1.13.0 (January 20, 2020)

    • admin: added the ability to filter /config_dump.

    • access log: added a to output access logs in JSON format with non-string values

    • access log: fixed UPSTREAM_LOCAL_ADDRESS access log formatters to work for http requests

    • access log: added HOSTNAME.

    • api: remove all support for v1

    • api: added ability to specify mode for .

    • api: support for the v3 xDS API added. See Supported API versions.

    • aws_request_signing: added new alpha .

    • buffer: remove old implementation

    • build: official released binary is now built against libc++.

    • cluster: added aggregate cluster that allows load balancing between clusters.

    • config: all category names of internal envoy extensions are prefixed with the ‘envoy.’ prefix to follow the reverse DNS naming notation.

    • decompressor: remove decompressor hard assert failure and replace with an error flag.

    • ext_authz: added to send the certificate to the ext_authz service.

    • fault: fixed an issue where the http fault filter would repeatedly check the percentage of abort/delay when the x-envoy-downstream-service-cluster header was included in the request to ensure that the actual percentage of abort/delay matches the configuration of the filter.

    • health check: gRPC health checker sets the gRPC deadline to the configured timeout duration.

    • health check: added to allow TLS configuration overrides.

    • health check: added service_name_matcher to better compare the service name patterns for health check identity.

    • http: added support for http1 trailers. To enable use .

    • http: blocks unsupported transfer-encodings. Can be reverted temporarily by setting runtime feature envoy.reloadable_features.reject_unsupported_transfer_encodings to false.

    • http: support auto_host_rewrite_header in the dynamic forward proxy.

    • jwt_authn: added option that accepts request without token but rejects bad request with bad tokens.

    • jwt_authn: added bypass_cors_preflight to allow bypassing the CORS preflight request.

    • lb_subset_config: new fallback policy for selectors:

    • listeners: added reuse_port option.

    • logger: added command line option to escape newline characters in application logs.

    • ratelimit: added local rate limit network filter.

    • rbac: added support for matching all subject alt names instead of first in .

    • redis: performance improvement for larger split commands by avoiding string copies.

    • redis: correctly follow MOVE/ASK redirection for mirrored clusters.

    • redis: add host_degraded_refresh_threshold and to refresh topology when nodes are degraded or when requests fails.

    • router: added histograms to show timeout budget usage to the cluster stats.

    • router check tool: added support for testing and marking coverage for routes of runtime fraction 0.

    • router: added to support sending multiple mirrored requests in one route.

    • router: added support for REQ(header-name) header formatter.

    • router: added support for percentage-based

    • router: allow using a query parameter for HTTP consistent hashing.

    • router: exposed DOWNSTREAM_REMOTE_ADDRESS as custom HTTP request/response headers.

    • router: added to support setting SNI to transport socket for new upstream connections based on the downstream HTTP host/authority header.

    • router: added support for HOSTNAME header formatter.

    • server: added the CLI option, to disable extensions at startup.

    • server: fixed a bug in config validation for configs with runtime layers.

    • server: added workers_started that indicates whether listeners have been fully initialized on workers.

    • tcp_proxy: added .

    • tcp_proxy: added hash_policy.

    • thrift_proxy: added support for cluster header based routing.

    • thrift_proxy: added stats to the router filter.

    • tls: remove TLS 1.0 and 1.1 from client defaults

    • tls: added support for for subject alternative names.

    • tracing: added the ability to set custom tags on both the HTTP connection manager and the .

    • tracing: added upstream_address tag.

    • tracing: added initial support for AWS X-Ray (local sampling rules only) X-Ray Tracing.

    • tracing: added tags for gRPC request path, authority, content-type and timeout.

    • udp: added initial support for

    Deprecated

    • The request_headers_for_tags field in has been deprecated in favor of the custom_tags field.

    • The verify_subject_alt_name field in has been deprecated in favor of the match_subject_alt_names field.

    • The request_mirror_policy field in has been deprecated in favor of the request_mirror_policies field.

    • The service_name field in HTTP health checker has been deprecated in favor of the service_name_matcher field.