Elchi

0 reviews

Elchi is an enterprise control plane for Envoy proxy fleets on VMs and Kubernetes. Instead of hand-written xDS or bootstrap files, every Envoy resource (listeners, routes, clusters, endpoints, TLS secrets, filters) is edited in a typed form generated from that Envoy version's protobuf definitions. Changes are validated in the editor and again on the server, staged as drafts, published together over xDS without restarting Envoy, and recorded in an audit log. Several Envoy versions run side by side, and listeners move to a newer version through a tracked upgrade. A lightweight edge agent installs and runs Envoy on Linux hosts.recorded in an audit log. Several Envoy versions run side by side, and listeners move to a newer version through a tracked upgrade. A lightweight edge agent installs and runs Envoy on Linux hosts. Add-on products plug into the same control plane: - API Security (Shield): an ext_proc sidecar next to each Envoy with authentication, rate limiting, bot defense, data-loss prevention and a built-in OWASP Core Rule Set WAF, rolled out per route from detect to block. - API Discovery: a risk-scored API inventory built from Envoy access logs, with PII and authentication findings, shadow endpoints, drift against your OpenAPI specs, and OpenAPI export. - GSLB: CoreDNS-based authoritative DNS driven by health checks, with per-record failover. Elchi is self-hosted: install it on Kubernetes with Helm, on Docker Swarm, on a single VM or on bare metal, including air-gapped networks. The free tier manages one edge node without a license.