https://botengyao.github.io/tags/envoy/ Recent content in Envoy on Boteng Yao Hugo en-us Mon, 26 Oct 2026 12:00:00 +0800 https://botengyao.github.io/posts/envoy-ai-protocol-manager-examples/ Mon, 26 Oct 2026 12:00:00 +0800 https://botengyao.github.io/posts/envoy-ai-protocol-manager-examples/ How Envoy’s AI Protocol Manager handles LLM traffic today, and a set of tested configs: observing native APIs, translating between OpenAI, Claude and Gemini (Vertex AI included), retries and failover across APIs, a forward-proxy egress, and model routing with ext_proc. https://botengyao.github.io/posts/stateless-mcp-envoy/ Tue, 20 Oct 2026 12:00:00 +0800 https://botengyao.github.io/posts/stateless-mcp-envoy/ MCP’s 2026-07-28 revision makes the protocol stateless, so MCP traffic now looks a lot like ordinary HTTP. Envoy 1.40 builds on that: route MCP requests by tool name, stop malformed or spoofed requests at the proxy, control who can call which tool, and turn any REST API into an MCP server using only config. https://botengyao.github.io/posts/substrate-gateway-notes/ Sun, 30 Aug 2026 21:00:00 +0800 https://botengyao.github.io/posts/substrate-gateway-notes/ I pointed an AI agent at Agent Substrate’s networking layer and had it read the whole thing. This is what came back, after a second round of agents tried to knock it all down: 52 items about the ingress and egress gateways, and a note on which parts of the method I would and would not trust. https://botengyao.github.io/posts/envoy-tls-linearize/ Fri, 14 Aug 2026 10:00:00 +0800 https://botengyao.github.io/posts/envoy-tls-linearize/ Envoy’s TLS write path copies 16 KB for every 16 KB it sends, for the life of a connection. What causes it, and the change that fixes it. https://botengyao.github.io/posts/trust-boundaries-agent-substrate/ Sat, 25 Jul 2026 14:00:00 +0800 https://botengyao.github.io/posts/trust-boundaries-agent-substrate/ Learning notes: a sentence I believed about TLS interception was wrong, and working out why settled a separate architecture question — whether the L7 proxy belongs on every node.