You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
description: 'The ACE plugin only engages with a request when it matches an operation.'
2
+
3
+
extended_description: |
4
+
The ACE plugin only engages with a request when it matches an operation.
5
+
If a request doesn't match, ACE lets the request pass through untouched.
6
+
This means that non-matching requests aren't rejected, but ACE also won't perform authentication and authorization on them.
7
+
This allows a request to still be processed by other plugins with a [lower priority](/gateway/entities/plugin/#plugin-priority) than ACE.
8
+
9
+
A limitation of this method is that all traffic outside of published APIs linked to an ACE-enabled {{site.base_gateway}} won't be access controlled, this must be configured with a different plugin.
10
+
Dev Portal will not be able to protect all operations.
11
+
12
+
Use cases:
13
+
* You have an environment where some Gateway Services or Routes are governed by Dev Portal–exposed APIs (with ACE), while others are regular Routes that should be left alone.
14
+
* You already have existing traffic and other access controls in place and want to avoid interruption.
15
+
16
+
title: 'Only engage when a request matches an operation'
description: 'Requires every incoming request to match a defined operation from an API or API package in Dev Portal.'
2
+
3
+
extended_description: |
4
+
Requires every incoming request to match a defined operation from an API or API package in Dev Portal.
5
+
If a request doesn't match, ACE rejects the request outright with a 404.
6
+
All traffic will be rejected except operations or Routes in published APIs linked to an ACE-enabled {{site.base_gateway}}.
7
+
8
+
{:.danger}
9
+
> **Warning:** Setting the `match_policy` to `required` can **block all traffic with a 404**. Any undefined endpoints will be blocked. If you accidentally enable this in your control planes, this could cause a potential outage in production.
0 commit comments