skills.rest
missBerg
missBergCOMMUNITY
Explore all skills by this author →
GitHub

eg-client-policy

Configure Envoy Gateway ClientTrafficPolicy resources for timeouts, TLS, and connection limits.

3|Updated Mar 8, 2026
Search Tags:#security#timeouts#tls#gateway#envoy#client-traffic-policy
One-click install
npx skills add https://github.com/missBerg/envoy-skills --skill eg-client-policy
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: eg-client-policy
Source: https://github.com/missBerg/envoy-skills/tree/main/gateway/adopters/skills/eg-client-policy
Command: npx skills add https://github.com/missBerg/envoy-skills --skill eg-client-policy

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Configure and enforce client-facing traffic controls for Envoy Gateway, enabling consistent, secure handling of downstream requests and preventing resource exhaustion.

Core Features & Use Cases

  • Timeouts and idle management to protect backends and improve resilience.
  • Connection and buffer controls to cap resources per listener or gateway.
  • TLS and mTLS settings, including minVersion, ciphers, ALPN, and client validation.
  • HTTP behavior and header management to enforce security and routing consistency.
  • Use Case: apply per-listener policies to tighten TLS on sensitive services while keeping a gateway-wide default.

Quick Start

Create a ClientTrafficPolicy in the same namespace as your Gateway and apply it to the Gateway or a specific listener to enforce the configured policies.

Frequently Asked Questions about eg-client-policy

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure client traffic policies in Envoy Gateway?▼

Configure Envoy Gateway ClientTrafficPolicy resources to standardize and safeguard downstream client connectivity. You apply these policies to Gateway resources to govern timeouts, connection limits, TLS behavior, and HTTP handling.

How do I enforce TLS settings on a specific Envoy Gateway listener?▼

Apply a ClientTrafficPolicy in the same namespace as your Gateway to enforce TLS settings. You can target specific listeners to tighten TLS on sensitive services while maintaining a separate gateway-wide default policy.

Can I set connection limits and timeouts for downstream clients in Envoy Gateway?▼

Yes, ClientTrafficPolicy configures connection and buffer controls to cap resources per listener or gateway. It also manages idle timeouts to protect backends and improve overall traffic resilience.

What downstream HTTP behaviors and headers can I manage with Envoy Gateway policies?▼

ClientTrafficPolicy manages downstream HTTP behavior and header management to enforce security and routing consistency. It also includes settings for client IP detection across all traffic.

Does Envoy Gateway ClientTrafficPolicy support mTLS and client validation?▼

Yes, ClientTrafficPolicy configures TLS and mTLS settings including minVersion, ciphers, ALPN, and client validation. This standardizes secure handling of downstream requests and prevents resource exhaustion.

Related Skills

Explore More Software Engineering Skills→
HyperscapeAIHyperscapeAI
91

api-gateway-configurator

Configure API gateways with rate limiting and JWT authentication.

Official
Advanced
interserverinterserver
1

mongodb-connection

Optimize MongoDB client connection pool and timeout settings.

Official
Advanced
missBergmissBerg
3

eg-auth

Configure Envoy Gateway authentication and authorization via SecurityPolicy for Gateway and HTTPRoute targets.

Community
Intermediate
wcyganwcygan
3

expose-service

Expose workloads via Envoy, Tailscale, and Cloudflare with TLS routing.

Community
Advanced