kyessenov

5 ms·

1. 1.▲
   by kyessenov 6y ago

   Envoy proxy uses it for conditions in RBAC filter.
2. 2.▲
   by kyessenov 9y ago

   We have been looking into a per-node deployment model from the beginning, which is what daemonset is doing. Things get more complicated across the board with the transparent traffic capture at the node network namespace level, invasive inst
3. 3.▲
   by kyessenov 9y ago

   Early in the design, we have looked at various modes of proxy deployment and found that there are pros and cons for each. You are right that the sidecar model is not always the optimal choice, it's a trade-off (see the referenced docum
4. 4.▲
   by kyessenov 9y ago

   Istio adds an automation layer on top of Envoy proxy mesh that allows global cross-cutting policy enforcement. Many of us actively contribute back to Envoy, and there's a lot of exchange of ideas between the two projects on designing t