Open Source on Huabing Blog

OpenClaw 不是玩具，我的个人助理 Jeff 已经开始“上班”了

Wed, 04 Mar 2026 00:00:00 +0000

先简单介绍一下 OpenClaw：它是一个开源、自托管的 AI Agent。你可以把它理解为“消息渠道”和“AI 执行能力”之间的统一中枢：一边连 Telegram、WhatsApp 等聊天软件，另一边连模型、工具、会话和记忆系统。

我给这个助手起名叫 Jeff，灵感来自电影《Finch》（2021，Tom Hanks 主演）里那个被训练来陪伴和协助人类的机器人。这个名字对我来说挺有象征意义：我希望它不是“回答机器”，而是一个能长期协作、持续进化的工作搭子。

对我来说，OpenClaw 最关键的不是“会聊天”，而是它能持续执行真实任务。

这段时间我做了一些配置，把它接进了我每天的工作流。在这篇文章里面简单和大家分享一下我使用 OpenClaw 的一些体会：

AI 帮助我成为 10X 工程师！

Sun, 18 Jan 2026 00:00:00 +0000

马来西亚滨城 Batu Ferringhi 海滩 Fire Show

最近关于 AI 编码的讨论实在是太火了，无论是在国外的 YouTube、X、Reddit，还是国内的微信视频号上，每天都能看到大量关于 AI 编程工具的体验分享。可说实话，作为一名还在一线写“工程化”代码的工程师，我认为很多分享内容都不是 “真正写代码的人” 写的，而是产品经理、AI 博主或者 AI 爱好者写的。虽然他们的内容非常有参考价值，但其实距离我自己每天真实面对的代码环境还是有点远。我想在这里聊聊作为一个在一线写“工程化”代码的工程师，我是如何在日常工作中使用 AI Coding Agent。

在 Ambient Mesh 中使用 Envoy Gateway 扩展 Redis 集群

Thu, 06 Nov 2025 00:00:00 +0000

爱心树，福州三坊七巷，摄于 2025 年夏

在我们此前的博文——《使用 Envoy Gateway 作为 Ambient Mesh 的统一入口网关和 Waypoint 代理》中，我们介绍了 Envoy Gateway 如何补足 Istio Ambient Mesh 在第七层（L7）能力上的空白，例如全局限流、熔断、OIDC 认证以及 xDS 动态配置。

Envoy AI Gateway 现已支持 Model Context Protocol

Mon, 06 Oct 2025 00:00:00 +0000

Envoy AI Gateway 现已支持 Model Context Protocol

我们很高兴地宣布，Envoy AI Gateway 的下一个版本将正式支持 Model Context Protocol（简称 MCP），让 Envoy AI Gateway（EAIGW）成为 AI 流量的通用入口。

Bringing Full L7 Power to Istio Ambient Mesh with Envoy Gateway

Thu, 24 Jul 2025 00:00:00 +0000

Surf Love, Taken in Pingtan County, Fuzhou, Fujian, China, Summer 2025

In this article, we’ll look at how you can use Envoy Gateway, an Envoy project open source solution, together with Istio when running in Ambient mode. This will allow you to easily leverage the power of Envoy’s L7 capabilities for Ingress traffic and east-west traffic in your mesh with easy-to-use CRDs.

To understand how this integration works, let’s first take a quick look at Ambient Mesh itself. Also known as Istio Ambient mode, it’s a sidecar-less service mesh architecture that aims to simplify deployments and can boost efficiency for specific use cases. Unlike sidecar-based meshes, Ambient splits the data plane into two key components: the ztunnel, which secures service-to-service communication, and the Waypoint Proxy, which handles Layer 7 traffic routing and policy enforcement.

Envoy Gateway Policies: Unlocking the Full Power of Envoy Proxy for API Gateways

Mon, 16 Jun 2025 00:00:00 +0000

This presentation will delve into Envoy Gateway’s API extensions: ClientTrafficPolicy, BackendTrafficPolicy, SecurityPolicy, and EnvoyExtensionPolicy. We’ll explore their practical applications in managing and securing edge traffic, showcasing advanced features like JWT authorization, rate limiting, OIDC integration, external processing, and WASM plugins.

Videos

YouTube

Slides

Envoy Gateway Architecture Diagrams

Mon, 12 May 2025 00:00:00 +0000

Oftentimes, I find myself spending a lot of time jumping between different files to understand the codebase while reviewing a PR or writing a new feature — even when I originally wrote a good chunk of that code myself.

In this sense, human brain feels like an old computer with just 64K of RAM. It’s constantly swapping data in and out because there just isn’t enough memory. Before it can do any serious work, it has to reload all the context back into memory — a slow and sometimes frustrating process, especially when you’re doing it over and over.

Securing the Gateway: A Deep Dive into Envoy Gateway's Advanced Security Policy

Fri, 04 Apr 2025 00:00:00 +0000

Envoy Gateway’s Security Policy simplifies access to Envoy’s robust security features, eliminating the need for users to navigate complex Envoy configurations. These features include CORS, JWT authentication, Basic Auth, OpenID Connect (OIDC), External Authentication (Ext Auth), and more. This session includes a demo showcasing OIDC authentication and authorization based on JWT claims, offering practical insights for enhancing application security—whether you’re an experienced Envoy user or new to open source.

Envoy Gateway v 1.2.0 版本发布：新功能与改进介绍

Tue, 05 Nov 2024 00:00:00 +0000

穿藏族服装的少女 - 理塘，甘孜

Envoy Gateway（本文中简称 EG）在 11 月 6 日发布了最新的 1.2.0 版本。该版本带来了一系列激动人心的新特性和改进，本文将为您一一介绍。

Beyond Gateway API: Introducing Envoy Gateway's Gateway API Extensions

Sat, 31 Aug 2024 00:00:00 +0000

Osaka City Skyline, Taken in Osaka, Japan, Summer 2024

This article is a summary of my talk,"Gateway API and Beyond: Introducing Envoy Gateway’s Gateway API Extensions¹", presented at KubeCon China in Hong Kong, August 2024.

As the official Gateway Controller for the Envoy, Envoy Gateway² provides full support for all the features of the Kubernetes Gateway API³.In addition, Envoy Gateway extends the Gateway API by introducing a range of enhancements for traffic management, security features, and custom extensions that go beyond the standard API. In this post, we’ll dive into these Envoy Gateway extensions and explore their use cases.

超越 Gateway API：深入探索 Envoy Gateway 的扩展功能

Sat, 31 Aug 2024 00:00:00 +0000

大阪的城市天际线 - 摄于日本大阪，2024 年夏

本文是我在 2024 年 8 月于香港举行的 Kubecon China 上的技术分享：Gateway API and Beyond: Introducing Envoy Gateway’s Gateway API Extensions¹ 的内容总结。

Highlights of Envoy Gateway v1.1.0: What’s New and Improved

Mon, 22 Jul 2024 00:00:00 +0000

Wall Art at In-N-Out Burger in Santa Clara, California

Envoy Gateway (EG) released its latest version, 1.1.0, on July 22. This update marks the first feature release since the 1.0 GA (General Availability) version and includes multiple new features and improvements. In this article, I will highlight some of the most important new features.

Wasm Extensions

In 1.1.0, EG introduces support for Wasm extensions in OCI image format through the EnvoyExtensionPolicy CRD. OCI images facilitate easier management of different versions of Wasm extension plugins and support private images for enhanced access control and security.

Envoy Gateway v 1.1.0 版本发布：新功能与改进介绍

Wed, 10 Jul 2024 00:00:00 +0000

In-N-Out Burger 餐馆墙上的装饰画（摄自加州 Santa Clara）

Envoy Gateway（本文中简称 EG）在 7 月 23 日发布了最新的 1.1.0 版本。1.1.0 版本 EG 在 1.0 GA （General Availability）版本后的第一个功能更新版本，包含了多个新特性和改进。本文将为大家介绍我认为其中最重要的几个新特性。

How to Get the Client’s “Real” IP Address with Envoy Gateway ?

Mon, 20 May 2024 00:00:00 +0000

Just as a river flows from its source through various bends before reaching the sea, a typical HTTP request travels from a client across multiple network hops until it reaches its destination server.

During this journey, the request’s original IP address is lost as it moves through multiple network infrastructures such as proxy servers and load balancers. This happens because some of these hops terminate the TCP connection and create a new TCP connection with the next hop. As a result, the receiving server only sees the IP address of its directly connected hop in the chain rather than the client’s original IP address.

如何通过 Envoy Gateway 得到客户端的真实 IP 地址？

Mon, 20 May 2024 00:00:00 +0000

前言

河水出昆仑，东流经玉门，环绝壁，历五山，南至积石，东流入海。其流也，或曲或直，时急时缓，遇山则环，逢谷则奔。渐行渐远，百折千回，至于中原，汇百川，泽九州。其道也，蜿蜒盘旋，绵延万里，波澜壮阔，历千古而不息。——《水经注》

我提交的 PR 为何还没能合入？

Mon, 25 Mar 2024 00:00:00 +0000

我提交的 PR 为何还没能合入？如何才能更快地合入我的 PR ？ 相信这是很多参与开源项目的开发者常常遇到的疑问。

对于开发者来说，提交 PR（Pull Reques）是参与开源项目的主要方式。不管是修复一个故障，添加一个新功能，还是改进文档，我们都需要通过提交 PR 的方式将其合入到项目的主分支中。那么，我们提交的 PR 如何才能尽快地被项目接受呢？

Envoy Gateway 发布通用可用版本 1.0.0 ！

Fri, 15 Mar 2024 00:00:00 +0000

作者 Envoy Gateway 社区：Alice Wasko (Ambassador Labs), Arko Dasgupta (Tetrate), Congqi Zhu (CECloud), Guy Daich (SAP), Huabing Zhao (Tetrate), Jianpeng He (Tetrate), Xunzhuo Liu (Tencent)

今天，我们非常高兴地宣布 Envoy Gateway (EG) 1.0 版本现已面向 Kubernetes 发布。这是一个成熟的版本，已准备好大规模应用于生产环境，它简化了 Envoy 在南北向流量管理中的使用。

Envoy Gateway：十分钟搞定单点登录（SSO）！

Thu, 07 Dec 2023 00:00:00 +0000

单点登录（SSO）简化了用户体验，使用户能够在访问多个应用时只需一次登录。这提高了用户满意度，减少了密码遗忘的风险，同时增强了安全性。但是，实现单点登录并不容易，需要应用程序实现和认证服务器的交互逻辑，增加了应用程序的开发工作量。Envoy Gateway 在最新版本中的安全策略中提供了 OpenID Connect (OIDC) 的能力，采用 Envoy Gateway，无需对应用做任何修改，在十分钟内即可立刻实现单点登录。

Envoy Gateway 安全策略介绍: HTTP Basic Authentication

Wed, 29 Nov 2023 00:00:00 +0000

什么是 Envoy Gateway 安全策略？

Envoy Gateway 中的安全策略 (SecurityPolicy) 是 Envoy Gateway 对 Kubernetes Gateway API 的一个扩展资源。SecurityPolicy 采用了 Gateway API 的 Policy Attachment 机制来对 Gateway API 进行扩展，为 Envoy Gateway 实现了 CORS，JWT，OIDC，Basic Auth 等强大的安全能力。

Introduce MetaProtocol Proxy: A Layer-7 Proxy Framework Powered by Envoy

Thu, 16 Nov 2023 00:00:00 +0000

Even with Envoy’s powerful filter extension mechanism, writing a proxy for none-http protocols from scratch can be challenging. MetaProtocol Proxy solves this by abstracting layer-7 proxy with a concept called metadata and providing a “batteries included” framework that includes common traffic management capabilities: load balancing, circuit breaker, routing, rate limiting, fault injection, observability, etc. To write a layer-7 proxy for a new protocol, the only thing you need to do is implementing the codec interface.

KubeCon 芝加哥现场报道 - Envoy Gateway Maintainer Alice Wasko

Thu, 16 Nov 2023 00:00:00 +0000

Videos

Bilibili

YouTube

采访内容(待整理):

Huabing: I will introduce this interview first in Chinese, because the audience are from China. Envoy Gateway 社区的朋友大家好，我们今天有幸邀请到了 Envoy Gateway 的维护者，来自 Emissary 的 Alice。 Alice 从 Envoy Gateway 创建之初就参与了这个项目，今天很有幸能够在 KubeCon 现场对她进行采访。下面我将用英文对 Alice 进行采访。

KubeCon 芝加哥现场报道 - Istio 创始人 Varun Talwar 解密 Istio 开源背后的故事

Thu, 16 Nov 2023 00:00:00 +0000

Videos

Bilibili

YouTube

采访内容(译文): Huabing：你好， Varun，感谢你接受我们的采访。Varun Talwar 是著名开源项目 Istio 的创始人之一，也是硅谷科技初创公司 Tetrate.io 的联合创始人。那么 Varun，首先能不能给我们简单介绍一下你自己，以及你的背景？

KubeCon 芝加哥现场报道 - Istio 技术指导委员会成员 Lin Sun 分享 Istio 项目历史与未来展望

Thu, 16 Nov 2023 00:00:00 +0000

Videos

Bilibili

YouTube

采访内容(待整理):

Um OK. Let’s just switch the image. OK. Um I think you already give us a little bit of background and interaction on yourself. So I, I think it’s fair to say you are one of the founder, etcetera.

KubeCon 芝加哥现场报道 - Istio 社区核心维护者 John Howard 分享他高效的秘诀

Thu, 16 Nov 2023 00:00:00 +0000

Videos

Bilibili

YouTube

采访内容(待整理):

Huabing: OK, let’s welcome our superstar from Istio community. John Howard, Is my pronunciation correct?

The API Gateway in the Cloud Native Era

Wed, 01 Nov 2023 00:00:00 +0000

EnvoyProx 是云原生时代的代理之一，也是CNCF下的毕业项目之一。Envoy Gateway 是由 EnvoyProxy 的创始人 Matt Klein 发起的 API 网关项目。由我所在公司（Tetrate.io）以及 Emissary、Contour 等其他 API 网关项目共同维护。Envoy Gateway 作为 EnvoyProxy 发起的官方 API 网关项目，是基于 EnvoyProxy 的南北向 API 网关的官方实现，大大降低了使用 EnvoyProxy 的门槛，使用户不必重复“造轮子”来构建 EnvoyProxy 控制平面，并处理难以理解的复杂 xDS 协议和 EnvoyProxy 的配置。Envoy Gateway 使用 Kubernetes Gateway API 作为其配置，可以轻松启动管理南北向流量。Envoy Gateway 在多个社区和积极贡献者的推动下迅速发展。本主题将介绍为什么 Envoy Gateway 是云原生时代的 API 网关。

Aeraki Mesh Community Meeting - February 23rd, 2023

Fri, 24 Feb 2023 00:00:00 +0000

During this community meeting, we introduced Aeraki Mesh’s newly released Access Log and Service Metrics features. We also invited experts from Boss Zhipin and Shopline to share hands-on examples of Dubbo based on Aeraki Mesh. Furthermore, we introduced the new features of multiplexing and Gateway support for the MetaProtocol application protocol, which are being contributed by the Tencent Games project and Boss Zhipin.

The Access Log and Service Metrics functionalities will help users better understand their network performance, troubleshoot issues, and optimize their applications. We’re excited to see how these new features will improve our users’ experiences with Aeraki Mesh.

Aeraki Mesh 社区例会 - 2023-02-23

Fri, 24 Feb 2023 00:00:00 +0000

本次社区会议介绍了 Aeraki Mesh 最新发布的 Access Log，Sevice Metrics 功能，并邀请了来自 Boss 直聘，Shopline 的专家分享基于 Aeraki Mesh 的 Dubbo 实操案例。此外，还介绍了来着腾讯游戏项目和 Boss 直聘正在贡献的多路复用和 Gateway 支持 MetaProtocol 应用协议的新特性。

Aeraki Mesh 正式成为 CNCF 沙箱项目

Tue, 26 Apr 2022 00:00:00 +0000

6月15日，我创建的 Aeraki Mesh 项目通过了全球顶级开源基金会云原生计算基金会（CNCF）技术监督委员会评定，正式成为CNCF 沙箱项目！这意味着 Aeraki Mesh 得到了云原生开源社区的认可，而且加入 CNCF 也保证了项目的中立和开源开放，为 Aeraki Mesh 在云原生生态系统的进一步发展迈出了坚定的一步。

Aeraki Mesh

Mon, 11 Oct 2021 00:00:00 +0000

Aeraki [Air-rah-ki] Mesh is an open-source service mesh I started about a year ago, and have been working on it till recently. Aeraki is the Greek word for ‘breeze’. While Istio connects microservices in a service mesh, Aeraki Mesh provides a non-intrusive, highly extendable way to allow Istio to support none-HTTP open-source and proprietary protocols. I hope this breeze can help Istio and service mesh sail a little further.

Hugo Theme: CleanWhite

Sun, 26 Sep 2021 00:00:00 +0000

Clean White Theme for Hugo

CleanWhite is a clean, elegant, but fully functional blog theme for Hugo. Here is a live demo site using this theme.

It is based on huxblog Jekyll Theme and Clean Blog Jekyll Theme.

These two upstream projects have done awesome jobs to create a blog theme, what I’m doing here is porting it to Hugo, of which I like the simplicity and the much faster compiling speed. Some other features which I think could be useful, such as site search with algolia and proxy for Disqus access in China, have also been built in the CleanWhite theme. Other fancy features of upstream projects are not supported by this Hugo theme, I’d like to make it as simple as possible and only focus on blog purpose, at least for now. While I created this theme, I followed the Hugo theme best practice and tried to make every part of the template as a replaceable partial html, so it could be much easier for you to make your customization based on it.