diff --git a/Gopkg.toml b/Gopkg.toml
index 716cb5c766d7..ab4805c102c2 100644
--- a/Gopkg.toml
+++ b/Gopkg.toml
@@ -101,7 +101,7 @@ required = [
 ### as we cache dep ensure.
 [[constraint]]
   name = "istio.io/api"
-  revision = "8f67f05eeb370d50f427169d6ccce976413ad764"
+  revision = "c5185ac91e928c8ccd94a5342d8ad193bdf8b000"
 
 [[constraint]]
   name = "github.com/envoyproxy/go-control-plane"
diff --git a/istio.VERSION b/istio.VERSION
index 0e92804f85b6..9fbba6e37309 100644
--- a/istio.VERSION
+++ b/istio.VERSION
@@ -7,7 +7,7 @@ export MIXER_TAG="5253b6b574a98b209c0ef3d0d6e90c1b8d6a5c2a"
 export PILOT_HUB="gcr.io/istio-testing"
 export PILOT_TAG="3101ea9d82a5f83b699c2d3245b371a19fa6bef4"
 export ISTIOCTL_URL="https://storage.googleapis.com/istio-artifacts/pilot/3101ea9d82a5f83b699c2d3245b371a19fa6bef4/artifacts/istioctl"
-export PROXY_TAG="b9c8a9c6fc4b93bc15dc00b5e6a05844cdc5455c"
+export PROXY_TAG="d3437ab589dbfe388d45b56a12d20ef628a713a2"
 export PROXY_DEBUG=""
 export ISTIO_NAMESPACE="istio-system"
 export PILOT_DEBIAN_URL="https://storage.googleapis.com/istio-artifacts/pilot/3101ea9d82a5f83b699c2d3245b371a19fa6bef4/artifacts/debs"
diff --git a/istio.deps b/istio.deps
index 1fca2632bddb..0b19694367db 100644
--- a/istio.deps
+++ b/istio.deps
@@ -4,27 +4,27 @@
 		"repoName": "api",
 		"prodBranch": "master",
 		"file": "Gopkg.toml",
-		"lastStableSHA": "8f67f05eeb370d50f427169d6ccce976413ad764"
+		"lastStableSHA": "c5185ac91e928c8ccd94a5342d8ad193bdf8b000"
 	},
 	{
 		"name": "/envoy",
 		"repoName": "proxy",
 		"prodBranch": "master",
 		"file": "pilot/docker/Dockerfile.proxy",
-		"lastStableSHA": "b9c8a9c6fc4b93bc15dc00b5e6a05844cdc5455c"
+		"lastStableSHA": "d3437ab589dbfe388d45b56a12d20ef628a713a2"
 	},
 	{
 		"name": "/envoy-debug",
 		"repoName": "proxy",
 		"prodBranch": "master",
 		"file": "pilot/docker/Dockerfile.proxy_debug",
-		"lastStableSHA": "b9c8a9c6fc4b93bc15dc00b5e6a05844cdc5455c"
+		"lastStableSHA": "d3437ab589dbfe388d45b56a12d20ef628a713a2"
 	},
 	{
 		"name": "PROXY_TAG",
 		"repoName": "proxy",
 		"prodBranch": "master",
 		"file": "istio.VERSION",
-		"lastStableSHA": "b9c8a9c6fc4b93bc15dc00b5e6a05844cdc5455c"
+		"lastStableSHA": "d3437ab589dbfe388d45b56a12d20ef628a713a2"
 	}
 ]
\ No newline at end of file
diff --git a/pilot/docker/Dockerfile.proxy b/pilot/docker/Dockerfile.proxy
index 41be0ee1cb9b..a2b95d9d78d1 100644
--- a/pilot/docker/Dockerfile.proxy
+++ b/pilot/docker/Dockerfile.proxy
@@ -1,5 +1,5 @@
 # keep Dockerfile.proxy and Dockerfile.proxy_debug consistent for proxy sha
-FROM gcr.io/istio-testing/envoy:b9c8a9c6fc4b93bc15dc00b5e6a05844cdc5455c
+FROM gcr.io/istio-testing/envoy:d3437ab589dbfe388d45b56a12d20ef628a713a2
 ADD pilot-agent /usr/local/bin/pilot-agent
 
 COPY envoy_pilot.json      /etc/istio/proxy/envoy_pilot.json
diff --git a/pilot/docker/Dockerfile.proxy_debug b/pilot/docker/Dockerfile.proxy_debug
index 990d81196243..29282d2da57a 100644
--- a/pilot/docker/Dockerfile.proxy_debug
+++ b/pilot/docker/Dockerfile.proxy_debug
@@ -1,5 +1,5 @@
 # keep Dockerfile.proxy and Dockerfile.proxy_debug consistent for proxy sha
-FROM gcr.io/istio-testing/envoy-debug:b9c8a9c6fc4b93bc15dc00b5e6a05844cdc5455c
+FROM gcr.io/istio-testing/envoy-debug:d3437ab589dbfe388d45b56a12d20ef628a713a2
 ADD pilot-agent /usr/local/bin/pilot-agent
 
 COPY envoy_pilot.json      /etc/istio/proxy/envoy_pilot.json