ir

Feb 5, 2026

Changes in this version

+ const RequestIDExtensionActionDisable

+ const RequestIDExtensionActionPack

+ const RequestIDExtensionActionPackAndSample

+ const RequestIDExtensionActionSample

+ func SliceToMap(s []MapEntry) map[string]string

+ type APIKeyCredential struct

+ Client PrivateBytes

+ Key PrivateBytes

+ func (in *APIKeyCredential) DeepCopy() *APIKeyCredential

+ func (in *APIKeyCredential) DeepCopyInto(out *APIKeyCredential)

type AddHeader

+ AddIfAbsent bool

+ type BackendMetrics struct

+ RouteStatName *string

+ func (in *BackendMetrics) DeepCopy() *BackendMetrics

+ func (in *BackendMetrics) DeepCopyInto(out *BackendMetrics)

+ type BackendTelemetry struct

+ Metrics *BackendMetrics

+ Tracing *BackendTracing

+ func (in *BackendTelemetry) DeepCopy() *BackendTelemetry

+ func (in *BackendTelemetry) DeepCopyInto(out *BackendTelemetry)

+ type BackendTracing struct

+ CustomTags []CustomTagMapEntry

+ SamplingFraction *gwapiv1.Fraction

+ SpanName *egv1a1.TracingSpanName

+ Tags []MapEntry

+ func (in *BackendTracing) DeepCopy() *BackendTracing

+ func (in *BackendTracing) DeepCopyInto(out *BackendTracing)

type BackendWeights

+ NoEndpoints uint32

+ func (b *BackendWeights) UnavailableWeight() uint32

type Compression

+ ChooseFirst bool

+ MinContentLength *uint32

type ConsistentHash

+ QueryParams []*egv1a1.QueryParam

+ type ContextExtention struct

+ Name string

+ Value PrivateBytes

+ func (in *ContextExtention) DeepCopy() *ContextExtention

+ func (in *ContextExtention) DeepCopyInto(out *ContextExtention)

+ type CustomTagMapEntry struct

+ Key string

+ Value egv1a1.CustomTag

+ func CustomTagMapToSlice(m map[string]egv1a1.CustomTag) []CustomTagMapEntry

+ func (in *CustomTagMapEntry) DeepCopy() *CustomTagMapEntry

+ func (in *CustomTagMapEntry) DeepCopyInto(out *CustomTagMapEntry)

type DNS

+ Name string

type DestinationFilters

+ URLRewrite *URLRewrite

type DestinationSetting

+ Invalid bool

type ExtAuth

+ ContextExtensions []*ContextExtention

type HTTPListener

+ MatchBackendScheme bool

+ RequestID *RequestIDExtensionAction

type HTTPRoute

+ CookieMatches []*StringMatch

+ StatName *string

+ func (h *HTTPRoute) IsDynamicResolverRoute() bool

type HeaderSettings

+ EarlyRemoveRequestHeadersOnMatch []*StringMatch

+ LateRemoveResponseHeadersOnMatch []*StringMatch

+ type MapEntry struct

+ Key string

+ Value string

+ func MapToSlice(m map[string]string) []MapEntry

+ func (in *MapEntry) DeepCopy() *MapEntry

+ func (in *MapEntry) DeepCopyInto(out *MapEntry)

type OpenTelemetryAccessLog

+ Headers []gwapiv1.HTTPHeader

+ ResourceAttributes []MapEntry

+ type PolicyMetadata struct

+ Kind string

+ Name string

+ Namespace string

type ProxyInfra

+ ResolvedMetricSinks []ResolvedMetricSink

+ type QueryParamMatch struct

+ func (in *QueryParamMatch) DeepCopy() *QueryParamMatch

+ func (in *QueryParamMatch) DeepCopyInto(out *QueryParamMatch)

type RateLimitRule

+ QueryParamMatches []*QueryParamMatch

+ ShadowMode *bool

+ type RequestIDExtensionAction egv1a1.RequestIDExtensionAction

+ type ResolvedMetricSink struct

+ Authority string

+ Destination RouteDestination

+ Headers []gwapiv1.HTTPHeader

+ ReportCountersAsDeltas bool

+ ReportHistogramsAsDeltas bool

+ ResourceAttributes map[string]string

+ func (in *ResolvedMetricSink) DeepCopy() *ResolvedMetricSink

+ func (in *ResolvedMetricSink) DeepCopyInto(out *ResolvedMetricSink)

type ResourceMetadata

+ Policies []*PolicyMetadata

type TCPRoute

+ Metadata *ResourceMetadata

+ StatName *string

type Tracing

+ Headers []gwapiv1.HTTPHeader

+ ResourceAttributes []MapEntry

+ SpanName *egv1a1.TracingSpanName

+ Tags []MapEntry

Dec 5, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Nov 10, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Changes in this version

type BackendConnection

+ Preconnect *Preconnect

type ConnectionLimit

+ MaxConnectionDuration *metav1.Duration

+ MaxRequestsPerConnection *uint32

+ MaxStreamDuration *metav1.Duration

type ConsistentHash

+ Headers []*egv1a1.Header

type CustomResponse

+ AddResponseHeaders []AddHeader

type DestinationAddressType

+ const UDS

type ExtAuth

+ Timeout *metav1.Duration

type HTTP1Settings

+ DisableSafeMaxConnectionDuration bool

type HTTPTimeout

+ MaxStreamDuration *metav1.Duration

type HeaderSettings

+ LateAddResponseHeaders []AddHeader

+ LateRemoveResponseHeaders []string

type OIDC

+ CSRFTokenTTL *metav1.Duration

+ DisableTokenEncryption bool

type OutlierDetection

+ FailurePercentageThreshold *uint32

+ type Preconnect struct

+ PerEndpointPercent *uint32

+ PredictivePercent *uint32

+ func (in *Preconnect) DeepCopy() *Preconnect

+ func (in *Preconnect) DeepCopyInto(out *Preconnect)

type PreferLocalZone

+ PercentageEnabled *uint32

type RateLimitRule

+ MethodMatches []*StringMatch

+ PathMatch *StringMatch

type RemoteJWKS

+ CacheDuration *metav1.Duration

type TCPRoute

+ Authorization *Authorization

+ Preconnect *Preconnect

type TLSCertificate

+ OCSPStaple []byte

type TLSConfig

+ Crl *TLSCrl

+ type TLSCrl struct

+ Data []byte

+ Name string

+ OnlyVerifyLeafCertificate bool

+ func (in *TLSCrl) DeepCopy() *TLSCrl

+ func (in *TLSCrl) DeepCopyInto(out *TLSCrl)

Oct 31, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Oct 27, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Jan 12, 2026

Changes in this version

type EnvoyPatchPolicyStatus

+ Generation int64

Dec 5, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Nov 14, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Changes in this version

+ const MaxPort

Oct 18, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Oct 9, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Oct 3, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Sep 16, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Aug 8, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Changes in this version

+ const ResetBeforeRequest

+ var ErrHealthCheckInitialJitterInvalid = errors.New("field HealthCheck.InitialJitter should be greater than or equal to 0")

+ var ErrTLSCertEmpty = errors.New("field certificate must be specified")

+ func MetaV1DurationPtr(d time.Duration) *metav1.Duration

type APIKeyAuth

+ ForwardClientIDHeader *string

+ Sanitize *bool

type ActiveHealthCheck

+ InitialJitter *gwapiv1.Duration

type ClientConnection

+ MaxAcceptPerSocketEvent *uint32

+ type ConnectConfig struct

+ Terminate bool

+ func (in *ConnectConfig) DeepCopy() *ConnectConfig

+ func (in *ConnectConfig) DeepCopyInto(out *ConnectConfig)

type CoreListenerDetails

+ ExternalPort uint32

type DestinationEndpoint

+ Hostname *string

type DestinationSetting

+ IsCustomBackend bool

+ Metadata *ResourceMetadata

+ PreferLocal *PreferLocalZone

+ type EndpointOverride struct

+ ExtractFrom []EndpointOverrideExtractFrom

+ func (in *EndpointOverride) DeepCopy() *EndpointOverride

+ func (in *EndpointOverride) DeepCopyInto(out *EndpointOverride)

+ type EndpointOverrideExtractFrom struct

+ Header *string

+ func (in *EndpointOverrideExtractFrom) DeepCopy() *EndpointOverrideExtractFrom

+ func (in *EndpointOverrideExtractFrom) DeepCopyInto(out *EndpointOverrideExtractFrom)

+ type ForceLocalZone struct

+ MinEndpointsInZoneThreshold *uint32

+ func (in *ForceLocalZone) DeepCopy() *ForceLocalZone

+ func (in *ForceLocalZone) DeepCopyInto(out *ForceLocalZone)

+ type GlobalResources struct

+ EnvoyClientCertificate *TLSCertificate

+ ProxyServiceCluster *RouteDestination

+ func (in *GlobalResources) DeepCopy() *GlobalResources

+ func (in *GlobalResources) DeepCopyInto(out *GlobalResources)

type HTTPClientTimeout

+ StreamIdleTimeout *metav1.Duration

type HTTPListener

+ ProxyProtocol *ProxyProtocolSettings

type HTTPRoute

+ func (h *HTTPRoute) NeedsClusterPerSetting() bool

+ type HTTPUpgradeConfig struct

+ Connect *ConnectConfig

+ Type string

+ func (in *HTTPUpgradeConfig) DeepCopy() *HTTPUpgradeConfig

+ func (in *HTTPUpgradeConfig) DeepCopyInto(out *HTTPUpgradeConfig)

type LoadBalancer

+ EndpointOverride *EndpointOverride

+ PreferLocal *PreferLocalZone

+ type LoadBalancerType string

+ const ConsistentHashLoadBalancer

+ const LeastRequestLoadBalancer

+ const RandomLoadBalancer

+ const RoundRobinLoadBalancer

type OIDC

+ CookieConfig *egv1a1.OIDCCookieConfig

+ DenyRedirect *egv1a1.OIDCDenyRedirect

+ PassThroughAuthHeader bool

type OIDCProvider

+ EndSessionEndpoint *string

+ type PreferLocalZone struct

+ Force *ForceLocalZone

+ MinEndpointsThreshold *uint64

+ func (in *PreferLocalZone) DeepCopy() *PreferLocalZone

+ func (in *PreferLocalZone) DeepCopyInto(out *PreferLocalZone)

+ type ProxyProtocolSettings struct

+ Optional bool

+ func (in *ProxyProtocolSettings) DeepCopy() *ProxyProtocolSettings

+ func (in *ProxyProtocolSettings) DeepCopyInto(out *ProxyProtocolSettings)

type ResponseOverrideRule

+ Redirect *Redirect

type Retry

+ NumAttemptsPerPriority *int32

type RouteDestination

+ Metadata *ResourceMetadata

+ StatName *string

+ func (r *RouteDestination) HasPreferLocalZone() bool

type TCPListener

+ ProxyProtocol *ProxyProtocolSettings

type TLSConfig

+ MatchTypedSubjectAltNames []*StringMatch

+ VerifyCertificateHash []string

+ VerifyCertificateSpki []string

type TLSUpstreamConfig

+ InsecureSkipVerify bool

type Xds

+ ExtensionServerPolicies []*UnstructuredRef

+ GlobalResources *GlobalResources

Aug 5, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Jul 30, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Dec 5, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Nov 19, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Oct 20, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Sep 17, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Aug 11, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Jul 4, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Jun 4, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Changes in this version

type InfraMetadata

+ OwnerReference *ResourceMetadata

+ type SubjectAltName struct

+ Hostname *string

+ URI *string

+ func (in *SubjectAltName) DeepCopy() *SubjectAltName

+ func (in *SubjectAltName) DeepCopyInto(out *SubjectAltName)

type TLSUpstreamConfig

+ SubjectAltNames []SubjectAltName

May 14, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Changes in this version

+ const ExtProcBodyFullDuplexStreamed

+ const RequestIDActionDisable

+ const RequestIDActionGenerate

+ const RequestIDActionPreserve

+ const RequestIDActionPreserveOrGenerate

+ var ErrCredentialInjectionCredentialEmpty = errors.New("field CredentialInjection.Credential must be specified")

+ var ErrPanicThresholdInvalid = errors.New("PanicThreshold value is outside of 0-100 range")

type AuthorizationRule

+ Operation *egv1a1.Operation

type BasicAuth

+ ForwardUsernameHeader *string

type CircuitBreaker

+ PerEndpoint *PerEndpointCircuitBreakers

+ type CredentialInjection struct

+ Credential PrivateBytes

+ Header *string

+ Name string

+ Overwrite *bool

+ func (c *CredentialInjection) Validate() error

+ func (in *CredentialInjection) DeepCopy() *CredentialInjection

+ func (in *CredentialInjection) DeepCopyInto(out *CredentialInjection)

type DNS

+ LookupFamily *egv1a1.DNSLookupFamily

type DestinationEndpoint

+ Zone *string

type DestinationFilters

+ CredentialInjection *CredentialInjection

type DestinationSetting

+ IsDynamicResolver bool

+ Name string

+ ZoneAwareRoutingEnabled bool

type EnvoyExtensionFeatures

+ Luas []Lua

type HTTPListener

+ TLSOverlaps bool

type HTTPRoute

+ CredentialInjection *CredentialInjection

type HeaderSettings

+ RequestID *RequestIDAction

type HealthCheck

+ PanicThreshold *uint32

type JWTProvider

+ LocalJWKS *string

+ type Lua struct

+ Code *string

+ Name string

+ func (in *Lua) DeepCopy() *Lua

+ func (in *Lua) DeepCopyInto(out *Lua)

+ type MirrorPolicy struct

+ Destination *RouteDestination

+ Percentage *float32

+ func (in *MirrorPolicy) DeepCopy() *MirrorPolicy

+ func (in *MirrorPolicy) DeepCopyInto(out *MirrorPolicy)

+ type PerEndpointCircuitBreakers struct

+ MaxConnections *uint32

+ func (in *PerEndpointCircuitBreakers) DeepCopy() *PerEndpointCircuitBreakers

+ func (in *PerEndpointCircuitBreakers) DeepCopyInto(out *PerEndpointCircuitBreakers)

type Principal

+ Headers []egv1a1.AuthorizationHeaderMatch

type ProxyInfra

+ Namespace string

type RateLimitRule

+ Name string

+ Shared *bool

+ type ReadyListener struct

+ Address string

+ IPFamily egv1a1.IPFamily

+ Path string

+ Port uint32

+ func (in *ReadyListener) DeepCopy() *ReadyListener

+ func (in *ReadyListener) DeepCopyInto(out *ReadyListener)

+ type RequestBuffer struct

+ Limit resource.Quantity

+ func (in *RequestBuffer) DeepCopy() *RequestBuffer

+ func (in *RequestBuffer) DeepCopyInto(out *RequestBuffer)

+ type RequestIDAction egv1a1.RequestIDAction

type RouteDestination

+ func (r *RouteDestination) HasFiltersInSettings() bool

+ func (r *RouteDestination) HasMixedEndpoints() bool

+ func (r *RouteDestination) HasZoneAwareRouting() bool

+ func (r *RouteDestination) NeedsClusterPerSetting() bool

type TrafficFeatures

+ HTTPUpgrade []string

+ RequestBuffer *RequestBuffer

+ Telemetry *egv1a1.BackendTelemetry

type Xds

+ ReadyListener *ReadyListener

May 1, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Apr 30, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

May 9, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Mar 24, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Mar 5, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Jan 31, 2025 GO-2025-3504 +1 more

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Changes in this version

+ var ErrBothNumTrustedHopsAndTrustedCIDRsInvalid = errors.New(...)

+ var ErrBothXForwardedForAndCustomHeaderInvalid = errors.New(...)

+ type APIKeyAuth struct

+ Credentials map[string]PrivateBytes

+ ExtractFrom []*ExtractFrom

+ func (in *APIKeyAuth) DeepCopy() *APIKeyAuth

+ func (in *APIKeyAuth) DeepCopyInto(out *APIKeyAuth)

+ type BodyToExtAuth struct

+ MaxRequestBytes uint32

+ func (in *BodyToExtAuth) DeepCopy() *BodyToExtAuth

+ func (in *BodyToExtAuth) DeepCopyInto(out *BodyToExtAuth)

+ type Compression struct

+ Type egv1a1.CompressorType

+ func (in *Compression) DeepCopy() *Compression

+ func (in *Compression) DeepCopyInto(out *Compression)

type DestinationEndpoint

+ Draining bool

type DestinationSetting

+ IPFamily *IPFamily

type ExtAuth

+ BodyToExtAuth *BodyToExtAuth

type ExtProc

+ AllowModeOverride bool

+ ForwardingMetadataNamespaces []string

+ ReceivingMetadataNamespaces []string

+ RequestAttributes []string

+ ResponseAttributes []string

+ type ExtractFrom struct

+ Cookies []string

+ Headers []string

+ Params []string

+ func (in *ExtractFrom) DeepCopy() *ExtractFrom

+ func (in *ExtractFrom) DeepCopyInto(out *ExtractFrom)

type HTTPListener

+ PreserveRouteOrder bool

type HTTPRoute

+ func (h *HTTPRoute) GetRetry() *Retry

+ type JWTProvider struct

+ Audiences []string

+ ClaimToHeaders []egv1a1.ClaimToHeader

+ ExtractFrom *egv1a1.JWTExtractor

+ Issuer string

+ Name string

+ RecomputeRoute *bool

+ RemoteJWKS RemoteJWKS

+ func (in *JWTProvider) DeepCopy() *JWTProvider

+ func (in *JWTProvider) DeepCopyInto(out *JWTProvider)

+ type PrivateBytes []byte

+ func (p *PrivateBytes) UnmarshalJSON(data []byte) error

+ func (p PrivateBytes) MarshalText() ([]byte, error)

+ func (p PrivateBytes) String() string

+ type RateLimitCost struct

+ Format *string

+ Number *uint64

+ func (in *RateLimitCost) DeepCopy() *RateLimitCost

+ func (in *RateLimitCost) DeepCopyInto(out *RateLimitCost)

type RateLimitRule

+ RequestCost *RateLimitCost

+ ResponseCost *RateLimitCost

+ type RemoteJWKS struct

+ Destination *RouteDestination

+ Traffic *TrafficFeatures

+ URI string

+ func (in *RemoteJWKS) DeepCopy() *RemoteJWKS

+ func (in *RemoteJWKS) DeepCopyInto(out *RemoteJWKS)

type SecurityFeatures

+ APIKeyAuth *APIKeyAuth

type TrafficFeatures

+ Compression []*Compression

type Wasm

+ HostKeys []string

Jan 24, 2025 GO-2025-3504 +1 more

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Mar 25, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Mar 6, 2025 GO-2026-4312

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Jan 23, 2025 GO-2025-3504 +1 more

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Jan 14, 2025 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Changes in this version

type TLSUpstreamConfig

+ func (t *TLSUpstreamConfig) ToTLSConfig() (*tls.Config, error)

type TLSVersion

+ func (t TLSVersion) Int() uint16

Dec 13, 2024 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Dec 2, 2024 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Changes in this version

type IPFamily

+ const DualStack

Nov 28, 2024 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Nov 7, 2024 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Nov 6, 2024 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Changes in this version

+ const EmptyPath

+ const ProxyAccessLogTypeListener

+ const ProxyAccessLogTypeRoute

+ var ErrHTTPHostModifierDoubleReplace = errors.New(...)

+ var ErrHTTPPathRegexModifierNoSetting = errors.New(...)

+ var ErrStringMatchInvertDistinctInvalid = errors.New("only one of the Invert or Distinct fields can be set")

type ALSAccessLog

+ LogType *ProxyAccessLogType

+ Traffic *TrafficFeatures

type ActiveHealthCheck

+ GRPC *GRPCHealthChecker

+ type CookieBasedSessionPersistence struct

+ Name string

+ TTL *metav1.Duration

+ func (in *CookieBasedSessionPersistence) DeepCopy() *CookieBasedSessionPersistence

+ func (in *CookieBasedSessionPersistence) DeepCopyInto(out *CookieBasedSessionPersistence)

type CoreListenerDetails

+ IPFamily *IPFamily

+ type CustomResponse struct

+ Body *string

+ ContentType *string

+ StatusCode *uint32

+ func (in *CustomResponse) DeepCopy() *CustomResponse

+ func (in *CustomResponse) DeepCopyInto(out *CustomResponse)

+ func (r *CustomResponse) Validate() error

+ type CustomResponseMatch struct

+ StatusCodes []StatusCodeMatch

+ func (in *CustomResponseMatch) DeepCopy() *CustomResponseMatch

+ func (in *CustomResponseMatch) DeepCopyInto(out *CustomResponseMatch)

+ type DNS struct

+ DNSRefreshRate *metav1.Duration

+ RespectDNSTTL *bool

+ func (in *DNS) DeepCopy() *DNS

+ func (in *DNS) DeepCopyInto(out *DNS)

type DestinationSetting

+ Priority *uint32

type ExtAuth

+ RecomputeRoute *bool

+ Traffic *TrafficFeatures

type ExtProc

+ Traffic *TrafficFeatures

+ type ExtendedHTTPPathModifier struct

+ RegexMatchReplace *RegexMatchReplace

+ func (in *ExtendedHTTPPathModifier) DeepCopy() *ExtendedHTTPPathModifier

+ func (in *ExtendedHTTPPathModifier) DeepCopyInto(out *ExtendedHTTPPathModifier)

+ func (r ExtendedHTTPPathModifier) Validate() error

+ type GRPCHealthChecker struct

+ Service *string

+ func (in *GRPCHealthChecker) DeepCopy() *GRPCHealthChecker

+ func (in *GRPCHealthChecker) DeepCopyInto(out *GRPCHealthChecker)

type HTTP2Settings

+ ResetStreamOnError *bool

+ type HTTPHostModifier struct

+ Backend *bool

+ Header *string

+ Name *string

+ func (in *HTTPHostModifier) DeepCopy() *HTTPHostModifier

+ func (in *HTTPHostModifier) DeepCopyInto(out *HTTPHostModifier)

+ func (r HTTPHostModifier) Validate() error

type HTTPRoute

+ SessionPersistence *SessionPersistence

+ type HeaderBasedSessionPersistence struct

+ Name string

+ func (in *HeaderBasedSessionPersistence) DeepCopy() *HeaderBasedSessionPersistence

+ func (in *HeaderBasedSessionPersistence) DeepCopyInto(out *HeaderBasedSessionPersistence)

type HeaderSettings

+ EarlyAddRequestHeaders []AddHeader

+ EarlyRemoveRequestHeaders []string

+ type IPFamily string

+ const Dualstack

+ const IPv4

+ const IPv6

type Infra

+ func (i *Infra) JSONString() string

type JSONAccessLog

+ LogType *ProxyAccessLogType

+ type JSONPatchOp string

+ const JSONPatchOpAdd

+ const JSONPatchOpCopy

+ const JSONPatchOpMove

+ const JSONPatchOpRemove

+ const JSONPatchOpReplace

+ const JSONPatchOpTest

+ func TranslateJSONPatchOp(op egv1a1.JSONPatchOperationType) JSONPatchOp

type JSONPatchOperation

+ JSONPath *string

+ func (o *JSONPatchOperation) IsJSONPathNilOrEmpty() bool

+ func (o *JSONPatchOperation) IsPathNilOrEmpty() bool

+ func (o *JSONPatchOperation) Validate() error

type Metrics

+ EnableRequestResponseSizesStats bool

type OIDC

+ CookieDomain *string

type OIDCProvider

+ Destination *RouteDestination

+ Traffic *TrafficFeatures

+ func (in *OIDCProvider) DeepCopy() *OIDCProvider

+ func (in *OIDCProvider) DeepCopyInto(out *OIDCProvider)

type OpenTelemetryAccessLog

+ LogType *ProxyAccessLogType

+ Traffic *TrafficFeatures

type Principal

+ JWT *egv1a1.JWTPrincipal

+ type ProxyAccessLogType egv1a1.ProxyAccessLogType

+ type RegexMatchReplace struct

+ Pattern string

+ Substitution string

+ func (in *RegexMatchReplace) DeepCopy() *RegexMatchReplace

+ func (in *RegexMatchReplace) DeepCopyInto(out *RegexMatchReplace)

+ type ResponseOverride struct

+ Name string

+ Rules []ResponseOverrideRule

+ func (in *ResponseOverride) DeepCopy() *ResponseOverride

+ func (in *ResponseOverride) DeepCopyInto(out *ResponseOverride)

+ type ResponseOverrideRule struct

+ Match CustomResponseMatch

+ Name string

+ Response CustomResponse

+ func (in *ResponseOverrideRule) DeepCopy() *ResponseOverrideRule

+ func (in *ResponseOverrideRule) DeepCopyInto(out *ResponseOverrideRule)

+ type SessionPersistence struct

+ Cookie *CookieBasedSessionPersistence

+ Header *HeaderBasedSessionPersistence

+ func (in *SessionPersistence) DeepCopy() *SessionPersistence

+ func (in *SessionPersistence) DeepCopyInto(out *SessionPersistence)

+ type StatusCodeMatch struct

+ Range *StatusCodeRange

+ Value *int

+ func (in *StatusCodeMatch) DeepCopy() *StatusCodeMatch

+ func (in *StatusCodeMatch) DeepCopyInto(out *StatusCodeMatch)

+ type StatusCodeRange struct

+ End int

+ Start int

type StringMatch

+ Invert *bool

type TCPRoute

+ DNS *DNS

type TLSConfig

+ StatefulSessionResumption bool

+ StatelessSessionResumption bool

type TextAccessLog

+ LogType *ProxyAccessLogType

type Tracing

+ Traffic *TrafficFeatures

type TrafficFeatures

+ DNS *DNS

+ HTTP2 *HTTP2Settings

+ ResponseOverride *ResponseOverride

type UDPRoute

+ DNS *DNS

type URLRewrite

+ Host *HTTPHostModifier

type Xds

+ func (x *Xds) JSONString() string

Oct 25, 2024 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Dec 12, 2024 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Nov 4, 2024 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Sep 24, 2024 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Sep 12, 2024 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Jul 23, 2024 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Changes in this version

+ const ExtProcBodyBuffered

+ const ExtProcBodyBufferedPartial

+ const ExtProcBodyStreamed

+ const WithUnderscoresActionAllow

+ const WithUnderscoresActionDropHeader

+ const WithUnderscoresActionRejectRequest

+ var ErrDestEndpointUDSHostInvalid = errors.New("field Host must not be specified for Unix Domain Socket address")

+ var ErrDestEndpointUDSPortInvalid = errors.New("field Port must not be specified for Unix Domain Socket address")

+ var ErrRouteNameEmpty = errors.New("field Name must be specified")

+ var ErrTCPRouteSNIsEmpty = errors.New("field SNIs must be specified with at least a single server name entry")

+ type ALSAccessLog struct

+ Attributes map[string]string

+ CELMatches []string

+ Destination RouteDestination

+ HTTP *ALSAccessLogHTTP

+ LogName string

+ Text *string

+ Type egv1a1.ALSEnvoyProxyAccessLogType

+ func (in *ALSAccessLog) DeepCopy() *ALSAccessLog

+ func (in *ALSAccessLog) DeepCopyInto(out *ALSAccessLog)

+ type ALSAccessLogHTTP struct

+ RequestHeaders []string

+ ResponseHeaders []string

+ ResponseTrailers []string

+ func (in *ALSAccessLogHTTP) DeepCopy() *ALSAccessLogHTTP

+ func (in *ALSAccessLogHTTP) DeepCopyInto(out *ALSAccessLogHTTP)

type AccessLog

+ ALS []*ALSAccessLog

+ type Authorization struct

+ DefaultAction egv1a1.AuthorizationAction

+ Rules []*AuthorizationRule

+ func (in *Authorization) DeepCopy() *Authorization

+ func (in *Authorization) DeepCopyInto(out *Authorization)

+ type AuthorizationRule struct

+ Action egv1a1.AuthorizationAction

+ Name string

+ Principal Principal

+ func (in *AuthorizationRule) DeepCopy() *AuthorizationRule

+ func (in *AuthorizationRule) DeepCopyInto(out *AuthorizationRule)

+ type BackendConnection struct

+ BufferLimitBytes *uint32

+ func (in *BackendConnection) DeepCopy() *BackendConnection

+ func (in *BackendConnection) DeepCopyInto(out *BackendConnection)

type BackendWeights

+ Name string

type BasicAuth

+ Name string

type CIDRMatch

+ IP string

+ IsIPv6 bool

+ type ClientConnection struct

+ BufferLimitBytes *uint32

+ ConnectionLimit *ConnectionLimit

+ func (in *ClientConnection) DeepCopy() *ClientConnection

+ func (in *ClientConnection) DeepCopyInto(out *ClientConnection)

type ClientTimeout

+ TCP *TCPClientTimeout

+ type ConnectionLimit struct

+ CloseDelay *metav1.Duration

+ Value *uint64

+ func (in *ConnectionLimit) DeepCopy() *ConnectionLimit

+ func (in *ConnectionLimit) DeepCopyInto(out *ConnectionLimit)

type ConsistentHash

+ Cookie *egv1a1.Cookie

+ Header *Header

+ TableSize *uint64

+ type CoreListenerDetails struct

+ Address string

+ ExtensionRefs []*UnstructuredRef

+ Metadata *ResourceMetadata

+ Name string

+ Port uint32

+ func (in *CoreListenerDetails) DeepCopy() *CoreListenerDetails

+ func (in *CoreListenerDetails) DeepCopyInto(out *CoreListenerDetails)

+ func (l CoreListenerDetails) GetAddress() string

+ func (l CoreListenerDetails) GetExtensionRefs() []*UnstructuredRef

+ func (l CoreListenerDetails) GetName() string

+ func (l CoreListenerDetails) GetPort() uint32

type DestinationEndpoint

+ Path *string

+ type DestinationFilters struct

+ AddRequestHeaders []AddHeader

+ AddResponseHeaders []AddHeader

+ RemoveRequestHeaders []string

+ RemoveResponseHeaders []string

+ func (in *DestinationFilters) DeepCopy() *DestinationFilters

+ func (in *DestinationFilters) DeepCopyInto(out *DestinationFilters)

type DestinationSetting

+ Filters *DestinationFilters

+ type EnvoyExtensionFeatures struct

+ ExtProcs []ExtProc

+ Wasms []Wasm

+ func (in *EnvoyExtensionFeatures) DeepCopy() *EnvoyExtensionFeatures

+ func (in *EnvoyExtensionFeatures) DeepCopyInto(out *EnvoyExtensionFeatures)

type ExtAuth

+ FailOpen *bool

+ Name string

+ type ExtProc struct

+ Authority string

+ Destination RouteDestination

+ FailOpen *bool

+ MessageTimeout *metav1.Duration

+ Name string

+ RequestBodyProcessingMode *ExtProcBodyProcessingMode

+ RequestHeaderProcessing bool

+ ResponseBodyProcessingMode *ExtProcBodyProcessingMode

+ ResponseHeaderProcessing bool

+ func (in *ExtProc) DeepCopy() *ExtProc

+ func (in *ExtProc) DeepCopyInto(out *ExtProc)

+ type ExtProcBodyProcessingMode egv1a1.ExtProcBodyProcessingMode

+ type HTTP2Settings struct

+ InitialConnectionWindowSize *uint32

+ InitialStreamWindowSize *uint32

+ MaxConcurrentStreams *uint32

+ func (in *HTTP2Settings) DeepCopy() *HTTP2Settings

+ func (in *HTTP2Settings) DeepCopyInto(out *HTTP2Settings)

type HTTPClientTimeout

+ IdleTimeout *metav1.Duration

type HTTPListener

+ Connection *ClientConnection

+ HTTP2 *HTTP2Settings

+ HealthCheck *HealthCheckSettings

type HTTPRoute

+ EnvoyExtensions *EnvoyExtensionFeatures

+ Metadata *ResourceMetadata

+ Security *SecurityFeatures

+ Traffic *TrafficFeatures

+ UseClientProtocol *bool

+ type HTTPWasmCode struct

+ OriginalURL string

+ SHA256 string

+ ServingURL string

+ func (in *HTTPWasmCode) DeepCopy() *HTTPWasmCode

+ func (in *HTTPWasmCode) DeepCopyInto(out *HTTPWasmCode)

+ type Header struct

+ Name string

type HeaderSettings

+ DisableRateLimitHeaders bool

+ PreserveXRequestID bool

+ WithUnderscoresAction WithUnderscoresAction

+ XForwardedClientCert *XForwardedClientCert

+ type HealthCheckSettings egv1a1.HealthCheckSettings

+ func (in *HealthCheckSettings) DeepCopy() *HealthCheckSettings

+ func (in *HealthCheckSettings) DeepCopyInto(out *HealthCheckSettings)

type JSONAccessLog

+ CELMatches []string

type JWT

+ AllowMissing bool

+ func (j *JWT) Validate() error

+ type Listener interface

+ GetAddress func() string

+ GetExtensionRefs func() []*UnstructuredRef

+ GetName func() string

+ GetPort func() uint32

type Metrics

+ EnablePerEndpointStats bool

type OIDC

+ CookieNameOverrides *egv1a1.OIDCCookieNames

+ DefaultRefreshTokenTTL *metav1.Duration

+ DefaultTokenTTL *metav1.Duration

+ ForwardAccessToken bool

+ Name string

+ RefreshToken bool

+ Resources []string

type OpenTelemetryAccessLog

+ Authority string

+ CELMatches []string

+ Destination RouteDestination

+ type Principal struct

+ ClientCIDRs []*CIDRMatch

+ func (in *Principal) DeepCopy() *Principal

+ func (in *Principal) DeepCopyInto(out *Principal)

+ type ResourceMetadata struct

+ Annotations map[string]string

+ Kind string

+ Name string

+ Namespace string

+ SectionName string

+ func (in *ResourceMetadata) DeepCopy() *ResourceMetadata

+ func (in *ResourceMetadata) DeepCopyInto(out *ResourceMetadata)

type RouteDestination

+ func (r *RouteDestination) ToBackendWeights() *BackendWeights

+ type SecurityFeatures struct

+ Authorization *Authorization

+ BasicAuth *BasicAuth

+ CORS *CORS

+ ExtAuth *ExtAuth

+ JWT *JWT

+ OIDC *OIDC

+ func (in *SecurityFeatures) DeepCopy() *SecurityFeatures

+ func (in *SecurityFeatures) DeepCopyInto(out *SecurityFeatures)

+ func (s *SecurityFeatures) Printable() *SecurityFeatures

+ func (s *SecurityFeatures) Validate() error

+ type TCPClientTimeout struct

+ IdleTimeout *metav1.Duration

+ func (in *TCPClientTimeout) DeepCopy() *TCPClientTimeout

+ func (in *TCPClientTimeout) DeepCopyInto(out *TCPClientTimeout)

type TCPListener

+ Connection *ClientConnection

+ EnableProxyProtocol bool

+ Routes []*TCPRoute

+ Timeout *ClientTimeout

+ type TCPRoute struct

+ BackendConnection *BackendConnection

+ CircuitBreaker *CircuitBreaker

+ Destination *RouteDestination

+ HealthCheck *HealthCheck

+ LoadBalancer *LoadBalancer

+ Name string

+ ProxyProtocol *ProxyProtocol

+ TCPKeepalive *TCPKeepalive

+ TLS *TLS

+ Timeout *Timeout

+ func (in *TCPRoute) DeepCopy() *TCPRoute

+ func (in *TCPRoute) DeepCopyInto(out *TCPRoute)

+ func (t TCPRoute) Validate() error

type TLS

+ TLSInspectorConfig *TLSInspectorConfig

type TLSCertificate

+ Certificate []byte

type TLSConfig

+ ClientCertificates []TLSCertificate

+ RequireClientCertificate bool

type TextAccessLog

+ CELMatches []string

type Tracing

+ Authority string

+ CustomTags map[string]egv1a1.CustomTag

+ Destination RouteDestination

+ Provider egv1a1.TracingProvider

+ SamplingRate float64

+ type TrafficFeatures struct

+ BackendConnection *BackendConnection

+ CircuitBreaker *CircuitBreaker

+ FaultInjection *FaultInjection

+ HealthCheck *HealthCheck

+ LoadBalancer *LoadBalancer

+ ProxyProtocol *ProxyProtocol

+ RateLimit *RateLimit

+ Retry *Retry

+ TCPKeepalive *TCPKeepalive

+ Timeout *Timeout

+ func (b *TrafficFeatures) Validate() error

+ func (in *TrafficFeatures) DeepCopy() *TrafficFeatures

+ func (in *TrafficFeatures) DeepCopyInto(out *TrafficFeatures)

type UDPListener

+ Route *UDPRoute

+ type UDPRoute struct

+ BackendConnection *BackendConnection

+ Destination *RouteDestination

+ LoadBalancer *LoadBalancer

+ Name string

+ Timeout *Timeout

+ func (in *UDPRoute) DeepCopy() *UDPRoute

+ func (in *UDPRoute) DeepCopyInto(out *UDPRoute)

+ func (u UDPRoute) Validate() error

+ type Wasm struct

+ Code *HTTPWasmCode

+ Config *apiextensionsv1.JSON

+ FailOpen bool

+ Name string

+ RootID *string

+ WasmName string

+ func (in *Wasm) DeepCopy() *Wasm

+ func (in *Wasm) DeepCopyInto(out *Wasm)

+ type WithUnderscoresAction egv1a1.WithUnderscoresAction

+ type XForwardedClientCert struct

+ CertDetailsToAdd []egv1a1.XFCCCertData

+ Mode egv1a1.XFCCForwardMode

+ func (in *XForwardedClientCert) DeepCopy() *XForwardedClientCert

+ func (in *XForwardedClientCert) DeepCopyInto(out *XForwardedClientCert)

type Xds

+ FilterOrder []egv1a1.FilterPosition

Jul 9, 2024 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Jun 14, 2024 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Apr 9, 2024 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Changes in this version

+ var ErrHCHTTPHostInvalid = errors.New("field HTTPHealthChecker.Host should be specified")

type HTTPHealthChecker

+ Host string

type HealthCheck

+ func (h *HealthCheck) SetHTTPHostIfAbsent(host string)

Mar 13, 2024 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Changes in this version

+ const Cancelled

+ const ConnectFailure

+ const DeadlineExceeded

+ const Error5XX

+ const GatewayError

+ const Internal

+ const KeepUnchangedAction

+ const RefusedStream

+ const RejectRequestAction

+ const Reset

+ const ResourceExhausted

+ const Retriable4XX

+ const RetriableStatusCodes

+ const TLSAuto

+ const TLSv10

+ const TLSv11

+ const TLSv12

+ const TLSv13

+ const Unavailable

+ const UnescapeAndForward

+ const UnescapeAndRedirect

+ var ErrHCHTTPExpectedStatusesInvalid = errors.New("field HTTPHealthChecker.ExpectedStatuses should be specified")

+ var ErrHCHTTPMethodInvalid = errors.New(...)

+ var ErrHCHTTPPathInvalid = errors.New("field HTTPHealthChecker.Path should be specified")

+ var ErrHTTPStatusInvalid = errors.New("HTTPStatus should be in [200,600)")

+ var ErrHealthCheckHealthyThresholdInvalid = errors.New("field HealthCheck.HealthyThreshold should be greater than 0")

+ var ErrHealthCheckIntervalInvalid = errors.New("field HealthCheck.Interval must be specified")

+ var ErrHealthCheckPayloadInvalid = errors.New("one of Text, Binary fields must be set in payload")

+ var ErrHealthCheckTimeoutInvalid = errors.New("field HealthCheck.Timeout must be specified")

+ var ErrHealthCheckUnhealthyThresholdInvalid = errors.New("field HealthCheck.UnhealthyThreshold should be greater than 0")

+ var ErrHealthCheckerInvalid = errors.New("health checker setting is invalid, only one health checker can be set")

+ var ErrOutlierDetectionBaseEjectionTimeInvalid = errors.New("field OutlierDetection.BaseEjectionTime must be specified")

+ var ErrOutlierDetectionIntervalInvalid = errors.New("field OutlierDetection.Interval must be specified")

+ type ActiveHealthCheck struct

+ HTTP *HTTPHealthChecker

+ HealthyThreshold *uint32

+ Interval *metav1.Duration

+ TCP *TCPHealthChecker

+ Timeout *metav1.Duration

+ UnhealthyThreshold *uint32

+ func (in *ActiveHealthCheck) DeepCopy() *ActiveHealthCheck

+ func (in *ActiveHealthCheck) DeepCopyInto(out *ActiveHealthCheck)

+ type BackOffPolicy struct

+ BaseInterval *metav1.Duration

+ MaxInterval *metav1.Duration

+ func (in *BackOffPolicy) DeepCopy() *BackOffPolicy

+ func (in *BackOffPolicy) DeepCopyInto(out *BackOffPolicy)

+ type BasicAuth struct

+ Users []byte

+ func (in *BasicAuth) DeepCopy() *BasicAuth

+ func (in *BasicAuth) DeepCopyInto(out *BasicAuth)

type CORS

+ AllowCredentials bool

+ type CircuitBreaker struct

+ MaxConnections *uint32

+ MaxParallelRequests *uint32

+ MaxParallelRetries *uint32

+ MaxPendingRequests *uint32

+ MaxRequestsPerConnection *uint32

+ func (in *CircuitBreaker) DeepCopy() *CircuitBreaker

+ func (in *CircuitBreaker) DeepCopyInto(out *CircuitBreaker)

+ type ClientIPDetectionSettings egv1a1.ClientIPDetectionSettings

+ func (in *ClientIPDetectionSettings) DeepCopy() *ClientIPDetectionSettings

+ func (in *ClientIPDetectionSettings) DeepCopyInto(out *ClientIPDetectionSettings)

+ type ClientTimeout struct

+ HTTP *HTTPClientTimeout

+ func (in *ClientTimeout) DeepCopy() *ClientTimeout

+ func (in *ClientTimeout) DeepCopyInto(out *ClientTimeout)

+ type DestinationAddressType string

+ const FQDN

+ const IP

+ const MIXED

type DestinationSetting

+ AddressType *DestinationAddressType

+ TLS *TLSUpstreamConfig

+ type ExtAuth struct

+ GRPC *GRPCExtAuthService

+ HTTP *HTTPExtAuthService

+ HeadersToExtAuth []string

+ func (in *ExtAuth) DeepCopy() *ExtAuth

+ func (in *ExtAuth) DeepCopyInto(out *ExtAuth)

+ type FaultInjection struct

+ Abort *FaultInjectionAbort

+ Delay *FaultInjectionDelay

+ func (in *FaultInjection) DeepCopy() *FaultInjection

+ func (in *FaultInjection) DeepCopyInto(out *FaultInjection)

+ type FaultInjectionAbort struct

+ GrpcStatus *int32

+ HTTPStatus *int32

+ Percentage *float32

+ func (in *FaultInjectionAbort) DeepCopy() *FaultInjectionAbort

+ func (in *FaultInjectionAbort) DeepCopyInto(out *FaultInjectionAbort)

+ type FaultInjectionDelay struct

+ FixedDelay *metav1.Duration

+ Percentage *float32

+ func (in *FaultInjectionDelay) DeepCopy() *FaultInjectionDelay

+ func (in *FaultInjectionDelay) DeepCopyInto(out *FaultInjectionDelay)

+ type GRPCExtAuthService struct

+ Authority string

+ Destination RouteDestination

+ func (in *GRPCExtAuthService) DeepCopy() *GRPCExtAuthService

+ func (in *GRPCExtAuthService) DeepCopyInto(out *GRPCExtAuthService)

+ type HTTP10Settings struct

+ DefaultHost *string

+ func (in *HTTP10Settings) DeepCopy() *HTTP10Settings

+ func (in *HTTP10Settings) DeepCopyInto(out *HTTP10Settings)

+ type HTTP1Settings struct

+ EnableTrailers bool

+ HTTP10 *HTTP10Settings

+ PreserveHeaderCase bool

+ func (in *HTTP1Settings) DeepCopy() *HTTP1Settings

+ func (in *HTTP1Settings) DeepCopyInto(out *HTTP1Settings)

+ type HTTP3Settings struct

+ QUICPort int32

+ type HTTPClientTimeout struct

+ RequestReceivedTimeout *metav1.Duration

+ func (in *HTTPClientTimeout) DeepCopy() *HTTPClientTimeout

+ func (in *HTTPClientTimeout) DeepCopyInto(out *HTTPClientTimeout)

+ type HTTPExtAuthService struct

+ Authority string

+ Destination RouteDestination

+ HeadersToBackend []string

+ Path string

+ func (in *HTTPExtAuthService) DeepCopy() *HTTPExtAuthService

+ func (in *HTTPExtAuthService) DeepCopyInto(out *HTTPExtAuthService)

+ type HTTPHealthChecker struct

+ ExpectedResponse *HealthCheckPayload

+ ExpectedStatuses []HTTPStatus

+ Method *string

+ Path string

+ func (c *HTTPHealthChecker) Validate() error

+ func (in *HTTPHealthChecker) DeepCopy() *HTTPHealthChecker

+ func (in *HTTPHealthChecker) DeepCopyInto(out *HTTPHealthChecker)

type HTTPListener

+ ClientIPDetection *ClientIPDetectionSettings

+ EnableProxyProtocol bool

+ HTTP1 *HTTP1Settings

+ HTTP3 *HTTP3Settings

+ Headers *HeaderSettings

+ Path PathSettings

+ Timeout *ClientTimeout

type HTTPRoute

+ BasicAuth *BasicAuth

+ CircuitBreaker *CircuitBreaker

+ ExtAuth *ExtAuth

+ FaultInjection *FaultInjection

+ HealthCheck *HealthCheck

+ IsHTTP2 bool

+ OIDC *OIDC

+ ProxyProtocol *ProxyProtocol

+ Retry *Retry

+ TCPKeepalive *TCPKeepalive

+ type HTTPStatus int

+ func (h HTTPStatus) Validate() error

+ type HTTPTimeout struct

+ ConnectionIdleTimeout *metav1.Duration

+ MaxConnectionDuration *metav1.Duration

+ RequestTimeout *metav1.Duration

+ func (in *HTTPTimeout) DeepCopy() *HTTPTimeout

+ func (in *HTTPTimeout) DeepCopyInto(out *HTTPTimeout)

+ type HeaderSettings struct

+ EnableEnvoyHeaders bool

+ func (in *HeaderSettings) DeepCopy() *HeaderSettings

+ func (in *HeaderSettings) DeepCopyInto(out *HeaderSettings)

+ type HealthCheck struct

+ Active *ActiveHealthCheck

+ Passive *OutlierDetection

+ func (h *HealthCheck) Validate() error

+ func (in *HealthCheck) DeepCopy() *HealthCheck

+ func (in *HealthCheck) DeepCopyInto(out *HealthCheck)

+ type HealthCheckPayload struct

+ Binary []byte

+ Text *string

+ func (in *HealthCheckPayload) DeepCopy() *HealthCheckPayload

+ func (in *HealthCheckPayload) DeepCopyInto(out *HealthCheckPayload)

+ func (p *HealthCheckPayload) Validate() error

type Infra

+ func (i Infra) YAMLString() string

type InfraMetadata

+ Annotations map[string]string

type JSONPatchOperation

+ From *string

type LeastRequest

+ SlowStart *SlowStart

+ type LocalRateLimit struct

+ Default RateLimitValue

+ Rules []*RateLimitRule

+ func (in *LocalRateLimit) DeepCopy() *LocalRateLimit

+ func (in *LocalRateLimit) DeepCopyInto(out *LocalRateLimit)

+ type OIDC struct

+ ClientID string

+ ClientSecret []byte

+ CookieSuffix string

+ HMACSecret []byte

+ LogoutPath string

+ Provider OIDCProvider

+ RedirectPath string

+ RedirectURL string

+ Scopes []string

+ func (in *OIDC) DeepCopy() *OIDC

+ func (in *OIDC) DeepCopyInto(out *OIDC)

+ type OIDCProvider struct

+ AuthorizationEndpoint string

+ TokenEndpoint string

+ type OutlierDetection struct

+ BaseEjectionTime *metav1.Duration

+ Consecutive5xxErrors *uint32

+ ConsecutiveGatewayErrors *uint32

+ ConsecutiveLocalOriginFailures *uint32

+ Interval *metav1.Duration

+ MaxEjectionPercent *int32

+ SplitExternalLocalOriginErrors *bool

+ func (in *OutlierDetection) DeepCopy() *OutlierDetection

+ func (in *OutlierDetection) DeepCopyInto(out *OutlierDetection)

+ type PathEscapedSlashAction egv1a1.PathEscapedSlashAction

+ type PathSettings struct

+ EscapedSlashesAction PathEscapedSlashAction

+ MergeSlashes bool

+ func (in *PathSettings) DeepCopy() *PathSettings

+ func (in *PathSettings) DeepCopyInto(out *PathSettings)

+ type PerRetryPolicy struct

+ BackOff *BackOffPolicy

+ Timeout *metav1.Duration

+ func (in *PerRetryPolicy) DeepCopy() *PerRetryPolicy

+ func (in *PerRetryPolicy) DeepCopyInto(out *PerRetryPolicy)

type ProxyInfra

+ func (p *ProxyInfra) Equal(y *ProxyInfra) bool

type ProxyListener

+ HTTP3 *HTTP3Settings

+ Name string

+ type ProxyProtocol struct

+ Version ProxyProtocolVersion

+ func (in *ProxyProtocol) DeepCopy() *ProxyProtocol

+ func (in *ProxyProtocol) DeepCopyInto(out *ProxyProtocol)

+ type ProxyProtocolVersion string

+ const ProxyProtocolVersionV1

+ const ProxyProtocolVersionV2

type RateLimit

+ Local *LocalRateLimit

+ type Retry struct

+ NumRetries *uint32

+ PerRetry *PerRetryPolicy

+ RetryOn *RetryOn

+ func (in *Retry) DeepCopy() *Retry

+ func (in *Retry) DeepCopyInto(out *Retry)

+ type RetryOn struct

+ HTTPStatusCodes []HTTPStatus

+ Triggers []TriggerEnum

+ func (in *RetryOn) DeepCopy() *RetryOn

+ func (in *RetryOn) DeepCopyInto(out *RetryOn)

type RoundRobin

+ SlowStart *SlowStart

+ type SlowStart struct

+ Window *metav1.Duration

+ func (in *SlowStart) DeepCopy() *SlowStart

+ func (in *SlowStart) DeepCopyInto(out *SlowStart)

+ type TCPHealthChecker struct

+ Receive *HealthCheckPayload

+ Send *HealthCheckPayload

+ func (c *TCPHealthChecker) Validate() error

+ func (in *TCPHealthChecker) DeepCopy() *TCPHealthChecker

+ func (in *TCPHealthChecker) DeepCopyInto(out *TCPHealthChecker)

+ type TCPTimeout struct

+ ConnectTimeout *metav1.Duration

+ func (in *TCPTimeout) DeepCopy() *TCPTimeout

+ func (in *TCPTimeout) DeepCopyInto(out *TCPTimeout)

+ type TLSCACertificate struct

+ Certificate []byte

+ Name string

+ func (in *TLSCACertificate) DeepCopy() *TLSCACertificate

+ func (in *TLSCACertificate) DeepCopyInto(out *TLSCACertificate)

+ type TLSCertificate struct

+ Name string

+ PrivateKey []byte

+ ServerCertificate []byte

+ func (in *TLSCertificate) DeepCopy() *TLSCertificate

+ func (in *TLSCertificate) DeepCopyInto(out *TLSCertificate)

+ func (t TLSCertificate) Validate() error

+ type TLSConfig struct

+ ALPNProtocols []string

+ CACertificate *TLSCACertificate

+ Certificates []TLSCertificate

+ Ciphers []string

+ ECDHCurves []string

+ MaxVersion *TLSVersion

+ MinVersion *TLSVersion

+ SignatureAlgorithms []string

+ func (in *TLSConfig) DeepCopy() *TLSConfig

+ func (in *TLSConfig) DeepCopyInto(out *TLSConfig)

+ func (t TLSConfig) Validate() error

+ type TLSUpstreamConfig struct

+ CACertificate *TLSCACertificate

+ SNI string

+ UseSystemTrustStore bool

+ func (in *TLSUpstreamConfig) DeepCopy() *TLSUpstreamConfig

+ func (in *TLSUpstreamConfig) DeepCopyInto(out *TLSUpstreamConfig)

+ type TLSVersion egv1a1.TLSVersion

+ type Timeout struct

+ HTTP *HTTPTimeout

+ TCP *TCPTimeout

+ func (in *Timeout) DeepCopy() *Timeout

+ func (in *Timeout) DeepCopyInto(out *Timeout)

+ type TriggerEnum egv1a1.TriggerEnum

type Xds

+ func (x Xds) YAMLString() string

Mar 5, 2024 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Nov 1, 2023 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Changes in this version

+ var ErrDestEndpointHostInvalid = errors.New("field Address must be a valid IP address")

+ var ErrDestEndpointPortInvalid = errors.New("field Port specified is invalid")

+ var ErrDestinationNameEmpty = errors.New("field Name must be specified")

+ var ErrHTTPRouteHostnameEmpty = errors.New("field Hostname must be specified")

+ var ErrLoadBalancerInvalid = errors.New("loadBalancer setting is invalid, only one setting can be set")

+ type AppProtocol string

+ const GRPC

+ const GRPCWeb

+ const HTTP

+ const HTTP2

+ const HTTPS

+ const TCP

+ const UDP

+ type CORS struct

+ AllowHeaders []string

+ AllowMethods []string

+ AllowOrigins []*StringMatch

+ ExposeHeaders []string

+ MaxAge *metav1.Duration

+ func (in *CORS) DeepCopy() *CORS

+ func (in *CORS) DeepCopyInto(out *CORS)

+ type ConsistentHash struct

+ SourceIP *bool

+ func (in *ConsistentHash) DeepCopy() *ConsistentHash

+ func (in *ConsistentHash) DeepCopyInto(out *ConsistentHash)

+ type DestinationEndpoint struct

+ Host string

+ Port uint32

+ func NewDestEndpoint(host string, port uint32) *DestinationEndpoint

+ func (d DestinationEndpoint) Validate() error

+ func (in *DestinationEndpoint) DeepCopy() *DestinationEndpoint

+ func (in *DestinationEndpoint) DeepCopyInto(out *DestinationEndpoint)

+ type DestinationSetting struct

+ Endpoints []*DestinationEndpoint

+ Protocol AppProtocol

+ Weight *uint32

+ func (d DestinationSetting) Validate() error

+ func (in *DestinationSetting) DeepCopy() *DestinationSetting

+ func (in *DestinationSetting) DeepCopyInto(out *DestinationSetting)

type HTTPListener

+ TCPKeepalive *TCPKeepalive

type HTTPRoute

+ CORS *CORS

+ Destination *RouteDestination

+ Hostname string

+ JWT *JWT

+ LoadBalancer *LoadBalancer

+ Timeout *metav1.Duration

+ type JWT struct

+ Providers []egv1a1.JWTProvider

+ func (in *JWT) DeepCopy() *JWT

+ func (in *JWT) DeepCopyInto(out *JWT)

+ type LeastRequest struct

+ func (in *LeastRequest) DeepCopy() *LeastRequest

+ func (in *LeastRequest) DeepCopyInto(out *LeastRequest)

+ type LoadBalancer struct

+ ConsistentHash *ConsistentHash

+ LeastRequest *LeastRequest

+ Random *Random

+ RoundRobin *RoundRobin

+ func (in *LoadBalancer) DeepCopy() *LoadBalancer

+ func (in *LoadBalancer) DeepCopyInto(out *LoadBalancer)

+ func (l *LoadBalancer) Validate() error

+ type Metrics struct

+ EnableVirtualHostStats bool

+ func (in *Metrics) DeepCopy() *Metrics

+ func (in *Metrics) DeepCopyInto(out *Metrics)

+ type Random struct

+ func (in *Random) DeepCopy() *Random

+ func (in *Random) DeepCopyInto(out *Random)

+ type RoundRobin struct

+ func (in *RoundRobin) DeepCopy() *RoundRobin

+ func (in *RoundRobin) DeepCopyInto(out *RoundRobin)

type RouteDestination

+ Name string

+ Settings []*DestinationSetting

+ type TCPKeepalive struct

+ IdleTime *uint32

+ Interval *uint32

+ Probes *uint32

+ func (in *TCPKeepalive) DeepCopy() *TCPKeepalive

+ func (in *TCPKeepalive) DeepCopyInto(out *TCPKeepalive)

type TCPListener

+ Destination *RouteDestination

+ TCPKeepalive *TCPKeepalive

type UDPListener

+ Destination *RouteDestination

type Xds

+ Metrics *Metrics

+ func (x *Xds) Equal(y *Xds) bool

Oct 28, 2023 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Aug 2, 2023 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Changes in this version

+ type AccessLog struct

+ JSON []*JSONAccessLog

+ OpenTelemetry []*OpenTelemetryAccessLog

+ Text []*TextAccessLog

+ func (in *AccessLog) DeepCopy() *AccessLog

+ func (in *AccessLog) DeepCopyInto(out *AccessLog)

type CIDRMatch

+ Distinct bool

+ type EnvoyPatchPolicy struct

+ JSONPatches []*JSONPatchConfig

+ func (in *EnvoyPatchPolicy) DeepCopy() *EnvoyPatchPolicy

+ func (in *EnvoyPatchPolicy) DeepCopyInto(out *EnvoyPatchPolicy)

+ type EnvoyPatchPolicyStatus struct

+ Name string

+ Namespace string

+ Status *egv1a1.EnvoyPatchPolicyStatus

+ func (in *EnvoyPatchPolicyStatus) DeepCopy() *EnvoyPatchPolicyStatus

+ func (in *EnvoyPatchPolicyStatus) DeepCopyInto(out *EnvoyPatchPolicyStatus)

+ type JSONAccessLog struct

+ JSON map[string]string

+ Path string

+ func (in *JSONAccessLog) DeepCopy() *JSONAccessLog

+ func (in *JSONAccessLog) DeepCopyInto(out *JSONAccessLog)

+ type JSONPatchConfig struct

+ Name string

+ Operation JSONPatchOperation

+ Type string

+ func (in *JSONPatchConfig) DeepCopy() *JSONPatchConfig

+ func (in *JSONPatchConfig) DeepCopyInto(out *JSONPatchConfig)

+ type JSONPatchOperation struct

+ Op string

+ Path string

+ Value apiextensionsv1.JSON

+ func (in *JSONPatchOperation) DeepCopy() *JSONPatchOperation

+ func (in *JSONPatchOperation) DeepCopyInto(out *JSONPatchOperation)

+ type OpenTelemetryAccessLog struct

+ Attributes map[string]string

+ Host string

+ Port uint32

+ Resources map[string]string

+ Text *string

+ func (in *OpenTelemetryAccessLog) DeepCopy() *OpenTelemetryAccessLog

+ func (in *OpenTelemetryAccessLog) DeepCopyInto(out *OpenTelemetryAccessLog)

type ProxyInfra

+ Addresses []string

+ type TLS struct

+ Passthrough *TLSInspectorConfig

+ Terminate []*TLSListenerConfig

+ func (in *TLS) DeepCopy() *TLS

+ func (in *TLS) DeepCopyInto(out *TLS)

+ type TextAccessLog struct

+ Format *string

+ Path string

+ func (in *TextAccessLog) DeepCopy() *TextAccessLog

+ func (in *TextAccessLog) DeepCopyInto(out *TextAccessLog)

+ type Tracing struct

+ ServiceName string

+ func (in *Tracing) DeepCopy() *Tracing

+ func (in *Tracing) DeepCopyInto(out *Tracing)

type Xds

+ AccessLog *AccessLog

+ EnvoyPatchPolicies []*EnvoyPatchPolicy

+ Tracing *Tracing

Jul 26, 2023 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Apr 24, 2023 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Changes in this version

+ var ErrTCPListenerSNIsEmpty = errors.New("field SNIs must be specified with at least a single server name entry")

+ type CIDRMatch struct

+ CIDR string

+ IPv6 bool

+ MaskLen int

type HTTPRoute

+ ExtensionRefs []*UnstructuredRef

type RateLimitInfra

+ ServiceConfigs []*RateLimitServiceConfig

type RateLimitRule

+ CIDRMatch *CIDRMatch

+ func (r *RateLimitRule) IsMatchSet() bool

type RouteDestination

+ func NewRouteDest(host string, port uint32) *RouteDestination

+ func NewRouteDestWithWeight(host string, port uint32, weight uint32) *RouteDestination

+ func (in *RouteDestination) DeepCopy() *RouteDestination

+ func (in *RouteDestination) DeepCopyInto(out *RouteDestination)

type TLSListenerConfig

+ Name string

+ type UnstructuredRef struct

+ Object *unstructured.Unstructured

+ func (in *UnstructuredRef) DeepCopy() *UnstructuredRef

+ func (in *UnstructuredRef) DeepCopyInto(out *UnstructuredRef)

Apr 13, 2023 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Feb 10, 2023 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Changes in this version

+ var ErrRequestAuthenRequiresJwt = errors.New("jwt field is required when request authentication is set")

+ var ErrStringMatchNameIsEmpty = errors.New("field Name must be specified")

+ type GlobalRateLimit struct

+ Rules []*RateLimitRule

+ func (in *GlobalRateLimit) DeepCopy() *GlobalRateLimit

+ func (in *GlobalRateLimit) DeepCopyInto(out *GlobalRateLimit)

type HTTPListener

+ IsHTTP2 bool

type HTTPRoute

+ AddResponseHeaders []AddHeader

+ Mirrors []*RouteDestination

+ RateLimit *RateLimit

+ RemoveResponseHeaders []string

+ RequestAuthentication *RequestAuthentication

+ URLRewrite *URLRewrite

+ type JwtRequestAuthentication struct

+ Providers []egv1a1.JwtAuthenticationFilterProvider

+ func (in *JwtRequestAuthentication) DeepCopy() *JwtRequestAuthentication

+ func (in *JwtRequestAuthentication) DeepCopyInto(out *JwtRequestAuthentication)

+ func (j *JwtRequestAuthentication) Validate() error

type ProtocolType

+ const TCPProtocolType

+ const UDPProtocolType

type ProxyInfra

+ func (p *ProxyInfra) GetProxyConfig() *v1alpha1.EnvoyProxy

+ type RateLimit struct

+ Global *GlobalRateLimit

+ func (in *RateLimit) DeepCopy() *RateLimit

+ func (in *RateLimit) DeepCopyInto(out *RateLimit)

+ type RateLimitDBBackend struct

+ Redis *RateLimitRedis

+ func (in *RateLimitDBBackend) DeepCopy() *RateLimitDBBackend

+ func (in *RateLimitDBBackend) DeepCopyInto(out *RateLimitDBBackend)

+ type RateLimitInfra struct

+ Backend *RateLimitDBBackend

+ Configs []*RateLimitServiceConfig

+ func (in *RateLimitInfra) DeepCopy() *RateLimitInfra

+ func (in *RateLimitInfra) DeepCopyInto(out *RateLimitInfra)

+ type RateLimitRedis struct

+ URL string

+ func (in *RateLimitRedis) DeepCopy() *RateLimitRedis

+ func (in *RateLimitRedis) DeepCopyInto(out *RateLimitRedis)

+ type RateLimitRule struct

+ HeaderMatches []*StringMatch

+ Limit *RateLimitValue

+ func (in *RateLimitRule) DeepCopy() *RateLimitRule

+ func (in *RateLimitRule) DeepCopyInto(out *RateLimitRule)

+ type RateLimitServiceConfig struct

+ Config string

+ Name string

+ func (in *RateLimitServiceConfig) DeepCopy() *RateLimitServiceConfig

+ func (in *RateLimitServiceConfig) DeepCopyInto(out *RateLimitServiceConfig)

+ type RateLimitUnit egv1a1.RateLimitUnit

+ type RateLimitValue struct

+ Requests uint

+ Unit RateLimitUnit

+ func (in *RateLimitValue) DeepCopy() *RateLimitValue

+ func (in *RateLimitValue) DeepCopyInto(out *RateLimitValue)

+ type RequestAuthentication struct

+ JWT *JwtRequestAuthentication

+ func (in *RequestAuthentication) DeepCopy() *RequestAuthentication

+ func (in *RequestAuthentication) DeepCopyInto(out *RequestAuthentication)

type StringMatch

+ Distinct bool

+ Suffix *string

+ type UDPListener struct

+ Address string

+ Destinations []*RouteDestination

+ Name string

+ Port uint32

+ func (h UDPListener) Validate() error

+ func (in *UDPListener) DeepCopy() *UDPListener

+ func (in *UDPListener) DeepCopyInto(out *UDPListener)

+ type URLRewrite struct

+ Hostname *string

+ Path *HTTPPathModifier

+ func (in *URLRewrite) DeepCopy() *URLRewrite

+ func (in *URLRewrite) DeepCopyInto(out *URLRewrite)

+ func (r URLRewrite) Validate() error

type Xds

+ UDP []*UDPListener

+ func (x Xds) GetUDPListener(name string) *UDPListener

Feb 3, 2023 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Oct 20, 2022 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Changes in this version

+ const DefaultProxyImage

+ const DefaultProxyName

+ var ErrAddHeaderDuplicate = errors.New(...)

+ var ErrAddHeaderEmptyName = errors.New("header modifier filter cannot configure a header without a name to be added")

+ var ErrDirectResponseStatusInvalid = errors.New("only HTTP status codes 100 - 599 are supported for DirectResponse")

+ var ErrHTTPListenerHostnamesEmpty = errors.New("field Hostnames must be specified with at least a single hostname entry")

+ var ErrHTTPPathModifierDoubleReplace = errors.New(...)

+ var ErrHTTPPathModifierNoReplace = errors.New(...)

+ var ErrHTTPRouteMatchEmpty = errors.New(...)

+ var ErrHTTPRouteNameEmpty = errors.New("field Name must be specified")

+ var ErrListenerAddressInvalid = errors.New("field Address must be a valid IP address")

+ var ErrListenerNameEmpty = errors.New("field Name must be specified")

+ var ErrListenerPortInvalid = errors.New("field Port specified is invalid")

+ var ErrRedirectUnsupportedScheme = errors.New("only http and https are supported for the scheme in redirect filters")

+ var ErrRedirectUnsupportedStatus = errors.New("only HTTP status codes 301 and 302 are supported for redirect filters")

+ var ErrRemoveHeaderDuplicate = errors.New(...)

+ var ErrRouteDestinationHostInvalid = errors.New("field Address must be a valid IP address")

+ var ErrRouteDestinationPortInvalid = errors.New("field Port specified is invalid")

+ var ErrStringMatchConditionInvalid = errors.New("only one of the Exact, Prefix or SafeRegex fields must be specified")

+ var ErrTCPListenesSNIsEmpty = errors.New("field SNIs must be specified with at least a single server name entry")

+ var ErrTLSPrivateKey = errors.New("field PrivateKey must be specified")

+ var ErrTLSServerCertEmpty = errors.New("field ServerCertificate must be specified")

+ type AddHeader struct

+ Append bool

+ Name string

+ Value string

+ func (h AddHeader) Validate() error

+ func (in *AddHeader) DeepCopy() *AddHeader

+ func (in *AddHeader) DeepCopyInto(out *AddHeader)

+ type BackendWeights struct

+ Invalid uint32

+ Valid uint32

+ type DirectResponse struct

+ Body *string

+ StatusCode uint32

+ func (in *DirectResponse) DeepCopy() *DirectResponse

+ func (in *DirectResponse) DeepCopyInto(out *DirectResponse)

+ func (r DirectResponse) Validate() error

+ type HTTPListener struct

+ Address string

+ Hostnames []string

+ Name string

+ Port uint32

+ Routes []*HTTPRoute

+ TLS *TLSListenerConfig

+ func (h HTTPListener) Validate() error

+ func (in *HTTPListener) DeepCopy() *HTTPListener

+ func (in *HTTPListener) DeepCopyInto(out *HTTPListener)

+ type HTTPPathModifier struct

+ FullReplace *string

+ PrefixMatchReplace *string

+ func (in *HTTPPathModifier) DeepCopy() *HTTPPathModifier

+ func (in *HTTPPathModifier) DeepCopyInto(out *HTTPPathModifier)

+ func (r HTTPPathModifier) Validate() error

+ type HTTPRoute struct

+ AddRequestHeaders []AddHeader

+ BackendWeights BackendWeights

+ Destinations []*RouteDestination

+ DirectResponse *DirectResponse

+ HeaderMatches []*StringMatch

+ Name string

+ PathMatch *StringMatch

+ QueryParamMatches []*StringMatch

+ Redirect *Redirect

+ RemoveRequestHeaders []string

+ func (h HTTPRoute) Validate() error

+ func (in *HTTPRoute) DeepCopy() *HTTPRoute

+ func (in *HTTPRoute) DeepCopyInto(out *HTTPRoute)

+ type Infra struct

+ Proxy *ProxyInfra

+ func NewInfra() *Infra

+ func (i *Infra) GetProxyInfra() *ProxyInfra

+ func (i *Infra) Validate() error

+ func (in *Infra) DeepCopy() *Infra

+ func (in *Infra) DeepCopyInto(out *Infra)

+ type InfraMetadata struct

+ Labels map[string]string

+ func NewInfraMetadata() *InfraMetadata

+ func (in *InfraMetadata) DeepCopy() *InfraMetadata

+ func (in *InfraMetadata) DeepCopyInto(out *InfraMetadata)

+ type ListenerPort struct

+ ContainerPort int32

+ Name string

+ Protocol ProtocolType

+ ServicePort int32

+ func (in *ListenerPort) DeepCopy() *ListenerPort

+ func (in *ListenerPort) DeepCopyInto(out *ListenerPort)

+ type ProtocolType string

+ const HTTPProtocolType

+ const HTTPSProtocolType

+ const TLSProtocolType

+ type ProxyInfra struct

+ Config *v1alpha1.EnvoyProxy

+ Image string

+ Listeners []ProxyListener

+ Metadata *InfraMetadata

+ Name string

+ func NewProxyInfra() *ProxyInfra

+ func (in *ProxyInfra) DeepCopy() *ProxyInfra

+ func (in *ProxyInfra) DeepCopyInto(out *ProxyInfra)

+ func (p *ProxyInfra) GetProxyMetadata() *InfraMetadata

+ func (p *ProxyInfra) ObjectName() string

+ func (p *ProxyInfra) Validate() error

+ type ProxyListener struct

+ Address string

+ Ports []ListenerPort

+ func NewProxyListeners() []ProxyListener

+ func (in *ProxyListener) DeepCopy() *ProxyListener

+ func (in *ProxyListener) DeepCopyInto(out *ProxyListener)

+ type Redirect struct

+ Hostname *string

+ Path *HTTPPathModifier

+ Port *uint32

+ Scheme *string

+ StatusCode *int32

+ func (in *Redirect) DeepCopy() *Redirect

+ func (in *Redirect) DeepCopyInto(out *Redirect)

+ func (r Redirect) Validate() error

+ type RouteDestination struct

+ Host string

+ Port uint32

+ Weight uint32

+ func (r RouteDestination) Validate() error

+ type StringMatch struct

+ Exact *string

+ Name string

+ Prefix *string

+ SafeRegex *string

+ func (in *StringMatch) DeepCopy() *StringMatch

+ func (in *StringMatch) DeepCopyInto(out *StringMatch)

+ func (s StringMatch) Validate() error

+ type TCPListener struct

+ Address string

+ Destinations []*RouteDestination

+ Name string

+ Port uint32

+ TLS *TLSInspectorConfig

+ func (h TCPListener) Validate() error

+ func (in *TCPListener) DeepCopy() *TCPListener

+ func (in *TCPListener) DeepCopyInto(out *TCPListener)

+ type TLSInspectorConfig struct

+ SNIs []string

+ func (in *TLSInspectorConfig) DeepCopy() *TLSInspectorConfig

+ func (in *TLSInspectorConfig) DeepCopyInto(out *TLSInspectorConfig)

+ func (t TLSInspectorConfig) Validate() error

+ type TLSListenerConfig struct

+ PrivateKey []byte

+ ServerCertificate []byte

+ func (in *TLSListenerConfig) DeepCopy() *TLSListenerConfig

+ func (in *TLSListenerConfig) DeepCopyInto(out *TLSListenerConfig)

+ func (t TLSListenerConfig) Validate() error

+ type Xds struct

+ HTTP []*HTTPListener

+ TCP []*TCPListener

+ func (in *Xds) DeepCopy() *Xds

+ func (in *Xds) DeepCopyInto(out *Xds)

+ func (x Xds) GetHTTPListener(name string) *HTTPListener

+ func (x Xds) GetTCPListener(name string) *TCPListener

+ func (x Xds) Printable() *Xds

+ func (x Xds) Validate() error

Sep 30, 2022 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

Aug 31, 2022 GO-2025-3418 +2 more

  GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

  GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

  GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway