53 lines
2.2 KiB
Markdown
53 lines
2.2 KiB
Markdown
|
---
|
||
|
|
title: "Envoy"
|
||
|
|
description: "An integration guide for Authelia and the Envoy reverse proxy"
|
||
|
|
lead: "A guide on integrating Authelia with the Envoy reverse proxy."
|
||
|
|
date: 2022-05-15T13:52:27+10:00
|
||
|
|
draft: false
|
||
|
|
images: []
|
||
|
|
menu:
|
||
|
|
integration:
|
||
|
|
parent: "proxies"
|
||
|
|
weight: 330
|
||
|
|
toc: true
|
||
|
|
aliases:
|
||
|
|
- /i/envoy
|
||
|
|
---
|
||
|
|
|
||
|
|
[Envoy] is probably supported by __Authelia__.
|
||
|
|
|
||
|
|
*__Important:__ When using these guides it's important to recognize that we cannot provide a guide for every possible
|
||
|
|
method of deploying a proxy. These guides show a suggested setup only and you need to understand the proxy
|
||
|
|
configuration and customize it to your needs. To-that-end we include links to the official proxy documentation
|
||
|
|
throughout this documentation and in the [See Also](#see-also) section.*
|
||
|
|
|
||
|
|
## UNDER CONSTRUCTION
|
||
|
|
|
||
|
|
It's currently not certain, but fairly likely that [Envoy] is supported by __Authelia__. We wish to add documentation
|
||
|
|
and thus if anyone has this working please let us know.
|
||
|
|
|
||
|
|
We will aim to perform documentation for this on our own but there is no current timeframe.
|
||
|
|
|
||
|
|
## Trusted Proxies
|
||
|
|
|
||
|
|
*__Important:__ You should read the [Forwarded Headers] section and this section as part of any proxy configuration.
|
||
|
|
Especially if you have never read it before.*
|
||
|
|
|
||
|
|
*__Important:__ The included example is __NOT__ meant for production use. It's used expressly as an example to showcase
|
||
|
|
how you can configure multiple IP ranges. You should customize this example to fit your specific architecture and needs.
|
||
|
|
You should only include the specific IP address ranges of the trusted proxies within your architecture and should not
|
||
|
|
trust entire subnets unless that subnet only has trusted proxies and no other services.*
|
||
|
|
|
||
|
|
## Potential
|
||
|
|
|
||
|
|
Support for [Envoy] should be possible via [Envoy]'s
|
||
|
|
[external authorization](https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/http/ext_authz/v3/ext_authz.proto.html#extensions-filters-http-ext-authz-v3-extauthz).
|
||
|
|
|
||
|
|
## See Also
|
||
|
|
|
||
|
|
* [Envoy External Authorization Documentation](https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/http/ext_authz/v3/ext_authz.proto.html#extensions-filters-http-ext-authz-v3-extauthz)
|
||
|
|
* [Forwarded Headers]
|
||
|
|
|
||
|
|
[Envoy]: https://www.envoyproxy.io/
|
||
|
|
[Forwarded Headers]: fowarded-headers
|