Skip to content

5.2.3

Latest

Choose a tag to compare

@airlockgithubci airlockgithubci released this 11 Nov 15:59

Version 5.2.3

Release description

Airlock Microgateway helps you to protect your services and APIs from unauthorized or malicious access with little effort. It is a lightweight and Kubernetes-native Web Application and API Protection (WAAP) solution designed to overcome the DevSecOps obstacles and to implement ZeroTrust.

This Airlock Microgateway release contains security and regular updates of dependencies and improvements.

Breaking changes

  • HTTPRoute precedence now follows the Gateway API specification: when multiple HTTPRoutes match a request, the route with the longest matching hostname takes precedence over a route with a more specific rule match (path, header, query parameter or method).

    Previously, the more specific rule match was selected. Traffic may be routed differently if you have overlapping HTTPRoutes with different hostnames (e.g. *.example.com and api.example.com).

    Review your HTTPRoutes and consolidate overlapping rules into a single route if the previous behavior is required.

Helpful links

Changelog

  • SEC: AM-8010 Updated Go to v1.27.4, updated base images
  • FIX: AM-7995 HTTPRoute precedence now favors the longest hostname intersection over the most specific rule match
  • UPD: AM-7530 Updated Gateway API to v1.7