ext-authz

Collection of protobuf types to work with the Envoy Proxy through Rust services.

An implementation of Envoy External Authorization

Example showing how to implement an Envoy External Authorization gRPC Server written in Rust.

A forward authentication / authorisation (authN) implementation of Envoy External Authorization (ext_authz), built with Contour, and Pomerium in mind.

An Envoy External Authorization (ext_authz) service for ensuring requests are authenticated through Cloudflare Access, built with Contour in mind.

Example showing how to implement an Envoy External Authorization gRPC Server written in Rust, with basic rate-limiting.

Envoy/Istio ext-authz and ext-proc service driven by CEL policies: gate requests and mutate live traffic from one config.

This repo implements Envoy proxy's ext-authz to demonstrate routing to upstream endpoints.

IP Block protection for Envoy — ip-block.com integration. Untested at the moment; please feel free to modify. GPLv3.

Real Time Reverse Proxy Fail To ban

Educational Envoy ext_authz lab that combines MobileBERT and deterministic checks to block SQL injection and prompt-injection payloads.

Runnable Envoy ext_proc and ext_authz callout credential injection demo

A simple envoy ext_authz server.

Minimal, runnable example of Envoy's ext_authz filter — external HTTP authorization with Docker Compose in under 5 minutes.

An example of how to setup ext auth using a simple nodejs authenticator

Istio External Authorization (ext-authz) sandbox testing a custom Go external authorizer, path-based JWT validation, and target apps.