You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
35 lines
2.3 KiB
35 lines
2.3 KiB
.. _config_http_conn_man_header_sanitizing: |
|
|
|
HTTP header sanitizing |
|
====================== |
|
|
|
For security reasons, Envoy will "sanitize" various incoming HTTP headers depending on whether the |
|
request is an internal or external request. The sanitizing action depends on the header and may |
|
result in addition, removal, or modification. Ultimately, whether the request is considered internal |
|
or external is governed by the :ref:`x-forwarded-for <config_http_conn_man_headers_x-forwarded-for>` |
|
header (please read the linked section carefully as how Envoy populates the header is complex and |
|
depends on the :ref:`use_remote_address <config_http_conn_man_use_remote_address>` setting). |
|
|
|
Envoy will potentially sanitize the following headers: |
|
|
|
* :ref:`x-envoy-decorator-operation <config_http_filters_router_x-envoy-decorator-operation>` |
|
* :ref:`x-envoy-downstream-service-cluster |
|
<config_http_conn_man_headers_downstream-service-cluster>` |
|
* :ref:`x-envoy-downstream-service-node <config_http_conn_man_headers_downstream-service-node>` |
|
* :ref:`x-envoy-expected-rq-timeout-ms <config_http_filters_router_x-envoy-expected-rq-timeout-ms>` |
|
* :ref:`x-envoy-external-address <config_http_conn_man_headers_x-envoy-external-address>` |
|
* :ref:`x-envoy-force-trace <config_http_conn_man_headers_x-envoy-force-trace>` |
|
* :ref:`x-envoy-internal <config_http_conn_man_headers_x-envoy-internal>` |
|
* :ref:`x-envoy-max-retries <config_http_filters_router_x-envoy-max-retries>` |
|
* :ref:`x-envoy-retry-grpc-on <config_http_filters_router_x-envoy-retry-grpc-on>` |
|
* :ref:`x-envoy-retry-on <config_http_filters_router_x-envoy-retry-on>` |
|
* :ref:`x-envoy-upstream-alt-stat-name <config_http_filters_router_x-envoy-upstream-alt-stat-name>` |
|
* :ref:`x-envoy-upstream-rq-per-try-timeout-ms |
|
<config_http_filters_router_x-envoy-upstream-rq-per-try-timeout-ms>` |
|
* :ref:`x-envoy-upstream-rq-timeout-alt-response |
|
<config_http_filters_router_x-envoy-upstream-rq-timeout-alt-response>` |
|
* :ref:`x-envoy-upstream-rq-timeout-ms <config_http_filters_router_x-envoy-upstream-rq-timeout-ms>` |
|
* :ref:`x-forwarded-client-cert <config_http_conn_man_headers_x-forwarded-client-cert>` |
|
* :ref:`x-forwarded-for <config_http_conn_man_headers_x-forwarded-for>` |
|
* :ref:`x-forwarded-proto <config_http_conn_man_headers_x-forwarded-proto>` |
|
* :ref:`x-request-id <config_http_conn_man_headers_x-request-id>`
|
|
|