Request matches all rules are allowed, otherwise denied.

Request matches all rules or missing required auth fields are denied, otherwise allowed.

Envoy will choose the optimal TLS version.

TLS 1.0.

TLS 1.1.

TLS 1.2.

TLS 1.3.

Logic AND that requires all rules match.

Logic OR that requires at least one rule matches.

Element type of AndRule/OrRule, it chooses among different type of rule.

Check peer identity using X.509 certificate.

TLS context shared by both client and server TLS contexts.

These fields are deprecated and only are used during the interim v1 -> v2 transition period for internal purposes.

[#proto-status: experimental] [#not-implemented-hide:].

[#proto-status: experimental] [#not-implemented-hide:].

Should we do white-list or black-list style access control.