Re:Why Segment Chose Go, gRPC, and Envoy to Build Their New ...
by nzoschke on Saturday December 15, 2018 @01:12PM
(#18689547)
OP here.
We use the envoy authz filter.
For every incoming request envoy first calls out to a custom auth check service with all the request metadata like path and http headers.
The auth service can return a “fail” response which indicates to not forward the original request any further. Or it can return a “pass” response plus data to add to the original request headers.
We use the envoy authz filter.
For every incoming request envoy first calls out to a custom auth check service with all the request metadata like path and http headers.
The auth service can return a “fail” response which indicates to not forward the original request any further. Or it can return a “pass” response plus data to add to the original request headers.
Docs here:
https://www.envoyproxy.io/docs/envoy/latest/configuration/ht...