Notice: You're viewing documentation for an older version of Envoy Gateway that has reached End of Life (EOL).
Please refer to the /docs documentation for the most current information.

Security

This section includes Security tasks.

  less than a minute  

Accelerating TLS Handshakes using Private Key Provider in Envoy

API Key Authentication

Backend Mutual TLS: Gateway to Backend

Backend TLS: Gateway to Backend

Backend TLS: Skip TLS Verification

Basic Authentication

CORS

Credential Injection

External Authorization

HTTP Header and Method Based Authorization

Configure request authorization using HTTP headers and HTTP methods with SecurityPolicy.

IP Allowlist/Denylist

JWT Authentication

JWT Claim-Based Authorization

Mutual TLS: External Clients to the Gateway

OIDC Authentication

Secure Gateways

Threat Model

TLS Passthrough

TLS Termination for TCP

Using cert-manager For TLS Termination


Last modified February 6, 2026: [release/v1.7] v1.7.0 release docs and announcement (#8191) (1903fdf9)