proposal: a new light extension to load certificates through SDS on-demand
Open
area/tls
enhancement
no stalebot
- Dominant language
- C++
- Stars
- 28.9k
- Forks
- 5.6k
- Avg merge
- 1d 20h
- Merged PRs (30d)
- 437
Description
It would be very useful for the dynamic selection of TLS certificates when using the dynamic forward proxy, related issue:
https://github.com/envoyproxy/envoy/issues/29357
according @ggreenway 's suggestion in: https://github.com/envoyproxy/envoy/pull/29383#issuecomment-1707371608, we might need a light extension.
so, here is the design doc:
https://docs.google.com/document/d/1blLzFBWyd18TpEAI_V3NpVVhFCBn8rIZBRWkg_bP954/edit?usp=sharing
Contributor guide
Assessment
This issue has not been assessed yet.