Original Src Filter (proto)

This extension has the qualified name envoy.filters.listener.original_src


This extension is functional but has not had substantial production burn time, use only with this caveat.

This extension is intended to be robust against untrusted downstream traffic. It assumes that the upstream is trusted.


This extension extends and can be used with the following extension category:

This extension must be configured with one of the following type URLs:

Use the Original source address on upstream connections.


[extensions.filters.listener.original_src.v3.OriginalSrc proto]

The Original Src filter binds upstream connections to the original source address determined for the connection. This address could come from something like the Proxy Protocol filter, or it could come from trusted http headers.

  "mark": ...

(uint32) Sets the SO_MARK option on the upstream connection’s socket to the provided value. Used to ensure that non-local addresses may be routed back through envoy when binding to the original source address. The option will not be applied if the mark is 0.