does it possible to do TLS or HTTPS routing to specific service based on the client certificate?

[mohd-irshad-vt]

does it possible to do TLS or HTTPS routing to specific service based on the client certificate? this is very useful for my use case if its possible, I went through the filter_chain_matcher documentation of the envoy proxy, and it seems like it's possible. can any body help me on this. I think using filter_chain_matcher we can achieve this. anybody pls help us

[arkodg]

you should be able to with https://gateway.envoyproxy.io/docs/tasks/security/mutual-tls/ + headers.xForwardedClientCert
https://gateway.envoyproxy.io/docs/api/extension_types/#headersettings

[mohd-irshad-vt]

Thanks for the response. This will solve problem for HTTPS, is there any way to do the same for TLS ?