [
     "curl/7.77.0"
     ],
     "X-B3-Sampled": [
     "0"
     ],
     "X-B3-Spanid": [
     "5f36d131289dba78"
     ],
     "X-B3-Traceid": [
     "590047a63783206e5f36d131289dba78"
     ],
     "X-Forwarded-Proto": [
     "http"
     ],
     "X-Request-Id": [
     "6b7debde-6a8a-4d9e-90a4-33a9a35937d3"
     ]
 },
 "origin": "127.0.0.6:48539",
 "url": "http://www.example.com:8080/post",
 "data": "",
 "files": null,
 "form": null,
 "json": null
}  
```

--------------------------------

### Example output of Prometheus stack pods

Source: https://kgateway.dev/docs/envoy/latest/observability/otel-stack

Example output from the kubectl get pods command showing all Prometheus stack components running successfully.

```console
NAME                                                        READY   STATUS    RESTARTS   AGE
kube-prometheus-stack-grafana-b546d7755-ks7sn               3/3     Running   0          72s
kube-prometheus-stack-kube-state-metrics-684f8c7558-xhn2p   1/1     Running   0          72s
kube-prometheus-stack-operator-6dc9c666c5-pwzkb             1/1     Running   0          72s
kube-prometheus-stack-prometheus-node-exporter-z7csm        1/1     Running   0          72s
```

--------------------------------

### Example output for pod verification

Source: https://kgateway.dev/docs/envoy/latest/observability/tracing

Example output from the kubectl get pod command showing the otel-collector pod is Running with 1/1 ready containers.

```text
NAME             READY   STATUS    RESTARTS   AGE
otel-collector   1/1     Running   0          30s
```

--------------------------------

### Example output for readiness listener config dump

Source: https://kgateway.dev/docs/envoy/latest/traffic-management/proxy-protocol

Example output from the config dump showing the proxy_protocol listener filter with allow_requests_without_proxy_protocol set to true.

```console
[
  {
    "name": "envoy.filters.listener.proxy_protocol",
    "typed_config": {
      "@type": "type.googleapis.com/envoy.extensions.filters.listener.proxy_protocol.v3.ProxyProtocol",
      "allow_requests_without_proxy_protocol": true
    }
  }
]
```

--------------------------------

### Example output of gateway service

Source: https://kgateway.dev/docs/envoy/latest/integrations/aws-elb/nlb

Example output from the 'kubectl get services aws-cloud' command, showing the LoadBalancer service with an AWS NLB hostname.

```console
NAME        TYPE           CLUSTER-IP      EXTERNAL-IP                                                                     PORT(S)        AGE
aws-cloud   LoadBalancer   172.20.39.233   k8s-kgateway-awscloud-edaaecf0c5-2d48d93624e3a4bf.elb.us-east-2.amazonaws.com   80:30565/TCP   12s
```

--------------------------------

### Example httpbin pod logs

Source: https://kgateway.dev/docs/envoy/latest/traffic-management/session-affinity/session-persistence

Example logs showing that all subsequent requests were served by the same pod.

```console
Defaulted container "httpbin" out of: httpbin, curl
go-httpbin listening on http://0.0.0.0:8080
time="2025-07-16T17:17:09.8479" status=200 method="GET" uri="/headers" size_bytes=440 duration_ms=0.10 user_agent="curl/8.7.1" client_ip=10.244.0.7
time="2025-07-16T17:20:32.1077" status=200 method="GET" uri="/headers" size_bytes=445 duration_ms=0.04 user_agent="curl/8.7.1" client_ip=10.244.0.7
time="2025-07-16T17:20:40.7017" status=200 method="GET" uri="/headers" size_bytes=445 duration_ms=0.05 user_agent="curl/8.7.1" client_ip=10.244.0.7
time="2025-07-16T17:20:49.5744" status=200 method="GET" uri="/headers" size_bytes=515 duration_ms=0.04 user_agent="curl/8.7.1" client_ip=10.244.0.7
...
```

--------------------------------

### Example output for GatewayClass verification

Source: https://kgateway.dev/docs/envoy/latest/install/helm

Shows the expected output when getting the GatewayClass.

```txt
NAME         CONTROLLER               ACCEPTED   AGE   
kgateway     kgateway.dev/kgateway    True       6m36s
```

--------------------------------

### Install Gateway API CRDs v1.6.1

Source: https://kgateway.dev/docs/envoy/latest/install/argocd

Installs the Kubernetes Gateway API custom resources version 1.6.1. The example output shows the created CRDs. For experimental features like TCPRoutes, install the experimental CRDs instead.

```sh
kubectl apply -f https://github.com/kubernetes-sigs/gateway-api/releases/download/v1.6.1/standard-install.yaml
```

```console
customresourcedefinition.apiextensions.k8s.io/backendtlspolicies.gateway.networking.k8s.io created
customresourcedefinition.apiextensions.k8s.io/gatewayclasses.gateway.networking.k8s.io created
customresourcedefinition.apiextensions.k8s.io/gateways.gateway.networking.k8s.io created
customresourcedefinition.apiextensions.k8s.io/grpcroutes.gateway.networking.k8s.io created
customresourcedefinition.apiextensions.k8s.io/httproutes.gateway.networking.k8s.io created
customresourcedefinition.apiextensions.k8s.io/referencegrants.gateway.networking.k8s.io created
```

--------------------------------

### Example output for first request (200 OK)

Source: https://kgateway.dev/docs/envoy/latest/security/ratelimit/local

Example output for the first request, which succeeds with a 200 OK response.

```text
< HTTP/1.1 200 OK
HTTP/1.1 200 OK
...
```

--------------------------------

### Example output for exploring gRPC endpoints (port-forward)

Source: https://kgateway.dev/docs/envoy/latest/traffic-management/grpc

Example output showing the list of services and the description of the Echo service.

```console
grpc.health.v1.Health
grpc.reflection.v1alpha.ServerReflection
yages.Echo

yages.Echo is a service:
service Echo {
  rpc Ping ( .yages.Empty ) returns ( .yages.Content );
  rpc Reverse ( .yages.Content ) returns ( .yages.Content );
}
```

--------------------------------

### Example httpbin2 mirrored app logs

Source: https://kgateway.dev/docs/envoy/latest/resiliency/mirroring

Example log output from the httpbin2 app (version=v2) after running the kubectl logs command, showing the same mirrored GET /headers requests with status 200.

```text
time="2025-03-14T19:43:01.1548" status=200 method="GET" uri="/headers" size_bytes=443 duration_ms=0.17 user_agent="curl/8.7.1" client_ip=10.0.8.23
time="2025-03-14T19:43:02.3565" status=200 method="GET" uri="/headers" size_bytes=508 duration_ms=0.06 user_agent="curl/8.7.1" client_ip=10.0.8.23
time="2025-03-14T19:43:03.0173" status=200 method="GET" uri="/headers" size_bytes=443 duration_ms=0.15 user_agent="curl/8.7.1" client_ip=10.0.6.27
time="2025-03-14T19:43:03.3869" status=200 method="GET" uri="/headers" size_bytes=443 duration_ms=0.16 user_agent="curl/8.7.1" client_ip=10.0.8.23
time="2025-03-14T19:43:03.6858" status=200 method="GET" uri="/headers" size_bytes=508 duration_ms=0.05 user_agent="curl/8.7.1" client_ip=10.0.6.27
```

--------------------------------

### Example output for gateway verification

Source: https://kgateway.dev/docs/envoy/latest/integrations/external-dns-cert-manager

Example output from `kubectl get gateway http -n kgateway-system` for an AWS EKS cluster, showing the gateway is programmed and its external load balancer address.

```console
NAME   CLASS        ADDRESS                                                                  PROGRAMMED   AGE
http   kgateway     a3a6c06e2f4154185bf3f8af46abf22e-139567718.us-east-2.elb.amazonaws.com   True         93s
```

--------------------------------

### ReferenceGrant creation output

Source: https://kgateway.dev/docs/envoy/latest/traffic-management/destination-types/kube-services/grpc-services

Example output after applying the ReferenceGrant, confirming the resource was created.

```txt
referencegrant.gateway.networking.k8s.io/allow-grpc-route-to-echo created
```

--------------------------------

### Example output for exploring gRPC endpoints (LoadBalancer)

Source: https://kgateway.dev/docs/envoy/latest/traffic-management/grpc

Example output showing the list of services and the description of the Echo service.

```console
grpc.health.v1.Health
grpc.reflection.v1alpha.ServerReflection
yages.Echo
yages.Echo is a service:
service Echo {
  rpc Ping ( .yages.Empty ) returns ( .yages.Content );
  rpc Reverse ( .yages.Content ) returns ( .yages.Content );
}
```

--------------------------------

### Cleanup resources

Source: https://kgateway.dev/docs/envoy/latest/setup/listeners/mtls

Removes the resources created in the guide: the HTTPRoute, Gateway, secret, ConfigMap, and the example certificates directory.

```sh
kubectl delete httproute httpbin-https -n httpbin
kubectl delete gateway mtls -n kgateway-system
kubectl delete secret https-cert -n kgateway-system
kubectl delete configmap ca-cert -n kgateway-system
rm -rf ../example_certs
```

--------------------------------

### Example httpbin primary app logs

Source: https://kgateway.dev/docs/envoy/latest/resiliency/mirroring

Example log output from the primary httpbin app, showing GET /headers requests with status 200 and varying client IPs, used as a baseline for comparing mirrored traffic.

```text
time="2025-03-14T19:43:01.1546" status=200 method="GET" uri="/headers" size_bytes=508 duration_ms=0.05 user_agent="curl/8.7.1" client_ip=10.0.8.23
time="2025-03-14T19:43:02.3565" status=200 method="GET" uri="/headers" size_bytes=443 duration_ms=0.06 user_agent="curl/8.7.1" client_ip=10.0.8.23
time="2025-03-14T19:43:03.0178" status=200 method="GET" uri="/headers" size_bytes=508 duration_ms=0.08 user_agent="curl/8.7.1" client_ip=10.0.6.27
time="2025-03-14T19:43:03.3874" status=200 method="GET" uri="/headers" size_bytes=508 duration_ms=0.06 user_agent="curl/8.7.1" client_ip=10.0.8.23
time="2025-03-14T19:43:03.6862" status=200 method="GET" uri="/headers" size_bytes=443 duration_ms=0.07 user_agent="curl/8.7.1" client_ip=10.0.6.27
```

--------------------------------

### Example output for request with query parameter

Source: https://kgateway.dev/docs/envoy/latest/traffic-management/match/query

Example output showing a 200 OK response when the user=me query parameter is provided.

```text
* Mark bundle as not supporting multiuse
< HTTP/1.1 200 OK
HTTP/1.1 200 OK
< access-control-allow-credentials: true
access-control-allow-credentials: true
< access-control-allow-origin: *
access-control-allow-origin: *
< date: Sat, 04 Nov 2023 03:49:17 GMT
date: Sat, 04 Nov 2023 03:49:17 GMT
< content-length: 0
content-length: 0
< x-envoy-upstream-service-time: 1
x-envoy-upstream-service-time: 1
< server: envoy
server: envoy
```

--------------------------------

### Deploy hello-world app and Service

Source: https://kgateway.dev/docs/envoy/latest/traffic-management/destination-types/backends/priority-groups

Deploys a hello-world app and its Service in the httpbin namespace to serve as the failover backend.

```yaml
kubectl apply -f- <<EOF
apiVersion: apps/v1
kind: Deployment
metadata:
  name: hello-world
  namespace: httpbin
spec:
  replicas: 1
  selector:
    matchLabels:
      app: hello-world
  template:
    metadata:
      labels:
        app: hello-world
    spec:
      containers:
      - name: hello-world
        image: nginxdemos/hello:plain-text
        ports:
        - containerPort: 80
---
apiVersion: v1
kind: Service
metadata:
  name: hello-world
  namespace: httpbin
spec:
  selector:
    app: hello-world
  ports:
  - port: 80
    targetPort: 80
EOF
```

--------------------------------

### Delete rate limiting resources

Source: https://kgateway.dev/docs/envoy/latest/security/ratelimit/local

Removes the TrafficPolicy and HTTPRoute resources created in the guide, cleaning up the local rate limiting setup.

```sh
kubectl delete TrafficPolicy local-ratelimit -n httpbin
kubectl delete TrafficPolicy local-ratelimit -n kgateway-system
kubectl delete TrafficPolicy disable-ratelimit -n httpbin
kubectl delete httproute httpbin-ratelimit -n httpbin
kubectl delete httproute httpbin-anything -n httpbin
```

--------------------------------

### Example output of gateway proxy pod

Source: https://kgateway.dev/docs/envoy/latest/integrations/istio/sidecar/ingress

Example output from the verification command showing the gateway proxy pod is running with three containers: kgateway-proxy, sds, and istio-proxy. If these containers are not present, restart the proxy to apply the latest Gateway settings.

```text
Pod: http-f7c7f4b78-pwgnt | Status: Running
Containers:
- kgateway-proxy
- sds
- istio-proxy
```

--------------------------------

### Verify TCPRoute with kubectl get

Source: https://kgateway.dev/docs/envoy/latest/setup/listeners/tcp

Run this command to check the status of the TCPRoute. The example output shows the route is accepted and references are resolved.

```sh
kubectl get tcproute/tcp-route-echo -n kgateway-system -o yaml
```
Tokens:
Raw