The command evaluates a Rego query multiple times and reports metrics. You can also profile your polices using to understand expression evaluation time. More information on improving policy performance can be found .

The OPA-Envoy plugin logs every decision that it makes. These logs contain lots of useful information including metrics like gRPC server handler time and Rego query evaluation time which can help in measuring the OPA-Envoy plugin’s performance. To enable local console logging of decisions see this.

The filter configuration also has a field that can be used to indicate a network error between the filter and the OPA-Envoy plugin. The default status on such an error is HTTP . Changing the default value of this field will help uncover potential network issues as is also generated when a request is denied.

Interacting with the gRPC server

This section provides examples of interacting with the Envoy External Authorization gRPC server using the grpcurl tool.

• Output: