Starstruk Logo MarkStarstruk

v1.32.0

envoyproxy/envoyv1.32.0Oct 15, 2024by publish-envoy[bot]

AI Summary

Major release introducing logging warnings for missing internal address configuration, deprecating OpenTracing, and adding numerous new features like response header size limits, TCP connection pool flags, dynamic metadata matching, QUIC compression, and enhanced access log operators.

Key Highlights

  • Warning for missing `internal_address_config`
  • Removal of support for OpenTracing
  • Added `response_header_size_limit` configuration
  • Added `connection_pool_per_downstream_connection` flag
  • Added dynamic metadata matcher support

Breaking Changes

  • Removed support for (long deprecated) opentracing

New Features

  • Warning for missing `internal_address_config`
  • Added configuration setting for the maximum size of response headers
  • Added support for `connection_pool_per_downstream_connection` flag in tcp connection pool
  • Added `dns_jitter` field for strict DNS and logical DNS cluster types
  • Added dynamic metadata matcher support
  • Added list of trusted CIDRs for xff original IP detection
  • Added QUIC server and client support for certificate compression
  • Added `cpu utilization monitor` in overload manager
  • Added new access log command operators (`%START_TIME_LOCAL%`, `%EMIT_TIME_LOCAL%`, etc.)
  • Added access log substitution strings for UDP tunneling flows
  • Added ECDS support for UDP session filters

Full Release Notes

repo: Release v1.32.0 (#36597)

**Summary of changes**:

* Envoy now logs warnings when `internal_address_config` is not set.  If
you see this logged warning and wish to retain trusted status for
internal addresses you must explicitly configure
`internal_address_config` (which will turn off the warning) before the
next Envoy release.
* Removed support for (long deprecated) opentracing. 
* Added a configuration setting for the maximum size of response headers
in responses.
* Added support for `connection_pool_per_downstream_connection` flag in
tcp connection pool.
* For the strict DNS and logical DNS cluster types, the `dns_jitter`
field allows spreading out DNS refresh requests
* Added dynamic metadata matcher support `dynamic metadata input` and
`dynamic metadata input matcher`.
* The xff original IP detection method now supports using a list of
trusted CIDRs when parsing `x-forwarded-for`.
* QUIC server and client support certificate compression, which can in
some cases reduce the number of round trips required to setup a
connection.
* Added the ability to monitor CPU utilization in Linux based systems
via `cpu utilization monitor` in overload manager.
* Added new access log command operators (`%START_TIME_LOCAL%` and
`%EMIT_TIME_LOCAL%`) formatters (`%UPSTREAM_CLUSTER_RAW%`
`%DOWNSTREAM_PEER_CHAIN_FINGERPRINTS_256%`, and
`%DOWNSTREAM_PEER_CHAIN_SERIALS%`) as well as significant boosts to json
parsing.  See release notes for details
* Added support for `%BYTES_RECEIVED%`, `%BYTES_SENT%`,
`%UPSTREAM_HEADER_BYTES_SENT%`, `%UPSTREAM_HEADER_BYTES_RECEIVED%`,
`%UPSTREAM_WIRE_BYTES_SENT%`, `%UPSTREAM_WIRE_BYTES_RECEIVED%` and
access log substitution strings for UDP tunneling flows.
* Added ECDS support for UDP session filters.

**Docker images**:
    https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.32.0
**Docs**:
    https://www.envoyproxy.io/docs/envoy/v1.32.0/
**Release notes**:

https://www.envoyproxy.io/docs/envoy/v1.32.0/version_history/v1.32/v1.32.0
**Full changelog**:
    https://github.com/envoyproxy/envoy/compare/v1.31.0...v1.32.0

Signed-off-by: Alyssa Wilk <alyssar@chromium.org>