Using Envoy as an Egress Proxy for TLS Enabled Traffic
Explore a solution for using Envoy as an egress proxy for TLS-enabled traffic in this conference talk by Amit Jain and Kiran Kumar from VMware. Learn about the challenges faced by modern cloud-native applications in securing external interactions and how to overcome Envoy's limitations for egress security. Discover the combined approach of deploying Envoy as a transparent egress sidecar proxy along with SSLproxy for TLS interception. Dive into the traffic stitching mechanism and a new Envoy listener filter that acts as the glue between Envoy and SSLproxy, extending Envoy's capabilities for integrated egress security. Gain insights into the implementation details, including SSL Proxy for deep SSL inspection, Envoy extension with SSL Proxy Listener Filter, and ISTIO Control Plane integration using EnvoyFilter CRD.