Apache Traffic Server vs Envoy Proxy

Apache Traffic Server is a free, open-source caching proxy server for HTTP/1.1 and HTTP/2. It stores frequently requested pages, images, and web service calls so they can be reused, with the stated aims of improving response time and reducing server load and bandwidth needs. It can also add keep-alive behavior, filter or anonymize requests, and balance traffic through a proxy layer. Deployment patterns include web proxy cache, reverse proxy, and cache hierarchy. As a layer 7 HTTP load balancer, it can choose next-hop servers using request attributes, weighted round robin, or URL consistent hashing. Plug-in APIs let teams add behavior such as changing headers, handling ESI requests, or implementing cache algorithms. Security options include client access controls and authentication, SSL termination, and SSL-based access control. It is self-hosted, with Linux and macOS listed as platforms. The project identifies enterprises, internet service providers, backbone providers, and large intranets as its intended audience. The listed stable release is 10.2.0; 9.2.15 is listed as the long-term support release.

Envoy Proxy is a free, open-source proxy for edge traffic and service-to-service communication in cloud-native and AI-native applications. It runs as a self-contained process outside the application and can serve software written in different languages. Envoy handles HTTP/1.1, HTTP/2, gRPC, and HTTP/3, with HTTP/3 documented as alpha. Traffic features include routing, retries, circuit breaking, rate limiting, request shadowing, and outlier detection. It exposes subsystem statistics, an administration interface, and distributed tracing through third-party providers. Security features include TLS, JWT, role-based access control, and OAuth-related authorization and authentication. Operators must configure protections such as watermarks, overload management, and circuit breakers for availability resilience. Installation options include Docker images for amd64 and arm64, macOS Homebrew, and static binaries. Its API is compatible with Envoy Gateway and Istio.