| ... | ... | @@ -52,6 +52,10 @@ https://www.envoyproxy.io/docs/envoy/latest/intro/arch_overview/security/ext_aut |
|
|
|
> The external authorization service cluster may be either statically configured or configured via the Cluster Discovery Service. If the external service is not available when a request comes in then whether the request is authorized or not is defined by the configuration setting of failure_mode_allow configuration in the applicable network filter or HTTP filter. If it is set to true then the request will be permitted (fail open) otherwise it will be denied. The default setting is false.
|
|
|
|
|
|
|
|
|
|
|
|
envoy:
|
|
|
|
https://img-blog.csdnimg.cn/20210524164722270.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2dlbmd6aGlrdWkxOTky,size_16,color_FFFFFF,t_70#pic_center
|
|
|
|
|
|
|
|
|
|
|
|
Cluster Discovery Service?
|
|
|
|
|
|
|
|
|
| ... | ... | |
