SNI dynamic forward proxy

extensions.filters.network.sni_dynamic_forward_proxy.v3.FilterConfig

[extensions.filters.network.sni_dynamic_forward_proxy.v3.FilterConfig proto]

Configuration for the SNI-based dynamic forward proxy filter. See the architecture overview for more information. Note this filter must be configured along with TLS inspector listener filter to work.

This extension may be referenced by the qualified name envoy.filters.network.sni_dynamic_forward_proxy

Note

This extension is functional but has not had substantial production burn time, use only with this caveat.

This extension has an unknown security posture and should only be used in deployments where both the downstream and upstream are trusted.

Tip

This extension extends and can be used with the following extension category:

  1. {
  2.   "dns_cache_config": "{...}",
  3.   "port_value": "..."
  4. }

dns_cache_config

(extensions.common.dynamic_forward_proxy.v3.DnsCacheConfig, REQUIRED) The DNS cache configuration that the filter will attach to. Note this configuration must match that of associated dynamic forward proxy cluster configuration.

port_value

(uint32) The port number to connect to the upstream.