Yuchen Dai

WiP: detect downstream first in tcp stream

6

Signed-off-by: Yuchen Dai **What this PR does / why we need it**: **Which issue this PR fixes** *(optional, in `fixes #(, fixes #, ...)` format, will close that issue when...

Better handling hot restart failure

3

*Description*: Envoy hot restart works most of the time, but the hot restart attempt would be rejected if the parent is not fully initialized. The current implentation is, the child...

Track active (downtream) tls handshakes

3

TLS handshake nowadays are still cpu insenstive. Even In the service mesh env where no intended attacker or few compromised workload, a TLS client can easily create DOS attack to...

Improve client side TLS session reuse

9

We are running envoy as host proxy to enforce mTLS. We find that Envoy could be hammer by TLS handshake. We enabled max_session_keys in UpstreamTlsContext and see signicant CPU utilization...

[WIP] transportsocket: add interface to improve reusable tls session

10

Commit Message: For https://github.com/envoyproxy/envoy/issues/33512 Additional Description: Risk Level: Testing: Docs Changes: Release Notes: Platform Specific Features: [Optional Runtime guard:] [Optional Fixes #Issue] [Optional Fixes commit #PR or SHA] [Optional Deprecated:]...