Leveraging WASM to Improve Quality and Flexibility of the API Plugin Ecosystem at Goldman Sachs
Talkat WasmCon 2023 · on Wednesday, 2023-09-06· at 16:30· Grand Ballroom G, Hyatt Regency Bellevue, 900 Bellevue Way NE·
summary
Goldman Sachs turns API gateway plugins into WebAssembly modules compiled with TinyGo, using the proxy-wasm SDK to run Go-based filters across Envoy and nginx. A nine-month PoC builds an account-number redaction plugin, reaches 83% test coverage, shares ~35% of code between runtimes, and integrates into CI/CD with dependency and IP scans. Production rollout begins in Q4 after converting 55 plugins so far; observed cost is ~14% throughput loss per host, accepted for improved safety and reuse.
AI-written summary · about
chapters (9)
- 0:00Introduction and context
- 1:23API platform architecture
- 2:54Plugin challenges
- 5:30Choosing webassembly
- 8:07Developing the POC
- 12:58Integration and CI/CD
- 15:22Results and findings
- 18:14Production roadmap
- 21:56Q&A and closing
related talks
21mBring Your Own Bytecode to the Logging Party
05mExtending Envoy With WebAssembly
28mA Technical Deep Dive in WebAssembly for Kong Gateway
13mWebAssembly & the Future of NGINX
30mShrinking Software Attack Surface with WebAssembly & CNCF Wasmcloud
32mExtending Envoy Using WebAssembly (Wasm)
10mSponsored Keynote: What can WebAssembly do for your Application Security and Extens...
26mHarnessing WebAssembly for Real-time Stateless Streaming Pipelines