envoyproxy/envoy v1.31.0

on GitHub

repo: Release v1.31.0

Summary of changes:

• Added new access_log command operators to retrieve upstream connection information.
• Enhanced ext_authz to be configured to ignore dynamic metadata in ext_authz responses.
• Ext_authz: added a block list for headers that should never be send to the external auth service.
• Ext_authz: added the ability to configure what decoder header mutations are allowed from the ext_authz with the option to fail if disallowed mutations are requested.
• Ext_proc support for observability mode which is "Send and Go" mode that can be used by external processor to observe Envoy data and status.
• Added support for flow control in Envoy gRPC side stream.
• TCP Healthchecks can now leverage ProxyProtocol.
• Hot restart: Added new command-line flag to skip hot restart stats transfer.
• HTTP: Added the ability when request mirroring to disable appending of the -shadow suffix to the shadowed host/authority header.
• HTTP: Added the ability to set the downstream request :scheme to match the upstream transport protocol.
• HTTP: Envoy now supports proxying 104 headers from upstream.
• Added the ability to bypass the overload manager for a listener.
• Added support for local cluster rate limit shared across all Envoy instances in the local cluster.
• Added Filter State Input for matching HTTP input based on filter state objects.
• Oauth: Added an option to disable setting the ID Token cookie.
• OpenTelemetry enhancements to support extension formatter and stats prefix configuration for the OpenTelemetry logger.
• QUIC stream reset errors are now captured in transport failure reason. Added support for QUIC server preferred address when there is a DNAT between the client and Envoy.
• Added support for Redis inline commands, Bloom 1.0.0 commands, among other commands.
• Added a new retry policy: reset-before-request.
• Added support for dynamic direct response for files.
• Added TLS support to match against OtherName SAN-type under match_typed_subject_alt_names.
• Upstream: Added a new field to LocalityLbEndpoints, LocalityLbEndpoints.Metadata, that may be used for transport socket matching groups of endpoints.
• Update WASM filter to support use as an upstream filter.
• Disabled OpenCensus by default as it is no longer maintained upstream.
• Ext_proc support for route_cache_action which specifies the route action to be taken when an external processor response is received in response to request headers.
• Golang: Move Continue, SendLocalReply and RecoverPanic to DecoderFilterCallbacks and EncoderFilterCallbacks, to support full-duplex processing.
• Http2 uses Oghttp2 by default.
• Added a "happy eyeballs" feature to HTTP/3 upstream, where it assuming happy eyeballs sorting results in alternating address families will attempt the first v4 and v6 address before giving up on HTTP/3.
• Populate typed metadata by default in ProxyProtocol listener.
• Datadog: Disabled remote configuration by default.
• Reject invalid runtime YAML instead of supporting corner cases of bad YAML.

Docker images:
https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.31.0
Docs:
https://www.envoyproxy.io/docs/envoy/v1.31.0/
Release notes:
https://www.envoyproxy.io/docs/envoy/v1.31.0/version_history/v1.31/v1.31.0
Full changelog:
v1.30.0...v1.31.0

Signed-off-by: Kevin Baichoo kbaichoo@netflix.com
Signed-off-by: Ryan Northey ryan@synca.io