envoyproxy / envoyproxy/envoy

Session Persistence for ExtAuth

Open
#41,465 4 comments 0 reactions 0 assignees View on GitHub
no stalebot question
Dominant language
C++
Stars
28.9k
Forks
5.6k
Avg merge
1d 20h
Merged PRs (30d)
428

Description

**If you are reporting *any* crash or *any* potential security issue, *do not*
open an issue in this repo. Please report the issue via emailing
envoy-security@googlegroups.com where the issue will be triaged appropriately.**

*Title*: *One line description*

Session Persistence for ExtAuth

*Description*:
>Describe the issue.

Hi,
We have three replicas of our extAuth server and would like to implement session persistence (for example, hashing by source IP).
I noticed that sessionPersistence can be set in HTTPROUTE for backend services. However, it does not apply to extAuth specified in SecurityPolicy. I've also tried the backendSettings under GRPCExtAuthService, but it doesn't work neither.

Here is the config of my SecurityPolicy
```
spec:
extAuth:
bodyToExtAuth:
maxRequestBytes: 16384
failOpen: false
grpc:
backendRefs:
- group: ""
kind: Service
name: aaa
namespace: bbb
port: ccc
backendSettings:
loadBalancer:
consistentHash:
tableSize: 65537
type: SourceIP
type: ConsistentHash
```

Is this feature supported? Any suggestions are appreciated. Thank you.

[optional *Relevant Links*:]
>Any extra documentation required to understand the issue.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.