Hey everyone! I'm new to Azure and just landed my first job in DevOps. I'm trying to figure out if there's a way to restrict certain HTTP headers when deploying my application with Azure Container Apps. I know it's running on Envoy, but I'm struggling to find the right settings in ACA to manage this. While I understand that it's usually handled on the app level, I need a solution that doesn't introduce latency—like using a Layer 7 Load Balancer or something that's part of the source code. Just to clarify, using AKS isn't an option for me at this time!
2 Answers
Yeah, it can be a bit tricky with ACA. It abstracts a lot of the configuration you might want, making it hard to manage specific controls like header filtering. Envoy is under the hood, yet Microsoft doesn’t give you direct access to modify those settings. If you don’t want to tweak app code or utilize something like Front Door, your options are pretty limited. Many users end up managing headers in the app itself or setting up a lightweight proxy in front of the app as a sidecar. It’s a bit of a trade-off between convenience and control, to be honest. You're definitely not missing anything obvious here.
Unfortunately, ACA doesn’t provide that option directly. You might need to act on the app layer, or use an Application Gateway with a WAF, which can filter headers based on your requirements. Just keep in mind that while the app gateway shouldn’t add much latency, it might come with a bit of a cost. Check out Microsoft's documentation for more info.
I see, well, app level it is lol.