EnvoyCon 2020 Virtual
2020-10-15
-- online --
[EnvoyCon 2018, EnvoyCon 2019, EnvoyCon 2020 Virtual, EnvoyCon 2023, EnvoyCon 2025 Europe]
who it's for
Envoy maintainers, platform engineers, site reliability engineers, network engineers, security engineers, SDK developers, cloud operators
topics
WASM filters and singletons; WASM-based authorization; HTTP cache filter plugin interface; PostgreSQL network filter; xDS transport and UDPA URIs; xds-relay caching and aggregation; gRPC xDS support; global rate limiting at scale; Envoy on Windows support; Arm64 platform support; VPP as Envoy network stack; validation for large Envoy YAML
| title | author | length |
|---|---|---|
| Envoy on Kittens: Improving Developer and Maintainer Velocity | Itay Donanhirsh | 27m |
RepoKitteh is a lightweight GitHub App plus Starlark runtime that replaces bespoke GitHub apps and many Actions by running Starlark scripts on events, pinned… | ||
| PostgreSQL Network Filter for EnvoyProxy | Fabrízio de Royes Mello, Christoph Pakulski | 30m |
An Envoy PostgreSQL network filter is implemented as an open source extension that decodes Postgres wire protocol (simple and extended), reassembles messages… | ||
| Understanding, maintaining and securing Envoy's supply chain | Michael Payne, Harvey Tuch | 29m |
Envoy depends on roughly ~60 external dependencies and about 170,000 lines of C++ in the trusted compute base, with data plane libraries like quiche and… | ||
| Hands-on WASM filters and singletons | Emmanuel Mayssat | 31m |
Practical how‑to for building a WASM authz/authn: a C++ filter and a singleton stack that polls and refreshes a global policy every 10 seconds, shares it via… | ||
| CacheFilter: Flexible HTTP Caching in Envoy | Josiah Kiehl, Todd Greer | 30m |
Envoy gains a pluggable HTTP cache filter that parses Cache-Control, Vary and basic ETag/Last-Modified validation, delegates storage to an HTTP cache plugin… | ||
| xDS transport and versioning evolution | Harvey Tuch, Mark D. Roth | 29m |
Proposal replaces opaque xDS names with a UDPA URI that embeds an optional authority, resource type, id, context params and client-only directives to enable… | ||
| Envoy on Windows: Use-cases, roadmap, and more | Sunjay Bhatia, David Schott | 27m |
Envoy compiles and runs natively on Windows Server 2019+ as an alpha release that users must build from master using Bazel on Windows (msys2 bash tested), with… | ||
| xds-relay: Performance initiatives for control plane management | Jessica Yuen, Jyoti Ranjan Mahapatra | 29m |
xds-relay is a lightweight caching and aggregation proxy that removes connection and serialization hotspots by maintaining a single gRPC stream per cache key… | ||
| Authorization with Envoy | Jelle Vanhorenbeke | 28m |
Square moves authorization into the Envoy sidecar using Envoy’s ext_authz filter and a centralized source of truth backed by a DB and UI, migrating ~250… | ||
| Improving performance of RPCs with envoy | Giuseppe Lavagetto | 29m |
Wikimedia adds Envoy sidecars to terminate TLS and hold persistent connections so PHP workers stop creating a fresh TLS session per request, and measures show… | ||
| Safely deploying a 100K line Envoy YAML configuration to production | Jyoti Ranjan Mahapatra, Lisa Lu | 29m |
Lyft handles Envoy configs that hit 100K lines and avoids outages by running the Envoy binary in validation server mode, using a standalone config load check… | ||
| Using Wasm to develop Envoy Filters for supporting Yahoo Headers | Mrunmayi Dhume, Michael Cieplak | 30m |
Built an Envoy Wasm filter that validates and generates Yahoo headers (rid, ra, rp, rs) using existing Yahoo C++ libraries and OpenSSL MD5, with a singleton VM… | ||
| Failing forward to 1 million requests per second | Axel Liljencrantz, Mikael Sundberg | 27m |
Five consecutive deploys fail during a migration to Envoy while trying to hit 1 million requests per second claims; testing uses wrk2 against a single-host… | ||
| How Niantic switched Pokémon GO to use Envoy | Renana Yacobi | 25m |
Niantic migrates Pokémon GO from NGINX/Engines to Envoy, running load tests (measured ~20,000 RPS per vCPU) and validating at hundreds of thousands to millions… | ||
| Community & Extensibility: Building Envoy's Flexible Compression Subsystem | Mikko Ylinen, Jose Nino | 29m |
Envoy now exposes compressors and decompressors as first‑class extensions (landed in v1.15) so different algorithms or implementations can be plugged in… | ||
| Building idiomatic Envoy SDKs for Rust and Go | Yaroslav Skopets, Takeshi Yoneda | 30m |
Built production-ready Envoy SDKs for Rust and Go that compile to WebAssembly, choosing tinygo compiler for Go and a custom Rust SDK that enforces a no panic… | ||
| Changing Oil for a Fast Running (Side) Car Quickly and Safely | Fuyuan Bie | 30m |
Pinterest runs a centralized tower control plane that pushes typed, templated configs via a host beacon agent to Envoy across VMs, containers and k8s, with… | ||
| xDS Support in gRPC | Mark D. Roth | 23m |
gRPC can obtain its configuration via xDS, removing sidecar proxies and yielding about a threefold improvement in queries per CPU-second in benchmarks… | ||
| Incrementally Building Incremental | Alec Holmes | 12m |
Implements delta xDS support inside envoyproxy/go-control-plane by adding server-side state tracking, per-resource versioning via a hashing diff algorithm, and… | ||
| Creating request buffering filters for edge devices | Seiichi Koizumi, Tomoya Amachi | 09m |
A forked Envoy binary named misaki-envoy intercepts outgoing requests and, based on per-host filter config, buffers requests to disk when network type or… | ||
| Support Arm64 platform in Envoy | Lizan Zhou | 10m |
Envoy ships an official Arm64 build starting with 1.16.0 release, built via Bazel with remote cache and Azure Pipelines using self-hosted AWS Graviton2 agents… | ||
| Multiplex tcp requests through Envoy HTTP/2 stack | Yuchen Dai | 11m |
Envoy now terminates and proxies HTTP/2 CONNECT and can encapsulate raw TCP byte streams as H2 data frames using a TCP connection pool H2 codec, enabling… | ||
| Using VPP as Envoy's Network Stack | Florin Coras | 10m |
Envoy integrates with VPP via the VPP Comms Library (VCL) and a VCL-specific socket layer, requiring refactors: elimination of raw file descriptors, addition… | ||
| How Tinder implemented Envoy global rate limiting at scaleVirtual | Yuki Sawa | 10m |
Tinder migrates its Kubernetes fleet to an Envoy sidecar mesh and moves rate limiting out of apps into a Go-based rate limit service that proxies Redis through… | ||
| nothing matches | ||