What is Elchi Envoy UI?

Elchi is an enterprise proxy management platform with a 3-process distributed architecture. It provides enterprise-grade features including intelligent configuration analysis via OpenRouter AI integration (bring your own API key), Kubernetes auto-discovery, multi-tenancy with 4-tier RBAC, comprehensive xDS protocol support, and automated health monitoring. It's designed for managing Envoy proxies at scale with modern UI and intelligent automation.

Is Elchi a free Envoy UI?

Yes, Elchi is completely free and open-source Envoy UI. It provides a modern web interface for Envoy proxy management without any licensing costs. You can find the source code on GitHub and deploy it in your own infrastructure.

What makes Elchi better than default Envoy admin UI?

Elchi provides a modern, user-friendly web interface compared to Envoy's basic admin UI. It offers visual configuration management, real-time validation, drag-and-drop functionality, and comprehensive proxy management features that the default Envoy admin interface lacks.

Does Elchi work with existing Envoy deployments?

Yes, Elchi integrates seamlessly with existing Envoy proxy deployments. It uses standard xDS protocols (ADS, CDS, EDS, LDS, RDS, VHDS) to communicate with Envoy proxies, making it compatible with any standard Envoy setup without requiring changes to your existing configuration.

What are the system requirements for Elchi?

Elchi requires Kubernetes 1.19+, Helm 3.2.0+, minimum 4GB RAM, 2 CPU cores, and a storage class for persistent volumes (optional for external databases). It can be deployed with built-in MongoDB and VictoriaMetrics or use external instances.

How do I install Elchi?

Install Elchi using Helm: 1) Add the repository: 'helm repo add elchi https://charts.elchi.io', 2) Update repos: 'helm repo update', 3) Install: 'helm install my-elchi elchi/elchi-stack --set-string global.mainAddress="your-domain.com"'. Default login is admin/admin.

What protocols does Elchi support?

Elchi supports all Envoy xDS protocols including ADS (Aggregated Discovery Service), CDS (Cluster Discovery Service), EDS (Endpoint Discovery Service), LDS (Listener Discovery Service), RDS (Route Discovery Service), and VHDS (Virtual Host Discovery Service).

Features - Elchi Proxy Management Platform

Core Features

Comprehensive platform for enterprise Proxy management with modern UI and powerful automation

Proto to UI Auto-Generation

Automatically generates UI configuration components from Envoy protobuf definitions. Create Listeners, Clusters, Endpoints, and Routes with full TypeScript type safety and validation.

Interactive Dependency Graphs

Cytoscape-powered visual diagrams display relationships between Envoy components. Understand resource dependencies, data flow, and troubleshoot configurations with interactive exploration.

Quick Start Scenarios

Pre-built templates for common Envoy configurations. Generate complete setups for API gateways, load balancers, and service mesh deployments with just a few clicks.

Go-Based Agent

Lightweight Go agent for client-side Envoy management. Automatic registration, health monitoring, log export to Syslog/ELK, and seamless integration with the control plane.

Full xDS Protocol Support

Complete implementation of xDS (ADS, CDS, EDS, LDS, RDS, VHDS) using go-control-plane. Delta xDS support for efficient incremental configuration updates.

Two-Step Validation

Frontend TypeScript validation and backend protoc-gen-validate ensures configurations are correct before deployment. Catch errors early and prevent misconfigurations.

Save & Publish Workflow

Draft mode for safe configuration changes. Save incrementally and publish bulk updates atomically when ready. Rollback support for quick recovery from issues.

Multi-Version Envoy Support

Manage Envoy versions 1.27 through 1.35+ from a single interface. Intelligent version-based routing with seamless version upgrade capability. Migrate resources from version X to Y effortlessly.

Project-Based Multi-Tenancy

Organize configurations by teams, environments, or customers. Complete resource isolation with 4-tier RBAC (Owner, Admin, Editor, Viewer) for enterprise collaboration.

Advanced Features

Enterprise-grade capabilities with intelligent automation and modern cloud-native technologies

AI-Powered Analysis

OpenRouter AI Integration

Bring your own OpenRouter API key and choose any AI model for configuration analysis, log debugging, pattern recognition, and intelligent troubleshooting recommendations.

Configuration analysis

Log pattern recognition

Anomaly detection

Root cause analysis

Kubernetes Discovery

Auto Endpoint Management

Automatic discovery and synchronization of Kubernetes endpoints with real-time updates as your services scale.

Auto-discover K8s services

Real-time endpoint updates

Multi-cluster support

Service mesh integration

ACME Certificate Management

Automated SSL/TLS

Automated certificate lifecycle management with ACME protocol support for Let's Encrypt and Google Trust Services. DNS-01 challenge verification with auto-renewal.

Let's Encrypt integration

Google Trust Services

DNS provider management

Automatic renewal

Global Server Load Balancing

DNS-Based Traffic Management

Enterprise GSLB with intelligent health probing, automatic failover, and geo-based traffic routing. Integrate with CoreDNS for dynamic DNS responses based on endpoint health.

HTTP/HTTPS/TCP health probes

Anti-flapping protection

Per-record failover zones

Circuit breaker with backoff

Intelligent Automation meets Cloud-Native Architecture

Comprehensive Feature Set

Advanced capabilities for security, monitoring, and operational excellence

Web Application Firewall (WAF)

Integrated OWASP Core Rule Set (CRS) with customizable directive sets, per-authority rules, and comprehensive filtering by severity, phase, and paranoia level.

OWASP CRS integration
Custom directive management
Domain-specific rules
Rule browser & import

Scenario Workflows

Quick Start Templates

Pre-built scenario workflows with step-by-step wizards for common Envoy configurations. Execute, test, and deploy configurations efficiently.

Scenario wizard
Dynamic forms
Configuration review
Quick deployment

Service Discovery

Auto Registration

Discover and manage clusters automatically. Track service status, monitor cluster health, and manage registration with real-time updates.

Cluster discovery
Status monitoring
Usage statistics
Last seen tracking

ACME Certificate Management

Automated SSL/TLS

Automated certificate lifecycle management with ACME protocol support for Let's Encrypt and Google Trust Services. DNS-01 challenge verification with auto-renewal.

Let's Encrypt integration
Google Trust Services
DNS provider management
Automatic renewal

Audit Logging

Compliance & Security

Complete audit trail for all user actions, configuration changes, and system operations. Filter by date, action type, user, and resource.

Action tracking
User accountability
Resource changes
Compliance reporting

Advanced Metrics

Real-time Monitoring

ECharts-powered visualization with downstream, upstream, and listener metrics. Custom time ranges, metric grouping, and auto-refresh.

Real-time charts
Custom time ranges
Metric filtering
Export capabilities

Log Management

Intelligent Analysis

Real-time service logs with JSON parsing, HTTP access log detection, and intelligent log analysis for pattern detection and troubleshooting.

JSON log parsing
Log level filtering
Search functionality
Pattern detection

Registry Management

Configuration Central

Centralized configuration registry with version tracking, resource metadata, and schema information for all Envoy configurations.

Version tracking
Resource metadata
Schema validation
Registry browser

Version Upgrade

Seamless Migration

Effortlessly upgrade Envoy configurations from one version to another. Migrate resources from version X to version Y with automated compatibility checks.

Cross-version migration
Compatibility validation
Resource transformation
Zero-downtime upgrades

Log Export

Syslog & ELK Integration

Export logs to external systems via Syslog and Elastic Logstash. Centralize log management and integrate with your existing observability stack.

Syslog integration
Elastic Logstash support
Centralized logging
Flexible export formats

Metrics Visualization

Platform & Grafana

View detailed metrics both on the platform and through Grafana integration. Monitor performance, traffic patterns, and system health in real-time.

Built-in dashboards
Grafana integration
Custom metrics
Real-time updates

LDAP Authentication

Enterprise SSO

Integrate with your existing LDAP/Active Directory infrastructure. Centralized user authentication and authorization for enterprise deployments.

LDAP integration
Active Directory support
Centralized auth
Enterprise SSO

All features integrated into a unified management platform