Lightning Talk: Building a Scalable Multi-Protocol API Gateway with Envoy
Lightningat EnvoyCon NA 2024 · on Tuesday, 2024-11-12· at 12:00· Hyatt Regency | Level 2 | Salt Lake Ballroom C·
summary
Bloomberg builds a layer‑4 edge gateway that proxies long‑lived TCP protocols using Envoy, handling IBM MQ, FIX, and SFTP connections at scale. TLS inspection and the external authorization filter extract client/channel identity, external auth returns dynamic upstream metadata, and an HTTP tunnel plus TCP proxy perform the connection handoff; SFTP uses an SSH transport socket extension. SPIRE provides end‑to‑end mTLS, observability exports via statsd and OpenTelemetry, and centralized auth/routing lets the platform meet aggressive SLAs for tens of thousands of enterprise clients.
AI-written summary · about
chapters (8)
- 0:00Bloomberg API Gateway needs
- 1:45Scalable connectivity requirements
- 3:10Proxying IBM MQ with Envoy
- 6:20Dynamic FIX protocol routing
- 7:24Supporting SFTP with Envoy
- 8:25Unified security policies
- 9:29Monitoring Envoy observability
- 9:50Key takeaways
related talks
33mGet to know Envoy - the modern proxy for cloud-native infrastructure - Baptiste Collard
34mIntro: Envoy
29mSpanning the Globe with Envoy at Stripe
21mDeep Dive: Envoy
38mEnvoy Deep Dive
27mEnvoy Proxy: Evolved for Serving LLMs
36mSecuring Every Bit
05mLightning Talk: Speak Egress and Exit: A Look at Securing Traf...