Overview
What this challenge is about.
Implement the filter in Rust using the proxy-wasm-rust-sdk. The filter computes a (tenant_id, endpoint, method) key, calls a Redis token-bucket service via a sidecar HTTP client with a 5 ms timeout, and either passes or 429s the request. Deploy via EnvoyFilter for a pilot service. Benchmark p99 latency overhead vs no-filter baseline; tune the Redis client (connection pooling, request batching) until overhead is under 2 ms p99. Deliver Rust source, EnvoyFilter manifest, benchmark report, and a 5-page production-readiness memo (what to monitor, what to alert on, failure modes).
The Brief
What you'll do, and what you'll demonstrate.
Build an Envoy WASM filter for per-tenant rate limiting that adds under 2 ms p99 overhead and fails open safely under Redis outage.
Earning criteria — what you'll demonstrate
- Build WASM extensions for Envoy via the proxy-wasm-rust-sdk
- Integrate with external services from a WASM filter safely (timeouts, fail-open)
- Tune Redis-backed token-bucket rate-limit overhead under 2 ms p99
- Plan production readiness for custom data-plane code
Program Fit
Where this fits in your program.
Sharpens the same skills your degree expects you to demonstrate.
Skills
Skills you'll demonstrate.
Each one shows up on your verified credential.
Careers
Roles this prepares you for.
Real titles. Real skill bridges. Pick the one closest to your trajectory.
Career mappings coming soon.