envoyproxy/envoy

upstream ext_proc: option to wait for connection establishment

Open

#43,540 建立於 2026年2月18日

在 GitHub 查看
 (7 留言) (0 反應) (0 負責人)C++ (27,997 star) (5,373 fork)batch import
enhancementext-prochelp wanted

描述

Title: upstream ext-proc: option to wait for connection establishment

Description: Upstream HTTP filters are not guaranteed to execute after upstream connection establishment: https://github.com/envoyproxy/envoy/issues/10455#issuecomment-1446519546.

Upstream HTTP filters may require information about the upstream peer (such as Peer Cert Subject/IP) and application-layer data from the request, to determine if a request may be proxied or blocked, especially in DFP use cases.

Ext-Proc filters can expose an option to wait for upstream connection establishment before sending headers and attributes to the ext-proc server, to ensure that this info is available.

貢獻者指南

技術棧
cpp
領域
backendsecurityperformance
議題類型
feature
難度面向新貢獻者的預計實作難度，1 表示很小改動，5 表示專家級工作。
4
預計時間有經驗貢獻者完成調查、實作、測試並準備 pull request 的粗略時間範圍。
over 1 week
活動狀態議題目前的可參與程度：新鮮、活躍、陳舊、阻塞或等待維護者輸入。
active
清晰度議題是否清楚說明預期改動、驗收標準和下一步。
mostly clear
前置要求
C++ programmingEnvoy architectureHTTP filter developmentprotobuf configuration
新手友善度1-100 的估計分數，表示該議題對首次貢獻者的友善程度。
10
研究方向
Study the existing upstream HTTP filter and ext proc implementation in the Envoy codebase, particularly source/common/http/filter/ and source/extensions/filters/http/ext proc/. Understand how upstream connection establishment is sequenced with filter execution. Review the referenced issue #10455 comment for context. Propose a configuration field (e.g., 'wait for upstream connection') in the ext proc proto that delays sending headers until the upstream connection is established. Consider interactions with other filters and performance implications. Engage with maintainers on the issue to refine the design.