envoyproxy/gateway

Support more timeout settings

Open

#9,254 opened on Jun 19, 2026

View on GitHub
 (3 comments) (1 reaction) (0 assignees)Go (802 forks)auto 404
help wantedkind/enhancementkind/feature

Repository metrics

Stars
 (2,871 stars)
PR merge metrics
 (PR metrics pending)

Description

Description: In an effort of improving our Envoy Gateway security (especially DoS security), we are missing 3 timeout settings that are supported in Envoy Proxy but not exposed in Envoy Gateway CRDs.

The settings are:

Do the maintainers see any issue with exposing these settings? If not then I would propose adding them to ClientTrafficPolicy API since they are all settings between Downstream and Envoy Proxy.

To be specific:

I am willing to submit a PR that introduces them once (if) this issue gets accepted.

Contributor guide

Research direction
Examine the current ClientTrafficPolicy API definition and the corresponding Envoy xDS translation logic, then implement the three new timeout fields following the pattern of existing timeout settings.
Tech stack
gokubernetes
Domain
backendapi
Issue type
Feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-2 days
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
GoKubernetesEnvoy
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
65