Dynamic forward proxy cluster configuration¶

extensions.clusters.dynamic_forward_proxy.v3.ClusterConfig¶

Configuration for the dynamic forward proxy cluster. See the architecture overview for more information.

This extension may be referenced by the qualified name envoy.clusters.dynamic_forward_proxy

Note

This extension is intended to be robust against untrusted downstream traffic. It assumes that the upstream is trusted.

{
  "dns_cache_config": "{...}",
  "allow_insecure_cluster_options": "..."
}

dns_cache_config: (extensions.common.dynamic_forward_proxy.v3.DnsCacheConfig, REQUIRED) The DNS cache configuration that the cluster will attach to. Note this configuration must match that of associated dynamic forward proxy HTTP filter configuration.

allow_insecure_cluster_options: (bool) If true allow the cluster configuration to disable the auto_sni and auto_san_validation options in the cluster’s upstream_http_protocol_options