OS Manuals

/usr/bin/extproc

Envoy AI Gateway external processor, the request-rewriting filter that integrates with Envoy via the ext_proc gRPC API

From envoy-ai-gateway-extproc 1.2.1-r0 (enterprise-packages), captured 2026-11-08 by running extproc --help (exit 1). permalink

Usage of AI Gateway External Processor:
  -adminPort int
    	HTTP port for the admin server (serves /metrics and /health endpoints). (default 1064)
  -configBundlePath string
    	path to the sharded configuration bundle directory (index.yaml + parts).
  -enableRedaction
    	Enable redaction of sensitive information in debug logs.
  -endpointPrefixes string
    	Comma-separated key-value pairs for endpoint prefixes. Format: openai:/,cohere:/cohere,anthropic:/anthropic,typesafe:/typesafe.
2026/11/08 04:11:18 starting pprof server on port 6060
  -extProcAddr string
    	gRPC address for the external processor. For example, :1063 or unix:///tmp/ext_proc.sock. (default ":1063")
  -logFormat string
    	log output format for the external processor. One of 'text' or 'json'. (default "text")
  -logLevel string
    	log level for the external processor. One of 'debug', 'info', 'warn', or 'error'. (default "info")
  -logRequestHeaderAttributes value
    	Comma-separated key-value pairs for mapping HTTP request headers to access log attributes. Format: agent-session-id:session.id,x-tenant-id:tenant.id. Default: agent-session-id:session.id (when unset). Set to empty to disable.
  -maxRecvMsgSize int
    	Maximum message size in bytes that the gRPC server can receive. Default is unlimited since the flow control should be handled by Envoy. (default 9223372036854775807)
  -mcpAddr string
    	the address (TCP or UDS) for the MCP proxy server, such as :1063 or unix:///tmp/ext_proc.sock. Optional.
  -mcpFallbackSessionEncryptionIterations int
    	Number of iterations used in the fallback PBKDF2 key derivation for MCP session encryption. (default 100000)
  -mcpFallbackSessionEncryptionSeed string
    	Optional fallback seed used for MCP session key rotation.
  -mcpSessionEncryptionIterations int
    	Number of iterations to use for PBKDF2 key derivation for MCP session encryption. (default 100000)
  -mcpSessionEncryptionSeed string
    	Seed used to derive the MCP session encryption key. This should be changed and set to a secure value. (default "default-insecure-seed")
  -mcpWriteTimeout duration
    	The maximum duration before timing out writes of the MCP response (default 2m0s)
  -metricsRequestHeaderAttributes value
    	Comma-separated key-value pairs for mapping HTTP request headers to otel metric attributes. Format: x-tenant-id:tenant.id,x-tenant-id:tenant.id.
  -requestHeaderAttributes value
    	Comma-separated key-value pairs for mapping HTTP request headers to otel attributes shared across metrics, spans, and access logs. Format: x-tenant-id:tenant.id.
  -rootPrefix string
    	The root path prefix for all the processors. (default "/")
  -spanRequestHeaderAttributes value
    	Comma-separated key-value pairs for mapping HTTP request headers to otel span attributes. Format: agent-session-id:session.id,x-tenant-id:tenant.id. Default: agent-session-id:session.id (when unset). Set to empty to disable.
2026/11/08 04:11:18 error: failed to parse and validate extProcFlags: failed to parse extProcFlags: flag: help requested
Options (19)
OptionDescriptionSource
-adminPort intHTTP port for the admin server (serves /metrics and /health endpoints).help
-configBundlePath stringpath to the sharded configuration bundle directory (index.yaml + parts).help
-enableRedactionEnable redaction of sensitive information in debug logs.help
-endpointPrefixes stringComma-separated key-value pairs for endpoint prefixes.help
-extProcAddr stringgRPC address for the external processor.help
-logFormat stringlog output format for the external processor.help
-logLevel stringlog level for the external processor.help
-logRequestHeaderAttributes valueComma-separated key-value pairs for mapping HTTP request headers to access log attributes.help
-maxRecvMsgSize intMaximum message size in bytes that the gRPC server can receive.help
-mcpAddr stringthe address (TCP or UDS) for the MCP proxy server, such as :1063 or unix:///tmp/ext_proc.sock.help
-mcpFallbackSessionEncryptionIterations intNumber of iterations used in the fallback PBKDF2 key derivation for MCP session encryption.help
-mcpFallbackSessionEncryptionSeed stringOptional fallback seed used for MCP session key rotation.help
-mcpSessionEncryptionIterations intNumber of iterations to use for PBKDF2 key derivation for MCP session encryption.help
-mcpSessionEncryptionSeed stringSeed used to derive the MCP session encryption key.help
-mcpWriteTimeout durationThe maximum duration before timing out writes of the MCP response (default 2m0s)help
-metricsRequestHeaderAttributes valueComma-separated key-value pairs for mapping HTTP request headers to otel metric attributes.help
-requestHeaderAttributes valueComma-separated key-value pairs for mapping HTTP request headers to otel attributes shared across metrics, spans, and access logs.help
-rootPrefix stringThe root path prefix for all the processors.help
-spanRequestHeaderAttributes valueComma-separated key-value pairs for mapping HTTP request headers to otel span attributes.help

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.