Wasm-SF Meetup - Creating a "Docker-Like" Experience for Wasm in Envoy

Solo.io is a company building developer and operator tools for Envoy, API gateways and Service Mesh. This talk covers the developer experience and tools we are building to make it easier to build and share WebAssembly modules for Envoy Proxy (and Envoy based solutions). The demos will cover WebAssembly Hub (a public repository to store and share modules), to wasme (a CLI to build, push, pull, and deploy wasm modules), and an OCI image spec to standardize how the wasm modules are stored that can be applied to any module, not just those for Envoy.

https://solo.io
https://webassemblyhub.io/
https://slack.solo.io

Transcript

1. Creating a "Docker Like" developer experience for WebAssembly Yuval Kohavi - Chief Architect @ Solo.io Shane O’Donnell - Software Engineer @ Solo.io
2. 2 | Copyright © 2020 2 | Copyright © 2020 Yuval Kohavi Chief Architect Solo.io Shane O’Donnell Software Engineer Solo.io
3. 3 | Copyright © 2020 3 | Copyright © 2020 Introduction - Envoy
4. 4 | Copyright © 2020 Envoy - Cloud Native HTTP/TCP Proxy - Can be used to implement API Gateways, service meshes. - Configurable via API - Extendable - This one of the most compelling Envoy features. Each user can customize it.
5. 5 | Copyright © 2020
6. 6 | Copyright © 2020 Gloo - Envoy based API gateway - Envoy configuration is verbose, and intended to be machine generated - Provides simpler abstractions
7. 7 | Copyright © 2020 Control Path EXTERNAL AUTH RATE LIMITING gRPC TRANSCODER ROUTER UPSTREAM EXTERNAL AUTH SERVER RATE LIMITING SERVER VirtualService : route: / -> svc1 auth: opa: allow = ... auth: opa: allow = ... route: / -> svc1
8. 8 | Copyright © 2020 Data Path EXTERNAL AUTH RATE LIMITING ROUTER UPSTREAM EXTERNAL AUTH SERVER RATE LIMITING SERVER POST /dentists Content-Type: application/json Authorization: Bearer xyz {"name":”Dr. Seuss"} POST /com.example.DentistService/AddDentist Content-Type: application/grpc Authorization: Bearer xyz Binary protobuf: \x12\x011\x12\seuss { Method: "POST", Path: "/dentists", Headers: { "Content- Type”:"application/json", "Authorization": "Bearer xyz" } } OK Descriptors {generic_key: "add-drs"} OK gRPC TRANSCODER
9. 9 | Copyright © 2020 ⃞ Use other languages ⃞ Fast ⃞ Safe ⃞ No need to compile ⃞ Easy Very powerful, but leaves a lot to wish for…
10. 10 | Copyright © 2020 10 | Copyright © 2020 Extend Data Plane
11. 11 | Copyright © 2020 EXTERNAL AUTH RATE LIMITING ROUTER UPSTREAM EXTERNAL AUTH SERVER RATE LIMITING SERVER CUSTOM gRPC TRANSCODER Gloo – Custom filters ⃞ Use other languages ✓ Fast ✓ Safe ⃞ No need to compile ⃞ Easy
12. 12 | Copyright © 2020 12 | Copyright © 2020 Web Assembly
13. 13 | Copyright © 2020 “WebAssembly: it’s neither web, nor assembly” WebAssembly (abbreviated Wasm) is a binary instruction format for a stack-based virtual machine. Wasm is designed as a portable target for compilation of high-level languages like C/C++/Rust, enabling deployment on the web for client and server applications. -> No Assembly -> Binary Instruction Format -> No Web -> WASI
14. 14 | Copyright © 2020 Portable
15. 15 | Copyright © 2020 Secure
16. 16 | Copyright © 2020 Fast Java Script WebAssembly
17. 17 | Copyright © 2020 Any Language
18. 18 | Copyright © 2020 WebAssembly Outside the Web
19. 19 | Copyright © 2020 ✓ Use any language ✓ Fast ✓ Safe ✓ No need to compile ✓ Easy Very powerful, but leaves a lot to wish for…
20. 20 | Copyright © 2020 20 | Copyright © 2020 Envoy support for WebAssembly
21. 21 | Copyright © 2020 WASM in Envoy EXTERNAL AUTH RATE LIMITING ROUTER UPSTREAM CUSTOM gRPC TRANSCODER
22. 22 | Copyright © 2020 WASM in Envoy EXTERNAL AUTH RATE LIMITING ROUTER UPSTREAM WASM gRPC TRANSCODER
23. 23 | Copyright © 2020 WASM in Envoy EXTERNAL AUTH RATE LIMITING ROUTER UPSTREAM WASM gRPC TRANSCODER Code V8 ABI
24. 24 | Copyright © 2020 ABI: Application Binary Interface
25. 25 | Copyright © 2020 SDK
26. 26 | Copyright © 2020 WASM in Envoy EXTERNAL AUTH RATE LIMITING ROUTER UPSTREAM WASM gRPC TRANSCODER Code V8 ABI Code + SDK
27. 27 | Copyright © 2020 ✓ Use any language ✓ Fast ✓ Safe ✓ No need to compile ⃞ Easy Very powerful, but leaves a lot to wish for…
28. 28 | Copyright © 2020 28 | Copyright © 2020 Developer Experience
29. 29 | Copyright © 2020
30. 30 | Copyright © 2020 SECURITY
31. 31 | Copyright © 2020 Web Assembly Hub SECURITY
32. 32 | Copyright © 2020 ✓ Use any language ✓ Fast ✓ Safe ✓ No need to compile ✓ Easy Very powerful, but leaves a lot to wish for…
33. 33 | Copyright © 2020 Beyond Envoy... - OCI Artifact Spec - Expand to other projects - OPA, krustlet, … - More tooling - Testing, Debugging, …
34. 34 | Copyright © 2020 34 | Copyright © 2020 @soloio_inc github.com/solo-io www.solo.io