https://github.com/srinandan/envoy-extensions

This repo implements Envoy proxy's ext-authz to demonstrate routing to upstream endpoints.
https://github.com/srinandan/envoy-extensions

apigee envoy-filters envoyproxy ext-authz microgateway

Last synced: about 1 month ago
JSON representation

This repo implements Envoy proxy's ext-authz to demonstrate routing to upstream endpoints.

• Host: GitHub
• URL: https://github.com/srinandan/envoy-extensions
• Owner: srinandan
• License: apache-2.0
• Created: 2020-09-19T00:44:54.000Z (over 4 years ago)
• Default Branch: master
• Last Pushed: 2020-09-23T03:24:44.000Z (about 4 years ago)
• Last Synced: 2023-07-10T20:05:38.697Z (over 1 year ago)
• Topics: apigee, envoy-filters, envoyproxy, ext-authz, microgateway
• Language: Go
• Homepage:
• Size: 11.6 MB
• Stars: 0
• Watchers: 2
• Forks: 1
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • Contributing: CONTRIBUTING.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# envoy-extensions

This repo demostrates two patterns to extend Envoy to add custom logic before sending the request to the actual upstream application.

## Patterns

### Pattern 1 - External Authorization (ext_authz filter)

This pattern leverages the ext_authz filter in Envoy to callout to an external service.

![Routing Pattern1](./envoy-pattern1.png)

The external service can:

1. Implement custom rules for authorization

2. Implement routing changes

3. Access the payload (but not modify it) - upto a limit specified in the Envoy configuration

See more [here](./pattern1)

### Pattern 2 - Envoy chaining (aka Envoy "sandwich")

This pattern leverages two logical Envoy proxies sandwiched between custom code/logic.

![Routing Pattern2](./envoy-pattern2.png)

The middle proxy can:

1. Implment routing changes.

2. Full access to the payload to transform/modify.

See more [here](./pattern2)

___

## Support

This is not an officially supported Google product