ExtensionRefs for TLSRoute

[goat-ssh]

rules.backendRefs.filters.extensionRefs functionality is available for HTTPRoute, but not for TLSRoutes.

My primary use case is to enable Traefik's Middleware IPAllowlist, so that i don't need to modify Gateway's loadBalancerSourceRanges for every route which is added. This should unlock many more cases.

[hbobenicio]

Also miss this spec, same use case of goat-ssh here.

Filters make a lot of sense for HTTPRoute and so does it for TLSRoutes.

As Gateway API's BackendRef Filters seems to model middlewares (as some general spec-agnostic/vendor-specific request processors), so this makes a lot of sense and fills a lot of use cases for TLSRoutes also.

[rikatz]

Folks, please raise an issue and a PR on the repo with the what/why/who (provisional) for this case.

The first step to getting a new feature on gwapi is to propose it officially so feel free to propose it.

@kflynn can keep me honest :)