Presentations on Huabing Blog

Envoy Gateway Policies: Unlocking the Full Power of Envoy Proxy for API Gateways

Mon, 16 Jun 2025 00:00:00 +0000

This presentation will delve into Envoy Gateway’s API extensions: ClientTrafficPolicy, BackendTrafficPolicy, SecurityPolicy, and EnvoyExtensionPolicy. We’ll explore their practical applications in managing and securing edge traffic, showcasing advanced features like JWT authorization, rate limiting, OIDC integration, external processing, and WASM plugins.

Videos

YouTube

Slides

Securing the Gateway: A Deep Dive into Envoy Gateway's Advanced Security Policy

Fri, 04 Apr 2025 00:00:00 +0000

Envoy Gateway’s Security Policy simplifies access to Envoy’s robust security features, eliminating the need for users to navigate complex Envoy configurations. These features include CORS, JWT authentication, Basic Auth, OpenID Connect (OIDC), External Authentication (Ext Auth), and more. This session includes a demo showcasing OIDC authentication and authorization based on JWT claims, offering practical insights for enhancing application security—whether you’re an experienced Envoy user or new to open source.

Introduce MetaProtocol Proxy: A Layer-7 Proxy Framework Powered by Envoy

Thu, 16 Nov 2023 00:00:00 +0000

Even with Envoy’s powerful filter extension mechanism, writing a proxy for none-http protocols from scratch can be challenging. MetaProtocol Proxy solves this by abstracting layer-7 proxy with a concept called metadata and providing a “batteries included” framework that includes common traffic management capabilities: load balancing, circuit breaker, routing, rate limiting, fault injection, observability, etc. To write a layer-7 proxy for a new protocol, the only thing you need to do is implementing the codec interface.

The API Gateway in the Cloud Native Era

Wed, 01 Nov 2023 00:00:00 +0000

EnvoyProx 是云原生时代的代理之一，也是CNCF下的毕业项目之一。Envoy Gateway 是由 EnvoyProxy 的创始人 Matt Klein 发起的 API 网关项目。由我所在公司（Tetrate.io）以及 Emissary、Contour 等其他 API 网关项目共同维护。Envoy Gateway 作为 EnvoyProxy 发起的官方 API 网关项目，是基于 EnvoyProxy 的南北向 API 网关的官方实现，大大降低了使用 EnvoyProxy 的门槛，使用户不必重复“造轮子”来构建 EnvoyProxy 控制平面，并处理难以理解的复杂 xDS 协议和 EnvoyProxy 的配置。Envoy Gateway 使用 Kubernetes Gateway API 作为其配置，可以轻松启动管理南北向流量。Envoy Gateway 在多个社区和积极贡献者的推动下迅速发展。本主题将介绍为什么 Envoy Gateway 是云原生时代的 API 网关。

5分钟内将 Dubbo 服务接入 Istio 服务网格

Fri, 18 Nov 2022 00:00:00 +0000

幻灯片 Aeraki Mesh 官网 Dubbo 接入教程私有协议接入教程 Github

采用 Aeraki Mesh 对 Dubbo 服务进行服务治理

Tue, 27 Sep 2022 00:00:00 +0000

Aeraki Mesh 官网 Dubbo 接入教程私有协议接入教程 Github

Tencent Music’s service mesh practice with Istio and Aeraki(Istio + Aeraki 在腾讯音乐的服务网格落地)

Tue, 26 Apr 2022 00:00:00 +0000

IstioCon 介绍

IstioCon 是 Istio 社区一年一度举行的全球线上峰会，此次峰会包含主题演讲、技术演讲、闪电演讲、研讨会和路线图会议等多种形态，聚焦社区新特性、生产落地案例、动手实战、社区生态发展等话题。

Areaki Mesh 在 2022 冬奥会视频直播应用中的服务网格实践

Wed, 30 Mar 2022 00:00:00 +0000

主题简介

服务网格已经成为微服务的基础设施，但目前主流的服务网格产品只能处理 HTTP 协议，不支持其他七层协议，是服务网格落地的主要困难之一。本次直播分享主要介绍腾讯云服务网格团队开源的 Aeraki Mesh 项目如何通过扩展 Istio 来支持 Thrift，Dubbo 等开源协议以及私有协议，并分享腾讯融媒体采用 Aeraki Mesh 支撑 2022 冬奥会视频直播的实践经验

全栈服务网格 - Aeraki 助你在 Istio 服务网格中管理任何七层流量

Sat, 10 Jul 2021 00:00:00 +0000

主题简介

流量管理是 Istio 服务网格的核心能力，然而 Istio 缺省只提供了 HTTP 和 gRPC 两种协议的七层管理能力。对于微服务中常用的其他协议，包括 RPC、Messaging、Cache、Database等，Istio 只支持在四层上对这些协议进行处理。这导致我们将微服务应用迁移到 Istio 服务网格时，无法充分利用服务网格提供的流量管理能力。开源项目 Aeraki 提供了一个第三方协议的扩展框架，支持在 Istio 中对任意七层流量进行管理，提供动态路由、负载均衡、熔断等流量管理能力。本次分享将介绍如何使用 Aeraki 在 Istio 服务网格中管理任何七层协议，包括 Thrift，Dubbo，Redis，以及私有 RPC 协议等，并演示一个使用 Aeraki 管理第三方 RPC 协议的示例。

How to Manage Any Layer-7 Traffic in an Istio Service Mesh?

Tue, 02 Mar 2021 00:00:00 +0000

备注：本文根据腾讯云赵化冰和知乎唐阳在 IstioCon 2021 中的演讲 “How to Manage Any Layer-7 Traffic in an Istio Service Mesh?” 整理而成。

大家好，今天我们想和大家分享的主题是如何扩展 Istio 以支持任何七层协议？作为云原生领域中一个人气非常高的开源项目， Istio 目前已经基本成为了 Service Mesh 的事实标准。腾讯云上也提供了基于 Istio 进行增强，和 Istio API 完全兼容的 Service Mesh 管理服务 TCM（Tencent Cloud Mesh），以帮助我们的用户以较小的迁移成本和维护代价快速利用到 Service Mesh 提供的流量管理和服务治理能力。今天非常高兴能够有这个机会来和大家一起分享一下我们在此过程中的一些经验。

Istio 流量管理原理与协议扩展

Mon, 07 Dec 2020 00:00:00 +0000

通过本次的分享，听众可以理解Istio流量管理背后的实现原理，包括控制面流量管理模型和数据面流量转发机制。本次分享还将介绍如何对Istio进行扩展，以支持更多地七层协议，如dubbo，thrift，redis等等。

CNBPS 2020：云原生应用架构专场介绍

Thu, 12 Nov 2020 00:00:00 +0000

11月19-21日，CNBPS 2020重磅回归！

作为一年一度的云原生科技盛会，众多云原生届的“顶流”将在这里聚集，展现云原生世界的科技想象力。

了解云原生趋势和最佳实践？来这一场就够了！

Service Mesher Meetup 成都站：Service Mesh是下一代SDN吗？

Sat, 26 Oct 2019 00:00:00 +0000

如果具有通信或者网络行业的知识背景，那么你对SDN(Software Defined Network)一定不会陌生。你也许已经注意到，近来在微服务领域兴起的Service Mesh和SDN(Software Defined Network) 非常相似，这两者都采用了软件对网络进行管理和控制，也都采用了包含控制面和数据面的类似架构。

LFN ONAP Beijing Release Developer Forum: MSB to Support Carrier Grade ONAP Microservice Architecture with Service Mesh

Sat, 11 Nov 2017 00:00:00 +0000

Introduction

In this session, I’ll talk about the MSB Plan for R2 and Beyond. I’ll also discuss the OMSA(ONAP Microservice Architecture): the vision of ONAP Microservice Architecture to support Carrier-Grade requirements of ONAP Microservices, which includes Service Orchestration, Service Discovery, Inter-service Communication, Service Governance and Service Monitoring and External API Gateway.

ONAP Architecture Principle: ONAP modules should be designed as microservices: service-based with clear, concise function addressed by each service with loose coupling.

LFN ONAP Developer Event: Microservice Bus Tutorial

Mon, 25 Sep 2017 00:00:00 +0000

Introduction

Microservices Bus(MSB) provide a reliable, resilient and scalable communication and governance infrastructure to support Microservice Architecture including including service registration/discovery, external API gateway, internal API gateway, client SDK. It’s a pluggable architecture so it can integrate with auth service provider to provide centralized Authentication & Authorization. MSB also provides a service portal to manage the REST APIs.

MSB doesn’t depend on a specific environment. It can work in bare metal, virtual machine or containerized environment.

ONS ONAP Minisummit: Microservice Powered Orchestration Architecture

Mon, 17 Apr 2017 00:00:00 +0000

Introduction

In this session, I’ll talk about the MSB(Microservice BUS) project we have been using in OPEN-O as the fabric for Microservice communications.

First, I will start with why we choose Microservice Architecture in OPEN-O.

Then, I’d like to talk about the challenges we were facing when we turn to the microservice approach.

Finally, How we address these challenges in OPEN-O with the help of Microservice BUS And what’s the potential benefit MSB could bring to ONAP.

LFN ONAP Developer Event: MSB Technical Deep Dive and ONAP Use Cases

Sun, 02 Apr 2017 00:00:00 +0000

Introduction

In this session, I’ll talk about the MSB(Microservice BUS) project we have been using in OPEN-O as the fabric for Microservice communications.

First, I will start with why we choose Microservice Architecture in OPEN-O.

Then, I’d like to talk about the challenges we were facing when we turn to the microservice approach.

Finally, How we address these challenges in OPEN-O with the help of Microservice BUS And what’s the potential benefit MSB could bring to ONAP.