Local rate limiting

L4: local rate limit filter

Http: HTTP local rate limit filter

Global rate limiting

Envoy provides a reference implementation written in Go which uses a Redis backend.

Scripting

Envoy supports Lua scripting as part of a dedicated HTTP filter.

IP Transparency

Sometimes the upstream server or network may need to know the original IP address of the connection

• the IP address being used to form part of an identity,
• the IP address being used to enforce network policy, or
• the IP address being included in an audit.

HTTP Headers

x-forwarded-for header, Envoy may also use this header to choose the IP address used by the Original Src HTTP Filter.

• It is only applicable to HTTP.
• It may not be supported by the upstream host.
• It requires careful configuration.

Proxy Protocol

Envoy supports consuming this information using Proxy Protocol filter, which may be used to recover the downstream remote address for propagation into an x-forwarded-for header.

• It only supports TCP protocols.