Security

Accelerating TLS Handshakes using Private Key Provider in Envoy

API Key Authentication

Backend Mutual TLS: Gateway to Backend

Backend TLS: Gateway to Backend

Backend TLS: Skip TLS Verification

Basic Authentication

CORS

Credential Injection

External Authorization

GeoIP Authorization

HTTP Header and Method Based Authorization

Configure request authorization using HTTP headers and HTTP methods with SecurityPolicy.

IP Allowlist/Denylist

JWT Authentication

JWT Claim-Based Authorization

Mutual TLS: External Clients to the Gateway

OIDC Authentication

Secure Gateways

Threat Model

TLS Passthrough

TLS Termination for TCP

Using cert-manager For TLS Termination