Livin' on the Edge (of your cluster)
summary
Built Contour as an Envoy-based edge ingress controller that routes external traffic into Kubernetes, and finds mesh defaults break under long-lived, multi-tenant proxies. Key actions: set listener soft buffer limits to 32KB buffer limits, tune a dozen timeouts, avoid Envoy overload manager for unknown heap sizes, implement a preStop hook that polls stats to drain connections, and fix stuck XDS streams caused by idle TCP drops by enabling TCP and gRPC keepalives. Operational fixes work and prevent hard-to-debug stuck updates.
AI-written summary · about
related talks
20mBuilding an Edge Control Plane with Kubernetes and Envoy
36mHow We Built Contour, and What You Can Learn From Our Experience - Dave Cheney, Heptio
33mRunning Envoy as an Edge Proxy
26mRunning Envoy at the Edge
33mTake Envoy Beyond a K8s Service Mesh - to Legacy Bare Metal & VMs + More
28mDeploying hybrid topologies with k8s & Envoy: a look at service discovery
33mGet to know Envoy - the modern proxy for cloud-native infrastructure - Baptiste Collard
38mEnvoy Deep Dive