Skip to content

Debugging Envoy Tunnels: A Deep Dive#

KubeCon + CloudNativeCon Europe 2025 (London) digest Program Adjacent pick London · 1–4 April 2025

Abstract Recording

Carlos Sanchez & Alexandra Stoica, Adobe — Adjacent

Play the recording: Debugging Envoy Tunnels: A Deep Dive

  • Why: A practitioner's account of a specific, painful operational pattern — Envoy tunnels with mTLS connecting Kubernetes pods to on-prem/customer infrastructure — with real troubleshooting scenarios rather than a theoretical overview.
  • What: An interactive walkthrough of debugging Envoy tunnel failures in a production setup connecting Kubernetes pods to customer-dedicated on-prem infrastructure via dedicated egress IPs and mTLS. (from abstract only)
  • How: Adobe's setup uses Envoy tunnels and mTLS to give pods dedicated egress identity/IPs and VPN-style connectivity to on-prem services; the talk works through categories of tunnel failure and how to diagnose them. (from abstract only)
  • Where applicable: Envoy-based hybrid connectivity (Kubernetes-to-on-prem) specifically; the debugging methodology generalizes to other mTLS-tunnel troubleshooting.