# \#proxy

**URL:** https://linkerd.buoyant.io/tag/proxy/3.md

[Latest](https://linkerd.buoyant.io/latest.md) · [Categories](https://linkerd.buoyant.io/categories.md) · [Tags](https://linkerd.buoyant.io/tags.md)

---

## [Linkerd with gvisor runtime class](https://linkerd.buoyant.io/t/linkerd-with-gvisor-runtime-class/855)

<div class="topic-metadata">

**Author:** [@ryant](https://linkerd.buoyant.io/u/ryant)\
**Replies:** 3\
**Last updated:** [August 31, 2026, 3:55pm UTC](https://linkerd.buoyant.io/t/linkerd-with-gvisor-runtime-class/855 "2026-08-31T15:55:19Z")

</div>

Hoping someone can help here. I’m currently running agent-sandbox(https://agent-sandbox.sigs.k8s.io/) for a template pod with a gvisor runtime class. Initially I tried just a normal linkerd-init, but because CAP\_NET\_ADM…

---

## [Regression in Buoyant Linkerd 2.19.5](https://linkerd.buoyant.io/t/regression-in-buoyant-linkerd-2-19-5/850)

<div class="topic-metadata">

**Author:** [@Jan](https://linkerd.buoyant.io/u/Jan)\
**Replies:** 1\
**Last updated:** [April 2, 2026, 4:35pm UTC](https://linkerd.buoyant.io/t/regression-in-buoyant-linkerd-2-19-5/850 "2026-04-02T16:35:16Z")

</div>

We recently upgraded from version 2.19.4 to 2.19.5. On the surface it seemed to work fine. But we now get reports about issues with ExternalName services. We have a couple of ExternalName services that map to another se…

---

## [Outbound calls failure](https://linkerd.buoyant.io/t/outbound-calls-failure/845)

<div class="topic-metadata">

**Author:** [@Darshan](https://linkerd.buoyant.io/u/Darshan)\
**Replies:** 2\
**Last updated:** [February 28, 2026, 7:25pm UTC](https://linkerd.buoyant.io/t/outbound-calls-failure/845 "2026-02-28T19:25:16Z")

</div>

Hi team, Recently we’ve started facing issue with outbound calls for many pods when trying to connect with services within same cluster. Proxy was OOM killed and we fixed it, we restarted Linkerd control plane components…

---

## [Adding support for HTTP Local Concurrency Limit Policy similar to HTTP Local Rate Limit Policy](https://linkerd.buoyant.io/t/adding-support-for-http-local-concurrency-limit-policy-similar-to-http-local-rate-limit-policy/846)

<div class="topic-metadata">

**Author:** [@himanshu.garg.zepto](https://linkerd.buoyant.io/u/himanshu.garg.zepto)\
**Replies:** 0\
**Last updated:** [February 26, 2026, 7:25am UTC](https://linkerd.buoyant.io/t/adding-support-for-http-local-concurrency-limit-policy-similar-to-http-local-rate-limit-policy/846 "2026-02-26T07:25:24Z")

</div>

I need help with adding support for HTTPLocalConcurrencyLimitPolicy similar to HTTPLocalRateLimitPolicy Essentially, a policy to limit number of concurrent requests to the service container to protect it from overload N…

---

## [Does Linkerd support slow start load balancing?](https://linkerd.buoyant.io/t/does-linkerd-support-slow-start-load-balancing/805)

<div class="topic-metadata">

**Author:** [@aidenlim](https://linkerd.buoyant.io/u/aidenlim)\
**Replies:** 1\
**Last updated:** [February 4, 2026, 11:26pm UTC](https://linkerd.buoyant.io/t/does-linkerd-support-slow-start-load-balancing/805 "2026-02-04T23:26:17Z")

</div>

Hello I’m evaluating load balancing behavior in service meshes and came across Envoy’s slow start mode, which progressively ramps up traffic to newly added endpoints. This is particularly useful for cases like Kubernete…

---

## [LinkerD seems to swallow certain requests, left hanging on frontend + tap](https://linkerd.buoyant.io/t/linkerd-seems-to-swallow-certain-requests-left-hanging-on-frontend-tap/833)

<div class="topic-metadata">

**Author:** [@KrisM4c](https://linkerd.buoyant.io/u/KrisM4c)\
**Replies:** 6\
**Last updated:** [January 12, 2026, 1:45pm UTC](https://linkerd.buoyant.io/t/linkerd-seems-to-swallow-certain-requests-left-hanging-on-frontend-tap/833 "2026-01-12T13:45:10Z")

</div>

Hey all, I’m also x-posting this from the LinkerD Slack: got a bit of a strange issue occurring that looks like Linkerd is swallowing some requests, and not actually erroring out the call so we just sit hanging and the…

---

## [linkerd-Identity-Issuer not refreshing certificates as expected](https://linkerd.buoyant.io/t/linkerd-identity-issuer-not-refreshing-certificates-as-expected/811)

<div class="topic-metadata">

**Author:** [@Shubham](https://linkerd.buoyant.io/u/Shubham)\
**Replies:** 5\
**Last updated:** [January 8, 2026, 4:13pm UTC](https://linkerd.buoyant.io/t/linkerd-identity-issuer-not-refreshing-certificates-as-expected/811 "2026-01-08T16:13:46Z")

</div>

Recently we’ve started facing issue with outbound calls for some pods when trying to connect with services within same cluster. Can see following logs in proxy \[9515905.481616s\] WARN ThreadId(01) outbound:proxy{addr=1…

---

## [Linkerd and k8s service session affinity](https://linkerd.buoyant.io/t/linkerd-and-k8s-service-session-affinity/836)

<div class="topic-metadata">

**Author:** [@chri4774](https://linkerd.buoyant.io/u/chri4774)\
**Replies:** 0\
**Last updated:** [December 17, 2025, 3:34pm UTC](https://linkerd.buoyant.io/t/linkerd-and-k8s-service-session-affinity/836 "2025-12-17T15:34:57Z")

</div>

Hello, Some of our applications rely on service session affinity when communicating with other applications in the cluster. (See Virtual IPs and Service Proxies | Kubernetes ) As I understand it, when the Linkerd proxy…

---

## [Linkerd-enterprise-windows-cni helm chart does not support tolerations](https://linkerd.buoyant.io/t/linkerd-enterprise-windows-cni-helm-chart-does-not-support-tolerations/827)

<div class="topic-metadata">

**Author:** [@Jan](https://linkerd.buoyant.io/u/Jan)\
**Replies:** 10\
**Last updated:** [November 25, 2025, 7:50am UTC](https://linkerd.buoyant.io/t/linkerd-enterprise-windows-cni-helm-chart-does-not-support-tolerations/827 "2025-11-25T07:50:21Z")

</div>

The linkerd-enterprise-windows-cni helm chart does not support tolerations. The normal use-case as I see it is to install this on the Windows nodes in a k8s cluster that has both Linux and Windows nodes. The normal patte…

---

## [Error when testing Windows proxy](https://linkerd.buoyant.io/t/error-when-testing-windows-proxy/823)

<div class="topic-metadata">

**Author:** [@Jan](https://linkerd.buoyant.io/u/Jan)\
**Replies:** 4\
**Last updated:** [November 5, 2025, 7:09am UTC](https://linkerd.buoyant.io/t/error-when-testing-windows-proxy/823 "2025-11-05T07:09:36Z")

</div>

Hi, We have upgraded one cluster to enterprise-2.19. The cluster in an AKS cluster. I tested to add the annotations to some Windows pods. But the init container fails with an error. annotations: linkerd.i…

---

## [Custom headers being stripped before reaching application - is this expected?](https://linkerd.buoyant.io/t/custom-headers-being-stripped-before-reaching-application-is-this-expected/821)

<div class="topic-metadata">

**Author:** [@JonathanGill](https://linkerd.buoyant.io/u/JonathanGill)\
**Replies:** 3\
**Last updated:** [November 3, 2025, 9:23am UTC](https://linkerd.buoyant.io/t/custom-headers-being-stripped-before-reaching-application-is-this-expected/821 "2025-11-03T09:23:02Z")

</div>

I’ve been debugging why custom HTTP headers aren’t reaching our application in a Linkerd-injected environment, and I’ve narrowed it down to the proxy layer. I’m wondering if this is expected behavior or if there’s a conf…

---

## [Clarification on outbound-transport-mode](https://linkerd.buoyant.io/t/clarification-on-outbound-transport-mode/768)

<div class="topic-metadata">

**Author:** [@chri4774](https://linkerd.buoyant.io/u/chri4774)\
**Replies:** 4\
**Last updated:** [October 13, 2025, 3:20pm UTC](https://linkerd.buoyant.io/t/clarification-on-outbound-transport-mode/768 "2025-10-13T15:20:13Z")

</div>

Hello, with edge release 25.3.2 linkerd changed the default for outbound-transport-mode to transport-header, which will result in all traffic between meshed proxies flowing on port 4143, rather than using the original d…

---

## [Linkerd pods failing readiness/liveness probes intermittently in GKE cluster](https://linkerd.buoyant.io/t/linkerd-pods-failing-readiness-liveness-probes-intermittently-in-gke-cluster/807)

<div class="topic-metadata">

**Author:** [@Akshay](https://linkerd.buoyant.io/u/Akshay)\
**Replies:** 1\
**Last updated:** [September 4, 2025, 12:07pm UTC](https://linkerd.buoyant.io/t/linkerd-pods-failing-readiness-liveness-probes-intermittently-in-gke-cluster/807 "2025-09-04T12:07:21Z")

</div>

We are observing intermittent readiness and liveness probe failures for Linkerd pods (specially Linkerd-destination pod)of the gke cluster. These failures result in pod restarts due to liveness probe timeouts.The Kuberne…

---

## [Mesh Expansion fails due to "unknown server"](https://linkerd.buoyant.io/t/mesh-expansion-fails-due-to-unknown-server/754)

<div class="topic-metadata">

**Author:** [@tumbl3w33d](https://linkerd.buoyant.io/u/tumbl3w33d)\
**Replies:** 2\
**Last updated:** [June 5, 2025, 3:30pm UTC](https://linkerd.buoyant.io/t/mesh-expansion-fails-due-to-unknown-server/754 "2025-06-05T15:30:40Z")

</div>

Hi guys, I am trying to expand my mesh to non-k8s workloads. I followed this guide but needed to make adjustments because I am in a real world SPIRE bubble with its own trust domain. Scenario: managed k8s at cloud pro…

---

## [Linkerd 2.18 Windows proxy](https://linkerd.buoyant.io/t/linkerd-2-18-windows-proxy/765)

<div class="topic-metadata">

**Author:** [@Jan](https://linkerd.buoyant.io/u/Jan)\
**Replies:** 0\
**Last updated:** [May 19, 2025, 2:05pm UTC](https://linkerd.buoyant.io/t/linkerd-2-18-windows-proxy/765 "2025-05-19T14:05:32Z")

</div>

Hi, In our clusters we run with a mix of Linux and Windows pods. We use Linkerd service mesh for all our Linux pods. Would be interested in testing out the new 2.18 Windows proxies. More specifically we are looking for …

---

## [Proxy killing traffic during shutdown in native sidecar mode](https://linkerd.buoyant.io/t/proxy-killing-traffic-during-shutdown-in-native-sidecar-mode/747)

<div class="topic-metadata">

**Author:** [@Randy](https://linkerd.buoyant.io/u/Randy)\
**Replies:** 0\
**Last updated:** [March 17, 2025, 5:22pm UTC](https://linkerd.buoyant.io/t/proxy-killing-traffic-during-shutdown-in-native-sidecar-mode/747 "2025-03-17T17:22:00Z")

</div>

Was wondering if someone has seen the same issue, We’re trying to use the native sidecar to help with some graceful shutdown scenarios hoping that the proxy would terminate after the main container, this seems to work w…

---

## [Using linkerd viz tap with native sidecars enabled](https://linkerd.buoyant.io/t/using-linkerd-viz-tap-with-native-sidecars-enabled/690)

<div class="topic-metadata">

**Author:** [@curtwillbusch](https://linkerd.buoyant.io/u/curtwillbusch)\
**Replies:** 6\
**Last updated:** [January 24, 2025, 12:08am UTC](https://linkerd.buoyant.io/t/using-linkerd-viz-tap-with-native-sidecars-enabled/690 "2025-01-24T00:08:35Z")

</div>

Hi there! I encountered an issue when enabling native sidecars using the linkerd control plane helm chart. After enabling native side cars it seemed to have removed the iz.linkerd.io/tap-enabled pod annotation from our …

---

## [Destination failed to send profile update](https://linkerd.buoyant.io/t/destination-failed-to-send-profile-update/652)

<div class="topic-metadata">

**Author:** [@thradec](https://linkerd.buoyant.io/u/thradec)\
**Replies:** 1\
**Last updated:** [January 2, 2025, 3:13pm UTC](https://linkerd.buoyant.io/t/destination-failed-to-send-profile-update/652 "2025-01-02T15:13:39Z")

</div>

Hi all, we are struggling with upgrading linkerd in our cluster (from stable-2.14.1 to edge 24.10.5). The same upgrade procedure works fine on smaller clusters. But this cluster is relatively large (aws, k8s 1.29, 75 nod…

---

## [Having https end to end](https://linkerd.buoyant.io/t/having-https-end-to-end/414)

<div class="topic-metadata">

**Author:** [@Msaustral](https://linkerd.buoyant.io/u/Msaustral)\
**Replies:** 1\
**Last updated:** [January 2, 2025, 1:03am UTC](https://linkerd.buoyant.io/t/having-https-end-to-end/414 "2025-01-02T01:03:06Z")

</div>

Hi we have and app that has horizontal scaling by memory consumption, we want to change the scaling by traffic to have a better control over the scaling. Our app is a nginx with http2 and ssl (server side cloudflare) im…

---

## [Traffic split feature and its behavior with multicluster service mirroring](https://linkerd.buoyant.io/t/traffic-split-feature-and-its-behavior-with-multicluster-service-mirroring/654)

<div class="topic-metadata">

**Author:** [@aidenlim](https://linkerd.buoyant.io/u/aidenlim)\
**Replies:** 2\
**Last updated:** [December 31, 2024, 3:48am UTC](https://linkerd.buoyant.io/t/traffic-split-feature-and-its-behavior-with-multicluster-service-mirroring/654 "2024-12-31T03:48:50Z")

</div>

Hi, I have a question regarding the TrafficSplit feature and its behavior with multicluster service mirroring: Cluster A hosts a service named foo. Cluster B has a service mirror of foo created from Cluster A. A traffi…

---

## [Linkerd Jaeger Tracing w/ Open Telemtry Collector](https://linkerd.buoyant.io/t/linkerd-jaeger-tracing-w-open-telemtry-collector/364)

<div class="topic-metadata">

**Author:** [@jseiser](https://linkerd.buoyant.io/u/jseiser)\
**Replies:** 2\
**Last updated:** [December 5, 2024, 4:50pm UTC](https://linkerd.buoyant.io/t/linkerd-jaeger-tracing-w-open-telemtry-collector/364 "2024-12-05T16:50:02Z")

</div>

We are using the grafana-agent to handle incoming traces, potentially do things to them, and then forward them on to Grafana Tempo. The Grafana agent is basically running the Open Telemtry Collector under the hood. Thi…

---

## [Cert is not issued by the trust anchor error after a couple days](https://linkerd.buoyant.io/t/cert-is-not-issued-by-the-trust-anchor-error-after-a-couple-days/638)

<div class="topic-metadata">

**Author:** [@mkeller](https://linkerd.buoyant.io/u/mkeller)\
**Replies:** 1\
**Last updated:** [November 25, 2024, 3:03pm UTC](https://linkerd.buoyant.io/t/cert-is-not-issued-by-the-trust-anchor-error-after-a-couple-days/638 "2024-11-25T15:03:50Z")

</div>

All - I had so many issues trying to get things working with cert-manager that I resorted to just passing the cert values to linkerd via helm install. Since I’m currently trying to let linkerd manage all the certificates…

---

## [Linkerd proxy is causing Redis to fail on upgrade to latest Redis version](https://linkerd.buoyant.io/t/linkerd-proxy-is-causing-redis-to-fail-on-upgrade-to-latest-redis-version/623)

<div class="topic-metadata">

**Author:** [@Jan](https://linkerd.buoyant.io/u/Jan)\
**Replies:** 13\
**Last updated:** [December 4, 2024, 10:04am UTC](https://linkerd.buoyant.io/t/linkerd-proxy-is-causing-redis-to-fail-on-upgrade-to-latest-redis-version/623 "2024-12-04T10:04:44Z")

</div>

Hi, We are running Linkerd enterprise-2.16.1. In our clusters we have Redis version 7.2.4 running in with: architecture: replication sentinel: enabled: true We use this helm chart: This has been working fine. All…

---

## [Timeout on External Services](https://linkerd.buoyant.io/t/timeout-on-external-services/621)

<div class="topic-metadata">

**Author:** [@benbpyle](https://linkerd.buoyant.io/u/benbpyle)\
**Replies:** 1\
**Last updated:** [November 22, 2024, 5:06pm UTC](https://linkerd.buoyant.io/t/timeout-on-external-services/621 "2024-11-22T17:06:32Z")

</div>

I’m trying to set a timeout on a Service defined as an ExternalName. I have some outside of my cluster services that I’d like to have Linkerd timeout if the requests run beyond a timeout. Is this possible?

---

## [Breaking change in Linkerd 2.16.1 proxy. Shutdown endpoint is missing](https://linkerd.buoyant.io/t/breaking-change-in-linkerd-2-16-1-proxy-shutdown-endpoint-is-missing/619)

<div class="topic-metadata">

**Author:** [@Jan](https://linkerd.buoyant.io/u/Jan)\
**Replies:** 5\
**Last updated:** [October 16, 2024, 8:48am UTC](https://linkerd.buoyant.io/t/breaking-change-in-linkerd-2-16-1-proxy-shutdown-endpoint-is-missing/619 "2024-10-16T08:48:54Z")

</div>

In some pods we use this command to shut down the proxy after a main container is completed. trap “wget -O - -q --post-data shutdown http://127.0.0.1:4191/shutdown” EXIT It as worked for all versions of Linkerd, but ha…

---

## [EKS service creation taking too long \[solved\]](https://linkerd.buoyant.io/t/eks-service-creation-taking-too-long-solved/527)

<div class="topic-metadata">

**Author:** [@dverzolla](https://linkerd.buoyant.io/u/dverzolla)\
**Replies:** 2\
**Last updated:** [July 26, 2024, 3:09pm UTC](https://linkerd.buoyant.io/t/eks-service-creation-taking-too-long-solved/527 "2024-07-26T15:09:34Z")

</div>

Just wanted to to write down the problem I was having and the solution I found to solve it. I’m running edge-24.7.2 in high-availability into aws eks v1.30.2-eks-db838b0. After installing linkerd, a simple kubectl exp…

---

## [Graph of deployments is not coming up in Linkerd Dashboard](https://linkerd.buoyant.io/t/graph-of-deployments-is-not-coming-up-in-linkerd-dashboard/525)

<div class="topic-metadata">

**Author:** [@Vaish](https://linkerd.buoyant.io/u/Vaish)\
**Replies:** 1\
**Last updated:** [July 25, 2024, 2:01pm UTC](https://linkerd.buoyant.io/t/graph-of-deployments-is-not-coming-up-in-linkerd-dashboard/525 "2024-07-25T14:01:29Z")

</div>

I am not able to view the graph under namespace with my custom deployment. But I have tried with sample application emoji and the graph is visible. Please let me know if any configuration I am missing particularly for th…

---

## [Network address issue using Linkerd in AKS](https://linkerd.buoyant.io/t/network-address-issue-using-linkerd-in-aks/530)

<div class="topic-metadata">

**Author:** [@Niklas](https://linkerd.buoyant.io/u/Niklas)\
**Replies:** 1\
**Last updated:** [July 25, 2024, 1:52pm UTC](https://linkerd.buoyant.io/t/network-address-issue-using-linkerd-in-aks/530 "2024-07-25T13:52:59Z")

</div>

Setup We’re using an Azure Kubernetes Cluster (k8s version 1.29) Helm “linkerd-control-plane” version 1.16.11 (App Version stable-2.14.10) Ingress: Ingress is managed via traefik, which has a fix IP (10.224.90.68) I…

---

## [EKS + linkerd + vcluster](https://linkerd.buoyant.io/t/eks-linkerd-vcluster/528)

<div class="topic-metadata">

**Author:** [@dverzolla](https://linkerd.buoyant.io/u/dverzolla)\
**Replies:** 0\
**Last updated:** [July 17, 2024, 6:14pm UTC](https://linkerd.buoyant.io/t/eks-linkerd-vcluster/528 "2024-07-17T18:14:35Z")

</div>

Sharing a challenge I had and how I overcome. I needed to put vcluster inside a aws eks cluster that had already linkerd installed on it. The guest vcluster has linkerd also. As the nature of vcluster, the resources cr…

---

## [Proxy Injection Not Working](https://linkerd.buoyant.io/t/proxy-injection-not-working/507)

<div class="topic-metadata">

**Author:** [@abarrios](https://linkerd.buoyant.io/u/abarrios)\
**Replies:** 5\
**Last updated:** [July 10, 2024, 11:27pm UTC](https://linkerd.buoyant.io/t/proxy-injection-not-working/507 "2024-07-10T23:27:13Z")

</div>

Hello everyone, I am running into an issue injecting a proxy in any deployment. I followed Linkerd Demo App to confirm the problem was not with my own deployment configurations. Any help would be much appreciated! Emoj…

[Next page](https://linkerd.buoyant.io/tag/proxy/3.md?match_all_tags=true&page=1&tags%5B%5D=proxy)
