2 comments

[ 3.0 ms ] story [ 14.9 ms ] thread
I get 406 Not Acceptable over there, but ... yes, the whole Envoy-sidecar-per-Pod thing is heavy in latency, management, and userspace processing overhead.

Istio is already shrinking this overhead ... a bit ... with Ambient Mesh: https://istio.io/latest/blog/2022/get-started-ambient/

... but in the end I expect this all to happen in the kernel.

for the ultimate in efficiency though, what if this processing was done right inside the userspace process? /s /ducks