EnvoyCon North America 2025
as the organisers put it
EnvoyCon North America 2025 has officially wrapped! Thank you to all the attendees who joined us. Watch keynotes and all breakout sessions on the CNCF YouTube Channel. Review session slides from…
who it's for
platform engineers, service mesh operators, cloud infrastructure engineers, site reliability engineers, backend developers, security engineers
topics
Envoy Gateway configuration and hooks; Envoy AI Gateway architecture; xDS extension servers and mutations; dynamic modules for Envoy (shared library API); node-scoped Envoy agent with setns sockets; token-based global rate limiting implementation; per-connection buffering and backpressure; Spire mTLS integration via SDS over UDS; external endpoint picker using Prometheus metrics; hot restart and ODCDS sidecar deployments
| title | author | length |
|---|---|---|
| Welcome + Opening Remarks | Chris Mazur, Pradheep Shrinivasan | 05m |
Quick housekeeping and concrete project updates: Envoy v1.36 adds a reverse tunnel and safer HTTP defaults (tuned buffers for internet; performance testing… | ||
| One Size Doesn’t Fit All: Adding Org-Specific Gateway API Extensions with Envoy Gateway | Teju Nareddy, Guy Daich | 33m |
Shows how to write an extension server (gRPC binary) in Go that watches a Kubernetes CRD (custom backend MTLS policy), performs two concrete XDS mutations—add… | ||
| Evolution of Envoy AI Gateway | Yan Avlasov, Takeshi Yoneda | 37m |
Envoy AI Gateway uses Envoy Gateway + xDS to serve GenAI on Kubernetes and now implements token-based global rate limiting by extracting token usage from… | ||
| Envoy From the Inside Out: A Developer's Guide | Akshita Agarwal | 31m |
Explains how Envoy creates a per-connection state with separate filter instances and read/write buffers, details the listener vs cluster subsystems, and walks… | ||
| Rethinking the Proxy Model: Implementing Envoy as a Node-Scoped Agent | Tony Allen | 32m |
Envoy is reimplemented as a node-scoped daemonset proxy that listens into pod network namespaces using network namespace-aware sockets and setns to create… | ||
| Lightning Talk: Rate Limiting With Quotas Is Hard - So We Didn't! | Will Betts, Jay Chauhan | 10m |
Tesco runs Envoy across multiple regions for ~800 APIs and ~100,000 store checkouts and abandons RLQS quotas because per-envoy allocations lag during rapid… | ||
| Lightning Talk: Beyond Lua: Lightweight Envoy Extension With JavaScript | Takeshi Yoneda | 08m |
Envoy’s dynamic modules (introduced around Envoy 1.34) load a shared library implementing the Envoy C API so any compiled language can become an HTTP filter… | ||
| Lightning Talk: Envoy @ Netflix | Kevin Baichoo | 10m |
Envoy is deployed as sidecars on VMs, containers and laptops using ODCDS to resolve per-request cluster config and hot restart to let apps program ingress… | ||
| Closing Remarks | Chris Mazur, Pradheep Shrinivasan | 03m |
Netflix is confirmed as a sponsor and the community asks for concrete feedback via Slack channels and Google Groups rather than vague praise; CNCF signals that… | ||
| nothing matches | ||