-
Notifications
You must be signed in to change notification settings - Fork 689
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Enable gzip if not already enabled #310
Comments
Bumping to 0.6 |
This is still open for anyone to work on it in 0.6 after April 23 |
Envoy added support for a gzip HTTP filter in 1.6: envoyproxy/envoy#269 Moving to 0.7.0 unless someone else has bandwidth to tackle. |
One reason someone might want to do this is as a blanket mitigation for BREACH. |
This unconditionally enables envoys gzip http_filter[1], which will compress responses if the request indicates it can handle it (via a "accept-encoding: gzip" request header). I've enabled it with no options, which means it gets the defaults, as listed at [2]. In envoy 1.7.0, they're: { "memory_level": 5, "content_length": 30", "compression_level": "DEFAULT", "compression_strategy": "DEFAULT", "content_type": [“application/javascript”, “application/json”, “application/xhtml+xml”, “image/svg+xml”, “text/css”, “text/html”, “text/plain”, “text/xml”], "disable_on_etag_header": false, "remove_accept_encoding_header": false, "window_bits": 12 } Note the list of content types that will be compressed. It's possible some users will want to customise this list, but for now I haven't exposed that option. Fixes projectcontour#310 [1] https://www.envoyproxy.io/docs/envoy/latest/configuration/http_filters/gzip_filter [2] https://www.envoyproxy.io/docs/envoy/latest/api-v2/config/filter/http/gzip/v2/gzip.proto Signed-off-by: James Healy <james@yob.id.au>
Hi, what's the status? As far I can test gzip is not enabled by default and I also can't find any hint in the docs. |
@StarpTech Contour always enables the Envoy gzip filter with the default setting, which are documented here. |
@jpeach thanks, I will retest it. |
The text was updated successfully, but these errors were encountered: