meshguard-egress

OSS egress proxy for network-level agent governance.

Scope

• HTTP CONNECT forward proxy.
• Agent identity from SPIFFE, mTLS, or authenticated proxy token.
• PDP check before outbound request.
• Streaming inspection hook for responses.
• Audit every request and response envelope.
• Deny-by-default policy enforcement with private-network/DNS rebinding guardrails.

Deployment Modes

• Sidecar.
• Namespace or cluster egress gateway.
• VPC endpoint pattern.
• Customer-managed standalone proxy.

Development

python3 -m pytest -q
python3 -m compileall -q meshguard_egress