Skip to content

Commit a78a79a

Browse files
e-n-0michaelcretzman
e-n-0
and
michaelcretzman
authored
Update AAP Proxies documentation (#30710)
* remove old unsued gcp-service-extensions page + update alias * Remove languages top bar for proxies * Rename AAP to fullname + remove useless standalone part * Rename AAP to fullname for nginx * Remove useless standalone in istio * fix envoy broken link on google (old link but first on search) * useless app standalone on gcp se * Update the gcp se page with body info + explain better some options * update http filter documentation with more details * revert removing gpc se compat page * update envoy default configuration and instructions * more updates * more info + synchronise * compatibility updates * little name fix in campat * add dd_service in config with default value * some fixes * add (AAP) for consistancy with other aap pages * more fixes * add info for observability mode * add body processing supported payloads type * Apply changes based on comments * Update content/en/security/application_security/setup/gcp/service-extensions.md Co-authored-by: Flavien Darche <[email protected]> * update latest release version --------- Co-authored-by: Michael Cretzman <[email protected]>
1 parent f22306e commit a78a79a

File tree

7 files changed

+422
-213
lines changed

7 files changed

+422
-213
lines changed

‎content/en/security/application_security/setup/compatibility/envoy.md

Lines changed: 28 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -7,27 +7,42 @@ aliases:
77
- /security/application_security/threats/setup/compatibility/envoy
88
---
99

10-
The following table lists the support for App and API Protection capabilities in the Envoy integration according to the specified tracer version:
10+
The following table lists App and API Protection capabilities for the Envoy integration according to the specified Datadog External Processor image version:
1111

12-
| App and API Protection capability | Minimum Envoy image version |
13-
|----------------------------------------|------------------------------|
14-
| Threat Detection | 1.71.0 |
15-
| Threat Protection | 1.71.0 |
16-
| Customize response to blocked requests | 1.71.0 |
17-
| Automatic user activity event tracking | not supported |
18-
| API Security | not supported |
12+
| App and API Protection capability | Minimum Datadog External Processor image version |
13+
|------------------------------------------------|---------------------------------------------------|
14+
| Threat Detection | v1.71.0 |
15+
| Threat Protection | v1.71.0 |
16+
| Customize response to blocked requests | v1.71.0 |
17+
| Non blocking asynchronous mode (observability) | v2.1.0 |
18+
| API Security | v2.2.2 |
19+
| App and API Protection Standalone | v2.2.2 |
20+
| Automatic user activity event tracking | not supported |
1921

20-
Please review Envoy integration version 1.71.0 [limitations][1].
22+
### Body processing support
2123

22-
## Envoy support
24+
The Datadog External Processor service supports the processing of request and response bodies for the following payload types:
2325

24-
Envoy integration is in Preview.
26+
| Payload type | Minimum Datadog External Processor image version |
27+
|--------------|---------------------------------------------------|
28+
| JSON | v2.2.2 |
29+
30+
## Envoy version support
31+
32+
The Datadog Envoy integration for App and API Protection relies on features that might not be present in every Envoy version. The following table shows which Envoy versions support each feature.
33+
34+
| Feature | Minimum Envoy version |
35+
|---------|-----------------------|
36+
| External Processing Filter | v1.27.0 |
37+
| Observability mode | v1.30.0 |
38+
39+
## Datadog Envoy integration support
40+
41+
<div class="alert alert-info">The Datadog Envoy integration for App and API Protection is in Preview.</div>
2542

2643
Only the Linux version and both the arm64 and arm64 architectures are supported.
2744

2845
<div class="alert alert-info">If you would like to see support added for any of
2946
the unsupported capabilities, let us know! Fill out <a
3047
href="https://forms.gle/gHrxGQMEnAobukfn7">this short form to send
3148
details</a>.</div>
32-
33-
[1]: /security/application_security/setup/envoy

‎content/en/security/application_security/setup/compatibility/gcp-service-extensions.md

Lines changed: 20 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -7,25 +7,34 @@ aliases:
77
- /security/application_security/threats/setup/compatibility/gcp-service-extensions
88
---
99

10-
The following table lists the support for App and API Protection capabilities in the App and API Protection GCP Service Extensions according to the specified version:
10+
The following table lists App and API Protection capabilities for GCP Service Extensions according to the specified Datadog Service Extensions callout image version:
1111

12-
| App and API Protection capability | Minimum App and API Protection Service Extensions image version |
13-
|----------------------------------------|----------------------------------------------|
14-
| Threat Detection | 1.71.0 |
15-
| Threat Protection | 1.71.0 |
16-
| Customize response to blocked requests | 1.71.0 |
17-
| Automatic user activity event tracking | not supported |
18-
| API Security | not supported |
12+
| App and API Protection capability | Minimum App and API Protection Service Extensions callout image version |
13+
|------------------------------------------|--------------------------------------------------------------------------|
14+
| Threat Detection | 1.71.0 |
15+
| Threat Protection | 1.71.0 |
16+
| Customize response to blocked requests | 1.71.0 |
17+
| API Security | v2.2.2 |
18+
| App and API Protection Standalone | v2.2.2 |
19+
| Automatic user activity event tracking | not supported |
1920

20-
Please review App and API Protection GCP Service Extensions integration version 1.71.0 [limitations][1].
21+
Please refer to the [limitations][1] of the App and API Protection GCP Service Extensions integration.
22+
23+
### Body processing support
24+
25+
The Datadog Service Extensions callout supports the processing of request and response bodies for the following payload types:
26+
27+
| Payload type | Minimum App and API Protection Service Extensions callout image version |
28+
|--------------|--------------------------------------------------------------------------|
29+
| JSON | v2.2.2 |
2130

2231
## App and API Protection GCP Service Extensions support
2332

24-
App and API Protection GCP Service Extensions is in Preview.
33+
<div class="alert alert-info">App and API Protection GCP Service Extensions is in Preview.</div>
2534

2635
<div class="alert alert-info">If you would like to see support added for any of
2736
the unsupported capabilities, let us know! Fill out <a
2837
href="https://forms.gle/gHrxGQMEnAobukfn7">this short form to send
2938
details</a>.</div>
3039

31-
[1]: /security/application_security/setup/gcp/service-extensions
40+
[1]: /security/application_security/setup/gcp/service-extensions

‎content/en/security/application_security/setup/compatibility/istio.md

Lines changed: 43 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -5,21 +5,52 @@ type: multi-code-lang
55
code_lang_weight: 40
66
---
77

8-
The following table lists the support for App and API Protection capabilities in the Istio integration according to the specified tracer version:
8+
The following table lists App and API Protection capabilities for the Istio integration according to the specified Datadog External Processor image version:
99

10-
| App and API Protection capability | Minimum Istio image version |
11-
|----------------------------------------|------------------------------|
12-
| Threat Detection | 1.71.0 |
13-
| Threat Protection | 1.71.0 |
14-
| Customize response to blocked requests | 1.71.0 |
15-
| Automatic user activity event tracking | not supported |
16-
| API Security | not supported |
10+
| App and API Protection capability | Minimum Datadog External Processor image version |
11+
|------------------------------------------------|---------------------------------------------------|
12+
| Threat Detection | v1.71.0 |
13+
| Threat Protection | v1.71.0 |
14+
| Customize response to blocked requests | v1.71.0 |
15+
| Non blocking asynchronous mode (observability) | v2.1.0 |
16+
| API Security | v2.2.2 |
17+
| App and API Protection Standalone | v2.2.2 |
18+
| Automatic user activity event tracking | not supported |
1719

18-
Please review Istio integration version 1.71.0 [limitations][1].
20+
### Body processing support
1921

20-
## Istio support
22+
The Datadog External Processor service supports the processing of request and response bodies for the following payload types:
2123

22-
The Istio integration is in Preview.
24+
| Payload type | Minimum Datadog External Processor image version |
25+
|--------------|---------------------------------------------------|
26+
| JSON | v2.2.2 |
27+
28+
## Istio version support
29+
30+
### Supported Envoy Versions
31+
32+
Istio’s data plane is based on Envoy. The following table shows the relationship between Istio versions and their corresponding Envoy release branches:
33+
34+
| Istio version | Envoy release branch |
35+
|---------------|----------------------|
36+
| 1.26.x | release/v1.34 |
37+
| 1.25.x | release/v1.33 |
38+
| 1.24.x | release/v1.32 |
39+
40+
More information about relationship between Istio and Envoy versions can be found in the [Istio documentation][1].
41+
42+
### Envoy version support
43+
44+
The Datadog Envoy integration for App and API Protection relies on features that might not be present in every Envoy version. The following table shows which Envoy versions support each feature.
45+
46+
| Feature | Minimum Envoy version |
47+
|---------|-----------------------|
48+
| External Processing Filter | v1.27.0 |
49+
| Observability mode | v1.30.0 |
50+
51+
## Datadog Istio integration support
52+
53+
<div class="alert alert-info">The Datadog Istio integration for App and API Protection is in Preview.</div>
2354

2455
Only the Linux version and both the arm64 and arm64 architectures are supported.
2556

@@ -28,4 +59,4 @@ the unsupported capabilities, let us know! Fill out <a
2859
href="https://forms.gle/gHrxGQMEnAobukfn7">this short form to send
2960
details</a>.</div>
3061

31-
[1]: /security/application_security/setup/istio
62+
[1]: https://istio.io/latest/docs/releases/supported-releases/#supported-envoy-versions

0 commit comments

Comments
 (0)