# Envoy Proxy Configuration

> Tune the Envoy data plane through the global Config CRD: timeouts, health checks, circuit breakers, and more.

> Last updated: 2026-08-18
> Version: v1.5
> Pages: 6
## About this section

- [Envoy Proxy Configuration — Full Content](https://docs.kubermatic.com/kubelb/v1.5/tutorials/envoy-proxy/llms-full.txt)

## Pages
- [Graceful Shutdown](https://docs.kubermatic.com/kubelb/v1.5/tutorials/envoy-proxy/graceful-shutdown/llms-full.txt): Drain Envoy Proxy connections during pod termination to prevent request failures during rollouts.
- [Overload Manager](https://docs.kubermatic.com/kubelb/v1.5/tutorials/envoy-proxy/overload-manager/llms-full.txt): Protect Envoy Proxy instances from memory and connection exhaustion with overload actions.
- [Circuit Breakers](https://docs.kubermatic.com/kubelb/v1.5/tutorials/envoy-proxy/circuit-breakers/llms-full.txt): Configure global and per-tenant Envoy circuit-breaker thresholds to protect upstream services.
- [Endpoint Limiting](https://docs.kubermatic.com/kubelb/v1.5/tutorials/envoy-proxy/endpoint-limiting/llms-full.txt): Limit Envoy upstream endpoints to reduce health-check fan-out in large KubeLB environments.
- [Timeouts](https://docs.kubermatic.com/kubelb/v1.5/tutorials/envoy-proxy/timeouts/llms-full.txt): Configure HTTP and TCP timeouts globally, per tenant, or per route for KubeLB traffic.
- [Health Checks](https://docs.kubermatic.com/kubelb/v1.5/tutorials/envoy-proxy/health-checks/llms-full.txt): Configure TCP, HTTP, and gRPC active health checks across KubeLB configuration levels.