Enterprise
Proxy Management Platform
Scalable 3-process distributed architecture with intelligent automation, comprehensive xDS protocol support, and modern UI for managing Envoy proxies at enterprise scale.
Platform Screenshots
Explore Elchi's powerful interface designed for enterprise-grade proxy management
Service Management
Manage your services and their configurations with intuitive interface
Service Management 2
Manage your services and their configurations with intuitive interface
Service Management 3
Manage your services and their configurations with intuitive interface
Advanced Filters
Use powerful filters to find and manage your proxies
Advanced Filters 2
Use powerful filters to find and manage your proxies
Scenario Workflows
Wizard-based configuration management for quick setup
Metrics Dashboard
Real-time metrics visualization with ECharts integration
Dependency Graph
Interactive visual representation of service dependencies
Platform Overview
Complete overview of Elchi platform capabilities
Platform Overview 2
Complete overview of Elchi platform capabilities
xDS Configuration
Comprehensive xDS protocol configuration interface
Agent Management
Distribute configurations and manage network traffic via agents
Config Info
Protobuf-based configuration information viewer
Log Viewer
Advanced log viewing and analysis capabilities
Log Viewer 2
Advanced log viewing and analysis capabilities
AI Assistant
Get intelligent configuration help and troubleshooting with OpenRouter
Audit Trail
Complete audit logging for compliance and security tracking
Background Jobs
Monitor and manage all background processing tasks
Service Registry
Service discovery and registry management interface
Route Mapping
Visual route configuration and traffic flow management
Architecture Flow
Visual diagram showing how Elchi works end-to-end
ACME Certificates
Automatic certificate management with ACME protocol support
ACME Accounts
Manage ACME accounts for Let's Encrypt and Google Trust Services
DNS Providers
Configure DNS providers for ACME challenge verification
GSLB Overview
Global Server Load Balancing configuration and management dashboard
GSLB Health Checks
Configure health checks and failover policies for GSLB endpoints
GSLB Traffic Policy
Define traffic routing policies and geo-based load balancing rules
Why Choose Elchi?
See how Elchi compares to manual Envoy configuration and traditional service mesh solutions
| Feature | Elchi | Manual Config | Service Mesh |
|---|---|---|---|
Intelligent Configuration Analysis Automated intelligent config analysis and troubleshooting with advanced recommendations | |||
Proto-to-UI Auto Generation Automatically generate UI components from Envoy protobuf definitions | |||
Multi-Version Envoy Support Support for Envoy versions 1.27 through 1.35+ with version routing | Partial | ||
3-Process Distributed Architecture Scalable architecture with Registry, Controller, and Control-Plane | |||
Real-time Configuration Validation Two-step validation before applying changes to production | Basic | ||
Kubernetes Auto-Discovery Automatic endpoint discovery and synchronization with K8s | |||
Visual Dependency Graphs Interactive Cytoscape-based dependency visualization | Limited | ||
Enterprise Multi-Tenancy Project-based isolation with 4-tier RBAC | Varies | ||
Version Upgrade & Migration Seamlessly migrate Envoy configs from version X to Y with compatibility checks | |||
LDAP/AD Authentication Enterprise SSO integration with LDAP and Active Directory | Varies | ||
Log Export (Syslog/ELK) Export logs to external systems via Syslog and Elastic Logstash | Limited | ||
Grafana Integration Native integration with Grafana for advanced metrics visualization | |||
Web Application Firewall (WAF) Integrated OWASP CRS with customizable rules | |||
ACME Certificate Management Automated certificate lifecycle with Let's Encrypt and Google Trust Services | Limited | ||
Global Server Load Balancing DNS-based traffic management with health probing, failover zones, and anti-flapping | |||
Learning Curve Intuitive UI vs complex YAML configurations | Easy | Steep | Medium |
Configuration Complexity Visual UI vs manual configuration files | Simple | High | Medium |
What Makes Elchi Unique
Intelligent Automation
Advanced automated analysis for configuration optimization and intelligent log troubleshooting
Auto-Generated UI
Unique proto-to-UI generation means support for new Envoy features without manual UI updates
Version Intelligence
Smart routing to appropriate control-plane versions based on client Envoy version
Enterprise Ready
Built from ground up for multi-tenancy, RBAC, and compliance requirements
Seamless Upgrades
Effortlessly upgrade between Envoy versions with automated compatibility validation
Enterprise Auth
LDAP/AD integration for centralized authentication and authorization
Log Centralization
Export logs to Syslog and ELK stack for unified observability
Advanced Metrics
Built-in dashboards with Grafana integration for comprehensive monitoring
Ready to simplify your Envoy proxy management?
Core Features
Comprehensive platform for enterprise Proxy management with modern UI and powerful automation
Proto to UI Auto-Generation
Automatically generates UI configuration components from Envoy protobuf definitions. Create Listeners, Clusters, Endpoints, and Routes with full TypeScript type safety and validation.
Interactive Dependency Graphs
Cytoscape-powered visual diagrams display relationships between Envoy components. Understand resource dependencies, data flow, and troubleshoot configurations with interactive exploration.
Quick Start Scenarios
Pre-built templates for common Envoy configurations. Generate complete setups for API gateways, load balancers, and service mesh deployments with just a few clicks.
Go-Based Agent
Lightweight Go agent for client-side Envoy management. Automatic registration, health monitoring, log export to Syslog/ELK, and seamless integration with the control plane.
Full xDS Protocol Support
Complete implementation of xDS (ADS, CDS, EDS, LDS, RDS, VHDS) using go-control-plane. Delta xDS support for efficient incremental configuration updates.
Two-Step Validation
Frontend TypeScript validation and backend protoc-gen-validate ensures configurations are correct before deployment. Catch errors early and prevent misconfigurations.
Save & Publish Workflow
Draft mode for safe configuration changes. Save incrementally and publish bulk updates atomically when ready. Rollback support for quick recovery from issues.
Multi-Version Envoy Support
Manage Envoy versions 1.27 through 1.35+ from a single interface. Intelligent version-based routing with seamless version upgrade capability. Migrate resources from version X to Y effortlessly.
Project-Based Multi-Tenancy
Organize configurations by teams, environments, or customers. Complete resource isolation with 4-tier RBAC (Owner, Admin, Editor, Viewer) for enterprise collaboration.
Advanced Features
Enterprise-grade capabilities with intelligent automation and modern cloud-native technologies
AI-Powered Analysis
Bring your own OpenRouter API key and choose any AI model for configuration analysis, log debugging, pattern recognition, and intelligent troubleshooting recommendations.
Kubernetes Discovery
Automatic discovery and synchronization of Kubernetes endpoints with real-time updates as your services scale.
ACME Certificate Management
Automated certificate lifecycle management with ACME protocol support for Let's Encrypt and Google Trust Services. DNS-01 challenge verification with auto-renewal.
Global Server Load Balancing
Enterprise GSLB with intelligent health probing, automatic failover, and geo-based traffic routing. Integrate with CoreDNS for dynamic DNS responses based on endpoint health.
Intelligent Automation meets Cloud-Native Architecture
Comprehensive Feature Set
Advanced capabilities for security, monitoring, and operational excellence
Web Application Firewall (WAF)
Integrated OWASP Core Rule Set (CRS) with customizable directive sets, per-authority rules, and comprehensive filtering by severity, phase, and paranoia level.
- OWASP CRS integration
- Custom directive management
- Domain-specific rules
- Rule browser & import
Scenario Workflows
Pre-built scenario workflows with step-by-step wizards for common Envoy configurations. Execute, test, and deploy configurations efficiently.
- Scenario wizard
- Dynamic forms
- Configuration review
- Quick deployment
Service Discovery
Discover and manage clusters automatically. Track service status, monitor cluster health, and manage registration with real-time updates.
- Cluster discovery
- Status monitoring
- Usage statistics
- Last seen tracking
ACME Certificate Management
Automated certificate lifecycle management with ACME protocol support for Let's Encrypt and Google Trust Services. DNS-01 challenge verification with auto-renewal.
- Let's Encrypt integration
- Google Trust Services
- DNS provider management
- Automatic renewal
Audit Logging
Complete audit trail for all user actions, configuration changes, and system operations. Filter by date, action type, user, and resource.
- Action tracking
- User accountability
- Resource changes
- Compliance reporting
Advanced Metrics
ECharts-powered visualization with downstream, upstream, and listener metrics. Custom time ranges, metric grouping, and auto-refresh.
- Real-time charts
- Custom time ranges
- Metric filtering
- Export capabilities
Log Management
Real-time service logs with JSON parsing, HTTP access log detection, and intelligent log analysis for pattern detection and troubleshooting.
- JSON log parsing
- Log level filtering
- Search functionality
- Pattern detection
Registry Management
Centralized configuration registry with version tracking, resource metadata, and schema information for all Envoy configurations.
- Version tracking
- Resource metadata
- Schema validation
- Registry browser
Version Upgrade
Effortlessly upgrade Envoy configurations from one version to another. Migrate resources from version X to version Y with automated compatibility checks.
- Cross-version migration
- Compatibility validation
- Resource transformation
- Zero-downtime upgrades
Log Export
Export logs to external systems via Syslog and Elastic Logstash. Centralize log management and integrate with your existing observability stack.
- Syslog integration
- Elastic Logstash support
- Centralized logging
- Flexible export formats
Metrics Visualization
View detailed metrics both on the platform and through Grafana integration. Monitor performance, traffic patterns, and system health in real-time.
- Built-in dashboards
- Grafana integration
- Custom metrics
- Real-time updates
LDAP Authentication
Integrate with your existing LDAP/Active Directory infrastructure. Centralized user authentication and authorization for enterprise deployments.
- LDAP integration
- Active Directory support
- Centralized auth
- Enterprise SSO
All features integrated into a unified management platform
Compliance & Standards
Built with security-first mindset for enterprise-grade deployments
3-Process Distributed Architecture
Enterprise-grade scalability with specialized microservices working in harmony
Registry
Service discovery and routing hub
- Controller registration & address sharing
- Client location tracking
- Version-based control-plane routing
- External processing integration
- In-memory data with auto-cleanup
Controller
REST API and management layer
- Client management & command dispatch
- xDS resource management (CDS, LDS, RDS, EDS)
- User & authorization (JWT + RBAC)
- MongoDB integration
- AI-powered config analysis
- K8s Discovery system
Control-Plane
gRPC-based xDS control plane
- Envoy ADS (Aggregated Discovery Service)
- VHDS (Virtual Host Discovery Service)
- Snapshot management & cache system
- Bridge services (snapshot, resource, poke)
- Auto-registration with registry
- Health monitoring & keepalive
High Availability
Multiple control-plane instances with automatic failover and health monitoring
Scalability
Load balancing across controllers and control-planes for enterprise workloads
Version Routing
Intelligent routing to appropriate control-plane versions based on client requirements
Layered Architecture
Modern technology stack with distributed processing and enterprise-grade components
Frontend Layer
Backend Layer - 3-Process Architecture
Data & Storage Layer
Proxy Layer
Request Flow
Native Integrations
Use Cases
Versatile platform designed for diverse deployment scenarios
API Gateway Management
Centralized management of Envoy as an API gateway for microservices architectures.
- Rate limiting and traffic control
- Authentication and authorization
- Request/response transformation
- API versioning and routing
Service Mesh Management
Deploy and manage Envoy as a service mesh data plane with centralized control.
- Service-to-service communication
- Traffic splitting and canary deployments
- Circuit breaking and retry policies
- Observability and metrics collection
Multi-Cluster Deployment
Manage Envoy instances across multiple Kubernetes clusters with unified configuration.
- Cross-cluster service discovery
- Unified policy enforcement
- Disaster recovery and failover
- Global load balancing
Enterprise Microservices
Enterprise-grade proxy management with multi-tenancy and role-based access control.
- Team-based configuration isolation
- Audit logging and compliance
- Centralized policy management
- Self-service configuration
Cloud-Native Applications
Modern cloud-native applications leveraging Envoy for traffic management and observability.
- Container-based deployments
- Auto-scaling and load balancing
- Zero-downtime deployments
- Health checking and monitoring
Edge Proxy & CDN
Deploy Envoy at the edge for content delivery and request routing.
- Geographic traffic routing
- Cache management
- DDoS protection
- SSL/TLS termination
Trusted Across Industries
Whatever your use case, Elchi provides the flexibility and power you need
Experience Elchi
Now
Try the stack solution for Proxy management with our demo, or deploy to your Kubernetes cluster using our Helm chart.