Panel: Dynamic Configuration and Scaling of VPN Concentrator and Envoy SASE Proxy in Multi-Tenant Edge
recording made private on YouTubehttps://youtu.be/cFuTpVKJkbM
Panelat EnvoyCon NA 2024 · on Tuesday, 2024-11-12· at 10:30· Hyatt Regency | Level 2 | Salt Lake Ballroom C·
summary
Framework integrates Envoy SASE proxy with a VPP-based VPN concentrator, proving per-tenant Geneve per-tenant tunnels with VRF isolation and per-tenant config reloads for overlapping IP spaces. VPP IPsec data plane demonstrates extreme throughput (near 2 Tbps on dual-socket Xeon 4 in published tests) while Envoy gets AVX-512 multibuffer and Intel QAT offloads to cut CPU and TLS cost and show up to ~70% latency drops; benchmarks target Xeon 4–6 and include Nighthawk extensions.
AI-written summary · about
related talks
33mRunning Envoy as an Edge Proxy
21mLightning Talk: Integrating Envoy with DPDK-based virtual networks
35mKeynote: Cross Domain/Cross Layer VPN Service Orchestration Panel
33mGet to know Envoy - the modern proxy for cloud-native infrastructure - Baptiste Collard
38mEnvoy Deep Dive
26mIntegrating Stateful Load Balancing At Scale In Envoy
32mRethinking the Proxy Model: Implementing Envoy as a Node-Scoped Agent
14mKeeping Envoy Gateway On, Even When Bad Things Happen