Intel managed distribution of Envoy

Intel managed distribution of Envoy is a project aiming to showcase and integrate various Intel technologies into Envoy. The focus is in letting both upstream community and users know what Intel is working on, finding gaps in upstream project features in relation to hardware enablement, and testing and deploying Intel features for Envoy.

Features

Each feature need to be installed (enabled) to take effect, as described in respective pages.

• TLS handshake acceleration with AVX512 (CryptoMB)

• TLS handshake acceleration with QAT2.0

• HTTP data compression acceleration with QATzip

• HTTP data compression acceleration with QATzstd

• Regular expressions with Hyperscan

• HTTP/2 and HTTP/2 header compression algorithm HPACK with AVX512

• Private key protection with SGX

• Connection balancer with DLB

Build

Use the following command for building envoy with Intel features:

# run test and build
./ci/run_envoy_docker.sh "./ci/do_ci.sh release"  

# only build envoy
./ci/run_envoy_docker.sh "./ci/do_ci.sh release.server_only" 

Run

Intel managed distribution of Envoy docker image is uploaded in public Intel Dockerhub and you can run directly using following command:

docker run intel/envoy:1.21.0-intel.0

Intel managed distribution of Istio

Intel managed distribution of Istio is a project aiming to showcase and integrate various Intel technologies into Istio with Intel managed distribution of Envoy. The focus is in letting both upstream community and users know what Intel is working on, finding gaps in upstream project features in relation to hardware enablement, and testing and deploying Intel features for Istio service mesh.

Features

Each feature need to be installed (enabled) to take effect, as described in respective pages.

• TLS handshake acceleration with AVX512 (CryptoMB)

• TLS handshake acceleration with QAT2.0

• HTTP data compression acceleration with QAT2.0

• mTLS Private key protection with SGX

• Gateway Private key protection with SGX

• Grafana Dashboard

• Excluding Istio interfaces for 5G core

• Use Meshery to deploy and manage Istio with Intel Features

• Kiali

Supported versions

• Kubernetes v1.28

• Istio v1.21

• cert-manager v1.7 or later

• Linux kernel 5.18 or later

• Intel Device Plugins for Kubernetes v0.24

Install

Use the follwoing command for basic installation:

istioctl install --set hub=docker.io/intel --set tag=1.21.0-intel.0