help wantedkind/enhancementkind/feature
Metriche repository
- Star
- (2871 star)
- Metriche merge PR
- (Metriche PR in attesa)
Descrizione
Description: In an effort of improving our Envoy Gateway security (especially DoS security), we are missing 3 timeout settings that are supported in Envoy Proxy but not exposed in Envoy Gateway CRDs.
The settings are:
Do the maintainers see any issue with exposing these settings? If not then I would propose adding them to ClientTrafficPolicy API since they are all settings between Downstream and Envoy Proxy.
To be specific:
listener_filters_timeout->ClientTrafficPolicy.spec.timeout.filtersTimeout?- Not sure where this fits 🤔
request_headers_timeout->ClientTrafficPolicy.spec.timeout.http.requestHeadersTimeouttransport_socket_connect_timeout-->ClientTrafficPolicy.spec.timeout.tcp.transportSocketConnectTimeoutorClientTrafficPolicy.spec.tls.connectTimeout
I am willing to submit a PR that introduces them once (if) this issue gets accepted.