EnvoyCon 2023
2023-11-06
Chicago, United States
[EnvoyCon 2018, EnvoyCon 2019, EnvoyCon 2020 Virtual, EnvoyCon 2023, EnvoyCon 2025 Europe]
as the organisers put it
The Envoy maintainers are excited to announce the 6th annual EnvoyCon. This is a practitioner-driven community conference emphasizing end-user case studies, and technical talks from organizations that…
who it's for
Envoy maintainers, platform engineers, site reliability engineers, gateway operators, security engineers, observability engineers, service mesh operators
topics
Envoy Gateway XDS control plane; xDS dynamic traffic routing; CONNECT-UDP HTTP/3 (QUIC) proxying; SPIRE SPIFFE mTLS via SDS; Envoy WASM plugins for telemetry; Envoy filter configuration and patching; Balsa HTTP/2 codec replacement; fine-grain Envoy access logging (JSON); rate limiting with Redis backend; Envoy Gateway threat modeling and mitigations; gRPC tapping tracing with hardware acceleration; proxy plugins: Lua, WASM, native
| title | author | length |
|---|---|---|
| Welcome + Opening Remarks, Program Committee Member | Matt Turner | 06m |
Opening housekeeping covers a code of conduct with rules on consent and pronouns, a QR for captioning and translations, and logistics: morning and afternoon… | ||
| Envoy - Overview and Update: Senior Envoy Maintainer | Alyssa Wilk | 27m |
Project replaces the abandoned h2 parser with Balsa HTTP/2 codec to avoid repeated zero-day emergencies, lands file-system buffering for large downloads, a… | ||
| A Spotify Success Story: The Migration of the Web Proxy Layer to Env... | Sabrina Zotti, Oliver Soell | 35m |
Spotify replaces an nginx‑based web proxy with Envoy, moving the Web Enrichment Platform (routing + enrichment + Concierge orchestrator) to Envoy plugins (Lua… | ||
| SLATE: Intelligent Request Routing | Aditya S Prerepa, Gangmuk Lim | 22m |
SLATE is a Service‑Layer Traffic Engineering system that globally optimizes request routing using telemetry from an Envoy WASM plugin, cluster controllers and… | ||
| A Platform-Agnostic Approach to Securing Workloads | Lukonde Mwila | 32m |
Demonstrates a platform-agnostic identity and attestation flow where SPIRE issues SPIFFE x.509 identities and the SPIRE agent as SDS server pushes certificates… | ||
| Introduce MetaProtocol Proxy: A Layer-7 Proxy Framework Powered by Envoy | Huabing Zhao | 25m |
A Layer‑7 proxy framework built on Envoy that turns protocol specifics into metadata key‑value pairs and uses a simple codec interface (decoder/encoder) to add… | ||
| Introduction and Usage of Fine-Grain Logger, Admin Console Primer, and Envoy’s Universal HTTP Validator | Boteng Yao, Joshua Marantz, Yan Avlasov | 24m |
Three short updates: a fine-grain logger adds file-path and glob ( and ?) runtime log level control via admin POSTs, supports multiple updates per request… | ||
| Envoy Gateway: An in-Depth Guide of Its Benefits, Use Ca... | Ekansh Gupta, Shivanshu Raj Shrivastava | 27m |
Envoy Gateway provides an XDS control plane that dynamically manages fleets of Envoy proxies, supports traffic routing (HTTP, TCP, UDP, TLS, gRPC), and ships… | ||
| Envoy Gateway Project Update | Arko Dasgupta, Alice Wasko | 20m |
v0.6 adds concrete operational features: namespace watch selectors and a mergeGateways field to map multiple Gateway resources to one Envoy fleet, TLS… | ||
| Envoy Gateway End User Threat Model Report: Raising Awarenes... | James Callaghan, Torin van den Bulk | 29m |
Threat model for Envoy Gateway (demoed on kind with kubectl, curl, port‑forwarding and a built container image) maps concrete attacks and mitigations… | ||
| Proxying HTTP/3 (QUIC) Using CONNECT-UDP with Envoy | Jeongseok Son | 31m |
Envoy implements IETF CONNECT-UDP (RFC 9298) and HTTP datagrams/capsules (RFC 9221/9227/9297) to tunnel QUIC/HTTP/3 over HTTP, normalizing extended CONNECT to… | ||
| A Practical Guide to Understanding and Configuring Envoy Filters | Peter Jausovec | 23m |
Shows how to translate Envoy filter docs into Istio EnvoyFilter steps: choose workload selector and direction, match listener/HTTP location, pick EnvoyFilter… | ||
| Tracing HTTP/2 traffic using gRPC tapping filter with hardware acceleration | Devan Nair, Yizhou Xu | 32m |
Built a streaming gRPC tap sink that pushes connection-level traces off the main thread, adds a ConnectionInfo cache replay so restarted collectors get prior… | ||
| Lightning Talk: Troubleshooting Envoy K8s Containers with Ksniff | Mark Campbell-Vincent | 05m |
Ksniff is a kubectl plugin that launches a privileged capture pod and opens Wireshark locally so packet captures come directly from a target container using… | ||
| Lightning Talk: Leveraging Envoy's New Filter Chain Matchers for Advanced TLS Rou... | Ashish Banerjee | 12m |
Extension to Envoy's filter_chain_matcher inspects client hello cipher suites, writes them into filter state, and uses a per-virtual-host match tree to pick… | ||
| Closing Remarks - Program Committee Member | Matt Turner | 03m |
Booths sit in the main exhibition area with an Envoy booth staffed by maintainers for the first days and Gateway maintainers afterward; a meet the maintainer… | ||
| nothing matches | ||