HTTP filters
Filters that run on each HTTP request and response inside the HTTP connection manager, ending in the router.
10 pages
In this group
- RouterThe mandatory terminal HTTP filter that executes the routing decision and sends the request upstream. Read →
- CORSHTTP filter that answers preflight requests and stamps CORS headers on responses. Read →
- Local rate limitHTTP filter that rate-limits requests with an in-process token bucket, overridable per route. Read →
- User rate limitArion HTTP filter that keeps a separate rate limit bucket per caller, identified by a header. Read →
- JWT authenticationHTTP filter that validates JSON Web Tokens against configured providers and JWKS keys. Read →
- RBACHTTP filter that allows or denies requests by header-based policies, overridable per route. Read →
- Cedar policyArion HTTP filter that authorizes requests with Cedar policies over JWT claims and request context. Read →
- External processingHTTP filter that streams headers and bodies to an external gRPC processor, overridable per route. Read →
- WasmHTTP filter that runs a WebAssembly module in-process on every request and response. Read →
- MCP gatewayArion HTTP filter that serves a Model Context Protocol endpoint, maps tools onto REST, OpenAPI and MCP upstreams, and runs agent scripts in code mode. Read →