Envoy defaults set by App Mesh
Important
End of support notice: On September 30, 2026, Amazon will discontinue support for Amazon App Mesh. After September 30, 2026, you will no longer be able to access the Amazon App Mesh console or Amazon App Mesh resources. For more information, visit this blog post Migrating from Amazon App Mesh to Amazon ECS Service Connect
The following sections provide information about the Envoy defaults for the route retry policy and circuit breaker that are set by App Mesh.
Default route retry policy
If you had no meshes in your account before July 29, 2020, App Mesh
automatically creates a default Envoy route retry policy for all HTTP, HTTP/2, and gRPC
requests in any mesh in your account on or after July 29, 2020. If you
had any meshes in your account before July 29, 2020, then no default
policy was created for any Envoy routes that existed before, on, or after
July 29, 2020. This is unless you open a ticket with Amazon support
App Mesh creates an Envoy route when you either create an App Mesh route or define a virtual node provider for an App Mesh virtual service. Though you can create an App Mesh route retry policy, you can't create an App Mesh retry policy for a virtual node provider.
The default policy isn't visible through the App Mesh API. The default policy is only
visible through Envoy. To view the configuration, enable the administration interface
and send a request to Envoy for a config_dump
. The default policy includes the
following settings:
-
Max retries –
2
-
gRPC retry events –
UNAVAILABLE
-
HTTP retry events –
503
Note
It's not possible to create an App Mesh route retry policy that looks for a specific HTTP error code. However, an App Mesh route retry policy can look for
server-error
orgateway-error
. Both of these include503
errors. For more information, see Routes. -
TCP retry event –
connect-failure
andrefused-stream
Note
It's not possible to create an App Mesh route retry policy that looks for either of these events. However, an App Mesh route retry policy can look for
connection-error
, which is equivalent toconnect-failure
. For more information, see Routes. -
Reset – Envoy attempts a retry if the upstream server doesn't respond at all (disconnect/reset/read timeout).
Default circuit breaker
When you deploy an Envoy in App Mesh, Envoy default values are set for some of the circuit
breaker settings. For more information, see cluster.CircuitBreakers.Thresholdsconfig_dump
.
If you had no meshes in your account before July 29, 2020, then for
each Envoy that you deploy in a mesh created on or after July 29, 2020,
App Mesh effectively disables circuit breakers by changing the Envoy default values for the
settings that follow. If you had any meshes in your account before
July 29, 2020, the Envoy default values are set for any Envoy that you
deploy in App Mesh on, or after July 29, 2020, unless you open a ticket with Amazon support
-
max_requests
–2147483647
-
max_pending_requests
–2147483647
-
max_connections
–2147483647
-
max_retries
–2147483647
Note
No matter if your Envoys have the Envoy or App Mesh default circuit breaker values, you cannot modify the values.