CRE-2025-0118
This rule detects when Envoy proxy is experiencing consistent failures connecting to upstream services, resulting in HTTP 503 (Service Unavailable) or 504 (Gateway Timeout) errors. These errors are typically accompanied by \"UH\" (upstream service unhealthy) or \"UT\" (upstream request timeout) response flags in Envoy access logs, indicating backend service connectivity issues that require immediate attention.