add some envoy details

content/network/IPAM.md

@@ -39,7 +39,8 @@ IP address tables
 |whois.burble.dn42|172.20.129.8|fd42:4242:2601:ac43::1|Whois service|
 |voip.burble.dn42|172.20.129.9|fd42:4242:2601:37:216:3eff:fe8f:6211|Asterisk VOIP Service|
 |shell.burble.dn42|172.20.129.10|fd42:4242:2601:ac22::1|Shell service|
-| |_172.20.129.11-19_| |_Unallocated_|
+|envoy.burble.dn42|172.20.129.11|fd42:4242:2601:ac81::1|Envoy load balancer & proxy|
+| |_172.20.129.12-19_| |_Unallocated_|
 ||172.20.129.20/30|_n/a_|[Dialup Service](/retro/modem/) endpoints|
 | |_172.20.129.24-26_| |_Unallocated_|
 |shell.us-nyc2.burble.dn42|172.20.129.26|fd42:4242:2601:101d:216:3eff:fefc:722|us-nyc2 shell service|

content/services/internal.md

@@ -22,12 +22,18 @@ As well as a reverse proxy, nginx also provides:
 - A local page cache to act as a poor man's CDN
 - Static content server
 
+## envoy.burble.dn42
+
+[Envoy Proxy](https://www.envoyproxy.io/) is being introduced as a health
+checking proxy and load balancer to replace anycasts and nginx for some
+workloads.
+
 ## vault.burble.dn42
 
 [Hashicorp Vault](https://www.vaultproject.io/) is used to handle secrets
 across the burble.dn42 network.<br/>
 Vault is deployed as a 3 node cluster across the Europe core nodes
-and uses the internal vault database as a back end.
+and uses the internal raft database as a back end.
 
 ### TLS Certificate Authority