Envoy Logo

Extension Catalog

Discover 14 ready to use extensions for your Envoy® Proxy

azure-content-safety

AISecurity

Azure AI Content Safety integration for LLM prompt protection and content moderation

aiazurecontent-safetygoguardrailshttpllmprompt-injectionprotected-materialsecuritytask-adherence

bedrock-guardrails

AISecurity

Apply AWS Bedrock Guardrails for LLM prompt protection and content moderation.

aibedrockfiltergoguardrailshttpllmprompt-injectionprotected-material

cedar-auth

Security

Inline Cedar policy evaluation for HTTP request authorization

authorizationcedarfiltergohttpmtlspolicysecurityspiffe

chat-completions-decoder

AIDecoder

Decodes OpenAI Chat Completion requests and responses and exposes structured metadata for downstream filters

aichat-completionsdecodergohttpllmmetadataopenai

coraza-waf

Security

Web Application Firewall (WAF) for HTTP traffic using Coraza

corazagohttpmodsecurityowaspsecuritywaf

example-go

Examples

Example composer embedded go plugin for HTTP filters

filtergohttp

example-lua

Examples

Comprehensive example demonstrating Envoy Lua HTTP filter capabilities

bodyexampleheadersloggingmetadatareferencessl

file-server

Traffic Control

Serve static files from the local filesystem through Envoy

filesfiltergohttpstatic

ip-restriction

Security

IP-based access control using allowlists or denylists

access-controldynamic-moduleexampleip-filteringrustsecurity

jwe-decrypt

Authentication

Decrypt JWE tokens and recover the inner JWT for Envoy to process

encryptionfiltergohttpjwesecurity

opa

Security

Inline OPA policy evaluation for HTTP request authorization

authorizationfiltergohttpmtlsopapolicysecurityspiffe

openapi-validator

Traffic Control

Validate HTTP requests against an OpenAPI specification

apifiltergohttpopenapisecurityvalidation

saml

AuthenticationSecurity

SAML 2.0 Service Provider authentication for Envoy HTTP traffic

authenticationfiltergohttpsamlsecuritysso

token-exchange

AuthenticationSecurity

OAuth2 token exchange for Envoy HTTP traffic

filtergohttpoauth2securitytokenexchange