Features
- add service.udp.allow-empty-packets, default false (#1521)
- auto-detect UMEM frame size and combined-only queues (#1524)
- add CA and server name args for xDS/mDS TLS
- verify client certificates
Fixes
- write agent state missing from bridge
- reject too large datagrams on poll and completion backends
- Canonise IP before spoof checking
- accept and validate PEM certificates & keys
- guard against spoof IPs in XDP