How to add server_header_transformation in kind: EnvoyProxy

[meektechie]

Description:

Describe the desired behavior, what scenario it enables and how it would be used. I want to remove server: nginx/1.27.1 header on on my response header. I am using envoy-gateway. I want server_header_transformation this to be applied globally.
[optional Relevant Links:] Any extra documentation required to understand the issue.

Below i have attached my configuration. It did't works but need some experts guidelines.

`apiVersion: gateway.envoyproxy.io/v1alpha1 kind: EnvoyProxy metadata: name: external-proxy-config namespace: gateway spec: bootstrap: type: Merge value: | static_resources: listeners:

• name: listener_0 address: socket_address: address: 0.0.0.0 port_value: 8080 filter_chains:
  • filters:
    • name: envoy.filters.network.http_connection_manager typed_config: "@type": type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager stat_prefix: ingress_http server_header_transformation: PASS_THROUGH server_name: none route_config: name: local_route virtual_hosts:
      • name: local_service domains: ["*"] routes:
        • match: prefix: "/" route: cluster: some_service_cluster clusters:
• name: some_service_cluster connect_timeout: 0.25s type: STRICT_DNS lb_policy: ROUND_ROBIN load_assignment: cluster_name: some_service_cluster endpoints:
  • lb_endpoints:
    • endpoint: address: socket_address: address: 127.0.0.1 port_value: 19000 provider: type: Kubernetes kubernetes: envoyDeployment: replicas: 1 container: resources: requests: cpu: 150m memory: 640Mi limits: cpu: 500m memory: 1Gi envoyHpa: minReplicas: 1 maxReplicas: 3 metrics:
      • resource: name: cpu target: averageUtilization: 30 type: Utilization type: Resource envoyService: externalTrafficPolicy: Local type: LoadBalancer annotations: service.beta.kubernetes.io/aws-load-balancer-nlb-target-type: ip service.beta.kubernetes.io/aws-load-balancer-scheme: "internet-facing"`

[meektechie]

apiVersion: gateway.envoyproxy.io/v1alpha1 kind: EnvoyProxy metadata: name: external-proxy-config namespace: gateway spec: bootstrap: type: Merge value: | static_resources: listeners:

• name: listener_0 address: socket_address: address: 0.0.0.0 port_value: 8080 filter_chains:
  • filters:
    • name: envoy.filters.network.http_connection_manager typed_config: "@type": type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager stat_prefix: ingress_http server_header_transformation: PASS_THROUGH server_name: none route_config: name: local_route virtual_hosts:
      • name: local_service domains: ["*"] routes:
        • match: prefix: "/" route: cluster: some_service_cluster clusters:
• name: some_service_cluster connect_timeout: 0.25s type: STRICT_DNS lb_policy: ROUND_ROBIN load_assignment: cluster_name: some_service_cluster endpoints:
  • lb_endpoints:
    • endpoint: address: socket_address: address: 127.0.0.1 port_value: 19000 provider: type: Kubernetes kubernetes: envoyDeployment: replicas: 1 container: resources: requests: cpu: 150m memory: 640Mi limits: cpu: 500m memory: 1Gi envoyHpa: minReplicas: 1 maxReplicas: 3 metrics:
      • resource: name: cpu target: averageUtilization: 30 type: Utilization type: Resource envoyService: externalTrafficPolicy: Local type: LoadBalancer annotations: service.beta.kubernetes.io/aws-load-balancer-nlb-target-type: ip service.beta.kubernetes.io/aws-load-balancer-scheme: "internet-facing"

[arkodg]

@meektechie its PASS_THROUGH by default https://github.com/envoyproxy/gateway/pull/2585/files are you on v1.1 ?

[meektechie]

@arkodg Yes it is v1.1.1. I followed the doc https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/network/http_connection_manager/v3/http_connection_manager.proto.html#envoy-v3-api-enum-extensions-filters-network-http-connection-manager-v3-httpconnectionmanager-serverheadertransformation. there it is mentioned default is OVERWRITE. I am new to it. I want to remove the "Server" header globally for all the HTTPRoutes. Pls suggest how can i proceed.

[arkodg]

@meektechie Envoy Proxy sets the default to OvERWRITE but Envoy Gateway sets the default to PASSTHROUGH

[meektechie]

Great, but still i could see the server header. Am i missing something?

[github-actions[bot]]

This issue has been automatically marked as stale because it has not had activity in the last 30 days.