@@ -1525,6 +1544,7 @@ HTTPRedirect
On a redirect, overwrite the Path portion of the URL with this
value. Note that the entire path will be replaced, irrespective of the
request URI being matched as an exact path or prefix.
+Mutually exclusive with prefix_rewrite and uri_regex_rewrite.
@@ -1580,6 +1600,36 @@ HTTPRedirect
On a redirect, Specifies the HTTP status code to use in the redirect
response. The default response code is MOVED_PERMANENTLY (301).
+
+
+
+ |
+
+ On a redirect, replace the matched prefix (or the entire path for exact
+matches) with this value. The route match must use a prefix match type.
+The matched prefix is stripped from the path and this value is prepended.
+Examples (route prefix match: /foo):
+
+- prefix_rewrite: /bar → /foo/baz becomes /bar/baz
+- prefix_rewrite: / → /foo/baz becomes //baz (use /foo/ match to get /baz)
+
+Mutually exclusive with uri and uri_regex_rewrite.
+
+ |
+
+
+ |
+
+ On a redirect, rewrite the path portion of the URI with the specified
+RE2 regex. Capture groups in the pattern may be referenced in the
+replacement string.
+Example: match “^/foo(/.*)$” with rewrite “\1” rewrites /foo/bar to /bar.
+Mutually exclusive with uri and prefix_rewrite.
+
|
diff --git a/networking/v1alpha3/virtual_service.proto b/networking/v1alpha3/virtual_service.proto
index d81ad2d72c..700c0c2cff 100644
--- a/networking/v1alpha3/virtual_service.proto
+++ b/networking/v1alpha3/virtual_service.proto
@@ -1074,10 +1074,35 @@ message TLSMatchAttributes {
// ...
// ```
//
+// The following rule redirects requests with a path prefix of /foo to the
+// authority foo.example.com, stripping the /foo prefix from the path:
+//
+// ```yaml
+// apiVersion: networking.istio.io/v1
+// kind: VirtualService
+// metadata:
+// name: foo-redirect
+// spec:
+// hosts:
+// - example.com
+// http:
+// - match:
+// - uri:
+// prefix: /foo/
+// redirect:
+// authority: foo.example.com
+// prefix_rewrite: /
+// ```
+//
+// With this rule, a request to example.com/foo/bar is redirected to
+// foo.example.com/bar.
+//
message HTTPRedirect {
// On a redirect, overwrite the Path portion of the URL with this
// value. Note that the entire path will be replaced, irrespective of the
// request URI being matched as an exact path or prefix.
+ //
+ // Mutually exclusive with prefix_rewrite and uri_regex_rewrite.
string uri = 1;
// On a redirect, overwrite the Authority/Host portion of the URL with
@@ -1106,6 +1131,30 @@ message HTTPRedirect {
// On a redirect, Specifies the HTTP status code to use in the redirect
// response. The default response code is MOVED_PERMANENTLY (301).
uint32 redirect_code = 3;
+
+ // Specifies how to rewrite the path on redirect. Exactly one of uri,
+ // prefix_rewrite, or uri_regex_rewrite may be set.
+ oneof path_rewrite_specifier {
+ // On a redirect, replace the matched prefix (or the entire path for exact
+ // matches) with this value. The route match must use a prefix match type.
+ // The matched prefix is stripped from the path and this value is prepended.
+ //
+ // Examples (route prefix match: /foo):
+ // - prefix_rewrite: /bar → /foo/baz becomes /bar/baz
+ // - prefix_rewrite: / → /foo/baz becomes //baz (use /foo/ match to get /baz)
+ //
+ // Mutually exclusive with uri and uri_regex_rewrite.
+ string prefix_rewrite = 7;
+
+ // On a redirect, rewrite the path portion of the URI with the specified
+ // RE2 regex. Capture groups in the pattern may be referenced in the
+ // replacement string.
+ //
+ // Example: match "^/foo(/.*)$" with rewrite "\\1" rewrites /foo/bar to /bar.
+ //
+ // Mutually exclusive with uri and prefix_rewrite.
+ RegexRewrite uri_regex_rewrite = 8;
+ }
}
// HTTPDirectResponse can be used to send a fixed response to clients.
diff --git a/networking/v1beta1/virtual_service_alias.gen.go b/networking/v1beta1/virtual_service_alias.gen.go
index 530098b3e5..eebe17ec8a 100644
--- a/networking/v1beta1/virtual_service_alias.gen.go
+++ b/networking/v1beta1/virtual_service_alias.gen.go
@@ -520,6 +520,33 @@ type TLSMatchAttributes = v1alpha3.TLSMatchAttributes
// ...
//
// ```
+//
+// The following rule redirects requests with a path prefix of /foo to the
+// authority foo.example.com, stripping the /foo prefix from the path:
+//
+// ```yaml
+// apiVersion: networking.istio.io/v1
+// kind: VirtualService
+// metadata:
+//
+// name: foo-redirect
+//
+// spec:
+//
+// hosts:
+// - example.com
+// http:
+// - match:
+// - uri:
+// prefix: /foo/
+// redirect:
+// authority: foo.example.com
+// prefix_rewrite: /
+//
+// ```
+//
+// With this rule, a request to example.com/foo/bar is redirected to
+// foo.example.com/bar.
type HTTPRedirect = v1alpha3.HTTPRedirect
type HTTPRedirect_RedirectPortSelection = v1alpha3.HTTPRedirect_RedirectPortSelection
@@ -534,6 +561,26 @@ type HTTPRedirect_Port = v1alpha3.HTTPRedirect_Port
// * FROM_REQUEST_PORT: automatically use the port of the request.
type HTTPRedirect_DerivePort = v1alpha3.HTTPRedirect_DerivePort
+// On a redirect, replace the matched prefix (or the entire path for exact
+// matches) with this value. The route match must use a prefix match type.
+// The matched prefix is stripped from the path and this value is prepended.
+//
+// Examples (route prefix match: /foo):
+// - prefix_rewrite: /bar → /foo/baz becomes /bar/baz
+// - prefix_rewrite: / → /foo/baz becomes //baz (use /foo/ match to get /baz)
+//
+// Mutually exclusive with uri and uri_regex_rewrite.
+type HTTPRedirect_PrefixRewrite = v1alpha3.HTTPRedirect_PrefixRewrite
+
+// On a redirect, rewrite the path portion of the URI with the specified
+// RE2 regex. Capture groups in the pattern may be referenced in the
+// replacement string.
+//
+// Example: match "^/foo(/.*)$" with rewrite "\\1" rewrites /foo/bar to /bar.
+//
+// Mutually exclusive with uri and prefix_rewrite.
+type HTTPRedirect_UriRegexRewrite = v1alpha3.HTTPRedirect_UriRegexRewrite
+
// HTTPDirectResponse can be used to send a fixed response to clients.
// For example, the following rule returns a fixed 503 status with a body
// to requests for /v1/getProductRatings API.
diff --git a/releasenotes/notes/redirect-prefix-rewrite.yaml b/releasenotes/notes/redirect-prefix-rewrite.yaml
new file mode 100644
index 0000000000..78ee66577d
--- /dev/null
+++ b/releasenotes/notes/redirect-prefix-rewrite.yaml
@@ -0,0 +1,14 @@
+apiVersion: release-notes/v2
+kind: feature
+area: traffic-management
+issue:
+ - 47500
+ - 47777
+ - 52521
+
+releaseNotes:
+ - |
+ **Added** `prefix_rewrite` and `uri_regex_rewrite` fields to `HTTPRedirect`, allowing redirects
+ that preserve the path suffix. `prefix_rewrite` replaces only the matched route prefix (e.g.
+ `example.com/foo/bar` → `foo.example.com/bar`); `uri_regex_rewrite` applies an RE2 regex
+ substitution. Both are mutually exclusive with the existing `uri` field.