Skip to content

dfp: added new deny address matcher to harden DFP cluster#45380

Open
wbpcode wants to merge 2 commits into
envoyproxy:mainfrom
wbpcode:dev-ip-matcher
Open

dfp: added new deny address matcher to harden DFP cluster#45380
wbpcode wants to merge 2 commits into
envoyproxy:mainfrom
wbpcode:dev-ip-matcher

Conversation

@wbpcode
Copy link
Copy Markdown
Member

@wbpcode wbpcode commented Jun 2, 2026

Commit Message: dfp: added new deny address matcher to harden DFP cluster
Additional Description:

To harden the DFP cluster to prevent SSRF attack vector.

Risk Level: low.
Testing: unit.
Docs Changes: n/a.
Release Notes: added.
Platform Specific Features: n/a.

@repokitteh-read-only
Copy link
Copy Markdown

CC @envoyproxy/api-shepherds: Your approval is needed for changes made to (api/envoy/|docs/root/api-docs/).
envoyproxy/api-shepherds assignee is @markdroth
CC @envoyproxy/api-watchers: FYI only for changes made to (api/envoy/|docs/root/api-docs/).

🐱

Caused by: #45380 was opened by wbpcode.

see: more, trace.

Signed-off-by: wbpcode/wangbaiping <wbphub@gmail.com>
Signed-off-by: wbpcode/wangbaiping <wbphub@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants