Extending Sidecarless Applications with Wasm in Istio Ambient Mesh

on YouTube ↗31m

" summary

Istio Ambient (alpha in Istio 1.18) shows applying Envoy Wasm extensions to running apps without sidecars or pod restarts, using the WasmPlugin resource to push OCI Wasm images into Envoy’s V8 runtime on a waypoint proxy. Demo loads a small AssemblyScript/Go Wasm OCI image that regex-redacts an author SSN from responses, applied live via Kubernetes labels and Istiod; no application pods restart and the change takes effect immediately. Envoy waypoint

AI-written summary · about

" chapters (13)

1. 0:00Introduction
2. 1:34Wasm landscape and Istio
3. 2:40Service mesh fundamentals
4. 3:43Sidecar proxy challenges
5. 6:12Multi-tenancy in service mesh
6. 7:58Ambient service mesh overview
7. 9:02Wasm in Istio and plugin resource
8. 11:33Wasm and Envoy integration
9. 11:55Demo: Wasm in Envoy
10. 14:42Demo: Wasm in ambient mesh
11. 21:10Waypoint proxy flexibility
12. 21:32Summary
13. 22:37Q&A

" related talks

• 30mTaking Service Mesh a Step Further with WebAssemblyChristian Posta · ServiceMeshCon North America 2020
• 32mExtending Envoy Using WebAssembly (Wasm)Daneyon Hansen · EnvoyCon North America 2021
• 27mService Mesh Extensibility ExplainedLin Sun · ServiceMeshCon Europe 2021
• 37mExtending Envoy with WebAssemblyJohn Plevyak, Dhi Aurrahman · KubeCon + CloudNativeCon Europe 2019
• 30mMultiplayer Istio: Collaborative WASM Plugins with Intel and Layer5Lee Calcote, Xin Huang · IstioCon 2023
• 52mEnable all your infrastructure’s power with Rust & WasmAlex Snaps · LambdaConf 2025
• 23mWhat If... Kubernetes Core Pieces Could Be Extended with Pluggable WebAssembly Modules?Flavio Castelli, Rafael Fernández López · Cloud Native Wasm Day Europe 2022
• 05mExtending Envoy With WebAssemblyYuki Ito · KubeCon + CloudNativeCon Europe 2025