Lightning Talk: The Hardest Part of Operating a Service Mesh: Envoy Proxy
summary
Covers concrete operational practices for Envoy in meshes and at the edge: use the admin HTTP interface for certs, clusters, profile dumps and request tapping; monitor stats for config sync, CPU and memory and certificate expiry; configure the overload manager thresholds (example: disable keep‑alive at ~95% heap, stop accepting requests at ~99%) and enable access logging with dynamic metadata for TLS, x‑forwarded‑for and headers. Good if you need hands‑on debug and tuning steps rather than high‑level theory.
AI-written summary · about
chapters (10)
- 0:00Intro
- 1:12Envoy as a sidecar
- 1:27Envoy at the edge
- 1:38Envoy as a black box?
- 2:24Envoy Admin interface
- 3:29Checking cert rotation
- 4:25Config sync issues / CPU / Memory pressure
- 6:10Enabling access logging Custom formatting options
- 6:45Envoy logs for debugging connectivity issues Envoy debug logs
- 7:33Tuning for keep alive /cloud deployments
related talks
33mEnvoy on Fire: A Practical Look at Debugging a Service Mesh
09mLightning Talk: Honey, I Broke the Things: Debugging Gray Failures in Production!
20mService Mesh: A Hole in the Pocket?
01h 25mCloud-Native Building Blocks: An Interactive Envoy Proxy Workshop
20mKeynote: Service Meshes and Observability
33mIntro: Envoy
56mService Meshes - Powering the next wave of microservice architectures
13mLightning Talk - Connecting and Migrating Heterogeneous Applications with Consul Servi...