--- title: Learn How to Proxy Applications With Envoy Proxy Server description: Learn how to set up Envoy Proxy Server to proxy applications for increased privacy in this step-by-step tutorial! canonical: https://adamtheautomator.com/envoy-proxy/ --- # Learn How to Proxy Applications With Envoy Proxy Server > Learn how to set up Envoy Proxy Server to proxy applications for increased privacy in this step-by-step tutorial! Source: https://adamtheautomator.com/envoy-proxy/ --- - Learn How to Proxy Applications With Envoy Proxy Server Tap to hide Home - Tutorials - Guidebooks - Instructors - Get Paid to Write - Advertising - Recommended Resources - About Adam Search for: - - - - # Learn How to Proxy Applications With Envoy Proxy Server Published:15 February 2022 - 5 min. read - Envoy Proxy - Linux - Security [](https://adamtheautomator.com/author/nicholas-xuan-nguyen/) [Nicholas Xuan Nguyen](https://adamtheautomator.com/author/nicholas-xuan-nguyen/) Read [more tutorials](https://adamtheautomator.com/author/nicholas-xuan-nguyen/) by Nicholas Xuan Nguyen! [](https://specopssoft.com/product/specops-password-auditor/?utm_source=adamtheautomator&utm_medium=referral&utm_campaign=adamtheautomator_referral_na&utm_content=display) Audit Active Directory for stale users, weak passwords, and other security risks with [Specops Password Auditor](https://specopssoft.com/product/specops-password-auditor/?utm_source=adamtheautomator&utm_medium=referral&utm_campaign=adamtheautomator_referral_na&utm_content=text). Table of Contents - Prerequisites - Installing Envoy Proxy - Running the Envoy Proxy Server - Conclusion XFacebookLinkedIn Ever wanted to set up a proxy application? Proxy applications are an effective way to increase your privacy online. [Envoy Proxy](https://www.envoyproxy.io/) is one of the best applications to set up an HTTP proxy server. And the best part of it? It’s completely free! In this tutorial, you’ll learn how to use Envoy as an HTTP reverse proxy server or even a TCP relay server. Configure your own custom security policies with just a few clicks! Read on and let Envoy Proxy Server help increase your privacy! ## Prerequisites This tutorial will be a hands-on demonstration. If you'd like to follow along, be sure you have the following: - A Linux machine – This demo uses Ubuntu 20.04 LTS, but any Linux distribution will work. Related:[How to Install Ubuntu 20.04 [Step-by-Step]](https://adamtheautomator.com/install-ubuntu/) - A non-root user with sudo privileges. ## Installing Envoy Proxy Before proxying applications, you’ll first install the application on your machine, similar to how you do so with other packages. But you’ll also install required dependencies before installing it from a third-party repository. 1. Run the [apt update](https://linuxize.com/post/how-to-use-apt-command/#updating-package-index-apt-update) command below to update your machine's repository index. sudo apt update -y Updating your Machine's Repository Index 2. Next, run the [apt install](https://linuxize.com/post/how-to-use-apt-command/#installing-packages-apt-install) command below to fetch packages from repositories over the HTTP Secure protocol (HTTPS) (apt-transport-https). The command then installs the required dependencies ([gnupg2)](https://gnupg.org/) The command fetches packages from repositories over the FTP protocol (curl) and displays [LSB](https://refspecs.linuxfoundation.org/LSB_3.0.0/LSB-PDA/LSB-PDA/lsbrelease.html) (Linux Standard Base) information about the machine (lsb-release). The LSB information lets it know what LSB version your machine is compatible with. sudo apt install apt-transport-https gnupg2 curl lsb-release -y Installing Dependencies for Envoy Proxy 3. Run the below curl command to import the GPG key from the server's developer (gpg.8115BA8E629CC074.key) to your APT keyring (getenvoy-keyring.gpg). This GPG key ensures that you get the official version of the server rather than a man-in-the-middle attack. The APT keyring uses GPG to check the signature of the Envoy Proxy Server's repository before installing or upgrading it. curl -sL 'https://deb.dl.getenvoy.io/public/gpg.8115BA8E629CC074.key' | sudo gpg --dearmor -o /usr/share/keyrings/getenvoy-keyring.gpg The command has no output if the GPG key is imported correctly, like the one below. Importing GPG key to your APT keyring 4. Now, run the echo command below to verify that the GPG key is valid and trusted (sha256sum --check). Replace key_ring with the developer’s public keyring. echo key_ring /usr/share/keyrings/getenvoy-keyring.gpg | sha256sum --check As you can see below, the key is valid and OK to use. Verifying the GPG key 5. Run the below echo command to add the Envoy Proxy Server's official repository (https://deb.dl.getenvoy.io/public/deb/ubuntu $(lsb_release -cs) main) to your machine. This command tells APT where to download and install packages. echo "deb [arch=amd64 signed-by=/usr/share/keyrings/getenvoy-keyring.gpg] https://deb.dl.getenvoy.io/public/deb/ubuntu $(lsb_release -cs) main" | sudo tee /etc/apt/sources.list.d/getenvoy.list You’ll see the dl.getenvoy.io/public/deb/ubuntu string in the output shown below, which is where your server is hosted, and that it’s in the focal release channel. This output confirms that the server's repository is added to your machine. Adding the server's Official Repository 6. Next, rerun the apt update command to get the latest package information from repositories on your machine. sudo apt update -y Getting the latest package information 7. Run the [apt-cache policy](https://itsfoss.com/apt-cache-command) command below to confirm that the server is available for installation from the repository on your machine. sudo apt-cache policy Below, you can see that the server is available for installation in your ubuntu machine from its release channel (focal channel). Verifying the Envoy Proxy Server is Available for Installation 8. Finally, run the apt install command below to install the server (getenvoy-envoy). sudo apt install getenvoy-envoy -y Installing the Envoy Proxy Server ## Running the Envoy Proxy Server You have installed the Envoy Proxy Server, but how do you know it works? You’ll run a demo instance from your terminal. 1. Run the [envoy --version](https://www.envoyproxy.io/docs/envoy/latest/operations/cli#cmdoption-version) command to check the server version running on your machine. envoy --version If you’ve installed the server correctly, you’ll see the version printed on your terminal. In this demo, the version is 1.18.2, but yours may be different. Checking Envoy Proxy Version 2. Next, run the [envoy --help](https://www.envoyproxy.io/docs/envoy/latest/start/quick-start/run-envoy#view-the-envoy-command-line-options) command to list all the options you can use when running the Envoy Proxy Server. envoy --help You can use [most of the options](https://www.envoyproxy.io/docs) listed in the output below to view or change the behavior of the server. Showing all options for Envoy Proxy 3. Run the wget command below to download the demo configuration named envoy-demo.yaml file from the server's website. You will use this file to start a demo. wget https://www.envoyproxy.io/docs/envoy/latest/_downloads/92dcb9714fb6bc288d042029b34c0de4/envoy-demo.yaml downloading the demo configuration The envoy-demo.yaml file’s content looks like the one below. This file tells the server to listen for incoming connections (0.0.0.0) to process HTTP requests in port 10000. Viewing the envoy-demo.yaml file’s content 4. Now, run the below command to tell the server to read the configuration (-c envoy-demo.yaml) file, which starts an instance. envoy -c envoy-demo.yaml Starting a Demo Instance of Envoy Proxy Server 5. Next, run the below command to check all running processes in your system (ps -ef) and verify that Envoy Proxy Server is running (grep envoy). ps -ef | grep envoy You’ll see the Envoy Proxy Server process listed in the output below. At this point, your Envoy Proxy Server listens for requests and proxying on port 10000. Verifying the Demo Envoy Proxy Server is Running 6. Run the [netstat](https://www.tecmint.com/install-netstat-in-linux) command below to check if the Envoy Proxy Server listens to port 10000. sudo netstat -tulpn | grep :10000 Below, you can see the port number (10000) you used to configure Envoy Proxy Server. Checking Port 10000 7. Now, run the ufw command below to open port 10000 on your firewall. If you use a third-party firewall, you might need to adjust the command to open the corresponding port for your proxy server. The below command adds a firewall rule to secure your server since it only listens to incoming connections from port 10000. sudo ufw allow 10000/tcp Opening Port 10000 on your Firewall Related:[How To Set Up the UFW Firewall on Linux](https://adamtheautomator.com/ufw-firewall/) 8. Run the ufw status command to check your firewall status and confirm that your Envoy Proxy Server port is open. sudo ufw status verbose The output below confirms that the Envoy Proxy Server's port (10000) is open on your firewall. Confirming Port 10000 is Open 9. Finally, run the curl command below to know if your Envoy Proxy Server is proxying/working as intended. curl -v localhost:10000 As expected, the curl command is proxied by Envoy Proxy Server, as you can see the default welcome page from Envoy Proxy below. Testing your Proxy Server ## Conclusion In this tutorial, you’ve learned how to install and run Envoy Proxy Server on your Ubuntu machine. You’ve also touched on adding a firewall rule to open Envoy Proxy Server's port (10000) and verified your Envoy Proxy Server works perfectly. At this point, you have a fully-functional proxy server, and you can now use it to proxy your application's traffic. Now, why not [set up a scalable and highly available proxy infrastructure](https://levelup.gitconnected.com/scaling-microservices-with-grpc-and-envoy-72a64fc5bbb6) with Envoy Proxy Server with this newfound knowledge? Hate ads? Want to support the writer? Get many of our tutorials packaged as an ATA Guidebook. [Explore ATA Guidebooks](https://adamtheautomator.com/ata-guidebooks/) ## More from ATA Learning and Partners - ### Recommended Resources! Recommended Resources for Training, Information Security, Automation, and more! - ### Get Paid to Write! ATA Learning is always seeking instructors of all experience levels. Regardless if you’re a junior admin or system architect, you have something to share. Why not write on a platform with an existing audience and share your knowledge with the world? - ### ATA Learning Guidebooks ATA Learning is known for its high-quality written tutorials in the form of blog posts. Support ATA Learning with ATA Guidebook PDF eBooks available offline and with no ads! ## Categories - IT Ops - Cloud - DevOps - Home Ops - Information Security - Software Development ## Site - Home - Tutorials - Guidebooks - Instructors - Get Paid to Write - Advertising - Recommended Resources - About Adam Copyright 2026© ATA Learning | [Privacy Policy](https://adamtheautomator.com/privacy/) Don't be left behind with the ATA Learning Newsletter! Looks like you're offline!