Apigee Adapter Envoy Service Mesh Integration

What Apigee Adapter for Envoy is

Apigee Adapter for Envoy is an API gateway integration solution that combines the lightweight proxy capabilities of Envoy (and Istio) with the centralized governance and analytics features of the Apigee platform. It allows organizations to deploy a lightweight data plane directly adjacent to backend services while maintaining centralized management in Google Cloud.

How it meets the requirements

• Security and Quota Enforcement: The Envoy proxy intercepts API calls and queries the local Apigee Remote Service, which acts as a Policy Decision Point (PDP) to validate API keys, verify OAuth tokens, and enforce rate-limiting quotas.
• Centralized Analytics: The adapter asynchronously transmits traffic metrics and operational data to the cloud-hosted Apigee management plane, providing full access to Apigee analytics dashboards and reporting APIs without blocking request flows.
• Low Latency and Data Perimeter: API requests are evaluated and routed locally inside the on-premises cluster, keeping runtime traffic strictly within enterprise boundaries and eliminating unnecessary cross-network hops.
• Reduced Footprint: Unlike a full Apigee on-premises deployment—which requires substantial infrastructure for message processors, Cassandra stores, and local management services—the Envoy adapter provides a compact, containerized footprint ideal for service meshes.

Key advantages

• Asynchronous Telemetry: Analytics and operational metadata are uploaded asynchronously, preventing management plane calls from adding overhead to the critical path.
• Resilience and Caching: Verified API keys and configuration policies are cached locally, allowing the proxy to maintain routing decisions during transient network blips.
• Standardized Ingress: Seamlessly integrates into existing Kubernetes and Istio architectures using native service mesh constructs.