envoyproxy / envoyproxy/gateway

TLS ALPN Routing

Open
#6,703 28 comments 3 reactions 0 assignees View on GitHub
kind/decision
Dominant language
Go
Stars
3k
Forks
864
Avg merge
2d 2h
Merged PRs (30d)
140

Description

*Description*:

Envoy supports matching a connection to a filter_chain by ALPN values. The TLSRoute resource only supports matching by [hostnames](https://gateway-api.sigs.k8s.io/reference/spec/#tlsroutespec). Work was started to add official support to TLS ALPN Routing in https://github.com/kubernetes-sigs/gateway-api/pull/1974, however, it is currently stalled.

It's worth pointing out I'm particularly interested in TLSPassthrough (`mode: Passthrough`).

*Motivation*:
The company I work for currently uses TLS Routing with SNI and ALPN to support multiple application protocols on the same port. You can read more [here](https://goteleport.com/docs/reference/architecture/tls-routing/).

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.