The Trials and Success of Adopting Envoy at Tinder

Explore the journey of adopting Envoy at Tinder in this insightful conference talk. Delve into the challenges and triumphs experienced during the implementation of an Envoy-based service mesh for Kubernetes infrastructure. Learn about Tinder's custom architecture, including storage and representation of routing configurations, robust monitoring pipelines for Envoy metrics, and utilization of global rate limiting capabilities. Discover unique features like deadline propagation, multi-cluster Envoy metric monitoring, and the implementation of a custom xDS control plane. Gain valuable insights into early migration struggles, cautionary tales, and best practices for building an Envoy topology that powers global infrastructure. From network tuning and observability improvements to gotchas involving timeouts, retries, and container lifecycle, this talk covers essential aspects of adopting Envoy in a large-scale environment.

Intro
Overview
Why Envoy?
Downsides of k8s Native Networking envoycon
Move to Envoy Based Mesh Network envoycon
Migration Hurdles
Before and After Mesh
Network Tuning
Observability Improvements
Gotchas: Timeouts and Retries
Gotchas: Container lifecycle
Global Rate Limiting
Mapping The Attackers
Configuration
EDS Control Plane
Firemesh
Summary