Documentation ¶
Index ¶
- Constants
- func AdminListener(address string, port int) *envoy_listener_v3.Listener
- func AppendHeader(key, value string) *envoy_core_v3.HeaderValueOption
- func CORSPolicy(cp *dag.CORSPolicy) *envoy_route_v3.CorsPolicy
- func CORSVirtualHost(hostname string, corspolicy *envoy_route_v3.CorsPolicy, ...) *envoy_route_v3.VirtualHost
- func Cluster(c *dag.Cluster) *envoy_cluster_v3.Cluster
- func ClusterCommonLBConfig() *envoy_cluster_v3.Cluster_CommonLbConfig
- func ClusterDiscoveryType(t envoy_cluster_v3.Cluster_DiscoveryType) *envoy_cluster_v3.Cluster_Type
- func ClusterLoadAssignment(name string, addrs ...*envoy_core_v3.Address) *envoy_endpoint_v3.ClusterLoadAssignment
- func ConfigSource(cluster string) *envoy_core_v3.ConfigSource
- func ContainsFallbackFilterChain(filterchains []*envoy_listener_v3.FilterChain) bool
- func DownstreamTLSContext(serverSecret *dag.Secret, ...) *envoy_v3_tls.DownstreamTlsContext
- func DownstreamTLSTransportSocket(tls *envoy_tls_v3.DownstreamTlsContext) *envoy_core_v3.TransportSocket
- func Endpoints(addrs ...*envoy_core_v3.Address) []*envoy_endpoint_v3.LocalityLbEndpoints
- func EnvoyAdminListener(port int) *envoy_listener_v3.Listener
- func ExtensionCluster(ext *dag.ExtensionCluster) *envoy_cluster_v3.Cluster
- func FileAccessLogEnvoy(path string) []*envoy_accesslog_v3.AccessLog
- func FileAccessLogJSON(path string, fields config.AccessLogFields) []*envoy_accesslog_v3.AccessLog
- func FilterChain(filters ...*envoy_listener_v3.Filter) *envoy_listener_v3.FilterChain
- func FilterChainTLS(domain string, downstream *envoy_tls_v3.DownstreamTlsContext, ...) *envoy_listener_v3.FilterChain
- func FilterChainTLSFallback(downstream *envoy_tls_v3.DownstreamTlsContext, ...) *envoy_listener_v3.FilterChain
- func FilterChains(filters ...*envoy_listener_v3.Filter) []*envoy_listener_v3.FilterChain
- func FilterExternalAuthz(authzClusterName string, failOpen bool, timeout timeout.Setting) *http.HttpFilter
- func FilterMisdirectedRequests(fqdn string) *http.HttpFilter
- func Filters(filters ...*envoy_listener_v3.Filter) []*envoy_listener_v3.Filter
- func GlobalRateLimitFilter(config *GlobalRateLimitConfig) *http.HttpFilter
- func GlobalRateLimits(descriptors []*dag.RateLimitDescriptor) []*envoy_route_v3.RateLimit
- func HTTPConnectionManager(routename string, accesslogger []*accesslog.AccessLog, ...) *envoy_listener_v3.Filter
- func HTTPConnectionManagerBuilder() *httpConnectionManagerBuilder
- func HeaderValueList(hvm map[string]string, app bool) []*envoy_core_v3.HeaderValueOption
- func Headers(first *envoy_core_v3.HeaderValueOption, ...) []*envoy_core_v3.HeaderValueOption
- func LBEndpoint(addr *envoy_core_v3.Address) *envoy_endpoint_v3.LbEndpoint
- func Listener(name, address string, port int, lf []*envoy_listener_v3.ListenerFilter, ...) *envoy_listener_v3.Listener
- func ListenerFilters(filters ...*envoy_listener_v3.ListenerFilter) []*envoy_listener_v3.ListenerFilter
- func LocalRateLimitConfig(config *dag.LocalRateLimitPolicy, statPrefix string) *any.Any
- func ParseTLSVersion(version string) envoy_tls_v3.TlsParameters_TlsProtocol
- func ProtoNamesForVersions(versions ...HTTPVersionType) []string
- func ProxyProtocol() *envoy_listener_v3.ListenerFilter
- func RouteAuthzContext(settings map[string]string) *any.Any
- func RouteAuthzDisabled() *any.Any
- func RouteConfiguration(name string, virtualhosts ...*envoy_route_v3.VirtualHost) *envoy_route_v3.RouteConfiguration
- func RouteMatch(route *dag.Route) *envoy_route_v3.RouteMatch
- func RouteRoute(r *dag.Route) *envoy_route_v3.Route_Route
- func SafeRegexMatch(regex string) *matcher.RegexMatcher
- func Secret(s *dag.Secret) *envoy_tls_v3.Secret
- func SocketAddress(address string, port int) *envoy_core_v3.Address
- func StaticClusterLoadAssignment(service *dag.Service) *envoy_endpoint_v3.ClusterLoadAssignment
- func StatsListener(address string, port int) *envoy_listener_v3.Listener
- func TCPKeepaliveSocketOptions() []*envoy_core_v3.SocketOption
- func TCPProxy(statPrefix string, proxy *dag.TCPProxy, accesslogger []*accesslog.AccessLog) *envoy_listener_v3.Filter
- func TLSInspector() *envoy_listener_v3.ListenerFilter
- func UnixSocketAddress(address string, port int) *envoy_core_v3.Address
- func UpgradeHTTPS() *envoy_route_v3.Route_Redirect
- func UpstreamTLSContext(peerValidationContext *dag.PeerValidationContext, sni string, ...) *envoy_v3_tls.UpstreamTlsContext
- func UpstreamTLSTransportSocket(tls *envoy_tls_v3.UpstreamTlsContext) *envoy_core_v3.TransportSocket
- func VirtualHost(hostname string, routes ...*envoy_route_v3.Route) *envoy_route_v3.VirtualHost
- func WeightedEndpoints(weight uint32, addrs ...*envoy_core_v3.Address) []*envoy_endpoint_v3.LocalityLbEndpoints
- func WriteBootstrap(c *envoy.BootstrapConfig) error
- type GlobalRateLimitConfig
- type HTTPVersionType
Constants ¶
const ( HTTPVersionAuto HTTPVersionType = http.HttpConnectionManager_AUTO HTTPVersion1 HTTPVersionType = http.HttpConnectionManager_HTTP1 HTTPVersion2 HTTPVersionType = http.HttpConnectionManager_HTTP2 HTTPVersion3 HTTPVersionType = http.HttpConnectionManager_HTTP3 HTTPFilterRouter = "type.googleapis.com/envoy.extensions.filters.http.router.v3.Router" HTTPFilterCORS = "type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors" HTTPFilterGrpcWeb = "type.googleapis.com/envoy.extensions.filters.http.grpc_web.v3.GrpcWeb" HTTPFilterGzip = "type.googleapis.com/envoy.extensions.compression.gzip.compressor.v3.Gzip" )
Variables ¶
This section is empty.
Functions ¶
func AdminListener ¶ added in v1.14.2
func AdminListener(address string, port int) *envoy_listener_v3.Listener
AdminListener returns a *envoy_listener_v3.Listener configured to serve Envoy debug routes from the admin webpage.
func AppendHeader ¶ added in v1.11.0
func AppendHeader(key, value string) *envoy_core_v3.HeaderValueOption
func CORSPolicy ¶ added in v1.11.0
func CORSPolicy(cp *dag.CORSPolicy) *envoy_route_v3.CorsPolicy
CORSPolicy returns a *envoy_route_v3.CORSPolicy
func CORSVirtualHost ¶ added in v1.11.0
func CORSVirtualHost(hostname string, corspolicy *envoy_route_v3.CorsPolicy, routes ...*envoy_route_v3.Route) *envoy_route_v3.VirtualHost
CORSVirtualHost creates a new route.VirtualHost with a CORS policy.
func Cluster ¶ added in v1.11.0
func Cluster(c *dag.Cluster) *envoy_cluster_v3.Cluster
Cluster creates new envoy_cluster_v3.Cluster from dag.Cluster.
func ClusterCommonLBConfig ¶ added in v1.11.0
func ClusterCommonLBConfig() *envoy_cluster_v3.Cluster_CommonLbConfig
ClusterCommonLBConfig creates a *envoy_cluster_v3.Cluster_CommonLbConfig with HealthyPanicThreshold disabled.
func ClusterDiscoveryType ¶
func ClusterDiscoveryType(t envoy_cluster_v3.Cluster_DiscoveryType) *envoy_cluster_v3.Cluster_Type
ClusterDiscoveryType returns the type of a ClusterDiscovery as a Cluster_type.
func ClusterLoadAssignment ¶ added in v1.11.0
func ClusterLoadAssignment(name string, addrs ...*envoy_core_v3.Address) *envoy_endpoint_v3.ClusterLoadAssignment
ClusterLoadAssignment returns a *envoy_endpoint_v3.ClusterLoadAssignment with a single LocalityLbEndpoints of the supplied addresses.
func ConfigSource ¶
func ConfigSource(cluster string) *envoy_core_v3.ConfigSource
ConfigSource returns a *envoy_core_v3.ConfigSource for cluster.
func ContainsFallbackFilterChain ¶ added in v1.11.0
func ContainsFallbackFilterChain(filterchains []*envoy_listener_v3.FilterChain) bool
func DownstreamTLSContext ¶ added in v1.11.0
func DownstreamTLSContext(serverSecret *dag.Secret, tlsMinProtoVersion envoy_v3_tls.TlsParameters_TlsProtocol, cipherSuites []string, peerValidationContext *dag.PeerValidationContext, alpnProtos ...string) *envoy_v3_tls.DownstreamTlsContext
DownstreamTLSContext creates a new DownstreamTlsContext.
func DownstreamTLSTransportSocket ¶
func DownstreamTLSTransportSocket(tls *envoy_tls_v3.DownstreamTlsContext) *envoy_core_v3.TransportSocket
DownstreamTLSTransportSocket returns a custom transport socket using the DownstreamTlsContext provided.
func Endpoints ¶
func Endpoints(addrs ...*envoy_core_v3.Address) []*envoy_endpoint_v3.LocalityLbEndpoints
Endpoints returns a slice of LocalityLbEndpoints. The slice contains one entry, with one LbEndpoint per *envoy_core_v3.Address supplied.
func EnvoyAdminListener ¶ added in v1.14.2
func EnvoyAdminListener(port int) *envoy_listener_v3.Listener
EnvoyAdminListener returns a *envoy_listener_v3.Listener configured to serve Envoy Admin endpoints.
func ExtensionCluster ¶ added in v1.11.0
func ExtensionCluster(ext *dag.ExtensionCluster) *envoy_cluster_v3.Cluster
ExtensionCluster builds a envoy_cluster_v3.Cluster struct for the given extension service.
func FileAccessLogEnvoy ¶ added in v1.11.0
func FileAccessLogEnvoy(path string) []*envoy_accesslog_v3.AccessLog
FileAccessLogEnvoy returns a new file based access log filter that will output Envoy's default access logs.
func FileAccessLogJSON ¶ added in v1.11.0
func FileAccessLogJSON(path string, fields config.AccessLogFields) []*envoy_accesslog_v3.AccessLog
FileAccessLogJSON returns a new file based access log filter that will log in JSON format
func FilterChain ¶ added in v1.11.0
func FilterChain(filters ...*envoy_listener_v3.Filter) *envoy_listener_v3.FilterChain
FilterChain returns a *envoy_listener_v3.FilterChain for the supplied filters.
func FilterChainTLS ¶ added in v1.11.0
func FilterChainTLS(domain string, downstream *envoy_tls_v3.DownstreamTlsContext, filters []*envoy_listener_v3.Filter) *envoy_listener_v3.FilterChain
FilterChainTLS returns a TLS enabled envoy_listener_v3.FilterChain.
func FilterChainTLSFallback ¶ added in v1.11.0
func FilterChainTLSFallback(downstream *envoy_tls_v3.DownstreamTlsContext, filters []*envoy_listener_v3.Filter) *envoy_listener_v3.FilterChain
FilterChainTLSFallback returns a TLS enabled envoy_listener_v3.FilterChain conifgured for FallbackCertificate.
func FilterChains ¶ added in v1.11.0
func FilterChains(filters ...*envoy_listener_v3.Filter) []*envoy_listener_v3.FilterChain
FilterChains returns a []*envoy_listener_v3.FilterChain for the supplied filters.
func FilterExternalAuthz ¶ added in v1.11.0
func FilterExternalAuthz(authzClusterName string, failOpen bool, timeout timeout.Setting) *http.HttpFilter
FilterExternalAuthz returns an `ext_authz` filter configured with the requested parameters.
func FilterMisdirectedRequests ¶ added in v1.11.0
func FilterMisdirectedRequests(fqdn string) *http.HttpFilter
func Filters ¶ added in v1.11.0
func Filters(filters ...*envoy_listener_v3.Filter) []*envoy_listener_v3.Filter
Filters returns a []*envoy_listener_v3.Filter for the supplied filters.
func GlobalRateLimitFilter ¶ added in v1.13.0
func GlobalRateLimitFilter(config *GlobalRateLimitConfig) *http.HttpFilter
GlobalRateLimitFilter returns a configured HTTP global rate limit filter, or nil if config is nil.
func GlobalRateLimits ¶ added in v1.13.0
func GlobalRateLimits(descriptors []*dag.RateLimitDescriptor) []*envoy_route_v3.RateLimit
GlobalRateLimits converts DAG RateLimitDescriptors to Envoy RateLimits.
func HTTPConnectionManager ¶ added in v1.11.0
func HTTPConnectionManager(routename string, accesslogger []*accesslog.AccessLog, requestTimeout time.Duration, xffNumTrustedHops uint32) *envoy_listener_v3.Filter
HTTPConnectionManager creates a new HTTP Connection Manager filter for the supplied route, access log, and client request timeout.
func HTTPConnectionManagerBuilder ¶ added in v1.11.0
func HTTPConnectionManagerBuilder() *httpConnectionManagerBuilder
HTTPConnectionManagerBuilder creates a new HTTP connection manager builder.
func HeaderValueList ¶ added in v1.11.0
func HeaderValueList(hvm map[string]string, app bool) []*envoy_core_v3.HeaderValueOption
HeaderValueList creates a list of Envoy HeaderValueOptions from the provided map.
func Headers ¶ added in v1.11.0
func Headers(first *envoy_core_v3.HeaderValueOption, rest ...*envoy_core_v3.HeaderValueOption) []*envoy_core_v3.HeaderValueOption
func LBEndpoint ¶
func LBEndpoint(addr *envoy_core_v3.Address) *envoy_endpoint_v3.LbEndpoint
LBEndpoint creates a new LbEndpoint.
func Listener ¶ added in v1.11.0
func Listener(name, address string, port int, lf []*envoy_listener_v3.ListenerFilter, filters ...*envoy_listener_v3.Filter) *envoy_listener_v3.Listener
Listener returns a new envoy_listener_v3.Listener for the supplied address, port, and filters.
func ListenerFilters ¶ added in v1.11.0
func ListenerFilters(filters ...*envoy_listener_v3.ListenerFilter) []*envoy_listener_v3.ListenerFilter
ListenerFilters returns a []*envoy_listener_v3.ListenerFilter for the supplied listener filters.
func LocalRateLimitConfig ¶ added in v1.12.0
func LocalRateLimitConfig(config *dag.LocalRateLimitPolicy, statPrefix string) *any.Any
LocalRateLimitConfig returns a config for the HTTP local rate limit filter.
func ParseTLSVersion ¶ added in v1.11.0
func ParseTLSVersion(version string) envoy_tls_v3.TlsParameters_TlsProtocol
func ProtoNamesForVersions ¶ added in v1.11.0
func ProtoNamesForVersions(versions ...HTTPVersionType) []string
ProtoNamesForVersions returns the slice of ALPN protocol names for the give HTTP versions.
func ProxyProtocol ¶ added in v1.11.0
func ProxyProtocol() *envoy_listener_v3.ListenerFilter
ProxyProtocol returns a new Proxy Protocol listener filter.
func RouteAuthzContext ¶ added in v1.11.0
RouteAuthzContext returns a per-route config to pass the given context entries in the check request.
func RouteAuthzDisabled ¶ added in v1.11.0
RouteAuthzDisabled returns a per-route config to disable authorization.
func RouteConfiguration ¶ added in v1.11.0
func RouteConfiguration(name string, virtualhosts ...*envoy_route_v3.VirtualHost) *envoy_route_v3.RouteConfiguration
RouteConfiguration returns a *envoy_route_v3.RouteConfiguration.
func RouteMatch ¶ added in v1.11.0
func RouteMatch(route *dag.Route) *envoy_route_v3.RouteMatch
RouteMatch creates a *envoy_route_v3.RouteMatch for the supplied *dag.Route.
func RouteRoute ¶ added in v1.11.0
func RouteRoute(r *dag.Route) *envoy_route_v3.Route_Route
RouteRoute creates a *envoy_route_v3.Route_Route for the services supplied. If len(services) is greater than one, the route's action will be a weighted cluster.
func SafeRegexMatch ¶ added in v1.11.0
func SafeRegexMatch(regex string) *matcher.RegexMatcher
SafeRegexMatch returns a matcher.RegexMatcher for the supplied regex. SafeRegexMatch does not escape regex meta characters.
func Secret ¶ added in v1.11.0
func Secret(s *dag.Secret) *envoy_tls_v3.Secret
Secret creates new envoy_tls_v3.Secret from secret.
func SocketAddress ¶
func SocketAddress(address string, port int) *envoy_core_v3.Address
SocketAddress creates a new TCP envoy_core_v3.Address.
func StaticClusterLoadAssignment ¶ added in v1.11.0
func StaticClusterLoadAssignment(service *dag.Service) *envoy_endpoint_v3.ClusterLoadAssignment
StaticClusterLoadAssignment creates a *envoy_endpoint_v3.ClusterLoadAssignment pointing to the external DNS address of the service
func StatsListener ¶ added in v1.11.0
func StatsListener(address string, port int) *envoy_listener_v3.Listener
StatsListener returns a *envoy_listener_v3.Listener configured to serve prometheus metrics on /stats.
func TCPKeepaliveSocketOptions ¶ added in v1.11.0
func TCPKeepaliveSocketOptions() []*envoy_core_v3.SocketOption
func TCPProxy ¶ added in v1.11.0
func TCPProxy(statPrefix string, proxy *dag.TCPProxy, accesslogger []*accesslog.AccessLog) *envoy_listener_v3.Filter
TCPProxy creates a new TCPProxy filter.
func TLSInspector ¶ added in v1.11.0
func TLSInspector() *envoy_listener_v3.ListenerFilter
TLSInspector returns a new TLS inspector listener filter.
func UnixSocketAddress ¶ added in v1.14.2
func UnixSocketAddress(address string, port int) *envoy_core_v3.Address
UnixSocketAddress creates a new Unix Socket envoy_core_v3.Address.
func UpgradeHTTPS ¶ added in v1.11.0
func UpgradeHTTPS() *envoy_route_v3.Route_Redirect
UpgradeHTTPS returns a route Action that redirects the request to HTTPS.
func UpstreamTLSContext ¶ added in v1.11.0
func UpstreamTLSContext(peerValidationContext *dag.PeerValidationContext, sni string, clientSecret *dag.Secret, alpnProtocols ...string) *envoy_v3_tls.UpstreamTlsContext
UpstreamTLSContext creates an envoy_v3_tls.UpstreamTlsContext. By default UpstreamTLSContext returns a HTTP/1.1 TLS enabled context. A list of additional ALPN protocols can be provided.
func UpstreamTLSTransportSocket ¶
func UpstreamTLSTransportSocket(tls *envoy_tls_v3.UpstreamTlsContext) *envoy_core_v3.TransportSocket
UpstreamTLSTransportSocket returns a custom transport socket using the UpstreamTlsContext provided.
func VirtualHost ¶ added in v1.11.0
func VirtualHost(hostname string, routes ...*envoy_route_v3.Route) *envoy_route_v3.VirtualHost
VirtualHost creates a new route.VirtualHost.
func WeightedEndpoints ¶ added in v1.11.0
func WeightedEndpoints(weight uint32, addrs ...*envoy_core_v3.Address) []*envoy_endpoint_v3.LocalityLbEndpoints
func WriteBootstrap ¶
func WriteBootstrap(c *envoy.BootstrapConfig) error
WriteBootstrap writes bootstrap configuration to files.
Types ¶
type GlobalRateLimitConfig ¶ added in v1.13.0
type GlobalRateLimitConfig struct { ExtensionService types.NamespacedName FailOpen bool Timeout timeout.Setting Domain string EnableXRateLimitHeaders bool }
GlobalRateLimitConfig stores configuration for an HTTP global rate limiting filter.
type HTTPVersionType ¶ added in v1.11.0
type HTTPVersionType = http.HttpConnectionManager_CodecType
func CodecForVersions ¶ added in v1.11.0
func CodecForVersions(versions ...HTTPVersionType) HTTPVersionType
CodecForVersions determines a single Envoy HTTP codec constant that support all the given HTTP protocol versions.