Skip to main content

Header Collection

LeakSignal defaults to collecting a whitelist of HTTP request and response headers.

Fields

collected_request_headers

collected_request_headers specifies a list of HTTP request headers to send upstream for telemetry. Overrides the default list if set.

Default
- :path
- :method
- :authority
- :scheme
- host
- accept
- accept-encoding
- accept-language
- cache-control
- referer
- user-agent
- x-request-id
- x-forwarded-for
- content-type
- grpc-encoding
- grpc-accept-encoding
- x-envoy-peer-metadata-id

collected_response_headers

collected_response_headers specifies a list of HTTP response headers to send upstream for telemetry. Overrides the default list if set.

Default
- :status
- content-encoding
- content-type
- date
- server
- vary
- via
- grpc-encoding
- grpc-accept-encoding
- x-envoy-peer-metadata-id
- grpc-status
- grpc-message
- x-ls-request-id
- x-source
- x-ls-source
- x-sbac-rule

header_collection

header_collection overrides collected_request_headers/collected_response_headers. Can be set to all_request, all_response, all, or none (default) to skip the whitelist.