Skip to main content

Gate as ExtAuth service

Gate can be run as a gRPC server implementing the Envoy ExtAuth protocol. To deploy Gate as an ExtAuth service, configure the yaml file as follows:

gate:
mode: ext_auth
default:
ext_auth_response: deny
port: 5000

# plugins and url mappings here

When running in ext_auth mode, Gate will apply plugins to incoming requests exactly as when it runs in proxy mode, comparing the patterns in the URL config to the URLs of the requests. Based on the outcome of the plugin, it will return an allow or deny response.