The Next Generation of Envoy Extensibility: Dynami...
summary
Dynamic Modules move Envoy from sandboxed VMs to in-process extensions that offer zero-copy headers and body access, use a stable C-ABI with Rust and Go SDKs, and expand in v1.37 to Listener and Network filters plus enhanced HTTP capabilities. Claims include eliminating a 30s audit-log pipeline by writing logs directly to Kafka, reducing config blobs by ~50x and startup time by ~5x, and supporting TCP/UDP listener filters, network filters, load‑balancer policies, and bootstrap extensions — at the cost of trusting module safety.
AI-written summary · about
chapters (12)
- 0:00Envoy extensibility intro
- 1:03Extensibility evolution
- 2:48Dynamic modules benefits
- 4:10Dynamic modules trade-offs
- 4:52Dynamic modules scope 1.37
- 5:36Audit logging with Rust
- 6:38Real-time RBAC updates
- 8:02Eliminating sidecars
- 8:45Performance with dynamic modules
- 9:26Future plans for modules
- 9:48Community collaboration
- 10:09Q&A
related talks
13mDynamic Modules: A New Era of High-Performance Envoy Extensions
07mLightning Talk: Dynamic Modules: A New Era of High-Performance Envoy Extensions
21mDeep Dive: Envoy
37mExtending Envoy with WebAssembly
33mGet to know Envoy - the modern proxy for cloud-native infrastructure - Baptiste Collard
08mLightning Talk: Beyond Lua: Lightweight Envoy Extension With JavaScript
13mClosing Remarks
05mExtending Envoy With WebAssembly