-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
14 changed files
with
448 additions
and
39 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,116 @@ | ||
| +++ | ||
| title = 'Envoy Lua HTTP Filter Exploration - Part 1' | ||
| date = 2024-10-13T00:11:52-07:00 | ||
| draft = false | ||
| +++ | ||
|
|
||
| Envoy offers a of variety in HTTP filters and you can do a lot with what comes out of the box like `Header Mutation filter` or `gRPC-HTTP Transcoding`. While this is great, there are certain circumstances where we need some additional customizations. To solve this issue, Envoy provides options like Lua HTTP Filter, Wasm Filter or the ExtProc Filter. Through these filters, you can write custom code in a non-C++ language that gets excuted either in the request or response flow like any other Envoy Filter. To start my journey into extending Envoy, I spent some time looking into the Lua HTTP Filter. | ||
|
|
||
| ## Writing and maintaining Lua Scripts | ||
|
|
||
| ### In-lining Lua Scripts | ||
| Register the script as an `inline_string` in the `default_source_code` or in the `source_codes` map section of the Lua HTTP Filter. | ||
|
|
||
| ``` | ||
| ... | ||
| http_filters: | ||
| - name: envoy.filters.http.lua | ||
| typed_config: | ||
| "@type": type.googleapis.com/envoy.extensions.filters.http.lua.v3.Lua | ||
| default_source_code: | ||
| inline_string: | | ||
| -- Called on the request path. | ||
| function envoy_on_request(request_handle) | ||
| request_handle:logInfo("Logging in the request path from default lua source.") | ||
| end | ||
| -- Called on the response path. | ||
| function envoy_on_response(response_handle) | ||
| response_handle:logInfo("Logging in the response path from default lua source.") | ||
| end | ||
| ... | ||
| ``` | ||
| [Full example](https://github.com/Achuth17/envoy-configs/blob/main/lua-filter/envoy-lua-default-source.yaml) | ||
|
|
||
| ### Lua Script Files | ||
| Create a separate Lua script file, Implement the two stub methods function `envoy_on_request(request_handle)` and function `envoy_on_response(response_handle)`. Ensure the script is accessible from the Envoy runtime. Once this is done, the script file can be referenced from the `source_codes` map section of the Lua HTTP Filter. | ||
|
|
||
| ``` | ||
| -- file.lua | ||
| -- Called on the request path. | ||
| function envoy_on_request(request_handle) | ||
| local headers = request_handle:headers() | ||
| header_value_to_replace = "User-Agent" | ||
| header_value = headers:get(header_value_to_replace) | ||
| if header_value ~= nil then | ||
| request_handle:logInfo("Replacing UserAgent header found in the request with 'Envoy'") | ||
| request_handle:headers():remove(header_value_to_replace) | ||
| request_handle:headers():add(header_value_to_replace, "Envoy") | ||
| end | ||
| end | ||
| -- Called on the response path. | ||
| function envoy_on_response(response_handle) | ||
| end | ||
| ``` | ||
| Register the script file in the `source_codes` map in the Lua HTTP Filter. | ||
|
|
||
| ``` | ||
| ... | ||
| http_filters: | ||
| - name: envoy.filters.http.lua | ||
| typed_config: | ||
| "@type": type.googleapis.com/envoy.extensions.filters.http.lua.v3.Lua | ||
| source_codes: | ||
| file.lua: | ||
| filename: file.lua | ||
| ... | ||
| ``` | ||
| [Full example](https://github.com/Achuth17/envoy-configs/blob/main/lua-filter/envoy-lua-custom-source.yaml) | ||
|
|
||
| ## Attaching Lua Scripts | ||
|
|
||
| ### Lua Per Route | ||
| In each applicable route defined in a `virtual_host`, the `source_codes` map entry for the lua script should be referenced in a `typed_per_filter_config`. | ||
|
|
||
| ``` | ||
| ... | ||
| filter_chains: | ||
| - filters: | ||
| - name: envoy.filters.network.http_connection_manager | ||
| typed_config: | ||
| "@type": type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager | ||
| stat_prefix: ingress_http | ||
| codec_type: AUTO | ||
| route_config: | ||
| name: local_route | ||
| virtual_hosts: | ||
| - name: local_service | ||
| domains: ["*"] | ||
| routes: | ||
| - match: { prefix: "/ip" } | ||
| route: { cluster: some_service } | ||
| typed_per_filter_config: | ||
| envoy.filters.http.lua: | ||
| '@type': "type.googleapis.com/envoy.extensions.filters.http.lua.v3.LuaPerRoute" | ||
| name: "file.lua" | ||
| ... | ||
| ``` | ||
|
|
||
| [Full example](https://github.com/Achuth17/envoy-configs/blob/main/lua-filter/envoy-lua-custom-source.yaml) | ||
|
|
||
| ### Default Lua Script | ||
| Default scripts are added by default to all routes except in routes with `Lua Per Route`. No extra steps are required in the `virtual_host` or `route` configurations. | ||
|
|
||
| [Full example](https://github.com/Achuth17/envoy-configs/blob/main/lua-filter/envoy-lua-default-source.yaml) | ||
|
|
||
| ## Learnings: | ||
|
|
||
| 1. Default Lua Script gets executed only when `Lua Per Route` is not in play. If `Lua Per Route` is used, the Default Lua Script is ignored. | ||
|
|
||
| 2. Scenarios where Lua HTTP Filter is useful in its current form: | ||
|
|
||
| i. Modifying Headers, Body and Trailers including cases where the body is chunked or streamed. | ||
|
|
||
| ii. Making an external HTTP call to an upstream cluster. This can be done to either to log the request or response, send stats to an external server or perform auth. The suggestion is to not make blocking calls in the Lua HTTP Filter. | ||
|
|
||
| iii. Short circuiting request or response flows. If the headers, body or trailers don’t meet a certain criteria, we can short circuit the request or response flow and send back a canned response to the client. In the request flow, This could prevent calls from reaching the upstream cluster. |
This file was deleted.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,4 +1,4 @@ | ||
| baseURL = 'https://achuth.blog/' | ||
| languageCode = 'en-us' | ||
| title = 'My New Hugo Site' | ||
| title = "Achuth's Blog" | ||
| theme = 'archie' |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,12 +1,19 @@ | ||
| <?xml version="1.0" encoding="utf-8" standalone="yes"?> | ||
| <rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"> | ||
| <channel> | ||
| <title>My New Hugo Site</title> | ||
| <title>Achuth's Blog</title> | ||
| <link>http://localhost:1313/</link> | ||
| <description>Recent content on My New Hugo Site</description> | ||
| <description>Recent content on Achuth's Blog</description> | ||
| <generator>Hugo</generator> | ||
| <language>en-us</language> | ||
| <lastBuildDate></lastBuildDate> | ||
| <lastBuildDate>Sun, 13 Oct 2024 00:11:52 -0700</lastBuildDate> | ||
| <atom:link href="http://localhost:1313/index.xml" rel="self" type="application/rss+xml" /> | ||
| <item> | ||
| <title>Envoy Lua HTTP Filter Exploration - Part 1</title> | ||
| <link>http://localhost:1313/posts/envoy-lua-filter-exploration-part-1/</link> | ||
| <pubDate>Sun, 13 Oct 2024 00:11:52 -0700</pubDate> | ||
| <guid>http://localhost:1313/posts/envoy-lua-filter-exploration-part-1/</guid> | ||
| <description><p>Envoy offers a of variety in HTTP filters and you can do a lot with what comes out of the box like <code>Header Mutation filter</code> or <code>gRPC-HTTP Transcoding</code>. While this is great, there are certain circumstances where we need some additional customizations. To solve this issue, Envoy provides options like Lua HTTP Filter, Wasm Filter or the ExtProc Filter. Through these filters, you can write custom code in a non-C++ language that gets excuted either in the request or response flow like any other Envoy Filter. To start my journey into extending Envoy, I spent some time looking into the Lua HTTP Filter.</p></description> | ||
| </item> | ||
| </channel> | ||
| </rss> |
Oops, something went wrong.