Mastering GraphQL: Strategies from the Experts
summary
Walks through a Solo.io platform demo that configures an Envoy/istio-based API Gateway via Kubernetes CRDs like virtualGateway and route tables, migrates traffic with a 50/50 split to an on‑cluster httpbin replica, integrates Keycloak OIDC to extract an X-Email header then derives X-Organization, enforces Rego policies with Open Policy Agent, applies rate limits (example: 3 requests/min for an org, gold plan = 5 req/min) and a ModSecurity‑style WAF to block Log4Shell, and deploys a developer portal Docker image.
AI-written summary · about
chapters (16)
- 0:00Start
- 0:03Intro
- 1:17Solo Company Overview
- 5:52Workshop: Exposing Components
- 13:48Migration Use Case
- 21:54OIDC Integration with Keycloak
- 27:02Open Policy Agent Integration
- 29:20OIDC Transformation Policies
- 32:47Implementing Rate Limiting
- 35:37WAF Policies Overview
- 39:00API Portal Features
- 49:06Exposing Portal Server
- 49:34What's Next in Development
- 51:27Deploying Portal Frontend
- 52:52Removing Kubernetes Secret API Key Storage
- 53:42Monetization & Usage Plans
related talks
03h 18mHands-On with an Envoy API Gateway, Now with GraphQL!
25mThe Future of API Management with Everything as Code
36mAdvanced Authentication patterns at the Edge
20mHow GraphQL Servers Break and How to Harden Your Resolvers
21mExposing gRPC With Confidence: A Kubernetes-First API Gateway Approach
24mSupercharging GraphQL with Envoy: Unveiling the Efficiency of Declarative GraphQL
01h 05mWorkshop: Scaling and Securing API Development with a GraphQL Platform
25mRunning an API Gateway on Istio - Pitfalls and Learnings