envoyproxy/envoy

Ext_authz server_uri.uri for http_service

Open

#6,099 opened on Feb 27, 2019

View on GitHub
 (6 comments) (0 reactions) (1 assignee)C++ (5,373 forks)batch import
area/ext_authzenhancementhelp wanted

Repository metrics

Stars
 (27,997 stars)
PR merge metrics
 (Avg merge 8d) (378 merged PRs in 30d)

Description

Today, ext_authz http_service filter configuration requires the property server_uri.uri to be filled but it does not seem to be used although envoy will fail to boot up if it does not have at least the string "http". I was expecting that the filter would at least use that information to connect to the correct upstream authentication service and send the correct hostname for my load balancer but instead it seems to only use the cluster information and then it sends the original host in this request. Is this supposition correct? Or am I missing something?

Contributor guide

Research direction
Investigate the ext authz filter code to understand how server uri.uri is used or ignored, and trace the connection to upstream cluster.
Tech stack
cpp
Domain
backendnetworking
Issue type
Bug
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
Half day
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
C++
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
55