Envoy Logo

Extension Catalog

Discover 18 ready to use extensions for your Envoy® Proxy

anthropic-messages-decoder

AIDecoder

Decodes Anthropic Messages API requests and responses and exposes structured metadata for downstream filters

aianthropicdecodergohttpllmmessagesmetadata

azure-content-safety

AISecurity

Azure AI Content Safety integration for LLM prompt protection and content moderation

aiazurecontent-safetygoguardrailshttpllmprompt-injectionprotected-materialsecuritytask-adherence

bedrock-guardrails

AISecurity

Apply AWS Bedrock Guardrails for LLM prompt protection and content moderation.

aibedrockfiltergoguardrailshttpllmprompt-injectionprotected-material

cedar-auth

Security

Inline Cedar policy evaluation for HTTP request authorization

authorizationcedarfiltergohttpmtlspolicysecurityspiffe

chat-completions-decoder

AIDecoder

Decodes OpenAI Chat Completion requests and responses and exposes structured metadata for downstream filters

aichat-completionsdecodergohttpllmmetadataopenai

coraza-waf

Security

Web Application Firewall (WAF) for HTTP traffic using Coraza

corazacrsgohttpmodsecurityowaspsecuritywaf

example-ext-proc

Examples

Example `ext_proc` extension that adds a custom response header.

exampleext-procfilterhttp

example-go

Examples

Example composer embedded go plugin for HTTP filters

filtergohttp

example-lua

Examples

Comprehensive example demonstrating Envoy Lua HTTP filter capabilities

bodyexampleheadersloggingmetadatareferencessl

file-server

Traffic Control

Serve static files from the local filesystem through Envoy

filesfiltergohttpstatic

ip-restriction

Security

IP-based access control using allowlists or denylists

access-controldynamic-moduleexampleip-filteringrustsecurity

jwe-decrypt

Authentication

Decrypt JWE tokens and recover the inner JWT for Envoy to process

encryptionfiltergohttpjwesecurity

llm-proxy

AI

Routes LLM API requests by the module name and monitors token usage and latency via Envoy metadata and metrics.

aianthropicgohttpllmmetadataopenaiproxy

opa

Security

Inline OPA policy evaluation for HTTP request authorization

authorizationfiltergohttpmtlsopapolicysecurityspiffe

openapi-validator

Traffic Control

Validate HTTP requests against an OpenAPI specification

apifiltergohttpopenapisecurityvalidation

openfga

AISecurity

Inline OpenFGA authorization for Envoy, Envoy Gateway, and AI Gateway — no sidecar required

ai-gatewayauthorizationfiltergohttpopenfgasecurity

saml

AuthenticationSecurity

SAML 2.0 Service Provider authentication for Envoy HTTP traffic

authenticationfiltergohttpsamlsecuritysso

token-exchange

AuthenticationSecurity

OAuth2 token exchange for Envoy HTTP traffic

filtergohttpoauth2securitytokenexchange