Operations
Upgrades, rollbacks, multi-cluster federation, performance tuning, and day-2 operational runbooks for production meshes.
How IstioD Manages Configuration at Scale: A Deep Dive into XDS
How istiod translates Istio resources into Envoy xDS configuration, why it's fast, what makes it slow, how to scale it, and which metrics matter most.
How WebAssembly Actually Works Inside Envoy Proxy
A deep dive into how WASM is integrated into Envoy — the proxy-wasm ABI, the sandbox model, V8 and Wasmtime runtimes, memory isolation, and the real limitations you'll hit in production.
Hacking on Istiod: A Step-by-Step Guide to Local Development and Testing
A complete walkthrough for building, running, and debugging a modified Istiod locally — and watching your changes take effect on connected Envoy sidecar proxies in real time.
Envoy config_dump Demystified: Follow the Packet Through Every Section
Trace an HTTP request through every section of Envoy's config_dump — from iptables capture to upstream delivery — and learn which Istio resources control each piece.
Native C++ vs WASM Filters in Envoy: A Performance Benchmark
We fork Envoy, build a custom native C++ filter, then build the same filter as a WASM module. Here's exactly how they compare on latency, throughput, memory, and CPU — with the full benchmark methodology.