# Dynamic forward proxy cluster configuration¶

## extensions.clusters.dynamic_forward_proxy.v3.ClusterConfig¶

[extensions.clusters.dynamic_forward_proxy.v3.ClusterConfig proto]

Configuration for the dynamic forward proxy cluster. See the architecture overview for more information.

This extension may be referenced by the qualified name envoy.clusters.dynamic_forward_proxy

Note

This extension is intended to be robust against untrusted downstream traffic. It assumes that the upstream is trusted.

{
"dns_cache_config": "{...}",
"allow_insecure_cluster_options": "..."
}

dns_cache_config

(extensions.common.dynamic_forward_proxy.v3.DnsCacheConfig, REQUIRED) The DNS cache configuration that the cluster will attach to. Note this configuration must match that of associated dynamic forward proxy HTTP filter configuration.

allow_insecure_cluster_options

(bool) If true allow the cluster configuration to disable the auto_sni and auto_san_validation options in the cluster’s upstream_http_protocol_options