This page provides some pointers that could assist in addressing issues encountered while using the OPA-Envoy plugin. If none of these tips work, feel free to join and ask for help.

The command evaluates a Rego query multiple times and reports metrics. You can also profile your polices using to understand expression evaluation time. More information on improving policy performance can be found here.

Envoy’s External authorization gRPC service configuration uses either Envoy’s in-built gRPC client, or the Google C++ gRPC client. From the results, lower latency numbers are seen while using Envoy’s gRPC client versus Google’s. Experimenting with the gRPC service configuration may help in improving performance.

The filter configuration also has a field that can be used to indicate a network error between the filter and the OPA-Envoy plugin. The default status on such an error is HTTP . Changing the default value of this field will help uncover potential network issues as is also generated when a request is denied.

Interacting with the gRPC server

• List all services exposed by the server

Output:

Output: