networkv3

type ApplicationProtocolInput ¶

type ApplicationProtocolInput struct {
	// contains filtered or unexported fields
}

List of quoted and comma-separated requested application protocols. The list consists of a single negotiated application protocol once the network stream is established.

Examples:

* “'h2','http/1.1'“ * “'h2c'“

Suggested values in the list include:

• “http/1.1“ - set by :ref:`envoy.filters.listener.tls_inspector <config_listener_filters_tls_inspector>` and :ref:`envoy.filters.listener.http_inspector <config_listener_filters_http_inspector>`,
• “h2“ - set by :ref:`envoy.filters.listener.tls_inspector <config_listener_filters_tls_inspector>`
• “h2c“ - set by :ref:`envoy.filters.listener.http_inspector <config_listener_filters_http_inspector>`

.. attention::

Currently, :ref:`TLS Inspector <config_listener_filters_tls_inspector>` provides
application protocol detection based on the requested
`ALPN <https://en.wikipedia.org/wiki/Application-Layer_Protocol_Negotiation>`_ values.

However, the use of ALPN is pretty much limited to the HTTP/2 traffic on the Internet,
and matching on values other than ``h2`` is going to lead to a lot of false negatives,
unless all connecting clients are known to use ALPN.

[#extension: envoy.matching.inputs.application_protocol]

func (*ApplicationProtocolInput) Descriptor() ([]byte, []int)

func (*ApplicationProtocolInput) ProtoMessage()

func (x *ApplicationProtocolInput) ProtoReflect() protoreflect.Message

func (x *ApplicationProtocolInput) Reset()

func (x *ApplicationProtocolInput) String() string

type DestinationIPInput ¶

type DestinationIPInput struct {
	// contains filtered or unexported fields
}

Specifies that matching should be performed by the destination IP address. [#extension: envoy.matching.inputs.destination_ip]

func (*DestinationIPInput) Descriptor() ([]byte, []int)

func (*DestinationIPInput) ProtoMessage()

func (x *DestinationIPInput) ProtoReflect() protoreflect.Message

func (x *DestinationIPInput) Reset()

func (x *DestinationIPInput) String() string

type DestinationPortInput ¶

type DestinationPortInput struct {
	// contains filtered or unexported fields
}

Specifies that matching should be performed by the destination port. [#extension: envoy.matching.inputs.destination_port]

func (*DestinationPortInput) Descriptor() ([]byte, []int)

func (*DestinationPortInput) ProtoMessage()

func (x *DestinationPortInput) ProtoReflect() protoreflect.Message

func (x *DestinationPortInput) Reset()

func (x *DestinationPortInput) String() string

type DirectSourceIPInput ¶

type DirectSourceIPInput struct {
	// contains filtered or unexported fields
}

Input that matches by the directly connected source IP address (this will only be different from the source IP address when using a listener filter that overrides the source address, such as the :ref:`Proxy Protocol listener filter <config_listener_filters_proxy_protocol>`). [#extension: envoy.matching.inputs.direct_source_ip]

func (*DirectSourceIPInput) Descriptor() ([]byte, []int)

func (*DirectSourceIPInput) ProtoMessage()

func (x *DirectSourceIPInput) ProtoReflect() protoreflect.Message

func (x *DirectSourceIPInput) Reset()

func (x *DirectSourceIPInput) String() string

type FilterStateInput ¶

type FilterStateInput struct {
	Key string `protobuf:"bytes,1,opt,name=key,proto3" json:"key,omitempty"`
	// contains filtered or unexported fields
}

Input that matches by a specific filter state key. The value of the provided filter state key will be the raw string representation of the filter state object [#extension: envoy.matching.inputs.filter_state]

func (*FilterStateInput) Descriptor() ([]byte, []int)

func (x *FilterStateInput) GetKey() string

func (*FilterStateInput) ProtoMessage()

func (x *FilterStateInput) ProtoReflect() protoreflect.Message

func (x *FilterStateInput) Reset()

func (x *FilterStateInput) String() string

type ServerNameInput ¶

type ServerNameInput struct {
	// contains filtered or unexported fields
}

Input that matches by the requested server name (e.g. SNI in TLS).

:ref:`TLS Inspector <config_listener_filters_tls_inspector>` provides the requested server name based on SNI, when TLS protocol is detected. [#extension: envoy.matching.inputs.server_name]

func (*ServerNameInput) Descriptor() ([]byte, []int)

func (*ServerNameInput) ProtoMessage()

func (x *ServerNameInput) ProtoReflect() protoreflect.Message

func (x *ServerNameInput) Reset()

func (x *ServerNameInput) String() string

type SourceIPInput ¶

type SourceIPInput struct {
	// contains filtered or unexported fields
}

Specifies that matching should be performed by the source IP address. [#extension: envoy.matching.inputs.source_ip]

func (*SourceIPInput) Descriptor() ([]byte, []int)

func (*SourceIPInput) ProtoMessage()

func (x *SourceIPInput) ProtoReflect() protoreflect.Message

func (x *SourceIPInput) Reset()

func (x *SourceIPInput) String() string

type SourcePortInput ¶

type SourcePortInput struct {
	// contains filtered or unexported fields
}

Specifies that matching should be performed by the source port. [#extension: envoy.matching.inputs.source_port]

func (*SourcePortInput) Descriptor() ([]byte, []int)

func (*SourcePortInput) ProtoMessage()

func (x *SourcePortInput) ProtoReflect() protoreflect.Message

func (x *SourcePortInput) Reset()

func (x *SourcePortInput) String() string

type SourceTypeInput ¶

type SourceTypeInput struct {
	// contains filtered or unexported fields
}

Input that matches by the source IP type. Specifies the source IP match type. The values include:

* “local“ - matches a connection originating from the same host, [#extension: envoy.matching.inputs.source_type]

func (*SourceTypeInput) Descriptor() ([]byte, []int)

func (*SourceTypeInput) ProtoMessage()

func (x *SourceTypeInput) ProtoReflect() protoreflect.Message

func (x *SourceTypeInput) Reset()

func (x *SourceTypeInput) String() string

type TransportProtocolInput ¶

type TransportProtocolInput struct {
	// contains filtered or unexported fields
}

Input that matches by the transport protocol.

Suggested values include:

• “raw_buffer“ - default, used when no transport protocol is detected,
• “tls“ - set by :ref:`envoy.filters.listener.tls_inspector <config_listener_filters_tls_inspector>` when TLS protocol is detected.

[#extension: envoy.matching.inputs.transport_protocol]

func (*TransportProtocolInput) Descriptor() ([]byte, []int)

func (*TransportProtocolInput) ProtoMessage()

func (x *TransportProtocolInput) ProtoReflect() protoreflect.Message

func (x *TransportProtocolInput) Reset()

func (x *TransportProtocolInput) String() string