Affected by GO-2026-6003 and 6 other vulnerabilities

GO-2026-6003: Envoy Gateway: xDS Control Plane Information Disclosure when operating in GatewayNamespaceMode in github.com/envoyproxy/gateway

GO-2026-6005: Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock in github.com/envoyproxy/gateway

GO-2026-6006: Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit in github.com/envoyproxy/gateway

GO-2026-6007: Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass in github.com/envoyproxy/gateway

GO-2026-6008: Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header in github.com/envoyproxy/gateway

GO-2026-6009: Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization in github.com/envoyproxy/gateway

GO-2026-6011: Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure in github.com/envoyproxy/gateway

host

package

v1.5.7 Latest Latest Go to latest Published: Jan 12, 2026 License: Apache-2.0 Imports: 17 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/envoyproxy/gateway

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
type Infra
- func NewInfra(runnerCtx context.Context, cfg *config.Server, logger logging.Logger) (*Infra, error)

Constants ¶

View Source

const (

	// XdsTLSCertFilename is the fully qualified name of the file containing Envoy's
	// xDS server TLS certificate.
	XdsTLSCertFilename = "tls.crt"
	// XdsTLSKeyFilename is the fully qualified name of the file containing Envoy's
	// xDS server TLS key.
	XdsTLSKeyFilename = "tls.key"
	// XdsTLSCaFilename is the fully qualified name of the file containing Envoy's
	// trusted CA certificate.
	XdsTLSCaFilename = "ca.crt"
)

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type Infra ¶

type Infra struct {
	HomeDir string
	Logger  logging.Logger

	// EnvoyGateway is the configuration used to startup Envoy Gateway.
	EnvoyGateway *egv1a1.EnvoyGateway
	// contains filtered or unexported fields
}

Infra manages the creation and deletion of host process based on Infra IR resources.

func NewInfra ¶

func NewInfra(runnerCtx context.Context, cfg *config.Server, logger logging.Logger) (*Infra, error)

func (*Infra) Close ¶ added in v1.4.0

func (i *Infra) Close() error

Close implements the Manager interface.

func (*Infra) CreateOrUpdateProxyInfra ¶

func (i *Infra) CreateOrUpdateProxyInfra(ctx context.Context, infra *ir.Infra) error

CreateOrUpdateProxyInfra creates the managed host process, if it doesn't exist.

func (*Infra) CreateOrUpdateRateLimitInfra ¶

func (i *Infra) CreateOrUpdateRateLimitInfra(ctx context.Context) error

CreateOrUpdateRateLimitInfra creates the managed host rate limit process, if it doesn't exist.

func (*Infra) DeleteProxyInfra ¶

func (i *Infra) DeleteProxyInfra(_ context.Context, infra *ir.Infra) error

DeleteProxyInfra removes the managed host process, if it doesn't exist.

func (*Infra) DeleteRateLimitInfra ¶

func (i *Infra) DeleteRateLimitInfra(ctx context.Context) error

DeleteRateLimitInfra removes the managed host rate limit process, if it doesn't exist.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL