About the documentation
Introduction
Getting Started
Configuration reference
Operations and administration
Extending Envoy for custom use cases
API
Supported API versions
v3 API reference
Bootstrap
Listeners
Clusters
HTTP route management
Extensions
Access log extension filters
Access log formatters
Access loggers
Certificate mappers
Certificate selectors
Cluster
Common
Compression
Config validators
Contrib extensions
DNS resolver
Endpoint
Filters
Grpc credentials
Health check event sinks
Health checkers
HTTP early header mutation
HttpCacheV2 cache implementations
Custom response policies
External Processing Extensions
HTTP header formatters
HTTP header validators
HTTP original IP detection
HTTP stateful session
Injected credentials
Geolocation providers
HTTP tracers
Internal redirect predicates
Path matcher
Path rewriter
Quic extensions
Rate limit descriptors
RBAC
RBAC matchers
RBAC principals
Request ID
Resource monitors
Retry predicates
Stat sinks
String Matcher
Transport sockets
Upstream configuration
WASM
Watchdog
Load balancing policies
Cluster specifier
Local address selectors
Admin
Envoy data
Services
Common messages
Common messages (XDS)
Types
xDS REST and gRPC protocol
Well Known Client Features
FAQ
Version history
envoy
API
v3 API reference
Extensions
Certificate selectors
View page source
Certificate selectors
These extensions allow selecting a TLS certificate based on the peer handshake message.
On-demand secret certificate selector (proto)
extensions.transport_sockets.tls.cert_selectors.on_demand_secret.v3.Config