Content differences:
--- /etc/envoy/listeners.d/00-tls_terminator_443.yaml.orig
+++ /etc/envoy/listeners.d/00-tls_terminator_443.yaml
@@ -50,10 +50,6 @@
apply_on_stream_done: true
# NOTE: If one of the headers referenced below is not set, the rate limit is not applied.
actions:
- # Provide the user's identity (x-client-ip is set at the edge) as the counter key
- - request_headers:
- descriptor_key: user_id
- header_name: x-client-ip
# Hardcode the policy and user class for now
- generic_key:
descriptor_key: policy
@@ -61,6 +57,10 @@
- generic_key:
descriptor_key: user_class
descriptor_value: anon
+ # Provide the user's identity (x-client-ip is set at the edge) as the counter key
+ - request_headers:
+ descriptor_key: user_id
+ header_name: x-client-ip
http_filters:
- name: envoy.filters.http.ratelimit.resp
typed_config: