Lightning Talk: Extending Envoy with Go
summary
Go-based extension framework for Envoy runs as loadable shared libraries configured by CRD/REST and injected by Cilium, letting filters call out to Go to parse protocols or enforce policies. Implementations include memcache and Cassandra parsers that enforce table-level rules; kTLS provides ~95% transparent TLS visibility; BPF-based socket copy yields about 3–4x faster persistent HTTP and current Go-call overhead measures around ~10% overhead. Runtime reloads and per-node or sidecar deployment modes work.
AI-written summary · about
chapters (12)
- 0:00Intro
- 1:46Envoy Basics
- 2:03Go Extensions
- 2:13Motivation
- 2:36Making Envoy Data Aware
- 3:31Design Principles
- 5:46Cassandra Example
- 6:20API Basics: OnDatal
- 7:04Accelerated Redirect
- 8:16Transparent SSL Visibility
- 9:36Flexible Proxy Model
- 10:03Summary
related talks
10mLightning Talk: Envoy Upstream Enhancements
37mPushing Envoy Beyond the Edge
09mLightning Talk: WAMR, Intel
34mEnvoy, Filters and WebAssembly for Everyone!
32mBuilding Proxy with New Asynchronous I/O API: Exploring Envoy's Io_uring In...
05mLightning Talk: C++ in the Cloud: One NIF at a Time with Elixir
16m⚡ Lightning Talk: Introducing LLM Instance Gateways for Efficient Inference Serving
22mService Mesh using Envoy on Windows