Health Checks - A Boon or a Curse
Explore health checks in distributed systems, their benefits in Envoy, challenges at scale, and mitigation strategies for reliable service operation.
Context Aware Traffic Routing for Stateful Services Using Envoy
Explore context-aware traffic routing for stateful services using Envoy, focusing on custom filters and partial message parsing to enhance routing decisions while maintaining API integrity.
AuthN and AuthZ at Cruise - Crawl, Walk, Run
Explore Cruise's journey in implementing authentication and authorization within Kubernetes clusters, from basic approaches to advanced solutions for zero trust security at scale.
Load Shedding for Evil Wizards
Explore Envoy's load shedding mechanisms, their implementations, and potential failures. Learn about adaptive concurrency control, rate limiting, and admission control for improved system resilience.
A Deep Dive into Building a Service Mesh with Envoy
Explore service mesh architecture using Envoy, covering its capabilities, implementation, and real-world application in a government record registry use case.
Developing Custom Load Balancer Using Envoy - Golang 2024
Explore building a custom load balancer with Envoy, covering key concepts, components, and implementation details for cloud-native applications. Gain insights into cost-effective solutions.
Dos and Don'ts: Designing an XDS Backend for LinkedIn Scale
Learn best practices and pitfalls for designing an xDS backend at LinkedIn scale, exploring obstacles faced during migration from rest.li to Envoy and gRPC.
WebAssembly Plugin for Apache Traffic Server
Explore WebAssembly plugin for Apache Traffic Server: enhance programmability, run proxy-wasm modules, and unlock new possibilities in content delivery and AI inference on ATS.
Extend Cloud Run Containers' Capabilities Using Sidecars
Enhance Cloud Run containers with sidecars for custom tracing, monitoring, logging, networking, security, and routing. Learn how Nasdaq benefited from Envoy sidecars.
I Broke Envoy: Twice
Explore real-world Envoy failures and learn valuable lessons from a developer's firsthand experiences breaking the popular proxy server.
Istio Ambient Service Mesh Made Easy
Explore Istio ambient mesh's simplified architecture, updates, and benefits. Learn about sidecar-less data plane mode, custom ztunnel, and streamlined configurations through live demos and architectural deep dives.
Service Mesh for Java Developers
Explore service mesh concepts and implementation for Java developers, focusing on microservices architecture and cloud-native applications.
Scaling Time-Series Data to Infinity - A Kubernetes-Powered Solution with Envoy
Explore building an infinitely scalable time-series database using Object Storage, Kubernetes, and Envoy for petabyte-scale data processing and management in a cost-efficient, highly available manner.
Bridging Mesh Enclaves - Securing and Maintaining Mesh Heterogeneity
Explore secure workload connections across service mesh technologies using SPIFFE and SPIRE. Learn to maintain technical heterogeneity while implementing universal workload security in complex software architectures.
Bridging Clouds: TikTok's Blueprint for Unified OIDC Access on Multi-Cloud Kubernetes
Discover how TikTok implemented a unified OIDC framework for seamless authentication across multi-cloud Kubernetes environments, using reverse proxy and Envoy for enhanced security and access management.
IBAC for Developers - Automating Istio Authorization Policies Using Envoy Metrics With a Declarative Approach
Master Istio Authorization Policies automation through Envoy metrics, implementing identity-based access control with declarative methods for enhanced cloud security.
Realizing ZTNA with Open Source Projects - Building Secure Enterprise Access Solutions
Discover how to implement Zero Trust Network Access using open-source tools like ISTIO, Keycloak, and Kubernetes, with practical insights on automating secure enterprise application access.
Building a Scalable Multi-Protocol API Gateway with Envoy
Discover how to leverage Envoy as a robust edge proxy for multi-protocol API gateway implementation, focusing on TCP-based protocols and enterprise security integration with SPIRE.
Making Envoy Resilient to Sudden Increases in Load
Discover practical strategies for protecting Envoy against load spikes and DDoS attacks, including HTTP/2 'Rapid Reset' mitigation and advanced overload management techniques for enhanced system resilience.