Service Mesh

Envoy proxy architecture diagram showing request routing between services

Architecting Scalable API Gateways: Envoy's Request Routing Engine Explained

Envoy’s request routing engine powers some of the world’s largest API gateways and service meshes. This post breaks down its architecture, route matching mechanics, weighted cluster strategies, and production patterns you can apply today.

Diagram of Envoy proxy running a WASM filter intercepting edge requests.

Implementing Envoy's WASM Filter API for Custom Auth at the Edge

A practical guide to shipping a production-grade Envoy WASM filter that validates JWTs and custom tokens at the edge gateway.

Diagram of Envoy routing gRPC unary and streaming calls from clients to backend services

Architecting gRPC Streaming Services with Envoy as an API Gateway

How to design, configure, and operate Envoy as an API gateway for gRPC streaming services — covering protocol translation, observability, and the failure modes that bite in production.

Multi-cluster failover diagram showing active and standby EKS regions connected through Linkerd gateways and Crossplane compositions.

Architecting Multi-Cluster Failover with Linkerd and Crossplane on EKS

How to design an active-passive multi-cluster failover pattern on EKS that combines Linkerd’s transparent service mirroring with Crossplane’s composable infrastructure claims.

Network diagram showing multiple Kubernetes clusters connected through an Istio ambient mesh with ztunnel and waypoint components.

Architecting Multi-Cluster Service Mesh with Istio Ambient Mode and eBPF

A practical architecture guide to running Istio Ambient Mode across multiple Kubernetes clusters, with eBPF-powered data planes handling L4 and waypoint proxies owning L7.