dettanym / prose Goto Github PK

Possible options for PII detection, in order of priority are:

• configure a TAP filter
• a Go plugin (configured via HTTP Golang filter), or
• roll our own Envoy filter.

New experimental filter: TAP filter: Intended to intercept HTTP traffic (requests or responses) that match certain criteria. Matched traffic will be output to a "sink" that can be an API endpoint or a file.

HTTP Golang filter: Can write a custom plugin to intervene during an HTTP request / response lifecycle in Go. (The plugin can actively modify HTTP request and responses afaict) Sample sandbox

Rolling our own Envoy filter: Plugging in a new Envoy filter that hooks into the HTTP request / response lifecycle, in C++. (The http-filter example hooks in after a 'decode filter' and adds in a new header.)

Other sandboxes:

• Jaeger distributed tracing with Envoy's Zipkin client or "native" tracing with Jaeger client CPP (outdated repo)
• Ext Authz filter with OPA
• OpenTelemetry Collector