Custom User Authentication in Istio

We use EnvoyFilters to proxy traffic to our authentication middleware at the gateway. Does anyone else have experience with these? Curious about your deployment and testing patterns.