Envoy Gateway End User Threat Model Report: Raising Awareness of Gateway API Security - James Callaghan & Torin van den Bulk, ControlPlane

As we embrace the proliferation of microservice-based architectures in the cloud-native space, and DevOps teams face the challenge of choosing between many similar technologies, simplicity in setup and configuration becomes paramount. The Gateway API project was introduced with the goal of eventually replacing the Kubernetes Ingress resource. Envoy Gateway is configured by Gateway API resources, and serves as an intuitive and feature-rich wrapper over Envoy Proxy. ControlPlane was engaged by the CNCF to produce an Envoy Gateway Threat Model with a view of open sourcing it to the community. In this talk we’ll present our findings, providing an analysis of Envoy Gateway’s design components and their capabilities (at version: dev-latest) through a threat-driven approach. While we don’t endorse running a dev-latest version in production, our goal is to stimulate discussion and provide a framework that gives confidence in deploying Envoy Gateway as an edge proxy in a Kubernetes cluster.