diff --git a/source/extensions/filters/http/cache/BUILD b/source/extensions/filters/http/cache/BUILD
index 1b04b15b7ca11..515020b134a6f 100644
--- a/source/extensions/filters/http/cache/BUILD
+++ b/source/extensions/filters/http/cache/BUILD
@@ -44,6 +44,17 @@ envoy_cc_library(
     ],
 )
 
+envoy_cc_library(
+    name = "cache_policy_lib",
+    hdrs = ["cache_policy.h"],
+    deps = [
+        ":cache_headers_utils_lib",
+        ":http_cache_lib",
+        "//source/common/http:header_map_lib",
+        "//source/common/stream_info:filter_state_lib",
+    ],
+)
+
 envoy_proto_library(
     name = "key",
     srcs = ["key.proto"],
diff --git a/source/extensions/filters/http/cache/cache_policy.h b/source/extensions/filters/http/cache/cache_policy.h
new file mode 100644
index 0000000000000..a283f20fc10b6
--- /dev/null
+++ b/source/extensions/filters/http/cache/cache_policy.h
@@ -0,0 +1,107 @@
+#pragma once
+
+#include "envoy/http/header_map.h"
+#include "envoy/stream_info/filter_state.h"
+
+#include "source/extensions/filters/http/cache/cache_headers_utils.h"
+#include "source/extensions/filters/http/cache/http_cache.h"
+
+namespace Envoy {
+namespace Extensions {
+namespace HttpFilters {
+namespace Cache {
+
+/**
+ * Contains information about whether the cache entry is usable.
+ */
+struct CacheEntryUsability {
+  /**
+   * Whether the cache entry is usable, additional checks are required to be usable, or unusable.
+   */
+  CacheEntryStatus status = CacheEntryStatus::Unusable;
+  /**
+   * Value to be put in the Age header for cache responses.
+   */
+  Seconds age = Seconds::max();
+};
+
+class CachePolicyCallbacks {
+public:
+  virtual ~CachePolicyCallbacks() = default;
+
+  virtual const StreamInfo::FilterStateSharedPtr& filterState() PURE;
+};
+
+/**
+ * An extension point for deployment specific caching behavior.
+ */
+class CachePolicy {
+public:
+  virtual ~CachePolicy() = default;
+
+  /**
+   * Calculates the lookup key for storing the entry in the cache.
+   * @param request_headers - headers from the request the CacheFilter is currently processing.
+   */
+  virtual Key createCacheKey(const Http::RequestHeaderMap& request_headers) PURE;
+
+  /**
+   * Determines the cacheability of the response during decoding.
+   * @param request_headers - headers from the request the CacheFilter is currently processing.
+   * @param request_cache_control - the result of parsing the request's Cache-Control header, parsed
+   * by the caller.
+   * @return true if the response may be cached, based on the contents of the request.
+   */
+  virtual bool requestCacheable(const Http::RequestHeaderMap& request_headers,
+                                const RequestCacheControl& request_cache_control) PURE;
+
+  /**
+   * Determines the cacheability of the response during encoding.
+   * @param request_headers - headers from the request the CacheFilter is currently processing.
+   * @param response_headers - headers from the upstream response the CacheFilter is currently
+   * processing.
+   * @param response_cache_control - the result of parsing the response's Cache-Control header,
+   * parsed by the caller.
+   * @param vary_allow_list - list of headers that the cache will respect when creating the Key for
+   * Vary-differentiated responses.
+   * @return true if the response may be cached.
+   */
+  virtual bool responseCacheable(const Http::RequestHeaderMap& request_headers,
+                                 const Http::ResponseHeaderMap& response_headers,
+                                 const ResponseCacheControl& response_cache_control,
+                                 const VaryHeader& vary_allow_list) PURE;
+
+  /**
+   * Determines whether the cached entry may be used directly or must be validated with upstream.
+   * @param request_headers - request headers associated with the response_headers.
+   * @param cached_response_headers - headers from the cached response.
+   * @param request_cache_control - the parsed result of the request's Cache-Control header, parsed
+   * by the caller.
+   * @param cached_response_cache_control - the parsed result of the response's Cache-Control
+   * header, parsed by the caller.
+   * @param content_length - the byte length of the cached content.
+   * @param cached_metadata - the metadata that has been stored along side the cached entry.
+   * @param now - the timestamp for this request.
+   * @return details about whether or not the cached entry can be used.
+   */
+  virtual CacheEntryUsability
+  computeCacheEntryUsability(const Http::RequestHeaderMap& request_headers,
+                             const Http::ResponseHeaderMap& cached_response_headers,
+                             const RequestCacheControl& request_cache_control,
+                             const ResponseCacheControl& cached_response_cache_control,
+                             const uint64_t content_length, const ResponseMetadata& cached_metadata,
+                             SystemTime now) PURE;
+
+  /**
+   * Performs actions when StreamInfo and FilterState become available, for
+   * example for logging and observability, or to adapt CacheFilter behavior based on
+   * route-specific CacheFilter config.
+   * @param callbacks - Gives access to StreamInfo and FilterState
+   */
+  virtual void setCallbacks(CachePolicyCallbacks& callbacks) PURE;
+};
+
+} // namespace Cache
+} // namespace HttpFilters
+} // namespace Extensions
+} // namespace Envoy