# Kubernetes Podcast: Envoy, with Matt Klein

**URL:** <https://discuss.kubernetes.io/t/kubernetes-podcast-envoy-with-matt-klein/3849>\
**Category:** General Discussions\
**Tags:** podcast\
**Created:** [December 11, 2018, 7:55pm UTC](https://discuss.kubernetes.io/t/kubernetes-podcast-envoy-with-matt-klein/3849 "2018-12-11T19:55:29Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![k8s-bot](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.kubernetes.io/k8s-bot/32/778_2.png) [@k8s-bot](https://discuss.kubernetes.io/u/k8s-bot)\
**Post date:** [December 11, 2018, 7:55pm UTC](https://discuss.kubernetes.io/t/kubernetes-podcast-envoy-with-matt-klein/3849/1 "2018-12-11T19:55:29Z")

</div>

[https://kubernetespodcast.com/episode/033-envoy/](https://kubernetespodcast.com/episode/033-envoy/)  
The Envoy proxy, a universal data plane for Cloud Native, has just graduated as the third top-level project in the CNCF. [Craig and Adam](https://kubernetespodcast.com/about) talk to its author, [Matt Klein](https://twitter.com/mattklein123/) from [Lyft](https://eng.lyft.com/), about modern load balancing for microservices and pragmatically avoiding “second system” syndrome.

Do you have something cool to share? Some questions? Let us know:

- web: [kubernetespodcast.com](https://kubernetespodcast.com)
- mail: [kubernetespodcast@google.com](mailto:kubernetespodcast@google.com)
- twitter: [@kubernetespod](http://twitter.com/kubernetespod)

### News of the week

- [CVE-2018-1002105: proxy request handling in kube-apiserver can leave vulnerable TCP connections](https://github.com/kubernetes/kubernetes/issues/71411)
  - [Gravitational write up](https://gravitational.com/blog/kubernetes-websocket-upgrade-security-vulnerability/)
  - [Proof of concept](https://github.com/evict/poc_CVE-2018-1002105)
  - [More cryptocurrency mining with exploited Kubernetes clusters](https://blog.binaryedge.io/2018/12/06/kubernetes-being-hijacked-worldwide/)

- Microsoft Connect();
  - [AKS virtual nodes are in preview](https://azure.microsoft.com/en-us/blog/bringing-serverless-to-azure-kubernetes-service/)
  - [Virtual Kubelet](https://github.com/virtual-kubelet/virtual-kubelet) joins CNCF
  - [GPU support for ACI](https://docs.microsoft.com/azure/container-instances/container-instances-gpu)
  - [ACS to be retired](https://azure.microsoft.com/en-us/updates/azure-container-service-will-retire-on-january-31-2020/) in favour of AKS
  - Cloud Native Application Bundle
    - [Microsoft and Docker introduce Cloud Native Application Bundle](https://cloudblogs.microsoft.com/opensource/2018/12/04/announcing-cnab-cloud-agnostic-format-packaging-running-distributed-applications/)
    - [CNAB spec](https://cnab.io/)
    - [Duffle](https://duffle.sh/)

- DockerCon EU 2018:
  - [Docker releases Compose operator for Kubernetes](https://blog.docker.com/2018/12/simplifying-kubernetes-with-docker-compose-and-friends/)
    - [Available on GitHub](https://github.com/docker/compose-on-kubernetes)

  - [Docker Desktop Enterprise](https://blog.docker.com/2018/12/introducing-desktop-enterprise/)

- [Hashicorp Vault 1.0](https://www.hashicorp.com/blog/vault-1-0)
- [Upbound introduce Crossplane](https://blog.upbound.io/introducing-crossplane-open-source-multicloud-control-plane/)
  - [Available on GitHub](https://github.com/crossplaneio/crossplane)
  - [GitLab moving to GKE](https://about.gitlab.com/2018/06/25/moving-to-gcp/)

- [Rook 0.9.0](https://github.com/rook/rook/releases/tag/v0.9.0) — available you-guessed-where
- MicroK8s from Canonical:
  - [Announc4t](https://blog.ubuntu.com/2018/12/06/canonical-launches-microk8s-deploy-kubernetes-in-seconds)
  - [Project p2e](https://microk8s.io/)
  - [Available on G5b](https://github.com/ubuntu/microk8s)

### Links from the interview

- [Envoy](https://envoyproxy.io):
  - [Recently graduated to top-level project at the CNCF](https://blog.envoyproxy.io/envoy-graduates-a6f71879852e)
  - Built at [Lyft](https://eng.lyft.com/)
  - Replaces libraries like [Finagle](https://twitter.github.io/finagle/) and [Hystrix](https://github.com/Netflix/Hystrix)
  - [Introduction to modern network load balancing and proxying](https://blog.envoyproxy.io/introduction-to-modern-network-load-balancing-and-proxying-a57f6ff80236)

- [Envoy contributors](https://envoy.devstats.cncf.io/d/4/companies-stats?orgId=1&from=now-6M&to=now)
- [Istio](https://istio.io), built on Envoy
- Turning down the VC money: [Why Matt isn’t starting an Envoy company](https://medium.com/@mattklein123/optimizing-impact-why-i-will-not-start-an-envoy-platform-company-8904286658cb)
- [Service mesh data plane vs. control plane](https://blog.envoyproxy.io/service-mesh-data-plane-vs-control-plane-2774e720f7fc)
- [Matt Klein](https://twitter.com/mattklein123/) on Twitter
- [Matt’s blog](https://medium.com/@mattklein123)