Notice:
This is the "latest" release of Envoy Gateway, which contains the most recent commits from the main branch.
This release might not be stable.
Please refer to the /docs documentation for the most current information.

Security

This section includes Security tasks.

  less than a minute  

Accelerating TLS Handshakes using Private Key Provider in Envoy

API Key Authentication

Backend Mutual TLS: Gateway to Backend

Backend TLS: Gateway to Backend

Backend TLS: Skip TLS Verification

Basic Authentication

CORS

Credential Injection

External Authorization

HTTP Header and Method Based Authentication

Configure request authentication using HTTP headers and HTTP methods with SecurityPolicy.

IP Allowlist/Denylist

JWT Authentication

JWT Claim-Based Authorization

Mutual TLS: External Clients to the Gateway

OIDC Authentication

Secure Gateways

Threat Model

TLS Passthrough

TLS Termination for TCP

Using cert-manager For TLS Termination


Last modified January 19, 2026: docs: add HTTP header and method based authentication task (1b178d12)