This course covers the learning outcomes and goals of understanding Envoy Proxy, its architecture, L7 & L4 proxying, HTTP/2, and enabling TLS 1.2/1.3. Students will learn about Envoy's architecture components such as Downstream/Upstream, Clusters, Listeners, Network Filters, Connection Pools, and Threading Model. They will also gain hands-on experience with examples like installing Envoy Brew, configuring Envoy as a Layer 7 Proxy to backend services, setting up Layer 4 Proxy, enabling HTTPS and HTTP/2, and conducting SSL Labs tests. The teaching method involves a combination of theoretical explanations and practical demonstrations. This course is intended for individuals interested in understanding and working with Envoy Proxy for network communication and proxying purposes.
Envoy Proxy Crash Course - Architecture, L7 & L4 Proxying, HTTP/2, Enabling TLS 1.2/1.3 and More
Overview
Syllabus
* What is Envoy?
* Current & Desired Architecture
* Envoy Architeture
* DownStream/Upstream
* Clusters
* Listeners
* Network Filters
* Connection Pools
* Threading Model
* Example
* Show the 4 apps
* Install Envoy Brew
* Envoy as a Layer 7 Proxy
* Proxy to all 4 backend NodeJS services
* Split load to multiple backends app1/app2
* Block certain requests /admin
* Envoy as a Layer 4 Proxy tcp router
* Create DNS record
* Enable HTTPS on Envoy lets encrypt
* Enable HTTP/2 on Envoy
* Disable 1.1/1.0 Enable TLS 1.2 and TLS 1.3 ONLY on Envoy
* SSL Labs test
* Summary
Taught by
Hussein Nasser
