Initial commit

[dawid-nowak]

No description provided.

[kmesh-bot]

Welcome @dawid-nowak! It looks like this is your first PR to kmesh-net/orion 🎉

[gemini-code-assist]

Summary of Changes

Hello @dawid-nowak, I'm Gemini Code Assist¹! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request represents the initial commit of "Orion Proxy", a new high-performance, memory-safe proxy implemented in Rust. It aims to be compatible with Envoy's xDS protocol, allowing it to integrate into existing Envoy-based control planes. The changes introduce the entire project structure, including Rust workspace setup, dependency management, core proxy logic (listeners, clusters, load balancing, health checks, routing, RBAC, TLS), configuration parsing (including Envoy config conversion), Dockerization, and documentation.

Highlights

• Core Proxy Implementation: Introduces the foundational Rust codebase for Orion Proxy, covering network listeners, connection management, and core proxying logic.
• Envoy xDS Compatibility: Establishes deep integration with Envoy's xDS (Discovery Service) protocol, enabling dynamic configuration of listeners, clusters, and routes via protobuf definitions. This includes dedicated crates for Envoy's data plane API and xDS client implementation.
• Robust Configuration System: Implements a flexible configuration parsing layer that supports both a native Orion YAML format and conversion from Envoy's YAML/protobuf bootstrap configurations, with strong validation and error handling.
• Advanced Load Balancing & Health Checks: Provides multiple load balancing algorithms (Weighted Round Robin, Least Request, Maglev, Ring Hash) and comprehensive health checking capabilities (HTTP, TCP, gRPC) with configurable parameters and dynamic updates.
• Security & Quality Focus: Incorporates TLS/SSL support with secret management, network and HTTP-level Role-Based Access Control (RBAC), and strict clippy linting rules to ensure memory safety and high code quality.
• Containerization & Documentation: Includes Dockerfiles for easy deployment and extensive documentation covering introduction, features, quick start, architecture diagrams, performance benchmarks, and contributor information.

Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point in your pull request via creating an issue comment (i.e. comment on the pull request page) using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands.

Feature	Command	Description
Code Review	/gemini review	Performs a code review for the current pull request in its current state.
Pull Request Summary	/gemini summary	Provides a summary of the current pull request in its current state.
Comment	@gemini-code-assist	Responds in comments when explicitly tagged, both in issue comments and review comments.
Help	/gemini help	Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist is currently in preview and may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments to provide feedback.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution. ↩

[gemini-code-assist]

Code Review

This initial commit sets up a comprehensive project structure for Orion Proxy. The code is well-organized, particularly the configuration handling with its robust Envoy-to-Orion conversion logic and the detailed xDS client implementation. My review focuses on improving documentation clarity, optimizing the Dockerfile for size and build speed, and ensuring consistency in configuration and logging. Addressing these points will further strengthen the project's foundation.

[kmesh-bot]

Keywords which can automatically close issues and at(@) or hashtag(#) mentions are not allowed in commit messages.

The list of commits with invalid commit messages:

• 2746675 Update RELEASE-NOTES.md

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

[hzxuzhonghu]

/approve
/lgtm

[kmesh-bot]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: hzxuzhonghu

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment