Enable all your infrastructure’s power with Rust & Wasm
summary
Shows a working stack that runs lightweight Rust WebAssembly inside Envoy via the Wasm Proxy ABI, wired to Kubernetes gateway API and Kuadrant policy machinery to enforce rate limiting and auth. Demonstrates CEL predicates compiled into Wasm, Authorino for auth checks, a control‑plane that computes effective policies, and a test harness (slow but usable). Notes practical failures too: SDK panics forced a fork, observability and tracing are rough, but the Rust+Wasm filters run and improve latency and cost.
AI-written summary · about
chapters (16)
- 0:00Introduction
- 1:05Motivation for Envoy
- 3:38Envoy use cases
- 6:02Gateway API and policy
- 12:30Auth with Wasm
- 15:20Rate limiting with Wasm
- 18:11Extending Envoy with Wasm
- 23:15Why Wasm for Envoy
- 26:24Rust Wasm extensions
- 33:48Testing Wasm modules
- 35:13Expression Language for predicates
- 39:44Policy machinery
- 43:14Custom Wasm controllers
- 46:47Observability and tracing
- 48:34Future directions
- 49:17Q&A
related talks
50mWebAssembly: A Recovering Kubernetes Engineer's View of the Future
41mLeveraging WebAssembly to Write Kubernetes Admission Policies
28mGo Containerless on Kubernetes with WebAssembly and Rust
31mThe Rusty Boat
42mExotic Runtime Targets: Ruby and Wasm on Kubernetes and GitOps Delivery Pipelines
33mDeveloping & Debugging WebAssembly Filters for Envoy
55mUsing WebAssembly to run, extend, and secure your .NET application
31mHow We Can Create a Thriving Wasm Ecosystem