envoyproxy / gateway

Manages Envoy Proxy as a Standalone or Kubernetes-based Application Gateway
https://gateway.envoyproxy.io
Apache License 2.0
1.53k stars 328 forks source link

Caching support for External Authorization #3956

Open luvk1412 opened 1 month ago

luvk1412 commented 1 month ago

Feature

Add caching support for External Auhorization. Caching could be enabled on all or certain http response status code from ext auth service with configurable ttl.

Use Case

We currently have a central auth service. Each service in our cluster talks to this for auth and also has a local cache. We wanted to remove auth handling in each service but using External Auhorization in its current state doesn't look viable because due to lack of any caching, we will face:

Having a cache within envoy would ideally solve this.

Found a similar issue https://github.com/envoyproxy/envoy/issues/3023. Opening this here as well because the use case to me makes more sense and seems more logical for a gateway rather than a proxy.

github-actions[bot] commented 3 weeks ago

This issue has been automatically marked as stale because it has not had activity in the last 30 days.