64 Pull requests merged by 29 people

• Update QUICHE from c2f8f18d2 to ff02865c0

  #39975 merged Jun 26, 2025

• grid: Adds ability to use canonical suffix for SRTT

  #39982 merged Jun 26, 2025

• mobile: Don't set the trusted CA if the cert is empty

  #40027 merged Jun 25, 2025

• Update API_VERSIONING.md to remove ambiguity.

  #40022 merged Jun 25, 2025

• DNS Logs: Back-port - categorising dns non-error logs to trace log levels

  #40011 merged Jun 25, 2025

• docker/release: Bump Ubuntu -> 01a3ee0

  #40026 merged Jun 25, 2025

• mobile: Upgrade to C++20 (from C++17)

  #40018 merged Jun 25, 2025

• Allow asn header to be populate from isp_db in MaxMind geoip provider.

  #39303 merged Jun 25, 2025

• factory context: cleanup the cluster factory context

  #39981 merged Jun 25, 2025

• dynamic_modules: adds support for LocalityLbEndpoints metadata

  #40021 merged Jun 25, 2025

• codeowners: Add CI ownership

  #40020 merged Jun 24, 2025

• dynamic_modules: support additional attributes about ssl connection info

  #39988 merged Jun 24, 2025

• Emit metric for seconds since UNIX epoch of expiration for loaded certs

  #27687 merged Jun 24, 2025

• tls-inspector: Use max tls client hello size from boring ssl

  #39903 merged Jun 24, 2025

• github/ci: Add security notifications on bad request

  #40016 merged Jun 24, 2025

• docs: fix returned value for max_headers_count. It was 503 now it is 502.

  #40006 merged Jun 24, 2025

• github/ci: Add security check for triggering workflow

  #40015 merged Jun 24, 2025

• github/ci: Fix skipped job JSON parsing

  #40013 merged Jun 24, 2025

• build(deps): bump flake8 from 7.1.2 to 7.3.0 in /tools/base

  #39991 merged Jun 24, 2025

• set_fitler_state: code cleanup for IP address object factory

  #39993 merged Jun 24, 2025

• build(deps): bump envoyproxy/toolshed from actions-v0.3.18 to 0.3.20

  #40010 merged Jun 24, 2025

• Use string_view to make updated version of protobuf compile

  #39995 merged Jun 24, 2025

• test: set rbe_pool to 4 cores for lua_integration_test

  #40001 merged Jun 24, 2025

• Revert "build(deps): bump envoyproxy/toolshed from actions-v0.3.18 to…

  #40009 merged Jun 24, 2025

• Revert "restarter: Fix incorrect use of global (#40004)"

  #40008 merged Jun 24, 2025

• build(deps): bump envoyproxy/toolshed from actions-v0.3.18 to 0.3.19

  #40007 merged Jun 24, 2025

• restarter: Fix incorrect use of global

  #40004 merged Jun 24, 2025

• ci: Fix PR conditions

  #40005 merged Jun 24, 2025

• api: remov WIP for CredentialInjector

  #39984 merged Jun 24, 2025

• github/ci: Improve workflow conditions

  #40002 merged Jun 24, 2025

• docs: clean up config discovery docs and make it consistent

  #39918 merged Jun 24, 2025

• docs: add test_arg="--" to the build docs

  #39997 merged Jun 23, 2025

• Add functionality to set downstream socket option from L7 filter callback

  #39200 merged Jun 23, 2025

• mobile/test: Update the proxy test comments

  #39986 merged Jun 23, 2025

• http: refactor async_client_impl to remove a data-member

  #39945 merged Jun 23, 2025

• cleanup: remove unused variable in load-stats reporter

  #39973 merged Jun 23, 2025

• tls_inspector: add debug log when parseClientHello fails

  #39976 merged Jun 23, 2025

• docs: Update the API style guide

  #39987 merged Jun 23, 2025

• mobile/ios: Use bazel simulator and add mock server

  #39992 merged Jun 23, 2025

• Fixed upstream filter disabled by default

  #39878 merged Jun 23, 2025

• http3: Change Envoy's HTTP/3 implementation to validate pseudo headers

  #39615 merged Jun 23, 2025

• DNS Logs: categorising dns non-error logs to trace log levels

  #39954 merged Jun 23, 2025

• Tap/Transport tap Enhance buffer trace to send tapped messages based on configured size

  #39540 merged Jun 22, 2025

• postgres: support require downstream ssl

  #39431 merged Jun 21, 2025

• http rate limit filter v3: add support for failure_mode_deny runtime overrides

  #39942 merged Jun 21, 2025

• aws: mark lambda and request signing extensions as stable

  #39951 merged Jun 21, 2025

• oauth2: make CSRF and code verifier token expiration configurable

  #39877 merged Jun 21, 2025

• host/cluster: remove unused data-members creation_time_ and time_source_

  #39977 merged Jun 21, 2025

• Fix wrong comment in GolangIntegrationTest

  #39967 merged Jun 20, 2025

• mac/mobile: Remove unused installs

  #39974 merged Jun 20, 2025

• Split the cluster header as implmentation of cluster specifier plugin.

  #39961 merged Jun 20, 2025

• refresh cluster: to support cluster refreshment

  #39925 merged Jun 20, 2025

• Feature: support SetUpstreamOverrideHost in golang filter

  #39754 merged Jun 19, 2025

• build(deps): bump urllib3 from 2.2.3 to 2.5.0 in /tools/base in the pip group

  #39953 merged Jun 19, 2025

• mobile/ci: Dont use large macos runners

  #39966 merged Jun 19, 2025

• mobile/ci: Fix release_validation simulator

  #39965 merged Jun 19, 2025

• macos/ios: Bump to macos-15 and related versions

  #39403 merged Jun 19, 2025

• config-dump: refactor to use hasActiveCluster that has constant time complexity

  #39948 merged Jun 19, 2025

• deps: Bump aws_lc -> 1.53.1

  #39957 merged Jun 19, 2025

• deps: Bump bazel_features -> 1.32.0

  #39958 merged Jun 19, 2025

• deps: Bump com_github_axboe_liburing -> 2.11

  #39959 merged Jun 19, 2025

• deps: Bump com_github_nghttp2_nghttp2 -> 1.66.0

  #39960 merged Jun 19, 2025

• minor renaming and test utility refactor

  #39927 merged Jun 19, 2025

• dynamic_modules: enables accessing headers from generic events

  #39934 merged Jun 19, 2025

10 Pull requests opened by 7 people

• router: support random value for cluster specifier plugin

  #39979 opened Jun 21, 2025

• router: split the weighted cluster out

  #39983 opened Jun 22, 2025

• Add timing information to accesslog for tcp proxy.

  #39989 opened Jun 23, 2025

• fcds: add implementation

  #39990 opened Jun 23, 2025

• ext_proc: handle server error response based on the failure_mode_allow config

  #39994 opened Jun 23, 2025

• Add verbose logging ip tagging debug

  #39998 opened Jun 23, 2025

• ext_proc: add serializeAsProto() and serializeAsString() to support access logs

  #40000 opened Jun 23, 2025

• ext_proc: add `failure_mode_allow` per route override

  #40014 opened Jun 24, 2025

• quic: enable client certificate authentication support

  #40017 opened Jun 24, 2025

• lua: adds filterState() on streamInfo()

  #40023 opened Jun 25, 2025

35 Issues closed by 8 people

• Provide a metric for each loaded certificate in Envoy with information on time left till expiration

  #27396 closed Jun 24, 2025

• Broken Ubuntu packaging causing Publish/Verify fail on main

  #39708 closed Jun 24, 2025

• Switch Linux checks CI to Engflow RBE and github actions

  #32468 closed Jun 24, 2025

• Add bazel client caching to new github CI

  #36340 closed Jun 24, 2025

• Download failures on CI

  #36494 closed Jun 24, 2025

• Upstream Http Filter disabled by default and route level disable does not work

  #39587 closed Jun 23, 2025

• DNS failure logs to be logged on info level instead of debug level

  #39142 closed Jun 23, 2025

• Envoy responds with http code=200, but the response body is 404 not found

  #39968 closed Jun 23, 2025

• Building (./ci/do_ci.sh dev.contrib) will hang if use clang-18 with latest build image

  #39557 closed Jun 23, 2025

• Enhancement - Transport tap - submit traced data based on configured size for buffer trace

  #39071 closed Jun 23, 2025

• Question - How to initialize envoy with a listener which is overridden by the control plane after

  #39510 closed Jun 23, 2025

• Envoy file-based SDS failing to reload rotated tls secrets

  #39498 closed Jun 23, 2025

• After the wasm plugin crashes, it cannot automatically recover?

  #39395 closed Jun 23, 2025

• Allow to use `body_format` in direct_response

  #39463 closed Jun 22, 2025

• PostgreSQL filter – require downstream TLS

  #31049 closed Jun 21, 2025

• [rate limit filter] Make failure_mode_deny a runtime parameter

  #39928 closed Jun 21, 2025

• ORCA Header Propagation

  #39382 closed Jun 21, 2025

• potential invalid memory access to the `ServerFactoryContext`

  #26653 closed Jun 21, 2025

• Newer release available `rules_java`: 8.12.0 (current: 7.12.5)

  #39620 closed Jun 21, 2025

• Understand to adjust "continue_on_listener_filters_timeout"

  #39458 closed Jun 20, 2025

• JWT Revocation

  #39366 closed Jun 20, 2025

• Newer release available `rules_proto_grpc`: 5.2.0 (current: 4.6.0)

  #39784 closed Jun 20, 2025

• refresh upstream cluster support

  #38859 closed Jun 20, 2025

• Can envoy support both "B3" and "W3C" context propagation simultaneously?

  #39412 closed Jun 19, 2025

• VirtualHost Metadata Missing When No Routes Matched

  #39391 closed Jun 19, 2025

• Support semantic conventions of OpenTelemetry

  #39377 closed Jun 19, 2025

• The envoy rate limit configuration is not effective

  #39413 closed Jun 19, 2025

• Expose WASM plugin metrics via Prometheus

  #39384 closed Jun 19, 2025

• ClientSideWeightedRoundRobin locality lb policy doesn't support locality weights due to lack of locality_weighted_lb_config

  #39362 closed Jun 19, 2025

• envoy possibly breaks grpc-web requests

  #39351 closed Jun 19, 2025

• Newer release available `aws_lc`: v1.53.1 (current: v1.53.0)

  #39955 closed Jun 19, 2025

• Newer release available `bazel_features`: v1.32.0 (current: v1.31.0)

  #39939 closed Jun 19, 2025

• Newer release available `com_github_axboe_liburing`: 2.11 (current: liburing-2.10)

  #39923 closed Jun 19, 2025

• Newer release available `com_github_nghttp2_nghttp2`: v1.66.0 (current: v1.65.0)

  #39940 closed Jun 19, 2025

• Newer release available `fips_ninja`: v1.12.1 (current: v1.10.2)

  #39770 closed Jun 19, 2025

15 Issues opened by 9 people

• Buffering of requests with large bodies

  #40028 opened Jun 26, 2025

• jwt_authn retry policy not working

  #40025 opened Jun 25, 2025

• Newer release available `com_github_wasmtime`: v34.0.1 (current: v24.0.2)

  #40024 opened Jun 25, 2025

• Use hermetic autotools for foreign_cc builds

  #40019 opened Jun 24, 2025

• Ability to ignore trace propagation via traceparent/tracestate headers

  #40012 opened Jun 24, 2025

• ExtProc ExtProcLoggingInfo is not available in access logs

  #39999 opened Jun 23, 2025

• Possible to set timeouts per client ip?

  #39996 opened Jun 23, 2025

• Newer release available `rules_java`: 8.13.0 (current: 7.12.5)

  #39980 opened Jun 21, 2025

• Envoy Overload Manager CPU Utilization monitor only supports cgroupv1

  #39978 opened Jun 20, 2025

• Newer release available `com_github_axboe_liburing`: 2.11 (current: liburing-2.11)

  #39969 opened Jun 20, 2025

• Newer release available `rules_proto_grpc`: 5.3.0 (current: 4.6.0)

  #39970 opened Jun 20, 2025

• Reaching an endpoint via a proxy

  #39964 opened Jun 19, 2025

• CI can fail with "too many unauthenticated requests" when pulling images

  #39963 opened Jun 19, 2025

• Mobile Android CI failing with CloudFront 403 from api.lyft.com

  #39962 opened Jun 19, 2025

• Newer release available `fips_ninja`: v1.13.0 (current: v1.10.2)

  #39956 opened Jun 19, 2025

65 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• upstream: outlier detection for non 5xx codes

  #39947 commented on Jun 25, 2025 • 19 new comments

• mobile: another implementation of AndroidNetworkMonitor

  #37693 commented on Jun 24, 2025 • 15 new comments

• matcher: add implementation for ServerNameMatcher

  #39884 commented on Jun 26, 2025 • 15 new comments

• xds: add singleton subscription xDS-TP-based config-sources support

  #39943 commented on Jun 25, 2025 • 6 new comments

• support endpoint level load stats reporting

  #39406 commented on Jun 25, 2025 • 6 new comments

• oauth2 filter: encrypt tokens

  #39059 commented on Jun 26, 2025 • 3 new comments

• docs: Correct facts around xDS ACK semantics

  #39891 commented on Jun 25, 2025 • 2 new comments

• lb: hash policy support in the hash lb

  #39505 commented on Jun 24, 2025 • 1 new comment

• use semantic convention for http opentracing span attributes

  #39483 commented on Jun 22, 2025 • 1 new comment

• deps: bump up dd_trace_cpp to v1.0.0

  #39409 commented on Jun 19, 2025 • 0 new comments

• deps: bump up cel-cpp to v0.11.0

  #39334 commented on Jun 20, 2025 • 0 new comments

• [WIP] deps: bump up protobuf to v31.0

  #39523 commented on Jun 23, 2025 • 0 new comments

• cares: skip listing interfaces when possible

  #39546 commented on Jun 20, 2025 • 0 new comments

• Use std::format instead of fmtlib in spdlog

  #39550 commented on Jun 23, 2025 • 0 new comments

• deps: bump up rules_bazel to v0.54.1

  #39566 commented on Jun 20, 2025 • 0 new comments

• deps: bump up rules_apple to v3.22.0

  #39567 commented on Jun 25, 2025 • 0 new comments

• Update V8 to latest stable 13.6.233.8

  #39581 commented on Jun 23, 2025 • 0 new comments

• dfp: add support for DFP honoring dynamic_host filter state when configured

  #39605 commented on Jun 25, 2025 • 0 new comments

• Reverse connection test

  #39607 commented on Jun 22, 2025 • 0 new comments

• Avoid trace span buffer becoming too large

  #39609 commented on Jun 26, 2025 • 0 new comments

• aws: Implementation of assumeroleprovider

  #39610 commented on Jun 26, 2025 • 0 new comments

• [WIP] bazel: Use a hermetic `gcc` toolchain

  #39632 commented on Jun 25, 2025 • 0 new comments

• tools: simplify the format api to remove unnecessary xfrom related logic

  #39697 commented on Jun 25, 2025 • 0 new comments

• ci: support variable number of CPUs for building

  #39701 commented on Jun 25, 2025 • 0 new comments

• quic: enable TLS client authentication support

  #39766 commented on Jun 23, 2025 • 0 new comments

• upstream: Add network namespace for upstream binding

  #39782 commented on Jun 24, 2025 • 0 new comments

• build(deps): bump github/codeql-action from 3.28.19 to 3.29.0

  #39853 commented on Jun 24, 2025 • 0 new comments

• oauth2: Add secure flag to cookie delete string

  #39879 commented on Jun 24, 2025 • 0 new comments

• deps: bump up aspect_bazel_lib to v2.19.1

  #39893 commented on Jun 25, 2025 • 0 new comments

• Replace c-ares with getAddrInfo DNS resolver in DFP integration tests

  #39901 commented on Jun 23, 2025 • 0 new comments

• Improve coverage

  #39935 commented on Jun 19, 2025 • 0 new comments

• redis_proxy: Add support for ROLE

  #39937 commented on Jun 23, 2025 • 0 new comments

• quic: Use IPv6 flow labels to avoid network black holes

  #39949 commented on Jun 23, 2025 • 0 new comments

• Question - Unable to match all the SAN in the match_typed_subject_alt_names in CommonTLSContext

  #39496 commented on Jun 19, 2025 • 0 new comments

• Side request access logging

  #39946 commented on Jun 19, 2025 • 0 new comments

• go control plane missing month/year rate limiting enums

  #39451 commented on Jun 19, 2025 • 0 new comments

• Apt Repository Only Contains Releases up to 1.32

  #39287 commented on Jun 19, 2025 • 0 new comments

• Support cached ratelimit

  #14299 commented on Jun 19, 2025 • 0 new comments

• Caching in Global Rate Limiting + more algorithms

  #39411 commented on Jun 19, 2025 • 0 new comments

• Tap filter segmentation fault

  #39063 commented on Jun 20, 2025 • 0 new comments

• Did flag `uf_urx` change to `urx_uf`?

  #38692 commented on Jun 20, 2025 • 0 new comments

• make the hash policy part of hash lb

  #39502 commented on Jun 20, 2025 • 0 new comments

• least_request LB strategy causes full TPS drop when upstream endpoint VM reboot

  #39737 commented on Jun 20, 2025 • 0 new comments

• Allow to effectively reject requests not validated by external processor

  #38553 commented on Jun 21, 2025 • 0 new comments

• Envoy doesn’t build with GCC 14.2 or Clang 19

  #39164 commented on Jun 21, 2025 • 0 new comments

• Tracking Issue for Dynamic Modules

  #38392 commented on Jun 21, 2025 • 0 new comments

• After wasm switched to the wamr engine, the concurrent execution of the wasm plugin reported an error "Exception: out of bounds memory access"

  #39532 commented on Jun 21, 2025 • 0 new comments

• IPv6 address validation is wrong

  #39184 commented on Jun 22, 2025 • 0 new comments

• Didn't find a registered implementation for 'envoy.filters.http.lua' with type URL: 'envoy.extensions.filters.http.lua.v3.Lua'

  #39554 commented on Jun 22, 2025 • 0 new comments

• unknown retry policy is silently ignored

  #39470 commented on Jun 22, 2025 • 0 new comments

• [Proposal] A 2-step Plan for Improving Envoy Redis Proxy Reliability

  #36962 commented on Jun 23, 2025 • 0 new comments

• Question: ECDS How can I configure the network filter in ECDS so that the new configuration takes effect on existing connections

  #39535 commented on Jun 24, 2025 • 0 new comments

• Regarding maturity of AWS Lambda filter

  #39818 commented on Jun 24, 2025 • 0 new comments

• Opentelemetry stats sink does not populate the Resource attributes

  #39931 commented on Jun 24, 2025 • 0 new comments

• Another kind of canary mechanism

  #39952 commented on Jun 24, 2025 • 0 new comments

• `client_side_weighted_round_robin` LB causes spurious cluster rebuilds

  #39552 commented on Jun 25, 2025 • 0 new comments

• Add support for route-level downstream metrics in Envoy Gateway

  #39545 commented on Jun 25, 2025 • 0 new comments

• JWT claim extraction without signature validation?

  #39930 commented on Jun 25, 2025 • 0 new comments

• Questions about the gap between heap_size and allocated_bytes + pagefree_bytes + cache_free_byutes

  #39944 commented on Jun 25, 2025 • 0 new comments

• Admission Control: support per route config

  #21255 commented on Jun 25, 2025 • 0 new comments

• upstream: implementation of outlier detection extensions

  #34154 commented on Jun 25, 2025 • 0 new comments

• Envoy core changes for reverse connections

  #37368 commented on Jun 19, 2025 • 0 new comments

• reverse_conn: envoy contrib changes for reverse_connection custom cluster

  #37932 commented on Jun 19, 2025 • 0 new comments

• Merging implementations of Strict and Logical DNS

  #38483 commented on Jun 25, 2025 • 0 new comments

• [ip_tagging] Support dynamic file based ip tags

  #38574 commented on Jun 24, 2025 • 0 new comments