About

I’m Harvey Tuch. I build systems, contribute to open source, lead teams, and work at the nexus of compute, networking, and security.

I’ve spent the last two decades working on core systems and technologies:

  • I led the design and roadmap for xDS, the control plane protocol that drives Envoy, gRPC, and most modern service meshes.

  • I was an early and senior maintainer of the Envoy proxy (2017-2024). Envoy is a core infrastructure component of the application networking stack and is used extensively across the industry.

  • I was a UTL (“uber tech lead”) at Google, where I helped run the Service Networking and Application Load Balancing organizations. I founded the Envoy Platform Team at Google and was responsible for the data plane portion of Google’s One Network strategy.

  • While at Google and in OSS Envoy, I drove the development of the extensible data plane. This encompassed extensibility of Envoy and Google’s service networking products through WebAssembly and service chaining (ext_proc).

  • I founded the ESXi-Arm project at VMware, porting the ESXi hypervisor to the Arm architecture as a strategic bet on Arm-based servers. Earlier, I helped build VMware’s Mobile Virtualization Platform.

  • I developed formal verification techniques for systems software written in C as part of the seL4 microkernel and L4.verified projects while a PhD student. seL4 was the world’s first formally verified general-purpose operating system kernel, and received the 2022 ACM Software System Award.

  • I founded a stealth startup building out agent security and managed platform tech. This included scalable Kubernetes-based sandboxing, principle-of-least-privilege network security perimeters, and fine-grained security policy for skill-based agents.

I offer consulting and advisory services through Implied Systems LLC. Reach out if you’d like to chat more.

Previously GoogleVMwareCNCF / EnvoyNICTA / seL4