Istio practical skill: hide the automatically added server header

This article comes from istio Learning notes

background

For safety reasons , Want to hide istio Automatically added server: istio-envoy In this way header.

Solution

You can configure the envoyfilter , Give Way envoy Do not automatically add... When returning a response server Of header, take HttpConnectionManager Of server_header_transformation Set to PASS_THROUGH( The backend did not return this header when envoy Will not automatically add ):

apiVersion: networking.istio.io/v1alpha3
kind: EnvoyFilter
metadata:
  name: hide-headers
  namespace: istio-system
spec:
  configPatches:
  - applyTo: NETWORK_FILTER
    match:
      context: ANY
      listener:
        filterChain:
          filter:
            name: "envoy.http_connection_manager"
    patch:
      operation: MERGE
      value:
        typed_config:
          "@type": "type.googleapis.com/envoy.config.filter.network.http_connection_manager.v2.HttpConnectionManager"
          server_header_transformation: PASS_THROUGH

Reference material

• server_header_transformation Explanation of field values