26 Pull requests merged by 21 people

• io_uring: update API and docs

  #38677 merged Mar 8, 2025

• [mobile] Add a config to allow AndroidNetworkMonitor to use the new OnDefaultNetworkChangeEvent() API

  #38659 merged Mar 7, 2025

• Cherrypick 1.31: Change handling of graceful case of LoadStatsReporting onRemoteClose …

  #38656 merged Mar 7, 2025

• io_uring: fix create bootstrap extension on Android

  #38670 merged Mar 7, 2025

• set saved CMSG to correct index for recvmmsg

  #38596 merged Mar 6, 2025

• Cherrypick 1.32—Change handling of graceful case of LoadStatsReporting onRemoteClose

  #38655 merged Mar 6, 2025

• Cherrypick 1.30: Change handling of graceful case of LoadStatsReporting onRemoteClose …

  #38657 merged Mar 6, 2025

• fix: fix local ratelimit spelling

  #38664 merged Mar 6, 2025

• io_uring: enable io_uring in default socket interface

  #38660 merged Mar 6, 2025

• Workaround coverage issues observed on clang-18

  #38628 merged Mar 6, 2025

• Update QUICHE from 91fd81c8a to 0798a37a2

  #38643 merged Mar 6, 2025

• http: making the lua filter a dual filter

  #38465 merged Mar 5, 2025

• Fix Mac CI Build on M1

  #38623 merged Mar 5, 2025

• docs: correct route check docs

  #38611 merged Mar 5, 2025

• github/ci: Prevent workflow failures in downstream repos

  #38606 merged Mar 5, 2025

• docker/ci: Update dockerhub username

  #38612 merged Mar 5, 2025

• TcpTunneling: Fix scheme header setting in TcpTunneling with upstream http filters

  #38438 merged Mar 5, 2025

• deps: drop BoringSSL linkstatic patch

  #38621 merged Mar 5, 2025

• Update SAN RFC reference

  #38616 merged Mar 5, 2025

• docs: fix admission control document example values

  #38627 merged Mar 5, 2025

• Make http/ratelimit exception free

  #38629 merged Mar 5, 2025

• doc: use thrift example code for thrift_proxy payload_to_metadata filter

  #38634 merged Mar 5, 2025

• runtime: Remove dns_nodata_noname_is_success and legacy code paths

  #38641 merged Mar 4, 2025

• remove codeowner from rbac matchers

  #38630 merged Mar 4, 2025

• feat: inbound only graceful draining

  #38430 merged Mar 4, 2025

• Set RCD for 100% drop_overload case as unconditional_drop_overload

  #38408 merged Mar 4, 2025

27 Pull requests opened by 20 people

• build(deps): bump cryptography from 43.0.3 to 44.0.2 in /tools/base

  #38624 opened Mar 3, 2025

• build(deps): bump sphinx from 8.2.1 to 8.2.3 in /tools/base

  #38625 opened Mar 3, 2025

• Add support Redis custom commands in Redis Proxy

  #38626 opened Mar 3, 2025

• http conn manager: Fix useragent based downstream request count computation

  #38633 opened Mar 3, 2025

• thrift_proxy: proto to support map in payload_to_metadata filter

  #38636 opened Mar 4, 2025

• cds: set config_reload and config_reload_time_ms

  #38638 opened Mar 4, 2025

• [WIP] release: Update upcoming sec release date

  #38642 opened Mar 4, 2025

• ci: dwyu test implementation

  #38646 opened Mar 5, 2025

• dynamic_modules: add dynamic modules http filter onStreamComplete support

  #38647 opened Mar 5, 2025

• minor clean up: remove unnecessary method

  #38651 opened Mar 5, 2025

• udp: fix downstream_rx_datagram_dropped metric calculation

  #38652 opened Mar 5, 2025

• ratelimit: support new filter enabled and filter enforced

  #38653 opened Mar 5, 2025

• stream info: custom flag support

  #38654 opened Mar 5, 2025

• Integration test waitForLength should reliably reset its state

  #38658 opened Mar 5, 2025

• Graceful close of ext_proc gRPC side streams

  #38661 opened Mar 6, 2025

• Enhancement for Transport Tap: output connection information per event per configuration

  #38662 opened Mar 6, 2025

• build(deps): bump jinja2 from 3.1.5 to 3.1.6 in /tools/base

  #38663 opened Mar 6, 2025

• extensions: introduce an interface for hashing algorithms

  #38666 opened Mar 6, 2025

• aws: refactoring and code cleanup

  #38667 opened Mar 6, 2025

• improve readability of XFCC section in http header manipulation doc

  #38669 opened Mar 6, 2025

• Refactor #ifdefs in stats.cc to help coverage tools figure out dead code

  #38672 opened Mar 6, 2025

• WIP: ci: use oracle-hosted gha runners

  #38674 opened Mar 6, 2025

• test: Add TIMEOUT_FACTOR to relevant timeouts in QuicHttpIntegrationTest

  #38676 opened Mar 6, 2025

• cluster: Add req/resp header count histograms

  #38681 opened Mar 7, 2025

• aws: Implementation of IAM Roles anywhere support in aws request signing

  #38683 opened Mar 8, 2025

• server: new thread local sever context singleton

  #38685 opened Mar 9, 2025

• dynamic_modules: make dynamic module filter a dual filter

  #38686 opened Mar 9, 2025

21 Issues closed by 7 people

• PoC on MSSQL filter and its Result

  #38225 closed Mar 9, 2025

• unicode download in CI is not being cached

  #38135 closed Mar 9, 2025

• timeout in xds_failover_integration_test

  #38262 closed Mar 8, 2025

• UDP proxy for upstream health monitoring

  #37824 closed Mar 8, 2025

• Newer release available `com_github_grpc_grpc`: v1.70.1 (current: v1.63.2)

  #38286 closed Mar 8, 2025

• Support multiple client side health check endpoints

  #38298 closed Mar 8, 2025

• Failover to secondary cluster after tripping circuit breaker thresholds

  #38185 closed Mar 8, 2025

• flake in IpVersions/AggregateIntegrationTest.PreviousPrioritiesRetryPredicate

  #38253 closed Mar 7, 2025

• mobile test flake (coverage build)

  #38252 closed Mar 7, 2025

• LDS NACK: secret misconfiguration

  #38246 closed Mar 7, 2025

• Envoy UpstreamTLSContext not presenting client certificates

  #38673 closed Mar 7, 2025

• Newer release available `aws_lc`: v1.47.0 (current: e7bd073)

  #38618 closed Mar 7, 2025

• IoUring support

  #28395 closed Mar 6, 2025

• Admin Interface Port Reuse with Hot Reload

  #38146 closed Mar 6, 2025

• Overload Manager Usage in Envoy as a Sidecar

  #38217 closed Mar 5, 2025

• ext_proc grpc client doesn't close bidirectional stream properly

  #38195 closed Mar 5, 2025

• Newer release available `rules_java`: 8.9.0 (current: 7.12.3)

  #38343 closed Mar 5, 2025

• envoy_reloadable_features_dns_nodata_noname_is_success deprecation

  #38040 closed Mar 4, 2025

• Configuring Envoy as a Forward Proxy with AWS API Gateway IAM Authorization

  #38111 closed Mar 4, 2025

• Unable to use RegEx functions in CEL expressions

  #38303 closed Mar 3, 2025

• Local reply is not forwarding `x-request-id` header to ext-proc

  #38261 closed Mar 3, 2025

16 Issues opened by 10 people

• GenericSecret using local filesystem data source cannot be watched

  #38684 opened Mar 8, 2025

• Newer release available `com_github_grpc_grpc`: v1.71.0 (current: v1.63.2)

  #38682 opened Mar 8, 2025

• Configure V8 DefaultWorker threads in yaml

  #38680 opened Mar 7, 2025

• Newer release available `aws_lc`: v1.48.1 (current: e7bd073)

  #38678 opened Mar 7, 2025

• Flaky QuicHttpIntegrationTests test suite under sanitizers

  #38675 opened Mar 6, 2025

• Support for Multiple Client Certificates in Dynamic Forward Proxy Cluster

  #38671 opened Mar 6, 2025

• Newer release available `dev_cel`: v0.22.0 (current: v0.21.2)

  #38665 opened Mar 6, 2025

• Newer release available `rules_java`: 8.10.0 (current: 7.12.3)

  #38650 opened Mar 5, 2025

• Newer release available `com_google_protobuf`: v30.0 (current: v29.3)

  #38649 opened Mar 5, 2025

• Newer release available `com_github_awslabs_aws_c_auth`: v0.8.6 (current: v0.8.5)

  #38648 opened Mar 5, 2025

• WebSocket upgrades only work for the first stream when allow_connect is enabled in http2_protocol_options

  #38645 opened Mar 5, 2025

• get all headers in golang cluster_specifier plugin

  #38644 opened Mar 4, 2025

• Make the CEL/METADATA/etc as built in substitution commands

  #38640 opened Mar 4, 2025

• Newer release available `aspect_bazel_lib`: v2.14.0 (current: v2.13.0)

  #38639 opened Mar 4, 2025

• [Question] Does original IP detection extension set x-envoy-external-address header?

  #38637 opened Mar 4, 2025

• extension: OpenTelemetry Jaeger Remote Sampler

  #38635 opened Mar 3, 2025

72 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• rbac: add better rule type for mTLS

  #38388 commented on Mar 7, 2025 • 9 new comments

• Remove restoreContextOnContinue from StreamFilterCallbacks

  #38614 commented on Mar 4, 2025 • 5 new comments

• Introduce based_value for minRTT and allow disabling dynamic sampling of minRTT

  #38359 commented on Mar 8, 2025 • 5 new comments

• deps: Bump build images -> `cb86d91`

  #38571 commented on Mar 6, 2025 • 5 new comments

• Encoding some ext_proc filter configuration in the ProcessingRequest message

  #38451 commented on Mar 4, 2025 • 4 new comments

• Merging implementations of Strict and Logical DNS

  #38483 commented on Mar 7, 2025 • 4 new comments

• Clarifying some examples for XFF + Unit Tests

  #38515 commented on Mar 7, 2025 • 4 new comments

• listener: fixed a bug where the addresses cannot be updated partially

  #38601 commented on Mar 6, 2025 • 3 new comments

• tcp-proxy: support proxy-protocol tlvs

  #38131 commented on Mar 3, 2025 • 2 new comments

• tracer: support request in cel sampler

  #38617 commented on Mar 6, 2025 • 2 new comments

• rate limit - add unit_multiplier

  #38529 commented on Mar 7, 2025 • 1 new comment

• tls: add per-upstream session key caching support

  #38479 commented on Mar 3, 2025 • 1 new comment

• [ext_proc] add disallowed_mode in mode overrides, ignore/filter forbidden send-events or reject the whole processingMode, without configuring envoy with all the possible allowed send-event combinations

  #38273 commented on Mar 7, 2025 • 0 new comments

• bazel is pulling in the rust SDK (maybe for dynamic modules) whether its used or not

  #38314 commented on Mar 7, 2025 • 0 new comments

• Zone Aware Routing: Ability to set minimum number of hosts per-zone

  #38561 commented on Mar 8, 2025 • 0 new comments

• Metrics for golang filter don't clean when filer removed from LDS configurations

  #37808 commented on Mar 9, 2025 • 0 new comments

• `grpc_http1_reverse_bridge`: Support `grpc-message` and `grpc-status-details-bin` propagation

  #38323 commented on Mar 9, 2025 • 0 new comments

• Enhance Outlier Detection with Selective 5xx Error Exclusion

  #38311 commented on Mar 7, 2025 • 0 new comments

• Peak EWMA load balancing

  #20907 commented on Mar 7, 2025 • 0 new comments

• access logger: Allow whitespaces in RESPONSE_CODE_DETAILS

  #38336 commented on Mar 9, 2025 • 0 new comments

• tls_inspector: add enable_ja4_fingerprinting to create JA4 fingerprint hash from Client Hello message

  #36974 commented on Mar 7, 2025 • 0 new comments

• wasm: add initial support for OCI registries

  #37635 commented on Mar 4, 2025 • 0 new comments

• filter: add capability to selectively dump request/response state on crash

  #37816 commented on Mar 7, 2025 • 0 new comments

• OAuth2: PKCE(Proof Key for Code Exchange)

  #37849 commented on Mar 7, 2025 • 0 new comments

• Almost complete rewrite of cache filter

  #37990 commented on Mar 5, 2025 • 0 new comments

• dfp: skip DNS checks when host is an IP address

  #37993 commented on Mar 8, 2025 • 0 new comments

• Update tcmalloc to 5da4a882 (2024-12-27)

  #38235 commented on Mar 6, 2025 • 0 new comments

• tests : add tests for aggregate cluster circuit breaker

  #38251 commented on Mar 6, 2025 • 0 new comments

• Add the ability to selectively remove huffman encoding headers as the

  #38270 commented on Mar 9, 2025 • 0 new comments

• quic: add quic-lb connection id generator

  #38390 commented on Mar 8, 2025 • 0 new comments

• added custom commands to redis proxy

  #38414 commented on Mar 4, 2025 • 0 new comments

• github/ci: Bump remaining `ubuntu-20.04` jobs

  #38421 commented on Mar 5, 2025 • 0 new comments

• Upgrade c-ares library to 1.34.4

  #38559 commented on Mar 6, 2025 • 0 new comments

• WIP [ip_tagging] Support dynamic file based ip tags

  #38574 commented on Mar 6, 2025 • 0 new comments

• Adding `do_ci.sh release.contrib` for convenience

  #38592 commented on Mar 7, 2025 • 0 new comments

• golang: add callback method for http plugin config destruction (fixes #38557)

  #38597 commented on Mar 5, 2025 • 0 new comments

• Add "include-what-you-use" to CI

  #26797 commented on Mar 5, 2025 • 0 new comments

• use correct :scheme header in async_client requests

  #38608 commented on Mar 5, 2025 • 0 new comments

• Streamline v8 updates and refresh v8 dependency

  #38609 commented on Mar 5, 2025 • 0 new comments

• EnvoyProxy performance issues, consumes all sockets

  #38554 commented on Mar 4, 2025 • 0 new comments

• Outlier Detection Success Rate Ejection Threshold Setting

  #37723 commented on Mar 4, 2025 • 0 new comments

• Move out of Alpha for Wasm Http filter

  #36996 commented on Mar 4, 2025 • 0 new comments

• CDS does not set config_reload or config_reload_time_ms statistics

  #38490 commented on Mar 4, 2025 • 0 new comments

• Does zone aware routing consider weight in both source and destination?

  #37275 commented on Mar 4, 2025 • 0 new comments

• Counter for http_user_agent_downstream_cx_total is not correct

  #38312 commented on Mar 4, 2025 • 0 new comments

• 1.32 DNS Regression

  #38016 commented on Mar 3, 2025 • 0 new comments

• high-latency connections experience report

  #9112 commented on Mar 3, 2025 • 0 new comments

• ListenerMultiAddressesIntegrationTest_MultipleLdsUpdatesSharingListenSocketFactoryWithMultiAddresses flake

  #26336 commented on Mar 3, 2025 • 0 new comments

• support exception-free build

  #27412 commented on Mar 3, 2025 • 0 new comments

• upstream filter: upstream filter couldn't handle body buffer correctly

  #37087 commented on Mar 3, 2025 • 0 new comments

• envoy_reloadable_features_http3_happy_eyeballs deprecation

  #38044 commented on Mar 3, 2025 • 0 new comments

• [ext_proc] add cluster_name or grpc service info into ExtProcLoggingInfo

  #38613 commented on Mar 3, 2025 • 0 new comments

• Postgres proxy: Envoy Crash during pgbench test

  #36471 commented on Mar 3, 2025 • 0 new comments

• devcontainers tools/vscode/generate_debug_config.py fails

  #38279 commented on Mar 3, 2025 • 0 new comments

• `foreign_cc` is not using a hermetic python toolchain (at least when building cryptomb)

  #38315 commented on Mar 7, 2025 • 0 new comments

• envoy redis_proxy can‘t support RESP3 HELLO CMD

  #17571 commented on Mar 7, 2025 • 0 new comments

• Redis Proxy improvements to Support commands PubSub , Streams , Scripts. Info... 50+ commands

  #38492 commented on Mar 7, 2025 • 0 new comments

• Need a way to set socket options for replies to individual down-streams of listeners

  #38208 commented on Mar 7, 2025 • 0 new comments

• add regex match and substitute support to the header mutation

  #37885 commented on Mar 6, 2025 • 0 new comments

• Envoy internal listener's active connections are not released with TcpProxy case

  #38148 commented on Mar 6, 2025 • 0 new comments

• http/3 stream cancelation provokes incorrect overload-manager logging

  #38563 commented on Mar 6, 2025 • 0 new comments

• Tracking Issue for Dynamic Modules

  #38392 commented on Mar 6, 2025 • 0 new comments

• Active downstream connections per route

  #38287 commented on Mar 6, 2025 • 0 new comments

• Add bcrypt hashes support to basic_auth filter

  #36278 commented on Mar 6, 2025 • 0 new comments

• Enhancement - Transport tap - Add connection information per event for streamed trace

  #38582 commented on Mar 6, 2025 • 0 new comments

• Dynamically add path to lb_endpoints endpoints for load balancing

  #38293 commented on Mar 6, 2025 • 0 new comments

• Outlier detection needs to log and handle grpc-status sent as trailers

  #8228 commented on Mar 6, 2025 • 0 new comments

• ext_proc: Cannot set Content-Length header when using STREAMED mode for request body

  #38291 commented on Mar 5, 2025 • 0 new comments

• oauth2 filter: support its own stats_prefix

  #38283 commented on Mar 5, 2025 • 0 new comments

• CVE-2025-0395: glibc issue in containers

  #38280 commented on Mar 5, 2025 • 0 new comments

• [ext_proc] let ext_proc filter follow the grpc spec, wait for trailers before continue the filter chain upon last main stream end_stream=true event.

  #37088 commented on Mar 5, 2025 • 0 new comments

• Add a Resource Monitor in Overload Manager that Tracks Memory PSI

  #36681 commented on Mar 5, 2025 • 0 new comments