Unconditional Branch

Always runs a utility chain before continuing the main pipeline

Category: Practical
Task: Always runs a utility chain before continuing the main pipeline

Prerequisites: The product runtime and any backend services referenced by this configuration.

Run it: Use ghcr.io/praxis-proxy/praxis:0.7.2 and follow the first reverse-proxy tutorial to mount and start the configuration.

This configuration comes from the selected release. The example has not been run here; external services are not bundled.

Download the source file.

# Unconditional Branch (rejoin: next)
#
# Always runs a utility chain before continuing the main
# pipeline. Useful for injecting audit headers, logging
# metadata, or applying transformations that must run on
# every request regardless of filter results.
#
listeners:
  - name: web
    address: "127.0.0.1:8080"
    filter_chains: [main]

filter_chains:
  # Standalone audit chain: defined at top level for
  # reuse across listeners or branches
  - name: audit
    filters:
      - filter: headers
        request_add:
          - name: X-Audit
            value: "applied"

  - name: main
    filters:
      # Stamp each request for tracing
      - filter: request_id

      # Entry point: triggers the audit side-chain
      - filter: headers
        request_add:
          - name: X-Pipeline
            value: "main"
        branch_chains:
          # No on_result: fires on every request
          - name: always_audit
            # Rejoin at next filter; audit is a
            # side-effect, not a routing decision
            rejoin: next
            chains:
              # Reference by name: keeps the main
              # chain focused on its own concerns
              - audit

      # Normal flow continues after audit
      - filter: router
        name: routing
        routes:
          - path_prefix: "/"
            cluster: backend

      - filter: load_balancer
        clusters:
          - name: backend
            endpoints:
              - "127.0.0.1:3000"

insecure_options:
  allow_private_endpoints: true # example proxies to local backends