filter_chain_match does not apply to dynamic_forward_proxy HTTP targets #15348
Comments
|
cc. @lambdai |
|
i suspect the l4 original address is what localhost is resolved to. The 192.168 ip in the curl is not particiing the L4 address match. I can give it a try and update later today |
|
@lambdai thanks! I was able to confirm your suspicion by doing the following:
Can you advise how to filter the destination IP CIDRs when the Envoy cluster acts as a |
|
To add more context, I would like to add what is my final goal: I want Envoy to forward HTTP requests that are resolved to a private subnet destination IP via one dynamic forward cluster, and all the requests that resolve to public IP subnets via another. |
|
@aSapien Thank you for the update! I don't see the solution that you can combine multiple httpfilter/cluster/router to reach your goal. Other smarter people can add. I probably choose one from a) or b)
b) Use dynamic forward cluster but different behaviors upon ip pool. |
|
One more thing I just tried is using the I was able to match the destination IP on the route_config:
internal_only_headers: [] # TODO: Set intrnal headers
name: local_route
virtual_hosts:
- name: local_service
domains:
- "127.*"
routes:
- match:
prefix: "/"
direct_response:
status: 200
body:
inline_string: |
Filter match!However, since |
|
@lambdai thank you for the suggestions! I'm optimistic again :)
Can you please point me to any docs that would describe the process of implementing a new filter and how I can consume the destination IP from it?
Is it possible to configure the target IP "filter" from within the |
aSapien
changed the title
I don't have the quick answer. You probably need to forge the existing https://github.com/envoyproxy/envoy/blob/main/source/extensions/filters/http/dynamic_forward_proxy/proxy_filter.cc |
The upstream network filter within cluster: https://github.com/envoyproxy/envoy/blob/main/api/envoy/config/cluster/v3/cluster.proto#L963 |
|
@lambdai I was thinking about this idea: Create 2 listeners:
Then configure the Will the |
mattklein123
added
area/http
question
|
This generally works but there is a critical missing piece. To complete the last piece, you can
|
|
@lambdai thanks for explaining. I see now that there's quite the missing piece there.
Wow, I was reading through this blog post assuming it might help me understand, but I'm not very experienced with
From what I understand, in my use case a listener (listener2) will be able to act as a router/gateway for outgoing traffic from I really need the I think that restricting the destination IPs is an important feature in forward proxies. It seems like (2) will require some wiring/configuration support on |
Yeah... It is somewhat overkill. |
+1. It can be done by adding functionality in dynamic_forward_proxy cluster, or by chaining the Both require a few changes in dynamic_forward_proxy. It's up to you whether you want to create a dedicated issue or CC more people in this one. |
|
Adding @mattklein123 @alyssawilk, the code owners of Dear code owners, I would love to have your blessing on the idea of enabling the |
Is there a TL/DR summary of the changes you would like to see? |
|
The idea is to have an ability to configure an ACL to filter the target upstream of a request coming out of the For example: curl http://<envoy_ip>:10000 http://<allowed_ip>:<allowed_port> # Should pass
curl http://<envoy_ip>:10000 http://<disallowed_ip>:<or_allowed_port> # Should not pass
curl http://<envoy_ip>:10000 http://<domain_resolving_to_disallowed_ip> # Should not passThe cluster configuration could look as follows: clusters:
- name: dynamic_forward_proxy_cluster
connect_timeout: 1s
lb_policy: CLUSTER_PROVIDED
cluster_type:
name: envoy.clusters.dynamic_forward_proxy
typed_config:
"@type": type.googleapis.com/envoy.extensions.clusters.dynamic_forward_proxy.v3.ClusterConfig
dns_cache_config:
name: dynamic_forward_proxy_cache_config
dns_lookup_family: V4_ONLY
+ upstream_filters:
+ - upstream_filter_match:
+ prefix_ranges:
+ - address_prefix: 10.0.0.0
+ prefix_len: 8
+ filters:
+ - direct_response:
+ status: 403
+ body:
+ inline_string: |
+ Forbidden
+ - upstream_filter_match:
+ prefix_ranges:
+ - address_prefix: 0.0.0.0
+ prefix_len: 0
+ filters:
+ - proxy_pass: {} |
|
Yeah I think it would be a good fit, we'd be able to couple this with the unified matching and composite filters to provide per match filter application |
|
@mattklein123 Of course, I would always prefer the general solution as long as it provides the building blocks to compose for a specific use-case :) @snowp I see that there hadn't been much activity in #10455 recently. What can be done to push it forward? |
|
I haven't had the time to work on it in a bit, though if someone wants to pick it up I would happily review. There is still quite a bit of work left, I had #13095 open as a POC of integrating the filter manager with the router, which opens up for making upstream HTTP filters configurable via the API. |
|
I would pick it up but I'm afraid I need to catch up on my cpp first 😅 |
|
This issue has been automatically marked as stale because it has not had activity in the last 30 days. It will be closed in the next 7 days unless it is tagged "help wanted" or "no stalebot" or other activity occurs. Thank you for your contributions. |
github-actions
bot
added
the
stale
|
This issue has been automatically closed because it has not had activity in the last 37 days. If this issue is still valid, please ping a maintainer and ask them to label it as "help wanted" or "no stalebot". Thank you for your contributions. |
Title:
Prefix ranges for destination CIDR do not match
Description:
When using a filter chain match for destination using
prefix_ranges(for example)192.168.0.0/16the filter chain is not found and the connection is closed.Repro steps:
Start a standard envoy docker container with the command and config (provided below). Once running, try to perform a request and match on the filter, reaching the
dynamic_forward_proxycluster.Request command:
The expected result is to have a "Filter match!" response (as defined in the
direct_responseroute), but no response is returned (curl: (52) Empty reply from server) and the log shows that there was no matching filter.Relevant log line:
Envoy docker command:
docker run --rm -it -v $(pwd)/config.yaml:/config.yaml \ -p 9901:9901 \ -p 10000:10000 \ envoyproxy/envoy:v1.17-latest \ -c /config.yaml --log-level debugAdmin and Stats Output:
*/stats*: (Click to expand)
*/clusters*: (Click to expand)
*/server_info*: (Click to expand)
{ "version": "d6a4496e712d7a2335b26e2f76210d5904002c26/1.17.1/Clean/RELEASE/BoringSSL", "state": "LIVE", "hot_restart_version": "11.104", "command_line_options": { "base_id": "0", "use_dynamic_base_id": false, "base_id_path": "", "concurrency": 4, "config_path": "/config.yaml", "config_yaml": "", "allow_unknown_static_fields": false, "reject_unknown_dynamic_fields": false, "ignore_unknown_dynamic_fields": false, "admin_address_path": "", "local_address_ip_version": "v4", "log_level": "debug", "component_log_level": "", "log_format": "[%Y-%m-%d %T.%e][%t][%l][%n] [%g:%#] %v", "log_format_escaped": false, "log_path": "", "service_cluster": "", "service_node": "", "service_zone": "", "drain_strategy": "Gradual", "mode": "Serve", "disable_hot_restart": false, "enable_mutex_tracing": false, "restart_epoch": 0, "cpuset_threads": false, "disabled_extensions": [], "bootstrap_version": 0, "enable_fine_grain_logging": false, "socket_path": "@envoy_domain_socket", "socket_mode": 0, "hidden_envoy_deprecated_max_stats": "0", "hidden_envoy_deprecated_max_obj_name_len": "0", "file_flush_interval": "10s", "drain_time": "600s", "parent_shutdown_time": "900s" }, "node": { "id": "", "cluster": "", "user_agent_name": "envoy", "user_agent_build_version": { "version": { "major_number": 1, "minor_number": 17, "patch": 1 }, "metadata": { "build.type": "RELEASE", "revision.sha": "d6a4496e712d7a2335b26e2f76210d5904002c26", "ssl.version": "BoringSSL", "revision.status": "Clean" } }, "extensions": [ { "name": "dubbo", "category": "envoy.dubbo_proxy.protocols", "type_descriptor": "", "disabled": false }, { "name": "envoy.dynamic.ot", "category": "envoy.tracers", "type_descriptor": "", "disabled": false }, { "name": "envoy.lightstep", "category": "envoy.tracers", "type_descriptor": "", "disabled": false }, { "name": "envoy.tracers.datadog", "category": "envoy.tracers", "type_descriptor": "", "disabled": false }, { "name": "envoy.tracers.dynamic_ot", "category": "envoy.tracers", "type_descriptor": "", "disabled": false }, { "name": "envoy.tracers.lightstep", "category": "envoy.tracers", "type_descriptor": "", "disabled": false }, { "name": "envoy.tracers.opencensus", "category": "envoy.tracers", "type_descriptor": "", "disabled": false }, { "name": "envoy.tracers.skywalking", "category": "envoy.tracers", "type_descriptor": "", "disabled": false }, { "name": "envoy.tracers.xray", "category": "envoy.tracers", "type_descriptor": "", "disabled": false }, { "name": "envoy.tracers.zipkin", "category": "envoy.tracers", "type_descriptor": "", "disabled": false }, { "name": "envoy.zipkin", "category": "envoy.tracers", "type_descriptor": "", "disabled": false }, { "name": "udp_default_writer", "category": "envoy.udp_packet_writers", "type_descriptor": "", "disabled": false }, { "name": "udp_gso_batch_writer", "category": "envoy.udp_packet_writers", "type_descriptor": "", "disabled": false }, { "name": "envoy.bootstrap.wasm", "category": "envoy.bootstrap", "type_descriptor": "", "disabled": false }, { "name": "envoy.extensions.network.socket_interface.default_socket_interface", "category": "envoy.bootstrap", "type_descriptor": "", "disabled": false }, { "name": "envoy.extensions.http.cache.simple", "category": "envoy.http.cache", "type_descriptor": "", "disabled": false }, { "name": "quiche_quic_listener", "category": "envoy.udp_listeners", "type_descriptor": "", "disabled": false }, { "name": "raw_udp_listener", "category": "envoy.udp_listeners", "type_descriptor": "", "disabled": false }, { "name": "envoy.access_loggers.file", "category": "envoy.access_loggers", "type_descriptor": "", "disabled": false }, { "name": "envoy.access_loggers.http_grpc", "category": "envoy.access_loggers", "type_descriptor": "", "disabled": false }, { "name": "envoy.access_loggers.tcp_grpc", "category": "envoy.access_loggers", "type_descriptor": "", "disabled": false }, { "name": "envoy.access_loggers.wasm", "category": "envoy.access_loggers", "type_descriptor": "", "disabled": false }, { "name": "envoy.file_access_log", "category": "envoy.access_loggers", "type_descriptor": "", "disabled": false }, { "name": "envoy.http_grpc_access_log", "category": "envoy.access_loggers", "type_descriptor": "", "disabled": false }, { "name": "envoy.tcp_grpc_access_log", "category": "envoy.access_loggers", "type_descriptor": "", "disabled": false }, { "name": "envoy.wasm_access_log", "category": "envoy.access_loggers", "type_descriptor": "", "disabled": false }, { "name": "envoy.buffer", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.cors", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.csrf", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.ext_authz", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.ext_proc", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.fault", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.http.adaptive_concurrency", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.http.admission_control", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.http.aws_lambda", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.http.aws_request_signing", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.http.buffer", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.http.cache", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.http.cdn_loop", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.http.compressor", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.http.cors", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.http.csrf", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.http.decompressor", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.http.dynamic_forward_proxy", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.http.dynamo", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.http.ext_authz", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.http.ext_proc", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.http.fault", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.http.grpc_http1_bridge", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.http.grpc_http1_reverse_bridge", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.http.grpc_json_transcoder", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.http.grpc_stats", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.http.grpc_web", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.http.gzip", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.http.header_to_metadata", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.http.health_check", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.http.ip_tagging", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.http.jwt_authn", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.http.local_ratelimit", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.http.lua", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.http.oauth2", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.http.on_demand", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.http.original_src", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.http.ratelimit", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.http.rbac", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.http.router", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.http.squash", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.http.tap", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.http.wasm", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.grpc_http1_bridge", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.grpc_json_transcoder", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.grpc_web", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.gzip", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.health_check", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.http_dynamo_filter", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.ip_tagging", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.local_rate_limit", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.lua", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.rate_limit", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.router", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.squash", "category": "envoy.filters.http", "type_descriptor": "", "disabled": false }, { "name": "envoy.watchdog.abort_action", "category": "envoy.guarddog_actions", "type_descriptor": "", "disabled": false }, { "name": "envoy.watchdog.profile_action", "category": "envoy.guarddog_actions", "type_descriptor": "", "disabled": false }, { "name": "envoy.ip", "category": "envoy.resolvers", "type_descriptor": "", "disabled": false }, { "name": "quiche", "category": "envoy.quic_server_codec", "type_descriptor": "", "disabled": false }, { "name": "envoy.extensions.upstreams.http.v3.HttpProtocolOptions", "category": "envoy.upstream_options", "type_descriptor": "", "disabled": false }, { "name": "envoy.upstreams.http.http_protocol_options", "category": "envoy.upstream_options", "type_descriptor": "", "disabled": false }, { "name": "envoy.grpc_credentials.aws_iam", "category": "envoy.grpc_credentials", "type_descriptor": "", "disabled": false }, { "name": "envoy.grpc_credentials.default", "category": "envoy.grpc_credentials", "type_descriptor": "", "disabled": false }, { "name": "envoy.grpc_credentials.file_based_metadata", "category": "envoy.grpc_credentials", "type_descriptor": "", "disabled": false }, { "name": "envoy.client_ssl_auth", "category": "envoy.filters.network", "type_descriptor": "", "disabled": false }, { "name": "envoy.echo", "category": "envoy.filters.network", "type_descriptor": "", "disabled": false }, { "name": "envoy.ext_authz", "category": "envoy.filters.network", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.network.client_ssl_auth", "category": "envoy.filters.network", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.network.direct_response", "category": "envoy.filters.network", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.network.dubbo_proxy", "category": "envoy.filters.network", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.network.echo", "category": "envoy.filters.network", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.network.ext_authz", "category": "envoy.filters.network", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.network.http_connection_manager", "category": "envoy.filters.network", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.network.kafka_broker", "category": "envoy.filters.network", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.network.local_ratelimit", "category": "envoy.filters.network", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.network.mongo_proxy", "category": "envoy.filters.network", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.network.mysql_proxy", "category": "envoy.filters.network", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.network.postgres_proxy", "category": "envoy.filters.network", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.network.ratelimit", "category": "envoy.filters.network", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.network.rbac", "category": "envoy.filters.network", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.network.redis_proxy", "category": "envoy.filters.network", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.network.rocketmq_proxy", "category": "envoy.filters.network", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.network.sni_cluster", "category": "envoy.filters.network", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.network.sni_dynamic_forward_proxy", "category": "envoy.filters.network", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.network.tcp_proxy", "category": "envoy.filters.network", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.network.thrift_proxy", "category": "envoy.filters.network", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.network.wasm", "category": "envoy.filters.network", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.network.zookeeper_proxy", "category": "envoy.filters.network", "type_descriptor": "", "disabled": false }, { "name": "envoy.http_connection_manager", "category": "envoy.filters.network", "type_descriptor": "", "disabled": false }, { "name": "envoy.mongo_proxy", "category": "envoy.filters.network", "type_descriptor": "", "disabled": false }, { "name": "envoy.ratelimit", "category": "envoy.filters.network", "type_descriptor": "", "disabled": false }, { "name": "envoy.redis_proxy", "category": "envoy.filters.network", "type_descriptor": "", "disabled": false }, { "name": "envoy.tcp_proxy", "category": "envoy.filters.network", "type_descriptor": "", "disabled": false }, { "name": "auto", "category": "envoy.thrift_proxy.transports", "type_descriptor": "", "disabled": false }, { "name": "framed", "category": "envoy.thrift_proxy.transports", "type_descriptor": "", "disabled": false }, { "name": "header", "category": "envoy.thrift_proxy.transports", "type_descriptor": "", "disabled": false }, { "name": "unframed", "category": "envoy.thrift_proxy.transports", "type_descriptor": "", "disabled": false }, { "name": "envoy.cluster.eds", "category": "envoy.clusters", "type_descriptor": "", "disabled": false }, { "name": "envoy.cluster.logical_dns", "category": "envoy.clusters", "type_descriptor": "", "disabled": false }, { "name": "envoy.cluster.original_dst", "category": "envoy.clusters", "type_descriptor": "", "disabled": false }, { "name": "envoy.cluster.static", "category": "envoy.clusters", "type_descriptor": "", "disabled": false }, { "name": "envoy.cluster.strict_dns", "category": "envoy.clusters", "type_descriptor": "", "disabled": false }, { "name": "envoy.clusters.aggregate", "category": "envoy.clusters", "type_descriptor": "", "disabled": false }, { "name": "envoy.clusters.dynamic_forward_proxy", "category": "envoy.clusters", "type_descriptor": "", "disabled": false }, { "name": "envoy.clusters.redis", "category": "envoy.clusters", "type_descriptor": "", "disabled": false }, { "name": "dubbo.hessian2", "category": "envoy.dubbo_proxy.serializers", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.udp.dns_filter", "category": "envoy.filters.udp_listener", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.udp_listener.udp_proxy", "category": "envoy.filters.udp_listener", "type_descriptor": "", "disabled": false }, { "name": "envoy.internal_redirect_predicates.allow_listed_routes", "category": "envoy.internal_redirect_predicates", "type_descriptor": "", "disabled": false }, { "name": "envoy.internal_redirect_predicates.previous_routes", "category": "envoy.internal_redirect_predicates", "type_descriptor": "", "disabled": false }, { "name": "envoy.internal_redirect_predicates.safe_cross_scheme", "category": "envoy.internal_redirect_predicates", "type_descriptor": "", "disabled": false }, { "name": "envoy.compression.gzip.decompressor", "category": "envoy.compression.decompressor", "type_descriptor": "", "disabled": false }, { "name": "envoy.rate_limit_descriptors.expr", "category": "envoy.rate_limit_descriptors", "type_descriptor": "", "disabled": false }, { "name": "envoy.transport_sockets.alts", "category": "envoy.transport_sockets.downstream", "type_descriptor": "", "disabled": false }, { "name": "envoy.transport_sockets.quic", "category": "envoy.transport_sockets.downstream", "type_descriptor": "", "disabled": false }, { "name": "envoy.transport_sockets.raw_buffer", "category": "envoy.transport_sockets.downstream", "type_descriptor": "", "disabled": false }, { "name": "envoy.transport_sockets.starttls", "category": "envoy.transport_sockets.downstream", "type_descriptor": "", "disabled": false }, { "name": "envoy.transport_sockets.tap", "category": "envoy.transport_sockets.downstream", "type_descriptor": "", "disabled": false }, { "name": "envoy.transport_sockets.tls", "category": "envoy.transport_sockets.downstream", "type_descriptor": "", "disabled": false }, { "name": "raw_buffer", "category": "envoy.transport_sockets.downstream", "type_descriptor": "", "disabled": false }, { "name": "starttls", "category": "envoy.transport_sockets.downstream", "type_descriptor": "", "disabled": false }, { "name": "tls", "category": "envoy.transport_sockets.downstream", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.listener.http_inspector", "category": "envoy.filters.listener", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.listener.original_dst", "category": "envoy.filters.listener", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.listener.original_src", "category": "envoy.filters.listener", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.listener.proxy_protocol", "category": "envoy.filters.listener", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.listener.tls_inspector", "category": "envoy.filters.listener", "type_descriptor": "", "disabled": false }, { "name": "envoy.listener.http_inspector", "category": "envoy.filters.listener", "type_descriptor": "", "disabled": false }, { "name": "envoy.listener.original_dst", "category": "envoy.filters.listener", "type_descriptor": "", "disabled": false }, { "name": "envoy.listener.original_src", "category": "envoy.filters.listener", "type_descriptor": "", "disabled": false }, { "name": "envoy.listener.proxy_protocol", "category": "envoy.filters.listener", "type_descriptor": "", "disabled": false }, { "name": "envoy.listener.tls_inspector", "category": "envoy.filters.listener", "type_descriptor": "", "disabled": false }, { "name": "envoy.compression.gzip.compressor", "category": "envoy.compression.compressor", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.dubbo.router", "category": "envoy.dubbo_proxy.filters", "type_descriptor": "", "disabled": false }, { "name": "envoy.resource_monitors.fixed_heap", "category": "envoy.resource_monitors", "type_descriptor": "", "disabled": false }, { "name": "envoy.resource_monitors.injected_resource", "category": "envoy.resource_monitors", "type_descriptor": "", "disabled": false }, { "name": "quiche", "category": "envoy.quic_client_codec", "type_descriptor": "", "disabled": false }, { "name": "envoy.retry_priorities.previous_priorities", "category": "envoy.retry_priorities", "type_descriptor": "", "disabled": false }, { "name": "auto", "category": "envoy.thrift_proxy.protocols", "type_descriptor": "", "disabled": false }, { "name": "binary", "category": "envoy.thrift_proxy.protocols", "type_descriptor": "", "disabled": false }, { "name": "binary/non-strict", "category": "envoy.thrift_proxy.protocols", "type_descriptor": "", "disabled": false }, { "name": "compact", "category": "envoy.thrift_proxy.protocols", "type_descriptor": "", "disabled": false }, { "name": "twitter", "category": "envoy.thrift_proxy.protocols", "type_descriptor": "", "disabled": false }, { "name": "envoy.retry_host_predicates.omit_canary_hosts", "category": "envoy.retry_host_predicates", "type_descriptor": "", "disabled": false }, { "name": "envoy.retry_host_predicates.omit_host_metadata", "category": "envoy.retry_host_predicates", "type_descriptor": "", "disabled": false }, { "name": "envoy.retry_host_predicates.previous_hosts", "category": "envoy.retry_host_predicates", "type_descriptor": "", "disabled": false }, { "name": "envoy.health_checkers.redis", "category": "envoy.health_checkers", "type_descriptor": "", "disabled": false }, { "name": "default", "category": "envoy.dubbo_proxy.route_matchers", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.thrift.rate_limit", "category": "envoy.thrift_proxy.filters", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.thrift.router", "category": "envoy.thrift_proxy.filters", "type_descriptor": "", "disabled": false }, { "name": "envoy.dog_statsd", "category": "envoy.stats_sinks", "type_descriptor": "", "disabled": false }, { "name": "envoy.metrics_service", "category": "envoy.stats_sinks", "type_descriptor": "", "disabled": false }, { "name": "envoy.stat_sinks.dog_statsd", "category": "envoy.stats_sinks", "type_descriptor": "", "disabled": false }, { "name": "envoy.stat_sinks.hystrix", "category": "envoy.stats_sinks", "type_descriptor": "", "disabled": false }, { "name": "envoy.stat_sinks.metrics_service", "category": "envoy.stats_sinks", "type_descriptor": "", "disabled": false }, { "name": "envoy.stat_sinks.statsd", "category": "envoy.stats_sinks", "type_descriptor": "", "disabled": false }, { "name": "envoy.stat_sinks.wasm", "category": "envoy.stats_sinks", "type_descriptor": "", "disabled": false }, { "name": "envoy.statsd", "category": "envoy.stats_sinks", "type_descriptor": "", "disabled": false }, { "name": "envoy.filters.connection_pools.tcp.generic", "category": "envoy.upstreams", "type_descriptor": "", "disabled": false }, { "name": "envoy.wasm.runtime.null", "category": "envoy.wasm.runtime", "type_descriptor": "", "disabled": false }, { "name": "envoy.wasm.runtime.v8", "category": "envoy.wasm.runtime", "type_descriptor": "", "disabled": false }, { "name": "envoy.transport_sockets.alts", "category": "envoy.transport_sockets.upstream", "type_descriptor": "", "disabled": false }, { "name": "envoy.transport_sockets.quic", "category": "envoy.transport_sockets.upstream", "type_descriptor": "", "disabled": false }, { "name": "envoy.transport_sockets.raw_buffer", "category": "envoy.transport_sockets.upstream", "type_descriptor": "", "disabled": false }, { "name": "envoy.transport_sockets.tap", "category": "envoy.transport_sockets.upstream", "type_descriptor": "", "disabled": false }, { "name": "envoy.transport_sockets.tls", "category": "envoy.transport_sockets.upstream", "type_descriptor": "", "disabled": false }, { "name": "envoy.transport_sockets.upstream_proxy_protocol", "category": "envoy.transport_sockets.upstream", "type_descriptor": "", "disabled": false }, { "name": "raw_buffer", "category": "envoy.transport_sockets.upstream", "type_descriptor": "", "disabled": false }, { "name": "tls", "category": "envoy.transport_sockets.upstream", "type_descriptor": "", "disabled": false } ], "client_features": [], "listening_addresses": [], "hidden_envoy_deprecated_build_version": "d6a4496e712d7a2335b26e2f76210d5904002c26/1.17.1/Clean/RELEASE/BoringSSL" }, "uptime_current_epoch": "100s", "uptime_all_epochs": "100s" }Config:
*Logs*: (Click to expand)
The text was updated successfully, but these errors were encountered: