gRPC xDS Updates: ExtAuthz and ExtProc
summary
gRPC xDS adds two concrete callout protocols: ExtAuthz does an immediate unary call at client initial metadata and returns a binary allow/deny plus optional header mutations (no request-body support for gRPC), with a planned caching design to avoid a control RPC per data-plane call. ExtProc is a bidirectional stream that sends each of the six gRPC events, lets the external service mutate/insert/drop messages or terminate the RPC, introduces a gRPC body send mode to stream deframed messages, and offers an observability mode (parallel send, configurable fail‑open); implementations target both client and server and cross‑language parity.
AI-written summary · about
chapters (7)
- 0:00Introduction to gRPC xDS
- 1:24ExtAuthz for authorization
- 5:17ExtProc for interception
- 27:14Cross-language support
- 29:46Trusting XDS control plane
- 31:30Load balancing long streams
- 38:00Q&A session
related talks
23mxDS Support in gRPC
16mxDS in gRPC for Service Mesh
19mKeynote: What's New in gRPC?
20mProxyless Service Mesh with gRPC
23mA Simplified Service Mesh With gRPC
25mAdapting Our XDS Control Plane for Proxyless gRPC
33mgRPC For Microservices: Service-mesh and Observability
23mHow Proxyless gRPC Works in a Service Mesh