EnvoyCon NA 2024
2024-11-12
Salt Lake City, United States
who it's for
proxy engineers, platform engineers, site reliability engineers, security engineers, network engineers, gateway developers, observability engineers
topics
HTTP/3 latency fixes; Go full-duplex filter; WebAssembly filter improvements; dynamic native module support; zero trust ZTNA proxy; VPP VPN concentrator; per-tenant Geneve tunnels with VRF; AVX-512 and Intel QAT offload; max requests per IO cycle; proactive memory shedding; MxN full-duplex external processing; Envoy Gateway custom extensions
| title | author | length |
|---|---|---|
| Welcome + Opening Remarks | Matt Turner | 09m |
Quick status update on core projects and features: the proxy adds HTTP/3 latency fixes and a Go filter with full-duplex processing, WebAssembly filter… | ||
| Making Envoy Resilient to Sudden Increases in Load | Boteng Yao | 21m |
Analysis of last year’s HTTP/2 Rapid Reset shows attackers reached ~400M RPS globally and caused huge CPU and memory bookkeeping churn, so Envoy adds concrete… | ||
| Building Zero Trust with Envoy | Florin Coras, Pradheep Shrinivasan | 32m |
An enterprise-grade, multi-tenant clientless ZTNA proxy is built with Envoy on top of VPP, deployed across 30 data centers and capable of 4.5 Gbps per client… | ||
| Panel: Dynamic Configuration and Scaling of VPN Concentrator and Envoy SASE Proxy in Multi-Tenant Edge | Srinivasa Addepalli, Ritu Sood, Mrittika Ganguli, Jeff Shaw | |
Framework integrates Envoy SASE proxy with a VPP-based VPN concentrator, proving per-tenant Geneve per-tenant tunnels with VRF isolation and per-tenant config… | ||
| Extending Envoy: A Guide to Custom Extensions with Envoy Gateway | Huabing Zhao, Guy Daich | 30m |
Envoy Gateway loads custom extensions either as WASM or external gRPC processor and configures them via an Envoy ExtensionPolicy; demo uses Unix domain… | ||
| Lightning Talk: Adding MxN Streaming Support for Envoy External Processing Filter | Yanjun Xiang | 12m |
Envoy external processing filter no longer requires 1x1 body streaming and now supports MxN/full duplex stream so a side‑stream can buffer M incoming chunks… | ||
| Lightning Talk: Building a Scalable Multi-Protocol API Gateway with Envoy | Matt Poegel | 11m |
Bloomberg builds a layer‑4 edge gateway that proxies long‑lived TCP protocols using Envoy, handling IBM MQ, FIX, and SFTP connections at scale. TLS inspection… | ||
| Lightning Talk: Deep Dive Into Envoy Metrics | Mark Campbell-Vincent | |
When 503s or 504s appear from an external ingress to the mesh check upstream_cx_connect_fail first to spot TCP connect failures, then correlate with tcpdump… | ||
| Closing Remarks | Alyssa Wilk | 02m |
More talks arrive than for the last EnvoyCon, forcing a change from a half‑day schedule to extra sessions; the Envoy project booth stays staffed for the rest… | ||
| nothing matches | ||