Explore in-depth articles and personal reflections on open source projects, AI, cloud-native technologies, DevOps practices, and the evolving landscape of software engineering. Gain insights from real-world experiences, technical tutorials, and stories that connect technology with everyday life.
Understanding Envoy's Extension and Integration Mechanisms: From Built-in Filters to Dynamic Modules
This article dives into various extension and integration mechanisms supported by Envoy, including built-in C++, Lua scripts, Wasm plugins, dynamic modules, and external integrations like ext_proc and ext_authz. I also share my personal preference and reasoning in favor of dynamic modules.
Step-by-Step Guide: Moving from ingress-nginx to Envoy Gateway
This blog guides users through migrating from ingress-nginx to Envoy Gateway using the Gateway API. It covers the reasons for migration, step-by-step instructions on Minikube, and how the ingress2gateway tool simplifies the transition to a more modern ingress architecture.
Observability Guide for Envoy Gateway Data Plane
A hands-on guide to configuring observability for the data plane of Envoy Gateway using Prometheus, Loki, and Tempo.
Leveraging EnvoyPatchPolicy to Extend the Capabilities of Envoy Gateway
Learn how to use EnvoyPatchPolicy to dynamically modify xDS resources in Envoy Gateway, including practical examples such as customizing local replies. Based on Envoy Gateway v1.3.2.
KubeCon EU 2025 Recap: Insights and Trends Shaping the Cloud Native Landscape
I attended KubeCon EU 2025 in London and summarized the conference highlights and trends in a slide deck for you.
Beyond Sidecar: A Deep Dive into Istio Ambient Mode Traffic Mechanism and Cost Efficiency
This post introduces the background, core components, traffic flow mechanisms, and comparisons between Ambient Mode and the traditional Sidecar model in Istio—helping you evaluate and get started with this new feature quickly.
Understanding L7 Traffic Management in Istio Ambient Mode: From ztunnel to Waypoint Proxy
An in-depth exploration of Istio ambient mode’s L7 traffic path, covering transparent interception, policy application, and traffic forwarding from ztunnel to waypoint proxy.
Envoy’s ext_proc filter enables flexible request and response processing through gRPC integration.
Implementing HTTP/2 CONNECT Tunnels with Envoy: Concepts and Practical Guide
A deep dive into creating transparent tunnels using HTTP/2 CONNECT, including technical principles, practical workflows, and example code.
Packet Lifecycle and Traffic Optimization in Istio Ambient Mode
An in-depth analysis of the detailed processing of initial packets in Istio Ambient Mode, followed by fast forwarding and traffic optimization strategies for subsequent packets.
