EnvoyCon North America 2021
2021-10-04
-- online --
[EnvoyCon North America 2021, EnvoyCon North America 2022, EnvoyCon North America 2025]
who it's for
platform engineers, service mesh engineers, cloud infrastructure engineers, site reliability engineers, kubernetes operators, observability engineers, network engineers
topics
TLS egress proxying with SSLproxy; Emissary-ingress Kubernetes gateway; cached active health checks; per-tenant dedicated infrastructure; HTTP/3 and QUIC integration; reading Envoy debug logs; Go control plane v3 roadmaps; Envoy WebAssembly (proxy-wasm); large-scale Envoy adoption patterns; delta xDS for reduced control plane bandwidth; per-connection rate limiting and TLS fingerprinting
| title | author | length |
|---|---|---|
| Opening Remarks | Matt Klein | 01m |
Welcome and celebration of Envoy’s five-year anniversary with concrete claims of substantial growth: a much larger user base, many new contributors and… | ||
| Using Envoy as an Egress Proxy for TLS Enabled Traffic | Amit Jain, Kiran Kumar | 23m |
Combines Envoy with the open‑source SSLproxy (github.com/sonertari/SSLproxy) to perform TLS man‑in‑the‑middle for egress: iptables redirect sends outbound TLS… | ||
| Lessons Learned: Four Years with Emissary-ingress and Envoy | Flynn | 17m |
Emissary-ingress is an opinionated Kubernetes-native gateway built on custom-built Envoy that after four years runs in thousands of installations; the team… | ||
| Health Checks: A Boon or a Curse? | Venil Noronha, John Murray | 21m |
Envoy active health checks at Stripe use cached active checks via an internal cluster that serves a standardized health endpoint so backend services never see… | ||
| Dedicated Infrastructure in a Multitenant World | Carlos Sanchez | 21m |
Adobe Experience Manager runs 18+ multi-tenant Kubernetes clusters and implements per-tenant VNet and dedicated egress IPs by provisioning a VM scale set per… | ||
| HTTP/3 in Envoy: End to End Acceleration | Alyssa Wilk, Ryan Hamilton | 20m |
HTTP/3 (QUIC) reduces handshake RTTs and removes head‑of‑line blocking, yielding measured gains like 8% faster search page loads and 30% improved YouTube MTBR… | ||
| Connecting the (Proxy) Dots: A Beginners Guide to Reading Envoy Debug Logs | Casey Kurosawa | 08m |
Enables reconstructing a single request from Envoy’s noisy debug output by matching timestamps with connection id and stream id and following HTTP/2… | ||
| Lightning Talk: State of Go Control Plane: What Does the Future Behold? | Alec Holmes | 08m |
Go Control Plane removes v2 (released in 0.9.9 removed v2) and focuses on v3 and upcoming UD v4 while adding ECDS in June and merging scoped route discovery… | ||
| Extending Envoy Using WebAssembly (Wasm) | Daneyon Hansen | 32m |
Explains how Envoy loads WebAssembly modules (default V8 runtime, proxy-wasm ABI) and shows a working Go/TinyGo module compiled to main.wasm that increments a… | ||
| The Trials and Success of Adopting Envoy at Tinder | Yuki Sawa, Cooper Jackson | 22m |
Tinder migrates its Kubernetes fleet to Envoy over ~1 year (2019–2020), ending with 1.6M RPS meshed, 500 services and ~20,000 pods; observability shifts to… | ||
| The Evolution of Twitter's Edge | Ryland Degnan | 28m |
Twitter runs Envoy at the edge for 100% of requests, handling hundreds of billions per day, replacing a bespoke proxy (TSA) with roughly 2x throughput and… | ||
| Speeding up Istio: Our Journey Implementing Delta xDS | Aditya S Prerepa, John Howard | 27m |
Istio implements delta xDS to stop sending full configs on every update, replacing state‑of‑the‑world pushes with per‑proxy, on‑demand diffs; the initial… | ||
| Closing Remarks | Matt Klein | 01m |
Expresses genuine surprise at the range of real-world Envoy deployments and thanks attendees for a day of strong talks, notes a desire to keep supporting the… | ||
| Load Shedding for Evil Wizards | Tony Allen | 32m |
Compares Envoy mechanisms with concrete simulations: a Go buffer bloater proxy and an external Envoy produce results showing local rate limiting (token bucket)… | ||
| nothing matches | ||