ComposeObservers returns a new Observer that calls each of its arguments in turn.

ExtensionClusterName generates a unique Envoy cluster name for an ExtensionCluster.

ValidateRegex returns an error if the supplied RE2 regex syntax is invalid.

CACertificateKey is the key name for accessing TLS CA certificate bundles in Kubernetes Secrets.

HeaderMatchTypeContains matches a header value if it contains the provided value.

HeaderMatchTypeExact matches a header value exactly.

HeaderMatchTypePresent matches a header if it is present in a request.

HeaderMatchTypeRegex matches a header if it matches the provided regular expression.

nolint:revive.

nolint:revive.

LoadBalancerPolicyCookie denotes load balancing will be performed via a Sesame specified cookie.

LoadBalancerPolicyRandom denotes the load balancer will choose a random backend when routing a request.

LoadBalancerPolicyRequestHash denotes request attribute hashing is used to make load balancing decisions.

LoadBalancerPolicyRoundRobin denotes the load balancer will route requests in a round-robin fashion among backend instances.

LoadBalancerPolicyWeightedLeastRequest specifies the backend with least active requests will be chosen by the load balancer.

PrefixMatchSegment represents a prefix match that only matches full path segments, i.e.

PrefixMatchString represents a prefix match that functions like a string prefix match, i.e.

AuthorizationServerBufferSettings enables ExtAuthz filter to buffer client request data and send it as part of authorization request.

Builder builds a DAG.

Cluster holds the connection specific parameters that apply to traffic routed to an upstream service.

CookieHashOptions contains options for hashing a HTTP cookie.

CookieRewritePolicy defines how attributes of an HTTP Set-Cookie header can be rewritten.

CORSPolicy allows setting the CORS policy.

DirectResponse allows for a specific HTTP status code to be the response to a route request vs routing to an envoy cluster.

ExactMatchCondition matches the entire path of a URL.

ExtensionCluster generates an Envoy cluster (aka ClusterLoadAssignment) for an ExtensionService resource.

GatewayAPIProcessor translates Gateway API types into DAG objects and adds them to the DAG.

GenericKeyDescriptorEntry configures a descriptor entry that has a static key & value.

GlobalRateLimitPolicy holds global rate limiting parameters.

HeaderHashOptions contains options for hashing a HTTP header.

HeaderMatchCondition matches request headers by MatchType.

HeaderMatchDescriptorEntry configures a descriptor entry that's populated only if the specified header is present on the request.

HeadersPolicy defines how headers are managed during forwarding.

HTTPHealthCheckPolicy http health check policy.

HTTPProxyProcessor translates HTTPProxies into DAG objects and adds them to the DAG.

IngressProcessor translates Ingresses into DAG objects and adds them to the DAG.

A KubernetesCache holds Kubernetes objects and associated configuration and produces DAG values.

A Listener represents a TCP socket that accepts incoming connections.

ListenerProcessor adds an HTTP and an HTTPS listener to the DAG if there are virtual hosts and secure virtual hosts already defined as roots in the DAG.

LocalRateLimitPolicy holds local rate limiting parameters.

MirrorPolicy defines the mirroring policy for a route.

PeerValidationContext defines how to validate the certificate on the upstream service.

PrefixMatchCondition matches the start of a URL.

RateLimitDescriptor is a list of rate limit descriptor entries.

RateLimitDescriptorEntry is an entry in a rate limit descriptor.

RateLimitPolicy holds rate limiting parameters.

Redirect allows for a 301/302 redirect to be the response to a route request vs.

RegexMatchCondition matches the URL by regular expression.

RemoteAddressDescriptorEntry configures a descriptor entry that contains the remote address (i.e.

RequestHashPolicy holds configuration for calculating hashes on an individual request attribute.

RetryPolicy defines the retry / number / timeout options.

Route defines the properties of a route to a Cluster.

Secret represents a K8s Secret for TLS usage as a DAG Vertex.

A SecureVirtualHost represents a HTTP host protected by TLS.

Service represents a single Kubernetes' Service's Port.

ServiceCluster capture the set of Kubernetes Services that will compose the endpoints for a Envoy cluster.

Status contains the status for an HTTPProxy (valid / invalid / orphan, etc).

TCPHealthCheckPolicy tcp health check policy.

TCPProxy represents a cluster of TCP endpoints.

TimeoutPolicy defines the timeout policy for a route.

A VirtualHost represents a named L4/L7 service.

WeightedService represents the load balancing weight of a particular v1.Weighted port.

Observer is an interface for receiving notification of DAG updates.

Processor constructs part of a DAG.

ObserverFunc is a function that implements the Observer interface by calling itself.

PrefixMatchType represents different types of prefix matching alternatives.

ProcessorFunc adapts a function to the Processor interface.