Announcing Tetrate Agent Operations Director for GenAI Runtime Visibility and Governance

Learn more
< Back

Exploring Envoy Proxy’s Latest Release: Version 1.27

Envoy Proxy, a high-performance edge and service proxy, recently introduced the latest version, providing developers with powerful tools to manage and

Exploring%20Envoy%20Proxy%E2%80%99s%20Latest%20Release%3A%20Version%201.27

Envoy Proxy, a high-performance edge and service proxy, recently introduced the latest version, providing developers with powerful tools to manage and secure their network traffic effectively. In this article, we’ll go over some of the noteworthy features of Envoy Proxy 1.27.

Introducing L4 Golang Network Filter

Building upon the advancements made in the previous release (1.26), Envoy Proxy now introduces a new Layer 4 (L4) Golang network filter. With this enhancement, developers can write filters in Golang and seamlessly integrate them into the Envoy ecosystem. Initially introduced for HTTP filters, this new feature extends the support to network filters, significantly expanding the customization options available to developers.

However, it’s worth noting that this feature is currently experimental and only available in the contrib build. The official build excludes this feature as it undergoes further refinement to ensure stability and robustness.

In response to user feedback and requirements, Version 1.27 introduces improved support for configuring additional cookie attributes in HTTP. This update empowers developers to fine-tune the behavior of cookies within the Envoy Proxy, providing greater control and flexibility when handling HTTP traffic.For further details and insights into this enhancement, refer to the related issue on GitHub: https://github.com/envoyproxy/envoy/issues/27234.

CEL Matcher Support for Advanced Matching

Including Common Expression Language (CEL) matcher support marks another significant stride in Envoy Proxy’s feature set. With CEL data input and CEL input matcher capabilities, developers can now perform more sophisticated matching operations within the proxy.

Although this addition promises enhanced flexibility, it is recommended to conduct further investigation to grasp its full potential and understand how it can be leveraged to meet specific use cases effectively.

Cluster-Provided Extension for Custom Load Balancer Policy

Envoy Proxy 1.27 introduces an exciting feature that allows users to leverage cluster-provided extensions to support custom load balancer policies in upstream traffic management. This empowers developers to plug in their custom load balancer implementations, tailoring the load balancing behavior to their unique application requirements.

To take full advantage of this feature, in-depth exploration and investigation are necessary to ensure seamless integration and optimal performance.

Conclusion

Envoy Proxy’s version 1.27 release brings forth a host of powerful enhancements, reaffirming its position as a leading-edge service proxy in the tech industry. The introduction of the L4 Golang network filter, enhanced cookie attribute configurability, CEL matcher support, and cluster-provided extension for custom load balancer policies all make Envoy Proxy an indispensable tool for managing, securing, and optimizing network traffic.

References

Product background Product background for tablets
New to service mesh?

Get up to speed with free online courses at Tetrate Academy and quickly learn Istio and Envoy.

Learn more
Using Kubernetes?

Tetrate Enterprise Gateway for Envoy (TEG) is the easiest way to get started with Envoy Gateway for production use cases. Get the power of Envoy Proxy in an easy-to-consume package managed via the Kubernetes Gateway API.

Learn more
Getting started with Istio?

Tetrate Istio Subscription (TIS) is the most reliable path to production, providing a complete solution for running Istio and Envoy securely in mission-critical environments. It includes:

  • Tetrate Istio Distro – A 100% upstream distribution of Istio and Envoy.
  • Compliance-ready – FIPS-verified and FedRAMP-ready for high-security needs.
  • Enterprise-grade support – The ONLY enterprise support for 100% upstream Istio, ensuring no vendor lock-in.
  • Learn more
    Need global visibility for Istio?

    TIS+ is a hosted Day 2 operations solution for Istio designed to streamline workflows for platform and support teams. It offers:

  • A global service dashboard
  • Multi-cluster visibility
  • Service topology visualization
  • Workspace-based access control
  • Learn more
    Decorative CTA background pattern background background
    Tetrate logo in the CTA section Tetrate logo in the CTA section for mobile

    Ready to enhance your
    network

    with more
    intelligence?