SXG

    • This filter should be configured with the name envoy.filters.http.sxg.

    Attention

    The SXG filter is experimental and is currently under active development.

    This filter generates a Signed HTTP Exchange (SXG) package from a downstream web application. It uses libsxg to perform the SXG packaging and signing, setting the Content-Type header to application/signed-exchange;v=b3 and response body with the generated SXG document.

    The SXG filter is only included in

    Transaction flow:

    • If (or the header defined in ) is present in the response headers set a flag

    • If both flags are set, buffer response body until stream end and then replace response body with generated the SXG

    If there is an error generating the SXG package we fall back to the original HTML.

    For more information on Signed HTTP Exchanges see this doc.

    Instructions for generating a self-signed certificate and private key for testing can be found

    The SXG filter outputs statistics in the <stat_prefix>.sxg. namespace.