ext_authz ignores uri with http_service

Issue/Bug Template

Title: I can't make ext_authz work

Description:

ext_authz config seems to ignore uri parameter. Request goes straight to the auth_cluster cluster right onto the cluster's host and port rewriting the path.

Repro steps:

Config set as lower. Running two light python servers on 5001 and 5000. One with endpoint /verify and second with endpoint /dupa. Going into the browser and typing http://127.0.0.1/dupa.

Admin and Stats Output:

Include the admin output for the following endpoints: /stats,

cluster.auth_cluster.bind_errors: 0
cluster.auth_cluster.circuit_breakers.default.cx_open: 0
cluster.auth_cluster.circuit_breakers.default.rq_open: 0
cluster.auth_cluster.circuit_breakers.default.rq_pending_open: 0
cluster.auth_cluster.circuit_breakers.default.rq_retry_open: 0
cluster.auth_cluster.circuit_breakers.high.cx_open: 0
cluster.auth_cluster.circuit_breakers.high.rq_open: 0
cluster.auth_cluster.circuit_breakers.high.rq_pending_open: 0
cluster.auth_cluster.circuit_breakers.high.rq_retry_open: 0
cluster.auth_cluster.internal.upstream_rq_404: 1
cluster.auth_cluster.internal.upstream_rq_4xx: 1
cluster.auth_cluster.internal.upstream_rq_completed: 1
cluster.auth_cluster.lb_healthy_panic: 0
cluster.auth_cluster.lb_local_cluster_not_ok: 0
cluster.auth_cluster.lb_recalculate_zone_structures: 0
cluster.auth_cluster.lb_subsets_active: 0
cluster.auth_cluster.lb_subsets_created: 0
cluster.auth_cluster.lb_subsets_fallback: 0
cluster.auth_cluster.lb_subsets_removed: 0
cluster.auth_cluster.lb_subsets_selected: 0
cluster.auth_cluster.lb_zone_cluster_too_small: 0
cluster.auth_cluster.lb_zone_no_capacity_left: 0
cluster.auth_cluster.lb_zone_number_differs: 0
cluster.auth_cluster.lb_zone_routing_all_directly: 0
cluster.auth_cluster.lb_zone_routing_cross_zone: 0
cluster.auth_cluster.lb_zone_routing_sampled: 0
cluster.auth_cluster.max_host_weight: 0
cluster.auth_cluster.membership_change: 1
cluster.auth_cluster.membership_healthy: 1
cluster.auth_cluster.membership_total: 1
cluster.auth_cluster.original_dst_host_invalid: 0
cluster.auth_cluster.retry_or_shadow_abandoned: 0
cluster.auth_cluster.update_attempt: 6
cluster.auth_cluster.update_empty: 0
cluster.auth_cluster.update_failure: 0
cluster.auth_cluster.update_no_rebuild: 0
cluster.auth_cluster.update_success: 6
cluster.auth_cluster.upstream_cx_active: 0
cluster.auth_cluster.upstream_cx_close_notify: 0
cluster.auth_cluster.upstream_cx_connect_attempts_exceeded: 0
cluster.auth_cluster.upstream_cx_connect_fail: 0
cluster.auth_cluster.upstream_cx_connect_timeout: 0
cluster.auth_cluster.upstream_cx_destroy: 0
cluster.auth_cluster.upstream_cx_destroy_local: 0
cluster.auth_cluster.upstream_cx_destroy_local_with_active_rq: 0
cluster.auth_cluster.upstream_cx_destroy_remote: 0
cluster.auth_cluster.upstream_cx_destroy_remote_with_active_rq: 0
cluster.auth_cluster.upstream_cx_destroy_with_active_rq: 0
cluster.auth_cluster.upstream_cx_http1_total: 1
cluster.auth_cluster.upstream_cx_http2_total: 0
cluster.auth_cluster.upstream_cx_idle_timeout: 0
cluster.auth_cluster.upstream_cx_max_requests: 0
cluster.auth_cluster.upstream_cx_none_healthy: 0
cluster.auth_cluster.upstream_cx_overflow: 0
cluster.auth_cluster.upstream_cx_protocol_error: 0
cluster.auth_cluster.upstream_cx_rx_bytes_buffered: 0
cluster.auth_cluster.upstream_cx_rx_bytes_total: 380
cluster.auth_cluster.upstream_cx_total: 1
cluster.auth_cluster.upstream_cx_tx_bytes_buffered: 0
cluster.auth_cluster.upstream_cx_tx_bytes_total: 155
cluster.auth_cluster.upstream_flow_control_backed_up_total: 0
cluster.auth_cluster.upstream_flow_control_drained_total: 0
cluster.auth_cluster.upstream_flow_control_paused_reading_total: 0
cluster.auth_cluster.upstream_flow_control_resumed_reading_total: 0
cluster.auth_cluster.upstream_rq_404: 1
cluster.auth_cluster.upstream_rq_4xx: 1
cluster.auth_cluster.upstream_rq_active: 0
cluster.auth_cluster.upstream_rq_cancelled: 0
cluster.auth_cluster.upstream_rq_completed: 1
cluster.auth_cluster.upstream_rq_maintenance_mode: 0
cluster.auth_cluster.upstream_rq_pending_active: 0
cluster.auth_cluster.upstream_rq_pending_failure_eject: 0
cluster.auth_cluster.upstream_rq_pending_overflow: 0
cluster.auth_cluster.upstream_rq_pending_total: 1
cluster.auth_cluster.upstream_rq_per_try_timeout: 0
cluster.auth_cluster.upstream_rq_retry: 0
cluster.auth_cluster.upstream_rq_retry_overflow: 0
cluster.auth_cluster.upstream_rq_retry_success: 0
cluster.auth_cluster.upstream_rq_rx_reset: 0
cluster.auth_cluster.upstream_rq_timeout: 0
cluster.auth_cluster.upstream_rq_total: 1
cluster.auth_cluster.upstream_rq_tx_reset: 0
cluster.auth_cluster.version: 0
cluster.local_backend.bind_errors: 0
cluster.local_backend.circuit_breakers.default.cx_open: 0
cluster.local_backend.circuit_breakers.default.rq_open: 0
cluster.local_backend.circuit_breakers.default.rq_pending_open: 0
cluster.local_backend.circuit_breakers.default.rq_retry_open: 0
cluster.local_backend.circuit_breakers.high.cx_open: 0
cluster.local_backend.circuit_breakers.high.rq_open: 0
cluster.local_backend.circuit_breakers.high.rq_pending_open: 0
cluster.local_backend.circuit_breakers.high.rq_retry_open: 0
cluster.local_backend.ext_authz.denied: 1
cluster.local_backend.internal.upstream_rq_404: 1
cluster.local_backend.internal.upstream_rq_4xx: 1
cluster.local_backend.internal.upstream_rq_completed: 1
cluster.local_backend.lb_healthy_panic: 0
cluster.local_backend.lb_local_cluster_not_ok: 0
cluster.local_backend.lb_recalculate_zone_structures: 0
cluster.local_backend.lb_subsets_active: 0
cluster.local_backend.lb_subsets_created: 0
cluster.local_backend.lb_subsets_fallback: 0
cluster.local_backend.lb_subsets_removed: 0
cluster.local_backend.lb_subsets_selected: 0
cluster.local_backend.lb_zone_cluster_too_small: 0
cluster.local_backend.lb_zone_no_capacity_left: 0
cluster.local_backend.lb_zone_number_differs: 0
cluster.local_backend.lb_zone_routing_all_directly: 0
cluster.local_backend.lb_zone_routing_cross_zone: 0
cluster.local_backend.lb_zone_routing_sampled: 0
cluster.local_backend.max_host_weight: 0
cluster.local_backend.membership_change: 1
cluster.local_backend.membership_healthy: 1
cluster.local_backend.membership_total: 1
cluster.local_backend.original_dst_host_invalid: 0
cluster.local_backend.retry_or_shadow_abandoned: 0
cluster.local_backend.update_attempt: 6
cluster.local_backend.update_empty: 0
cluster.local_backend.update_failure: 0
cluster.local_backend.update_no_rebuild: 0
cluster.local_backend.update_success: 6
cluster.local_backend.upstream_cx_active: 0
cluster.local_backend.upstream_cx_close_notify: 0
cluster.local_backend.upstream_cx_connect_attempts_exceeded: 0
cluster.local_backend.upstream_cx_connect_fail: 0
cluster.local_backend.upstream_cx_connect_timeout: 0
cluster.local_backend.upstream_cx_destroy: 0
cluster.local_backend.upstream_cx_destroy_local: 0
cluster.local_backend.upstream_cx_destroy_local_with_active_rq: 0
cluster.local_backend.upstream_cx_destroy_remote: 0
cluster.local_backend.upstream_cx_destroy_remote_with_active_rq: 0
cluster.local_backend.upstream_cx_destroy_with_active_rq: 0
cluster.local_backend.upstream_cx_http1_total: 0
cluster.local_backend.upstream_cx_http2_total: 0
cluster.local_backend.upstream_cx_idle_timeout: 0
cluster.local_backend.upstream_cx_max_requests: 0
cluster.local_backend.upstream_cx_none_healthy: 0
cluster.local_backend.upstream_cx_overflow: 0
cluster.local_backend.upstream_cx_protocol_error: 0
cluster.local_backend.upstream_cx_rx_bytes_buffered: 0
cluster.local_backend.upstream_cx_rx_bytes_total: 0
cluster.local_backend.upstream_cx_total: 0
cluster.local_backend.upstream_cx_tx_bytes_buffered: 0
cluster.local_backend.upstream_cx_tx_bytes_total: 0
cluster.local_backend.upstream_flow_control_backed_up_total: 0
cluster.local_backend.upstream_flow_control_drained_total: 0
cluster.local_backend.upstream_flow_control_paused_reading_total: 0
cluster.local_backend.upstream_flow_control_resumed_reading_total: 0
cluster.local_backend.upstream_rq_404: 1
cluster.local_backend.upstream_rq_4xx: 1
cluster.local_backend.upstream_rq_active: 0
cluster.local_backend.upstream_rq_cancelled: 0
cluster.local_backend.upstream_rq_completed: 1
cluster.local_backend.upstream_rq_maintenance_mode: 0
cluster.local_backend.upstream_rq_pending_active: 0
cluster.local_backend.upstream_rq_pending_failure_eject: 0
cluster.local_backend.upstream_rq_pending_overflow: 0
cluster.local_backend.upstream_rq_pending_total: 0
cluster.local_backend.upstream_rq_per_try_timeout: 0
cluster.local_backend.upstream_rq_retry: 0
cluster.local_backend.upstream_rq_retry_overflow: 0
cluster.local_backend.upstream_rq_retry_success: 0
cluster.local_backend.upstream_rq_rx_reset: 0
cluster.local_backend.upstream_rq_timeout: 0
cluster.local_backend.upstream_rq_total: 0
cluster.local_backend.upstream_rq_tx_reset: 0
cluster.local_backend.version: 0
cluster_manager.active_clusters: 2
cluster_manager.cluster_added: 2
cluster_manager.cluster_modified: 0
cluster_manager.cluster_removed: 0
cluster_manager.cluster_updated: 0
cluster_manager.cluster_updated_via_merge: 0
cluster_manager.update_merge_cancelled: 0
cluster_manager.update_out_of_merge_window: 0
cluster_manager.warming_clusters: 0
filesystem.flushed_by_timer: 0
filesystem.reopen_failed: 0
filesystem.write_buffered: 0
filesystem.write_completed: 0
filesystem.write_total_buffered: 0
http.admin.downstream_cx_active: 1
http.admin.downstream_cx_delayed_close_timeout: 0
http.admin.downstream_cx_destroy: 0
http.admin.downstream_cx_destroy_active_rq: 0
http.admin.downstream_cx_destroy_local: 0
http.admin.downstream_cx_destroy_local_active_rq: 0
http.admin.downstream_cx_destroy_remote: 0
http.admin.downstream_cx_destroy_remote_active_rq: 0
http.admin.downstream_cx_drain_close: 0
http.admin.downstream_cx_http1_active: 1
http.admin.downstream_cx_http1_total: 1
http.admin.downstream_cx_http2_active: 0
http.admin.downstream_cx_http2_total: 0
http.admin.downstream_cx_idle_timeout: 0
http.admin.downstream_cx_overload_disable_keepalive: 0
http.admin.downstream_cx_protocol_error: 0
http.admin.downstream_cx_rx_bytes_buffered: 423
http.admin.downstream_cx_rx_bytes_total: 423
http.admin.downstream_cx_ssl_active: 0
http.admin.downstream_cx_ssl_total: 0
http.admin.downstream_cx_total: 1
http.admin.downstream_cx_tx_bytes_buffered: 0
http.admin.downstream_cx_tx_bytes_total: 0
http.admin.downstream_cx_upgrades_active: 0
http.admin.downstream_cx_upgrades_total: 0
http.admin.downstream_flow_control_paused_reading_total: 0
http.admin.downstream_flow_control_resumed_reading_total: 0
http.admin.downstream_rq_1xx: 0
http.admin.downstream_rq_2xx: 0
http.admin.downstream_rq_3xx: 0
http.admin.downstream_rq_4xx: 0
http.admin.downstream_rq_5xx: 0
http.admin.downstream_rq_active: 1
http.admin.downstream_rq_completed: 0
http.admin.downstream_rq_http1_total: 1
http.admin.downstream_rq_http2_total: 0
http.admin.downstream_rq_idle_timeout: 0
http.admin.downstream_rq_non_relative_path: 0
http.admin.downstream_rq_overload_close: 0
http.admin.downstream_rq_response_before_rq_complete: 0
http.admin.downstream_rq_rx_reset: 0
http.admin.downstream_rq_timeout: 0
http.admin.downstream_rq_too_large: 0
http.admin.downstream_rq_total: 1
http.admin.downstream_rq_tx_reset: 0
http.admin.downstream_rq_ws_on_non_ws_route: 0
http.admin.rs_too_large: 0
http.async-client.no_cluster: 0
http.async-client.no_route: 0
http.async-client.rq_direct_response: 0
http.async-client.rq_redirect: 0
http.async-client.rq_total: 1
http.ingress_http.downstream_cx_active: 1
http.ingress_http.downstream_cx_delayed_close_timeout: 0
http.ingress_http.downstream_cx_destroy: 0
http.ingress_http.downstream_cx_destroy_active_rq: 0
http.ingress_http.downstream_cx_destroy_local: 0
http.ingress_http.downstream_cx_destroy_local_active_rq: 0
http.ingress_http.downstream_cx_destroy_remote: 0
http.ingress_http.downstream_cx_destroy_remote_active_rq: 0
http.ingress_http.downstream_cx_drain_close: 0
http.ingress_http.downstream_cx_http1_active: 1
http.ingress_http.downstream_cx_http1_total: 1
http.ingress_http.downstream_cx_http2_active: 0
http.ingress_http.downstream_cx_http2_total: 0
http.ingress_http.downstream_cx_idle_timeout: 0
http.ingress_http.downstream_cx_overload_disable_keepalive: 0
http.ingress_http.downstream_cx_protocol_error: 0
http.ingress_http.downstream_cx_rx_bytes_buffered: 448
http.ingress_http.downstream_cx_rx_bytes_total: 448
http.ingress_http.downstream_cx_ssl_active: 0
http.ingress_http.downstream_cx_ssl_total: 0
http.ingress_http.downstream_cx_total: 1
http.ingress_http.downstream_cx_tx_bytes_buffered: 0
http.ingress_http.downstream_cx_tx_bytes_total: 358
http.ingress_http.downstream_cx_upgrades_active: 0
http.ingress_http.downstream_cx_upgrades_total: 0
http.ingress_http.downstream_flow_control_paused_reading_total: 0
http.ingress_http.downstream_flow_control_resumed_reading_total: 0
http.ingress_http.downstream_rq_1xx: 0
http.ingress_http.downstream_rq_2xx: 0
http.ingress_http.downstream_rq_3xx: 0
http.ingress_http.downstream_rq_4xx: 1
http.ingress_http.downstream_rq_5xx: 0
http.ingress_http.downstream_rq_active: 0
http.ingress_http.downstream_rq_completed: 1
http.ingress_http.downstream_rq_http1_total: 1
http.ingress_http.downstream_rq_http2_total: 0
http.ingress_http.downstream_rq_idle_timeout: 0
http.ingress_http.downstream_rq_non_relative_path: 0
http.ingress_http.downstream_rq_overload_close: 0
http.ingress_http.downstream_rq_response_before_rq_complete: 0
http.ingress_http.downstream_rq_rx_reset: 0
http.ingress_http.downstream_rq_timeout: 0
http.ingress_http.downstream_rq_too_large: 0
http.ingress_http.downstream_rq_total: 1
http.ingress_http.downstream_rq_tx_reset: 0
http.ingress_http.downstream_rq_ws_on_non_ws_route: 0
http.ingress_http.no_cluster: 0
http.ingress_http.no_route: 0
http.ingress_http.rq_direct_response: 0
http.ingress_http.rq_redirect: 0
http.ingress_http.rq_total: 0
http.ingress_http.rs_too_large: 0
http.ingress_http.tracing.client_enabled: 0
http.ingress_http.tracing.health_check: 0
http.ingress_http.tracing.not_traceable: 0
http.ingress_http.tracing.random_sampling: 0
http.ingress_http.tracing.service_forced: 0
listener.0.0.0.0_8080.downstream_cx_active: 1
listener.0.0.0.0_8080.downstream_cx_destroy: 0
listener.0.0.0.0_8080.downstream_cx_total: 1
listener.0.0.0.0_8080.downstream_pre_cx_active: 0
listener.0.0.0.0_8080.downstream_pre_cx_timeout: 0
listener.0.0.0.0_8080.http.ingress_http.downstream_rq_1xx: 0
listener.0.0.0.0_8080.http.ingress_http.downstream_rq_2xx: 0
listener.0.0.0.0_8080.http.ingress_http.downstream_rq_3xx: 0
listener.0.0.0.0_8080.http.ingress_http.downstream_rq_4xx: 1
listener.0.0.0.0_8080.http.ingress_http.downstream_rq_5xx: 0
listener.0.0.0.0_8080.http.ingress_http.downstream_rq_completed: 1
listener.0.0.0.0_8080.no_filter_chain_match: 0
listener.admin.downstream_cx_active: 1
listener.admin.downstream_cx_destroy: 0
listener.admin.downstream_cx_total: 1
listener.admin.downstream_pre_cx_active: 0
listener.admin.downstream_pre_cx_timeout: 0
listener.admin.http.admin.downstream_rq_1xx: 0
listener.admin.http.admin.downstream_rq_2xx: 0
listener.admin.http.admin.downstream_rq_3xx: 0
listener.admin.http.admin.downstream_rq_4xx: 0
listener.admin.http.admin.downstream_rq_5xx: 0
listener.admin.http.admin.downstream_rq_completed: 0
listener.admin.no_filter_chain_match: 0
listener_manager.listener_added: 1
listener_manager.listener_create_failure: 0
listener_manager.listener_create_success: 8
listener_manager.listener_modified: 0
listener_manager.listener_removed: 0
listener_manager.total_listeners_active: 1
listener_manager.total_listeners_draining: 0
listener_manager.total_listeners_warming: 0
runtime.admin_overrides_active: 0
runtime.load_error: 0
runtime.load_success: 0
runtime.num_keys: 0
runtime.override_dir_exists: 0
runtime.override_dir_not_exists: 0
server.concurrency: 8
server.days_until_first_cert_expiring: 2147483647
server.hot_restart_epoch: 0
server.live: 1
server.memory_allocated: 3608808
server.memory_heap_size: 5242880
server.parent_connections: 0
server.total_connections: 1
server.uptime: 25
server.version: 1997534
server.watchdog_mega_miss: 0
server.watchdog_miss: 0
stats.overflow: 0
cluster.auth_cluster.internal.upstream_rq_time: P0(nan,1) P25(nan,1.025) P50(nan,1.05) P75(nan,1.075) P90(nan,1.09) P95(nan,1.095) P99(nan,1.099) P99.5(nan,1.0995) P99.9(nan,1.0999) P100(nan,1.1)
cluster.auth_cluster.upstream_cx_connect_ms: P0(nan,0) P25(nan,0) P50(nan,0) P75(nan,0) P90(nan,0) P95(nan,0) P99(nan,0) P99.5(nan,0) P99.9(nan,0) P100(nan,0)
cluster.auth_cluster.upstream_cx_length_ms: P0(nan,1) P25(nan,1.025) P50(nan,1.05) P75(nan,1.075) P90(nan,1.09) P95(nan,1.095) P99(nan,1.099) P99.5(nan,1.0995) P99.9(nan,1.0999) P100(nan,1.1)
cluster.auth_cluster.upstream_rq_time: P0(nan,1) P25(nan,1.025) P50(nan,1.05) P75(nan,1.075) P90(nan,1.09) P95(nan,1.095) P99(nan,1.099) P99.5(nan,1.0995) P99.9(nan,1.0999) P100(nan,1.1)
cluster.local_backend.upstream_cx_connect_ms: No recorded values
cluster.local_backend.upstream_cx_length_ms: No recorded values
http.admin.downstream_cx_length_ms: No recorded values
http.admin.downstream_rq_time: No recorded values
http.ingress_http.downstream_cx_length_ms: No recorded values
http.ingress_http.downstream_rq_time: P0(nan,3) P25(nan,3.025) P50(nan,3.05) P75(nan,3.075) P90(nan,3.09) P95(nan,3.095) P99(nan,3.099) P99.5(nan,3.0995) P99.9(nan,3.0999) P100(nan,3.1)
listener.0.0.0.0_8080.downstream_cx_length_ms: No recorded values
listener.admin.downstream_cx_length_ms: No recorded values

/clusters, 
local_backend::default_priority::max_connections::1024
local_backend::default_priority::max_pending_requests::1024
local_backend::default_priority::max_requests::1024
local_backend::default_priority::max_retries::3
local_backend::high_priority::max_connections::1024
local_backend::high_priority::max_pending_requests::1024
local_backend::high_priority::max_requests::1024
local_backend::high_priority::max_retries::3
local_backend::added_via_api::false
local_backend::0.0.0.0:0::cx_active::0
local_backend::0.0.0.0:0::cx_connect_fail::0
local_backend::0.0.0.0:0::cx_total::0
local_backend::0.0.0.0:0::rq_active::0
local_backend::0.0.0.0:0::rq_error::0
local_backend::0.0.0.0:0::rq_success::0
local_backend::0.0.0.0:0::rq_timeout::0
local_backend::0.0.0.0:0::rq_total::0
local_backend::0.0.0.0:0::health_flags::healthy
local_backend::0.0.0.0:0::weight::1
local_backend::0.0.0.0:0::region::
local_backend::0.0.0.0:0::zone::
local_backend::0.0.0.0:0::sub_zone::
local_backend::0.0.0.0:0::canary::false
local_backend::0.0.0.0:0::success_rate::-1
auth_cluster::default_priority::max_connections::1024
auth_cluster::default_priority::max_pending_requests::1024
auth_cluster::default_priority::max_requests::1024
auth_cluster::default_priority::max_retries::3
auth_cluster::high_priority::max_connections::1024
auth_cluster::high_priority::max_pending_requests::1024
auth_cluster::high_priority::max_requests::1024
auth_cluster::high_priority::max_retries::3
auth_cluster::added_via_api::false
auth_cluster::0.0.0.0:0::cx_active::0
auth_cluster::0.0.0.0:0::cx_connect_fail::0
auth_cluster::0.0.0.0:0::cx_total::1
auth_cluster::0.0.0.0:0::rq_active::0
auth_cluster::0.0.0.0:0::rq_error::0
auth_cluster::0.0.0.0:0::rq_success::1
auth_cluster::0.0.0.0:0::rq_timeout::0
auth_cluster::0.0.0.0:0::rq_total::1
auth_cluster::0.0.0.0:0::health_flags::healthy
auth_cluster::0.0.0.0:0::weight::1
auth_cluster::0.0.0.0:0::region::
auth_cluster::0.0.0.0:0::zone::
auth_cluster::0.0.0.0:0::sub_zone::
auth_cluster::0.0.0.0:0::canary::false
auth_cluster::0.0.0.0:0::success_rate::-1

/routes, 
nope

/server_info
{
 "version": "1e7adefe27951f13e2be141ce91a29727bdafd8b/1.9.0-dev/Clean/RELEASE",
 "state": "LIVE",
 "command_line_options": {
  "base_id": "0",
  "concurrency": 8,
  "config_path": "envoy.yaml",
  "config_yaml": "",
  "allow_unknown_fields": false,
  "admin_address_path": "",
  "local_address_ip_version": "v4",
  "log_level": "debug",
  "component_log_level": "",
  "log_format": "[%Y-%m-%d %T.%e][%t][%l][%n] %v",
  "log_path": "",
  "hot_restart_version": false,
  "service_cluster": "",
  "service_node": "",
  "service_zone": "",
  "mode": "Serve",
  "max_stats": "16384",
  "max_obj_name_len": "60",
  "disable_hot_restart": false,
  "enable_mutex_tracing": false,
  "restart_epoch": 0,
  "file_flush_interval": "10s",
  "drain_time": "600s",
  "parent_shutdown_time": "900s"
 },
 "uptime_current_epoch": "321s",
 "uptime_all_epochs": "321s"
}

Config:

static_resources:
  listeners:
  - address:
      socket_address:
        address: 0.0.0.0
        port_value: 8080
        protocol: TCP
    filter_chains:
      filters:
      - name: envoy.http_connection_manager
        config:
          codec_type: auto
          stat_prefix: ingress_http
          route_config:
            name: local_route
            response_headers_to_remove: "TEST-HEADER"
            virtual_hosts:
            - name: backend_virtual_host
              domains:
              - "*"
              routes:
              - match:
                  prefix: "/"
                route:
                  cluster: local_backend
          http_filters:
          - name: envoy.ext_authz
            config:
              http_service:
                server_uri:
                  uri: "http://127.0.0.1:5001/verify"
                  cluster: auth_cluster
                  timeout: 0.1s
          - name: envoy.router
            config: {}

  clusters:
  - name: local_backend
    connect_timeout: 0.25s
    type: logical_dns
    lb_policy: round_robin
    hosts:
    - socket_address:
        address: 127.0.0.1
        port_value: 5000
  - name: auth_cluster
    connect_timeout: 0.1s
    type: logical_dns
    lb_policy: round_robin
    hosts:
    - socket_address:
        address: 127.0.0.1
        port_value: 5001

admin:
  access_log_path: "/dev/stdout"
  address:
    socket_address:
      address: 0.0.0.0
      port_value: 8012

Logs:

[2018-12-20 00:41:02.962][004762][debug][main] [source/server/connection_handler_impl.cc:256] [C0] new connection [2018-12-20 00:41:02.962][004762][debug][http] [source/common/http/conn_manager_impl.cc:200] [C0] new stream [2018-12-20 00:41:02.964][004762][debug][http] [source/common/http/conn_manager_impl.cc:537] [C0][S3933711892607205960] request headers complete (end_stream=true): ':authority', '127.0.0.1:8080' ':path', '/dupa' ':method', 'GET' 'connection', 'keep-alive' 'cache-control', 'max-age=0' 'upgrade-insecure-requests', '1' 'user-agent', 'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.103 Safari/537.36 Vivaldi/2.1.1337.47' 'accept', 'text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8' 'accept-encoding', 'gzip, deflate, br' 'accept-language', 'pl-PL,pl;q=0.9,en-US;q=0.8,en;q=0.7'

[2018-12-20 00:41:02.964][004762][debug][http] [source/common/http/conn_manager_impl.cc:953] [C0][S3933711892607205960] request end stream [2018-12-20 00:41:02.965][004762][debug][router] [source/common/router/router.cc:265] [C0][S13096545413718075315] cluster 'auth_cluster' match for URL '/dupa' [2018-12-20 00:41:02.965][004762][debug][router] [source/common/router/router.cc:323] [C0][S13096545413718075315] router decoding headers: ':path', '/dupa' ':authority', '127.0.0.1:8080' ':method', 'GET' ':scheme', 'http' 'content-length', '0' 'x-envoy-internal', 'true' 'x-forwarded-for', '192.168.0.52' 'x-envoy-expected-rq-timeout-ms', '100'

[2018-12-20 00:41:02.965][004762][debug][pool] [source/common/http/http1/conn_pool.cc:80] creating a new connection [2018-12-20 00:41:02.965][004762][debug][client] [source/common/http/codec_client.cc:26] [C1] connecting [2018-12-20 00:41:02.965][004762][debug][connection] [source/common/network/connection_impl.cc:634] [C1] connecting to 127.0.0.1:5001 [2018-12-20 00:41:02.965][004762][debug][connection] [source/common/network/connection_impl.cc:643] [C1] connection in progress [2018-12-20 00:41:02.965][004762][debug][pool] [source/common/http/conn_pool_base.cc:20] queueing request due to no available connections [2018-12-20 00:41:02.965][004762][debug][connection] [source/common/network/connection_impl.cc:516] [C1] connected [2018-12-20 00:41:02.965][004762][debug][client] [source/common/http/codec_client.cc:64] [C1] connected [2018-12-20 00:41:02.965][004762][debug][pool] [source/common/http/http1/conn_pool.cc:234] [C1] attaching to next request [2018-12-20 00:41:02.965][004762][debug][router] [source/common/router/router.cc:1018] [C0][S13096545413718075315] pool ready [2018-12-20 00:41:02.967][004762][debug][router] [source/common/router/router.cc:610] [C0][S13096545413718075315] upstream headers complete: end_stream=false [2018-12-20 00:41:02.967][004762][debug][http] [source/common/http/async_client_impl.cc:93] async http request response headers (end_stream=false): ':status', '404' 'content-type', 'text/html' 'content-length', '233' 'server', 'Werkzeug/0.14.1 Python/3.6.7' 'date', 'Wed, 19 Dec 2018 23:41:02 GMT' 'x-envoy-upstream-service-time', '1'

[2018-12-20 00:41:02.967][004762][debug][client] [source/common/http/codec_client.cc:95] [C1] response complete [2018-12-20 00:41:02.967][004762][debug][filter] [source/extensions/filters/http/ext_authz/ext_authz.cc:134] [C0][S3933711892607205960] ext_authz rejected the request [2018-12-20 00:41:02.967][004762][debug][http] [source/common/http/conn_manager_impl.cc:1188] [C0][S3933711892607205960] encoding headers via codec (end_stream=false): ':status', '404' 'content-length', '233' 'content-type', 'text/plain' 'date', 'Wed, 19 Dec 2018 23:41:02 GMT' 'server', 'envoy'

[2018-12-20 00:41:02.968][004762][debug][pool] [source/common/http/http1/conn_pool.cc:191] [C1] response complete [2018-12-20 00:41:02.968][004762][debug][pool] [source/common/http/http1/conn_pool.cc:229] [C1] moving to ready [2018-12-20 00:41:02.968][004762][debug][connection] [source/common/network/connection_impl.cc:501] [C1] remote close [2018-12-20 00:41:02.968][004762][debug][connection] [source/common/network/connection_impl.cc:183] [C1] closing socket: 0 [2018-12-20 00:41:02.968][004762][debug][client] [source/common/http/codec_client.cc:82] [C1] disconnect. resetting 0 pending requests [2018-12-20 00:41:02.968][004762][debug][pool] [source/common/http/http1/conn_pool.cc:121] [C1] client disconnected [2018-12-20 00:41:07.770][004743][debug][main] [source/server/server.cc:143] flushing stats