46 Pull requests merged by 15 people

• build(deps): bump icalendar from 6.3.0 to 6.3.1 in /tools/base

  #39559 merged May 21, 2025

• build(deps): bump setuptools from 80.7.1 to 80.8.0 in /tools/base

  #39560 merged May 21, 2025

• clean up: remove legacy lb constructors and legacy config class

  #39469 merged May 21, 2025

• boringssl: update version and switch procedure to use BCR tags

  #39472 merged May 20, 2025

• rbac: minor string->string_view refactor

  #39549 merged May 20, 2025

• virtual-host: minor refactor - reserve virtual-clusters memory

  #39490 merged May 20, 2025

• clean up router: remove part of DebugConfig and simlify the header mutation

  #39534 merged May 20, 2025

• Update to GCC 13

  #39449 merged May 20, 2025

• build(deps): bump multidict from 6.4.3 to 6.4.4 in /tools/base

  #39543 merged May 20, 2025

• tcp_stats: fix a flaky test fixture

  #39537 merged May 19, 2025

• validation tool: fix the config yaml validation scripts

  #39527 merged May 19, 2025

• Split cluster manager test

  #39478 merged May 19, 2025

• Make SanMatcher::match consistent

  #39513 merged May 19, 2025

• docs: clean up the RBAC docs

  #39509 merged May 19, 2025

• docs: clean up the clusters docs

  #39530 merged May 19, 2025

• build(deps): bump pyopenssl from 25.0.0 to 25.1.0 in /tools/base

  #39533 merged May 19, 2025

• build(deps): bump github/codeql-action from 3.28.17 to 3.28.18

  #39531 merged May 19, 2025

• spell: fix separate spell across the code base

  #39528 merged May 18, 2025

• nit: fix bootstrap typo around the code base

  #39445 merged May 18, 2025

• deps: bump up abseil to v20250512.0

  #39492 merged May 17, 2025

• Make StringMatcher::match consistent

  #39512 merged May 17, 2025

• Revert recent quiche updates, back to e3f34245b

  #39519 merged May 17, 2025

• network ext_proc: add close and rst support

  #39516 merged May 16, 2025

• aws: Implementation of IAM Roles anywhere support in aws request signing - part 2

  #39025 merged May 16, 2025

• Use GitHub mirror for V8 sources

  #39499 merged May 16, 2025

• deps: Bump aws_lc -> 1.51.2

  #39508 merged May 16, 2025

• build(deps): bump icalendar from 6.2.0 to 6.3.0 in /tools/base

  #39504 merged May 16, 2025

• Revert "nit: remove unused imports from HTTP RBAC filter & some cleanup (#39465)"

  #39500 merged May 16, 2025

• doc: update the release doc

  #39495 merged May 15, 2025

• Make DnsFilterTest.RandomizeFirstAnswerTest less brittle

  #39464 merged May 15, 2025

• tls_inspector: implement JA4 fingerprinting

  #39430 merged May 15, 2025

• chore: fix refresh_compdb

  #39488 merged May 15, 2025

• Perf: allow automatic move of next_protocol

  #39471 merged May 15, 2025

• Remove unused method declaration

  #39474 merged May 15, 2025

• deps: bump up rules_python to v1.4.1

  #39477 merged May 15, 2025

• build(deps): bump setuptools from 80.4.0 to 80.7.1 in /tools/base

  #39481 merged May 15, 2025

• docs: clean up the HCM docs

  #39480 merged May 15, 2025

• (header_mutation): support mutating trailers

  #39433 merged May 15, 2025

• Remove c-ares library dependencies from DFP unit tests

  #39476 merged May 14, 2025

• Resolve Python Datetime warnings

  #39475 merged May 14, 2025

• docs: clean up the protocol options docs

  #39473 merged May 14, 2025

• rbac: allowlist FilterStateInput for xDS matcher in Network RBAC

  #39467 merged May 14, 2025

• Update QUICHE from 90eab2218 to c142f13df

  #39466 merged May 14, 2025

• nit: remove unused imports from HTTP RBAC filter & some cleanup

  #39465 merged May 14, 2025

• clean up: remove senseless interfaces

  #39460 merged May 14, 2025

• rbac: allowlist FilterStateInput for xDS matcher in HTTP RBAC

  #39462 merged May 14, 2025

44 Pull requests opened by 21 people

• nit: remove unused imports from Network RBAC filter & some cleanup

  #39468 opened May 14, 2025

• add a new field to use host weight in zone aware lb

  #39482 opened May 15, 2025

• use semantic convention for http opentracing span attributes

  #39483 opened May 15, 2025

• apple: Upgrade the XCode version to 16.1

  #39491 opened May 15, 2025

• router-cors: minor refactor to reduce memory usage

  #39493 opened May 15, 2025

• local_ratelimit: support return `x-ratelimit-reset` header

  #39501 opened May 16, 2025

• refactor: remove unused imports from HTTP RBAC filter & some cleanup

  #39503 opened May 16, 2025

• api: add hash policy to hash lb configuration

  #39505 opened May 16, 2025

• lua: adds typedMetadata() on connectionStreamInfo()

  #39506 opened May 16, 2025

• Feat/admin allowlist

  #39511 opened May 16, 2025

• listener: Support for Linux network namespaces

  #39517 opened May 16, 2025

• Better ASSERT output from union_string.h

  #39518 opened May 16, 2025

• Reverse conn combined changes

  #39520 opened May 17, 2025

• aws: Implementation of IAM Roles anywhere support in aws request signing - part 3

  #39521 opened May 17, 2025

• ci: Add a workflow to test Xcode-16.1 for macos/iOS builds

  #39522 opened May 17, 2025

• [WIP] deps: bump up protobuf to v31.0

  #39523 opened May 17, 2025

• aws: improve test coverage

  #39529 opened May 19, 2025

• override host: support multiple addresses parsing and cache parsing result

  #39536 opened May 19, 2025

• Fix `EdfScheduler::createWithPicks` bug with changing entry weights.

  #39538 opened May 19, 2025

• Check validator in rate_limit_quota filter config

  #39539 opened May 20, 2025

• Tap/Transport tap Enhance buffer trace to send tapped messages based on configured size

  #39540 opened May 20, 2025

• http trace: improve perf to avoid str copy when building response

  #39541 opened May 20, 2025

• build(deps): bump cryptography from 43.0.3 to 45.0.2 in /tools/base

  #39542 opened May 20, 2025

• cares: skip listing interfaces when possible

  #39546 opened May 20, 2025

• deps: update cncf/xds to 2025-05-01 version

  #39547 opened May 20, 2025

• deps: Bump build images -> `da50dd3`

  #39548 opened May 20, 2025

• Use std::format instead of fmtlib in spdlog

  #39550 opened May 20, 2025

• Don't hide virtual functions

  #39551 opened May 20, 2025

• quic: Add trace logging of locally connected address

  #39555 opened May 20, 2025

• xds: initial support for multiple xDS authorities config sources

  #39556 opened May 20, 2025

• fips: Fix build

  #39565 opened May 21, 2025

• deps: bump up rules_bazel to v0.54.1

  #39566 opened May 21, 2025

• deps: bump up rules_apple to v3.22.0

  #39567 opened May 21, 2025

• deps: bump up bazel_features to v1.30.0

  #39568 opened May 21, 2025

• deps/api: Bump `dev_cel` -> 0.24.0

  #39569 opened May 21, 2025

• deps/api: Bump `rules_buf` -> 0.4.0

  #39570 opened May 21, 2025

• deps: Bump `rules_shell` -> 0.4.1

  #39571 opened May 21, 2025

• deps: Bump `com_github_bazelbuild_buildtools` -> 8.2.0

  #39572 opened May 21, 2025

• deps: Bump `aspect_bazel_lib` -> 2.16.0

  #39573 opened May 21, 2025

• deps/api: Bump `opentelemetry_proto` -> 1.6.0

  #39574 opened May 21, 2025

• deps: Bump `com_github_google_perfetto` -> 50.1

  #39575 opened May 21, 2025

• deps/api: Bump `prometheus_metrics_model` -> 0.6.2

  #39576 opened May 21, 2025

• [WIP] deps: Bump `com_google_cel_cpp` -> 0.11.0

  #39577 opened May 21, 2025

• deps: Bump `com_github_google_benchmark` -> 1.9.4

  #39578 opened May 21, 2025

27 Issues closed by 8 people

• Newer release available `io_bazel_rules_go`: v0.54.0 (current: v0.53.0)

  #39101 closed May 21, 2025

• Newer release available `build_bazel_rules_apple`: 3.21.1 (current: 3.20.1)

  #39524 closed May 21, 2025

• Newer release available `bazel_features`: v1.29.0 (current: v1.28.0)

  #39293 closed May 21, 2025

• Newer release available `boringssl`: 0.20250514.0 (current: 673e61f)

  #39484 closed May 21, 2025

• New BoringSSL release available, which resolves a CRL Invalid Scope (44) error, previously blocking Envoy upgrades

  #39074 closed May 20, 2025

• Consider using BoringSSL BCR releases

  #39309 closed May 20, 2025

• Support accessing connection metadata in Lua

  #32240 closed May 20, 2025

• How to print the client's original request URL in the logs instead of the rewritten URL

  #38812 closed May 20, 2025

• Expose Rate Limiting Validation Time in Dynamic Metadata

  #39018 closed May 19, 2025

• Newer release available `com_google_absl`: 20250512.0 (current: 20250127.1)

  #39485 closed May 18, 2025

• Support for Valkey as a First-Class Backend

  #39051 closed May 17, 2025

• Support TLS Exported Key Material (EKM)

  #39015 closed May 17, 2025

• Newer release available `rules_proto_grpc`: 5.0.1 (current: 4.6.0)

  #36419 closed May 17, 2025

• Newer release available `build_bazel_rules_apple`: 3.21.0 (current: 3.20.1)

  #39326 closed May 17, 2025

• Newer release available `aws_lc`: v1.51.2 (current: v1.50.1)

  #39392 closed May 17, 2025

• How to configure max_response_headers_kb for Istio Ingress Gateway (Envoy)

  #39507 closed May 17, 2025

• X-request-id header being replaced sometimes

  #39000 closed May 16, 2025

• Newer release available `rules_python`: 1.4.1 (current: 1.4.0)

  #39415 closed May 16, 2025

• Building error when try download latest main branch

  #39487 closed May 16, 2025

• rbac: `enforced_engine_result` is not avilable in the `envoy.filters.http.rbac` metadata

  #39479 closed May 16, 2025

• Redis Proxy: Support for more commands

  #39489 closed May 15, 2025

• ext_proc: Cannot set Content-Length header when using STREAMED mode for request body

  #38291 closed May 15, 2025

• Newer release available `com_google_protobuf`: v30.2 (current: v29.3)

  #38931 closed May 15, 2025

• Newer release available `boringssl`: 0.20250415.0 (current: 673e61f)

  #39155 closed May 15, 2025

• How to get RAW HTTP request headers in Lua script

  #39439 closed May 14, 2025

• HTTP Header Sequence

  #39452 closed May 14, 2025

• Redis: cluster_refresh_manager_test is flaky

  #39033 closed May 14, 2025

24 Issues opened by 18 people

• Newer release available `io_bazel_rules_go`: v0.54.1 (current: v0.53.0)

  #39564 opened May 21, 2025

• Newer release available `com_github_wasmtime`: v33.0.0 (current: v24.0.2)

  #39563 opened May 21, 2025

• Newer release available `build_bazel_rules_apple`: 3.22.0 (current: 3.20.1)

  #39562 opened May 21, 2025

• Newer release available `bazel_features`: v1.30.0 (current: v1.28.0)

  #39561 opened May 21, 2025

• Any recommendation on programming language for creating Envoy HTTP WASM filter?

  #39558 opened May 21, 2025

• Building (./ci/do_ci.sh dev.contrib) will hang if use clang-18 with latest build image

  #39557 opened May 21, 2025

• Didn't find a registered implementation for 'envoy.filters.http.lua' with type URL: 'envoy.extensions.filters.http.lua.v3.Lua'

  #39554 opened May 20, 2025

• envoy bug failure: pending_streams_.size() <= connecting_stream_capacity

  #39553 opened May 20, 2025

• `client_side_weighted_round_robin` LB causes spurious cluster rebuilds

  #39552 opened May 20, 2025

• Add support for route-level downstream metrics in Envoy Gateway

  #39545 opened May 20, 2025

• Newer release available `com_github_google_benchmark`: v1.9.4 (current: v1.9.3)

  #39544 opened May 20, 2025

• Question: ECDS How can I configure the network filter in ECDS so that the new configuration takes effect on existing connections

  #39535 opened May 19, 2025

• After wasm switched to the wamr engine, the concurrent execution of the wasm plugin reported an error "Exception: out of bounds memory access"

  #39532 opened May 19, 2025

• MacOs compilation issue with clang 17

  #39526 opened May 17, 2025

• Newer release available `rules_proto_grpc`: 5.1.0 (current: 4.6.0)

  #39525 opened May 17, 2025

• Envoy consumes high memory when Ext Proc is used with the FULL_DUPLEX_STREAMED mode

  #39514 opened May 16, 2025

• Question - How to initialize envoy with a listener which is overridden by the control plane after

  #39510 opened May 16, 2025

• make the hash policy part of hash lb

  #39502 opened May 16, 2025

• Envoy file-based SDS failing to reload rotated tls secrets

  #39498 opened May 15, 2025

• Documentation: Circuit Breaker for Dynamic Forward Proxy

  #39497 opened May 15, 2025

• Question - Unable to match all the SAN in the match_typed_subject_alt_names in CommonTLSContext

  #39496 opened May 15, 2025

• Newer release available `com_google_protobuf`: v31.0 (current: v29.3)

  #39486 opened May 15, 2025

• unknown retry policy is silently ignored

  #39470 opened May 14, 2025

• Allow to use `body_format` in direct_response

  #39463 opened May 14, 2025

72 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• Make route prefix map matchers able to retry

  #38986 commented on May 20, 2025 • 15 new comments

• Add directory, class and method structure for ProtoApiScrubber filter

  #39402 commented on May 20, 2025 • 12 new comments

• Matcher + MatcherTree support for a keep_matching field in OnMatch

  #38726 commented on May 20, 2025 • 11 new comments

• Almost complete rewrite of cache filter

  #37990 commented on May 19, 2025 • 11 new comments

• Add functionality to set downstream socket option from L7 filter callback

  #39200 commented on May 20, 2025 • 10 new comments

• Emit metric for seconds since UNIX epoch of expiration for loaded certs

  #27687 commented on May 20, 2025 • 9 new comments

• [ip_tagging] Support dynamic file based ip tags

  #38574 commented on May 19, 2025 • 7 new comments

• upstream: unify all outlier report to use putResult

  #39440 commented on May 21, 2025 • 5 new comments

• dynamic_modules: support per route config

  #39348 commented on May 19, 2025 • 3 new comments

• upstream: implementation of outlier detection extensions

  #34154 commented on May 21, 2025 • 2 new comments

• support endpoint level load stats reporting

  #39406 commented on May 20, 2025 • 1 new comment

• lua filter: ensure active_request_ is verified before deletion Fixes #38017

  #38863 commented on May 20, 2025 • 0 new comments

• original_dst: add batched host updates

  #38769 commented on May 16, 2025 • 0 new comments

• Merging implementations of Strict and Logical DNS

  #38483 commented on May 14, 2025 • 0 new comments

• reverse_conn: envoy contrib changes for reverse_connection custom cluster

  #37932 commented on May 20, 2025 • 0 new comments

• reverse_connection: custom conn pool that sends requests through reverse connections

  #37931 commented on May 17, 2025 • 0 new comments

• reverse connection: code changes for reverse connection listener filter

  #37821 commented on May 17, 2025 • 0 new comments

• reverse connection: code changes for a listener that initiates reverse connections

  #37820 commented on May 20, 2025 • 0 new comments

• reverse connection: reverse connection bootstrap extension

  #37819 commented on May 17, 2025 • 0 new comments

• Envoy core changes for reverse connections

  #37368 commented on May 20, 2025 • 0 new comments

• [WIP] dns: add support for clusters based on SRV DNS record

  #35160 commented on May 20, 2025 • 0 new comments

• http: remove deprecated http_parser http1 codec

  #38950 commented on May 16, 2025 • 0 new comments

• oauth2 filter: encrypt tokens

  #39059 commented on May 16, 2025 • 0 new comments

• deps: bump up gperftools to v2.16

  #39097 commented on May 15, 2025 • 0 new comments

• common_router: Implement NonForwardingAction fixes (#39044)

  #39147 commented on May 16, 2025 • 0 new comments

• deps: bump up gRPC to v1.71.0

  #39150 commented on May 17, 2025 • 0 new comments

• http: optimize header map implementation for improved performance

  #39252 commented on May 15, 2025 • 0 new comments

• Allow asn header to be populate from isp_db in MaxMind geoip provider.

  #39303 commented on May 20, 2025 • 0 new comments

• Add debug log when trying to use VHDS with static route

  #39316 commented on May 15, 2025 • 0 new comments

• deps: bump up cel-cpp to v0.11.0

  #39334 commented on May 16, 2025 • 0 new comments

• Make `ClientSideWeightedRoundRobin` lb policy optionally respect locality weights specified by EDS.

  #39364 commented on May 14, 2025 • 0 new comments

• OAuth2: RP initiated logout

  #39374 commented on May 21, 2025 • 0 new comments

• deps: bump up dd_trace_cpp to v1.0.0

  #39409 commented on May 20, 2025 • 0 new comments

• postgres: support require downstream ssl

  #39431 commented on May 15, 2025 • 0 new comments

• listener_impl: preparation for inconsistent config and hash

  #39435 commented on May 19, 2025 • 0 new comments

• handle append_action for grpc check response

  #39461 commented on May 19, 2025 • 0 new comments

• Envoy Segmentation Fault Due to "Too Many Open Files" Error

  #39055 commented on May 16, 2025 • 0 new comments

• After the wasm plugin crashes, it cannot automatically recover?

  #39395 commented on May 16, 2025 • 0 new comments

• Set number of workers to allocated cgroup CPUs?

  #36988 commented on May 16, 2025 • 0 new comments

• [ExtProc] Content-Length Header Mutation in FULL_DUPLEX_STREAMED body processing mode

  #39035 commented on May 16, 2025 • 0 new comments

• gRPC-transcoder: mapping HTTP headers to request/response fields

  #39064 commented on May 16, 2025 • 0 new comments

• Redis Proxy improvements to Support commands PubSub , Streams , Scripts. Info... 50+ commands

  #38492 commented on May 15, 2025 • 0 new comments

• Tap filter segmentation fault

  #39063 commented on May 15, 2025 • 0 new comments

• ORCA Header Propagation

  #39382 commented on May 15, 2025 • 0 new comments

• Behavior of Envoy proxy on Consul node entering maintenance mode

  #39052 commented on May 15, 2025 • 0 new comments

• Is application-cookie based session persistence supported?

  #39288 commented on May 15, 2025 • 0 new comments

• Enhancement - Transport tap - submit traced data based on configured size for buffer trace

  #39071 commented on May 15, 2025 • 0 new comments

• JWT Revocation

  #39366 commented on May 14, 2025 • 0 new comments

• Caching in Global Rate Limiting + more algorithms

  #39411 commented on May 14, 2025 • 0 new comments

• Option to process header values in HeaderKeyFormatter extensions

  #39358 commented on May 14, 2025 • 0 new comments

• ext_authz - RawHttpClientImpl onSuccess 0x0 segfault

  #39457 commented on May 14, 2025 • 0 new comments

• Understand to adjust "continue_on_listener_filters_timeout"

  #39458 commented on May 14, 2025 • 0 new comments

• Application Logging with Nested JSON Escaping Issues

  #38974 commented on May 14, 2025 • 0 new comments

• dynamic_modules: need a way to access underlying sockets in http filters

  #38739 commented on May 14, 2025 • 0 new comments

• DNS failure logs to be logged on info level instead of debug level

  #39142 commented on May 21, 2025 • 0 new comments

• Envoy doesn’t build with GCC 14.2 or Clang 19

  #39164 commented on May 21, 2025 • 0 new comments

• Support envoy.service.discovery.v3.ResourceName in response resources.

  #34285 commented on May 20, 2025 • 0 new comments

• Disable noisy `RAW: Restore saved value of ...` logs from absl

  #37751 commented on May 20, 2025 • 0 new comments

• go control plane missing month/year rate limiting enums

  #39451 commented on May 20, 2025 • 0 new comments

• Apt Repository Only Contains Releases up to 1.32

  #39287 commented on May 20, 2025 • 0 new comments

• x25519kyber768 support

  #33941 commented on May 20, 2025 • 0 new comments

• Perf issue with c-ares DNS resolver

  #34812 commented on May 20, 2025 • 0 new comments

• How to invoke decodeData in a header-only request?

  #36692 commented on May 19, 2025 • 0 new comments

• Filter Chain DS support

  #39141 commented on May 19, 2025 • 0 new comments

• alternate_protocols_cache filter_integration_test flaky

  #39165 commented on May 18, 2025 • 0 new comments

• `prefix_rewrite` not being respected with caching enabled in Envoy 1.33

  #39135 commented on May 18, 2025 • 0 new comments

• extension: OpenTelemetry Jaeger Remote Sampler

  #38635 commented on May 18, 2025 • 0 new comments

• Did flag `uf_urx` change to `urx_uf`?

  #38692 commented on May 17, 2025 • 0 new comments

• Add client to request headers/body on API key auth

  #38690 commented on May 17, 2025 • 0 new comments

• Running in validate mode creates missing log files

  #39156 commented on May 17, 2025 • 0 new comments

• With request header `x-envoy-force-trace` set, `x-request-id` is still not returned in response

  #38590 commented on May 17, 2025 • 0 new comments

• ext_authz - grpc OkResponse not handling headers_to_add

  #39359 commented on May 16, 2025 • 0 new comments