envoy_config2.json

{
  "static_resources": {
    "listeners": [
      {
        "address": {
          "socket_address": {
            "address": "0.0.0.0",
            "port_value": 15002
          }
        },
        "listener_filters": [
          {
            "name": "envoy.listener.tls_inspector",
            "config": {
            }
          }
        ],
        "filter_chains": [
          {
            "filter_chain_match": {
              "server_names": "envoy2.local"
            },
            "tlsContext": {
              "commonTlsContext": {
                "tlsCertificates": [
                  {
                    "certificateChain": {
                      "filename": "/etc/my-envoy-certs/envoy2.crt"
                    },
                    "privateKey": {
                      "filename": "/etc/my-envoy-certs/envoy2.key"
                    }
                  }
                ],
                "validationContext": {
                  "trustedCa": {
                    "filename": "/etc/my-envoy-certs/envoy1.crt"
                  }
                },
                "alpnProtocols": [
                  "h2",
                  "http/1.1"
                ]
              },
              "requireClientCertificate": true
            },
            "filters": [
              {
                "name": "envoy.network_level_sni_reader",
                "config": {}
              },
              {
                "name": "GetSNIsFilter",
                "config": {}
              },
              {
                "name": "envoy.tcp_proxy",
                "config": {
                  "stat_prefix": "envoy2.local",
                  "access_log": [
                    {
                      "config": {
                        "path": "/dev/stdout"
                      },
                      "name": "envoy.file_access_log"
                    }
                  ],
                  "cluster": "cnn"
                }
              }
            ]
          }
        ]
      }
    ],
    "clusters": [
      {
        "name": "cnn",
        "connect_timeout": "2.5s",
        "type": "strict_dns",
        "lb_policy": "round_robin",
        "hosts": [
          {
            "socket_address": {
              "address": "edition.cnn.com",
              "port_value": 443
            }
          }
        ],
        "dns_lookup_family" : "v4_only"
      }
    ]
  },
  "admin": {
    "access_log_path": "/dev/null",
    "address": {
      "socket_address": {
        "address": "0.0.0.0",
        "port_value": 8002
      }
    }
  }
}