I am developing an envoy wasm plugin on istio 1.7.4.
The plugin is applied to both the HTTP_FILTER and NETWORK FILTER and it works fine. However I need to extract the client/server IP addresses from the processed stream.
Is there a way to do that ?
Quoting the documentation it doesn’t seem to be possible:
Using Wasm for extending Envoy brings us several key benefits:
Security: The sandbox has a clearly defined API for communicating with Envoy, so extensions only have access to, and can modify, a limited number of properties of a connection or request. Furthermore, because Envoy mediates this interaction, it can hide or sanitize sensitive information from the extension (e.g. “Authorization” and “Cookie” HTTP headers, or the client’s IP address).
I was wondering if there is a workaround for this.