Hardening Envoy
summary
Describes concrete hardening work: adds memory buffer limits across the data plane and downstream circuit breaking to bound per‑stream memory and file descriptors, implements priority failover and random offsets for fairer load balancing, and adds config annotations plus reload and rollback tests. Improves the integration test framework to make happy‑path tests 90% shorter, runs 14 fuzzers fixing 35+ bugs across 80+ PRs, and runs CI with ASan/TSAN/UBSan and clang tooling and an external load testing harness.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 0:42Why we need to harden Envoy
- 1:54The trickle attack
- 3:24Downstream circuit braking
- 5:21Internal attacks
- 10:01Integration tests
- 12:43CI
- 14:41Fuzzing
- 15:57Load Testing
- 17:15Adoption
related talks
28mFuzz Testing of Envoy
38mHardening the Barebox Bootloader
05mLightning Talk: Securing Envoy: Catching Vulnerabilities With Continuous Fuzz Testing
09mLightning Talk: Honey, I Broke the Things: Debugging Gray Failures in Production!
21mMaking Envoy Resilient to Sudden Increases in Load
50mHardening the Linux Guest for the Confidential Cloud Computing: Deep Dive and Results
35mUpstream Kernel Hardening: Recent Progress and Challenges
36mEnhancing Envoy: Certificate Handling at the Edge