},
          {
          "suffix": "suffix1"
          },
          {
          "suffix": "suffix2"
          },
          {
          "suffix": "upstream_rq_1xx"
          },
          {
          "suffix": "upstream_rq_2xx"
          },
          {
          "suffix": "upstream_rq_3xx"
          },
          {
          "suffix": "upstream_rq_4xx"
          },
          {

            hosts: ["exact.com", "*.suffix.com", "prefix.*", "*"]
            ports: ["80", "90"]
            paths: ["/exact", "/prefix/*", "*/suffix", "*", "/path/template/{*}", "/{**}/path/template"]
            notMethods: ["not-method", "not-method-prefix-*", "*-not-suffix-method", "*"]
            notHosts: ["not-exact.com", "*.not-suffix.com", "not-prefix.*", "*"]
            notPorts: ["8000", "9000"]

      - prefix: not-principal-prefix-
      - suffix: -suffix-not-principal
      - presence: {}
      principals:
      - exact: principal
      - prefix: principal-prefix-
      - suffix: -suffix-principal
      - presence: {}
- rules:
  - matches:
    - namespaces:
      - exact: ns
      - prefix: ns-prefix-
      - suffix: -ns-suffix
      - presence: {}
      notNamespaces:
      - exact: not-ns

        Throwable previous = SUFFIXES.putIfAbsent(suffix, markerForSuffix(suffix));
        if (previous != null) {
            throw new IllegalStateException("A class generator with suffix '" + suffix + "' is already registered.", previous);
        }
        return suffix;
    }

    /**
     * Assigns a suffix to use for generated class names.
     */
    public static String assign(String suffix) {

                      ignoreCase: true
                - header:
                    name: :authority
                    stringMatch:
                      ignoreCase: true
                      suffix: .suffix.com
                - header:
                    name: :authority
                    stringMatch:
                      ignoreCase: true
                      prefix: prefix.
                - header:

      notValues: ["not-presenter", "not-presenter-prefix-*", "*-not-suffix-presenter", "*"]
  - when:
    - key: "request.auth.claims[iss]"
      values: ["iss", "iss-prefix-*", "*-suffix-iss", "*"]
      notValues: ["not-iss", "not-iss-prefix-*", "*-not-suffix-iss", "*"]
  - when:
    - key: "request.auth.claims[nested1][nested2]"
      values: ["nested", "nested-prefix-*", "*-suffix-nested", "*"]

                      ignoreCase: true
                - header:
                    name: :authority
                    stringMatch:
                      ignoreCase: true
                      suffix: .suffix.com
                - header:
                    name: :authority
                    stringMatch:
                      ignoreCase: true
                      prefix: prefix.
                - header:

  namespace: default
spec:
  gateways:
  - mesh
  hosts:
  - echo-1.default.svc.domain.suffix
  tls:
  - match:
    - sniHosts:
      - echo-1.default.svc.domain.suffix
    route:
    - destination:
        host: echo.default.svc.domain.suffix
        port:
          number: 80

        - ignoreCase: true
          prefix: x-prefix-
        - ignoreCase: true
          suffix: -suffix
      allowedClientHeadersOnSuccess:
        patterns:
        - exact: Set-cookie
          ignoreCase: true
        - ignoreCase: true
          prefix: x-prefix-
        - ignoreCase: true
          suffix: -suffix
      allowedUpstreamHeaders:
        patterns:
        - exact: Authorization

   * Internet users can register subdomains. An example of a public suffix that is not a registry
   * suffix is {@code blogspot.com}. Note that it is true that all public suffixes <i>have</i>
   * registry suffixes, since domain name registries collectively control all internet domain names.
   *
   * <p>For considerations on whether the public suffix or registry suffix designation is more
   * suitable for your application, see <a