Envoy Gateway

Term 2 · Jun-Aug · 1 project

• Progressive Rollouts of the Envoy Proxy fleet during Envoy Gateway upgrades

  LFX Mentorship · Listed in the official cohort

  @arkodgSource IssueLFX portal

  Envoy Gateway translates Kubernetes-native Gateway API resources into xDS configuration consumed by Envoy Proxy. It also manages the lifecycle of the Envoy Proxy fleet by generating Kubernetes resources such as Deployments and Services. Currently, upgrades to Envoy Gateway (the control plane) result in immediate, in-place updates to the associated Envoy Proxy fleet (the data plane). While this operation is designed to be zero-downtime, some users prefer a staged upgrade process where the control plane is updated first, followed by a progressive rollout of the data plane. This project aims to design and implement support for progressive data plane upgrades, allowing users to decouple the control and data plane upgrade processes. This would provide enhanced control and safer rollout strategies (e.g., canary or blue-green deployments).

  • Go
  • Kubernetes
  • CD tools (like Argo Rollouts and Flagger).

Term 1 · Mar-May · 2 projects

• Enhancing Envoy Gateway Documentation Using CNCF Tech Docs Analysis Framework

  LFX Mentorship · Listed in the official cohort

  @missBergSource IssueLFX portal

  The Envoy Gateway project provides a simplified way to use Envoy Proxy as an API Gateway, and its documentation is critical to enabling adoption, onboarding new users, and improving developer experience. While the existing documentation covers core concepts and use cases, applying the CNCF Tech Docs Analysis Framework will help assess and systematically enhance its clarity, completeness, and usability. This project aims to evaluate and improve the Envoy Gateway website and documentation by leveraging the structured analysis methodology from the CNCF Tech Docs Analysis Framework. The outcome will be a comprehensive documentation improvement plan, with targeted updates and best practices implemented.

  • Familiarity with Envoy Proxy
  • Envoy Gateway
  • Kubernetes
  • and API Gateways (or willingness to learn)
  • Experience with Markdown
  • static site generators (e.g.
  • +6

• Integrating CNCF Fuzzing Framework for Envoy Gateway

  LFX Mentorship · Listed in the official cohort

  @arkodgSource IssueLFX portal

  Envoy Gateway has become a crucial part of modern cloud-native infrastructures, providing a simplified way to deploy and manage Envoy Proxy. Ensuring the reliability and security of Envoy Gateway is paramount for its growing user base. Fuzzing, a widely-used technique for identifying software vulnerabilities and bugs, can significantly enhance the robustness of Envoy Gateway. By integrating the CNCF Fuzzing Framework, this project aims to improve the security posture of Envoy Gateway through comprehensive automated testing.

  • Go
  • scripting.

Term 3 · Sep-Nov · 1 project

• IPv4/IPv6 Dual Stack Support

  LFX Mentorship · Listed in the official cohort

  @zirainSource IssueLFX portal

  Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Gateway API resources are used to dynamically provision and configure the managed Envoy Proxies. Currently the implementation only supports Kubernetes clusters with IPv4 enabled, and not IPv6

  • Go
  • familiarity with Kubernetes Networking