me of the most performance-sensitive features of Istio have been upstreamed
into Envoy - <a href=https://www.envoyproxy.io/docs/envoy/latest/intro/arch_overview/security/rbac_filter>policy checks on traffic</a>, and
<a href=https://www.envoyproxy.io/docs/envoy/latest/intro/arch_overview/security/jwt_authn_filter>JWT authentication</a>, for example.
Still, we have always wanted to converge on a single stack for extensibility that imposes fewer
tradeoffs: something that decouples Envoy releases from its exten