Control Plane Auth for Rate Limit Service

[arkodg]

Description:
Ensures all communication with the Rate Limit Service is encrypted & authenicated.

• Generate keys/certs for the Rate Limit Service in the Cert-gen job

  gateway/internal/crypto/certgen.go

  Line 141 in 80db459

  return &Certificates{

  feat(crypto): control plane TLS support for Rate Limit Service phase I #1499
• Setup TLS b/w EG RL xDS Server and RL Service
  • xds Server

    gateway/internal/globalratelimit/runner/runner.go

    Line 80 in 80db459

    func (r *Runner) serverXdsConfigServer(ctx context.Context) {

    feat(crypto): add ratelimit xds tls function #1523
  • RLS https://github.com/envoyproxy/ratelimit#xds-management-server-based-configuration-loading feat(crypto): add ratelimit xds tls function #1523
• Setup TLS b/w Envoy Proxy and RLS Service
  • RL Filter https://www.envoyproxy.io/docs/envoy/latest/api-v3/config/ratelimit/v3/rls.proto#config-ratelimit-v3-ratelimitserviceconfig feat(crypto): control plane TLS support for Rate Limit Service phase I #1499
  • RLS https://github.com/envoyproxy/ratelimit#mtls feat(crypto): control plane TLS support for Rate Limit Service phase I #1499

[optional Relevant Links:]

Any extra documentation required to understand the issue.

[oowl]

Hi, I can work on this feature, Please assign to me if it is Okay.

[zirain]

@oowl assign this to you

[arkodg]

Thanks for adding this feature @oowl !