Tag: #envoy
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 16 posts
16 posts are tagged #envoy; the most recent was published on 2026-07-16.
Often tagged together: #kubernetes 9 #istio 8 #service-mesh 7 #cilium 5 #linkerd 5
Most read in the last 90 days:
- Networking 2026 Complete Guide - Cilium, WireGuard, Tailscale, Nebula, Istio, Envoy, Cloudflare Tunnel Deep Dive
- Service Mesh in 2026 — Istio Ambient / Linkerd 3 / Cilium Mesh / Consul Connect / Kuma Deep Dive (Is the Sidecar Dead?)
- Service Mesh Complete Guide 2025: Istio vs Linkerd, mTLS, Traffic Management, Observability
Move to Ambient and EnvoyFilter Goes Silently Ignored — The Gap Istio 1.30's TrafficExtension Closes, and What It Doesn't
The real obstacle blocking migration to ambient mode isn't resources — it's extensibility. Istio's official migration doc states outright that EnvoyFilter is not supported on waypoints, that it will be "silently ignored"
2026-07-16 · 15 min read #kubernetes#istio#service-mesh#envoy#ambient-meshThe Complete Guide to Emissary-ingress (Ambassador): Everything About API Gateway-style Ingress
A deep dive into Emissary-ingress (formerly Ambassador), the Envoy-based API Gateway-style Ingress controller, covering its architecture, the Mapping CRD, authentication, rate limiting, canary releases, and Gateway API s
2026-06-14 · 18 min read #emissary-ingress#ambassador#envoy#api-gateway#kubernetesEnvoy Gateway Deep Dive: Inside the Gateway API Reference Implementation
In 2026, with the Ingress API frozen and Gateway API established as the standard successor, this post takes a deep look at Envoy Gateway, the reference-grade implementation built by the Envoy community itself, covering a
2026-06-14 · 17 min read #envoy-gateway#gateway-api#envoy#kubernetes#ingressThe Complete Contour Guide - Managing Kubernetes Traffic with Envoy-Based Ingress and HTTPProxy
Contour is a Kubernetes ingress controller that uses Envoy as its data plane. We cover the HTTPProxy CRD, multi-tenancy through delegation, and Gateway API support with hands-on examples, plus operational tuning and trou
2026-06-14 · 16 min read #contour#envoy#ingress#kubernetes#httpproxyIstio Traffic Management in Practice — From VirtualService to Automated Canaries
A hands-on guide covering the relationships between Istio traffic APIs, header and weight-based routing, canary automation with Flagger and Argo Rollouts, mirroring, fault injection, and how to derive circuit breaker set
2026-06-13 · 17 min read #istio#virtualservice#canary#traffic-management#kubernetesCilium Network Policy in Practice — Zero Trust from L3 to L7 and DNS
A hands-on guide to going beyond the limits of Kubernetes NetworkPolicy with CiliumNetworkPolicy, controlling L3/L4/L7 and DNS-based egress. Covers a four-stage default-deny rollout roadmap, a Hubble-driven policy author
2026-06-13 · 14 min read #cilium#network-policy#zero-trust#kubernetes#securityOIDC Token Validation at the API Gateway — Istio, Envoy, and Gateway API in Practice
Validate at the edge or in the service? This post covers detailed Envoy jwtauthn filter configuration, the Istio RequestAuthentication plus AuthorizationPolicy combination, JWKS caching and failure modes, audience strate
2026-06-12 · 15 min read #istio#envoy#jwt#oidc#api-gatewayService Mesh in 2026 — Istio Ambient / Linkerd 3 / Cilium Mesh / Consul Connect / Kuma Deep Dive (Is the Sidecar Dead?) ♪ Listenable
Service mesh went through a turbulent 2024-2026 after the sidecar golden age of 2018-2020. Istio Ambient went GA, making sidecar-free Istio real. Linkerd 3 moved some features to a paid edition, sparking community contro
2026-05-16 · 20 min read #service-mesh#istio#linkerd#cilium#consulReverse Proxy & Edge Servers 2026 Complete Guide — nginx · Caddy · Traefik · HAProxy · Envoy · OpenResty · Pingora · FrankenPHP Deep Dive ♪ Listenable
Full-stack anatomy of reverse proxies and edge servers in 2026. nginx 1.27 and the freenginx fork drama, Caddy 2.8 automatic HTTPS, Traefik 3 dynamic routing, HAProxy 3.x L4/L7, Envoy 1.32 service mesh data plane, OpenRe
2026-05-16 · 25 min read #reverse-proxy#nginx#caddy#traefik#haproxyNetworking 2026 Complete Guide - Cilium, WireGuard, Tailscale, Nebula, Istio, Envoy, Cloudflare Tunnel Deep Dive
A complete look at the 2026 production networking stack. eBPF-based K8s networking (Cilium, Calico eBPF, Antrea), overlay VPNs (WireGuard, Tailscale, Nebula, ZeroTier, Twingate, OpenZiti), service meshes (Istio ambient,
2026-05-16 · 18 min read #networking#cilium#ebpf#wireguard#tailscaleService Mesh Deep Dive — Envoy, Istio, Linkerd, Cilium eBPF, Ambient Mesh, xDS/mTLS
Why sidecar proxies appeared — and why they are being abandoned. Envoy internals, xDS API flow, mTLS handshake, Ambient Meshs Ztunnel, and Ciliums sidecar-less eBPF mesh, all in one place.
2026-04-15 · 10 min read #service-mesh#envoy#istio#linkerd#ciliumAPI Gateway Complete Guide 2025: Kong, Envoy, AWS API Gateway, Auth/Rate Limiting/Monitoring ♪ Listenable
Everything about API Gateways! Kong vs Envoy vs AWS API Gateway vs Traefik comparison, routing, authentication (OAuth2/JWT/API Key), rate limiting (Token Bucket/Sliding Window), request transformation, caching, monitorin
2026-04-14 · 24 min read #api-gateway#kong#envoy#aws-api-gateway#rate-limitingService Mesh Complete Guide 2025: Istio vs Linkerd, mTLS, Traffic Management, Observability
Everything about Service Mesh! Istio vs Linkerd comparison, Envoy sidecar proxy, mTLS automatic encryption, traffic management (canary/mirroring/circuit breaker), Observability (metrics/tracing/logging), Gateway API, Amb
2026-04-13 · 19 min read #service-mesh#istio#linkerd#mtls#traffic-managementService Mesh Production Guide: mTLS, Traffic Management, and Observability with Istio, Envoy, and Linkerd
Cover service mesh core concepts (data plane/control plane), Istio architecture (Istiod, Envoy sidecar), VirtualService and DestinationRule, traffic splitting, circuit breaking, mTLS configuration, Linkerd comparison, Am
2026-03-12 · 11 min read #architecture#service-mesh#istio#envoy#linkerdAPI Gateway Patterns and BFF Design: Practical Implementation with Kong, Envoy, and GraphQL Federation ♪ Listenable
An in-depth analysis of API gateway patterns and BFF (Backend for Frontend) architecture. Covers pros and cons comparison of Kong, Envoy, and GraphQL Federation, authentication, rate limiting, routing implementation, and
2026-03-08 · 31 min read #architecture#api-gateway#bff#kong#envoyCilium Service Mesh: Building and Operating Sidecarless Service Mesh with eBPF
A comprehensive guide covering Cilium Service Mesh sidecarless architecture based on eBPF, Envoy integration, mTLS configuration, L4/L7 traffic management, performance comparison with Istio, and production troubleshootin
2026-03-07 · 15 min read #kubernetes#cilium#service-mesh#ebpf#sidecarless