• play_circle Get started
    • Overview
    • Architecture
    • Deployment patterns
    • Custom resources
    • Gateway proxies
      • BackendConfigPolicy
      • GlooTrafficPolicy
      • HTTPListenerPolicy
      • Global policy attachment
      • Policy merging
    • Helm
    • ArgoCD
    • Sample app
    • Licensing
    • Advanced
    • Migrate from kgateway
    • Default proxy setup
      • Listener overview
      • HTTP
      • HTTPS
      • SNI
      • TCP
      • TLS passthrough
    • Customize the proxy
    • Horizontal Pod Autoscaling (HPA)
    • HTTP/1.0 and HTTP/0.9
        • Kubernetes services
        • gRPC services
        • Static
          • Overview
          • Access AWS Lambda with a credentials secret
          • Access AWS Lambda with a service account
          • Configure cross-account Lambda access
          • Transform responses
    • Buffering
    • Direct response
    • Dynamic Forward Proxy (DFP)
    • External processing (ExtProc)
      • Overview
      • Request headers
      • Response headers
      • Gateway health checks
      • Backend health checks
    • HTTP2
      • Header
      • Host
      • HTTP method
      • Path
      • Query parameter
      • Host
      • HTTPS
      • Path
      • Host
      • Path
      • Overview
      • Basic example
      • Delegation via labels
      • Multiple parents
      • Multi-level delegation
      • Header and query match
        • Native Gateway API policies
        • Kgateway policies
      • Simple load balancing
      • Consistent hashing
      • Session persistence
    • Traffic splitting
        • About simple transformations
        • Templating language
        • Inject response headers
        • Decode base64 headers
        • Update request paths and methods
        • Create redirect URLs
        • Change response status
        • Update response body
        • About staged transformations
        • Templating language
        • Append headers
        • Extract headers
        • Add headers to body
        • Extract query parameters
        • Update response body
        • Enrich access logs
    • Weighted routing
    • HTTP connection settings
    • Mirroring
    • Outlier detection
      • About
      • Request retries
      • Per-try timeout
    • TCP keepalive
      • About timeouts
      • Request timeouts
      • Idle timeouts
      • Idle stream timeouts
      • Per-try timeouts
    • Access logging
    • Backend TLS
    • CORS
    • CSRF
      • About
      • Basic auth
      • External service
      • API keys
        • About OAuth
        • Access token validation
        • Authorization code
        • More OAuth features
        • Keycloak as an IdP
      • BYO ext auth service
      • Overview
      • Basic JWT policy
      • Provider example
      • About
      • Local rate limiting
        • Envoy API
        • Set-style API
      • BYO global rate limit service
    • About Solo Enterprise for agentgateway
    • Agentgateway setup
      • About
        • Amazon Bedrock
        • Anthropic
        • Azure OpenAI
        • Gemini
        • OpenAI
        • OpenAI-compatible providers
        • Vertex AI
      • Manage API keys
      • Model failover
      • Set up prompt guards
      • Enrich prompts
      • Call functions
        • Guardrail webhook guide
        • Webhook API reference
      • View metrics and logs
      • View traces
    • Inference routing
      • About
      • Static MCP
      • Dynamic MCP
      • Connect via HTTPS
      • About
      • Connect to an agent
    • CEL-based RBAC
    • Configuration
    • Routes
        • Ingress to single cluster mesh
        • Ingress to multicluster mesh
        • Basic ingress
        • Ingress with Gloo Mesh virtual destinations
      • About AWS ELBs in Gloo Gateway
      • AWS NLB
      • AWS ALB
      • Set up the UI
      • Explore the UI
      • Review insights
      • Expose the UI via HTTPS
    • OTel stack
    • Control plane metrics
    • Gateway proxy metrics
    • Debug
    • Upgrade
    • Uninstall
      • Gloo Gateway API
      • Kubernetes Gateway API
      • Kgateway API
      • Gloo Gateway CRDs
      • Gloo Gateway
      • Release notes
      • Gloo Gateway changelog
      • Kgateway changelog
    • Software Bill of Materials (SBOM)
    • Version support
    • Port reference
      • Install the gloo gateway CLI
        • gloo gateway analyze
        • gloo gateway check
        • gloo gateway describe
        • gloo gateway get
      • Visualize resource dependencies
    • About Solo Support
    • Submit a request
    • Solo Enterprise for kgateway
    • 2.1.x (latest)

    • Gloo Gateway (K8s GW API)
    • 2.0.x
    • 1.20.x
    • 1.19.x
    • 1.18.x
    • 1.17.x

    • Gloo Edge
    • 1.20.x
    • 1.19.x
    • 1.18.x
    • 1.17.x
    • GitHub
    • Twitter / X
  • to navigate
  • to select
  • to close
    • Home
    • Traffic management
    • Transformations
    • Staged
    On this page

    You are viewing the documentation for the 2.0.x version of Gloo Gateway. To get the latest enterprise features of the Kubernetes Gateway API on top of the kgateway project, see Solo Enterprise for kgateway. To use the older Gloo Gateway 1.x that is based on the Gloo upstream project, click here.

    Staged

    article

    About staged transformations

    Apply multiple transformations at different stages in the Envoy filter chain and use powerful Inja …

    article

    Templating language

    Learn how to define powerful staged transformations with the Gloo Gateway advanced templating …

    article

    Append headers

    Use the headersToAppend capability to add multiple values to the same header.

    article

    Extract headers

    Use Gloo Gateway extractors to retrieve request header values, transform them, and add them back as …

    article

    Add headers to body

    Use extractors to capture request header values and add those values to the request body.

    article

    Extract query parameters

    Extract query parameters, transform them, and return them as headers.

    article

    Update response body

    Learn how to return a customized response body and how replace specific values in the body.

    article

    Enrich access logs

    Use a transformation template to inject additional metadata to your access logs.

    Solo.io copyright 2026