v1.33.0

Official Envoy changelog summary with source attribution, release tags, and community reactions.

Track this Envoy release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.

Envoy·2 years ago · Jan 14, 2025, 07:55 PMDeprecationMay break your integrationAI-assisted summary

Summary

- Security updates: CVE‑2024‑25629 c‑ares out‑of‑bounds read fix; RFC1918 addresses no longer treated as internal; added P‑384/P‑521 curves, improved SNI/SAN validation, and Signed Double Submit Cookie pattern.
- New defaults and features: shadow requests streamed in parallel, local replies traverse filter chain after 1xx headers, JSON access‑log formatter enabled by default, DNS nameserver rotation with retries, UDP‑GRO for QUIC, and OAuth2 re...
- Wasm and tracing changes: removed deprecated Opencensus extension, adjusted route‑cache behavior for newer ABI, added Wasm VM reload support and Go plugins.

featuresecuritydeprecationsource healthy

Official source Last checked 14 hours ago

Loading follow options…

official source

Verify the original release note

Every summary should remain traceable to the original changelog or release source.

AI-assisted summarysource healthyLast checked 14 hours ago

related channels

Turn this Envoy release note into a weekly digest for the tools you actually use.