v1.34.3

envoyproxy/envoyv1.34.3Jul 18, 2025by publish-envoy[bot]

AI Summary

This release addresses critical stability issues in TLS handling, HTTP/2 connection management, and observability tools, alongside standard container image updates.

Key Highlights

Fixed TLS connection property caching causing RBAC filter failures
Fixed HTTP/2 connection window buffer leak
Fixed Dynatrace division by zero bug
Updated Ubuntu and distroless container images
Fixed distroless config directory permissions

Full Release Notes

**Summary of changes**:

* TLS:
  - Fixed incorrectly cached connection properties on TLS connections that could cause network RBAC filters to fail.

* HTTP/2:
  - Fixed connection window buffer leak in oghttp2 that could cause connections to get stuck.

* Observability:
  - Fixed division by zero bug in Dynatrace sampling controller.

* Release:
  - Fixed permissions for distroless config directory.
  - Updated container images (Ubuntu/distroless).

**Docker images**:
    https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.34.3
**Docs**:
    https://www.envoyproxy.io/docs/envoy/v1.34.3/
**Release notes**:
    https://www.envoyproxy.io/docs/envoy/v1.34.3/version_history/v1.34/v1.34.3
**Full changelog**:
    https://github.com/envoyproxy/envoy/compare/v1.34.2...v1.34.3

Signed-off-by: Ryan Northey <ryan@synca.io>
Signed-off-by: Rohit Agrawal <rohit.agrawal@databricks.com>