Notice:
This is the "latest" release of Envoy Gateway, which contains the most recent commits from the main branch.
This release might not be stable.
Please refer to the /docs documentation for the most current information.

Security

This section includes Security tasks.

  less than a minute  

Accelerating TLS Handshakes using Private Key Provider in Envoy

API Key Authentication

Backend Mutual TLS: Gateway to Backend

Backend TLS: Gateway to Backend

Backend TLS: Skip TLS Verification

Basic Authentication

CORS

Credential Injection

External Authorization

GeoIP Authorization

HTTP Header and Method Based Authorization

Configure request authorization using HTTP headers and HTTP methods with SecurityPolicy.

IP Allowlist/Denylist

JWT Authentication

JWT Claim-Based Authorization

Mutual TLS: External Clients to the Gateway

OIDC Authentication

Secure Gateways

Threat Model

TLS Passthrough

TLS Termination for TCP

Using cert-manager For TLS Termination


Last modified March 24, 2026: geoip docs (d05aec31)