菜单
Configure Envoy proxy for HTTP reverse proxying, TCP forwarding, TLS termination, gRPC proxying, or traffic management. Use when creating or editing Envoy bootstrap YAML configs.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Configure frp (Fast Reverse Proxy) to expose services behind NAT or firewalls. Use when setting up frps (server) and frpc (client) configs for TCP, UDP, HTTP, HTTPS, or SOCKS5 tunnelling.
Configure go-gost (Go Simple Tunnel) proxy. Use when setting up SOCKS5/HTTP proxies, port forwarding, proxy chaining, SSH tunnels, TLS-encrypted proxies, or DNS-over-TLS with go-gost v3.
Configure HAProxy for TCP or HTTP load balancing, SSL/TLS termination, and ACL-based routing. Use when creating or editing haproxy.cfg files for frontends, backends, and listen sections.
Configure nginx as a reverse proxy, load balancer, stream (TCP/UDP) proxy, SSL termination frontend, or HTTP forward proxy. Use when working with nginx.conf or nginx stream module configs.
Configure Proxyman for HTTP/HTTPS traffic interception on macOS/iOS. Use when writing Proxyman addon scripts to rewrite headers, mock responses, block requests, or map URLs to local fixtures.
'Configure Traefik reverse proxy with Docker provider, Let\'s Encrypt TLS, middlewares (auth, rate-limit, headers), or TCP routing. Use when creating or editing traefik.yml and dynamic config files.'
| name | configure-envoy-proxy |
| description | Configure Envoy proxy for HTTP reverse proxying, TCP forwarding, TLS termination, gRPC proxying, or traffic management. Use when creating or editing Envoy bootstrap YAML configs. |
| license | Apache-2.0 |
| compatibility | Requires Envoy v1.28+ or Docker image envoyproxy/envoy:v1.29-latest |
| metadata | {"author":"proxy-tools","version":"1.0"} |
| allowed-tools | docker bash |
Envoy uses a static bootstrap YAML (or xDS dynamic config). The key sections are static_resources → listeners and clusters, plus an admin block.
static_resources:
listeners:
- name: my_listener
address:
socket_address: { address: 0.0.0.0, port_value: 10000 }
filter_chains:
- filters:
- name: envoy.filters.network.http_connection_manager
typed_config:
"@type": type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
stat_prefix: ingress
http_filters:
- name: envoy.filters.http.router
typed_config:
"@type": type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
route_config:
virtual_hosts:
- name: backend
domains: ["*"]
routes:
- match: { prefix: "/" }
route: { cluster: my_cluster }
clusters:
- name: my_cluster
type: STRICT_DNS
connect_timeout: 5s
load_assignment:
cluster_name: my_cluster
endpoints:
- lb_endpoints:
- endpoint:
address:
socket_address: { address: backend.internal, port_value: 8080 }
admin:
address:
socket_address: { address: 0.0.0.0, port_value: 9901 }
Replace the filter with envoy.filters.network.tcp_proxy:
- name: envoy.filters.network.tcp_proxy
typed_config:
"@type": type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy
stat_prefix: tcp
cluster: my_cluster
envoy/examples/:
http-proxy.yaml — HTTP reverse proxy with routingtcp-proxy.yaml — Raw TCP port forwardingtls-termination.yaml — TLS terminationgrpc-proxy.yaml — gRPC load balancingdocker run --rm -v $(pwd)/envoy/envoy.yaml:/etc/envoy/envoy.yaml \
envoyproxy/envoy:v1.29-latest --mode validate -c /etc/envoy/envoy.yaml
docker compose -f envoy/docker-compose.yml up -dcurl http://localhost:9901/clustersenvoy/