v1.36.0

Official Envoy changelog summary with source attribution, release tags, and community reactions.

Track this Envoy release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.

Envoy·10 months ago · Oct 14, 2025, 04:28 PMFixSecurity-relevantAI-assisted summary

Summary

- Updated HTTP/2 defaults (max streams 1024, reduced window sizes) and added HTTP/1.1 CONNECT proxy support, header removal patterns, and per‑route compressor overrides.
- Fixed critical security and stability issues including TLS inspector regression, DNS cache use‑after‑free, listener socket creation in network namespaces, and several proxy timeout/crash bugs.
- Expanded observability and extensibility with configurable metric eviction, logging ABI for dynamic modules, new Redis commands, reverse‑tunnel support, and richer external authz/gRPC per‑route configurations.

featurebugfixsecuritysource healthy

Official source Last checked 16 hours ago

Loading follow options…

official source

Verify the original release note

Every summary should remain traceable to the original changelog or release source.

AI-assisted summarysource healthyLast checked 16 hours ago

related channels

Turn this Envoy release note into a weekly digest for the tools you actually use.