1.20.2 (February 22, 2022)¶
Incompatible Behavior Changes¶
Changes that are expected to cause an incompatibility if applicable; deployment changes are likely required
Minor Behavior Changes¶
Changes that may cause incompatibilities for some users, but should not for most
Bug Fixes¶
Changes expected to improve the state of the world and are unlikely to have negative effects
data plane: fix crash when internal redirect selects a route configured with direct response or redirect actions.
jwt_authn: fixed the crash when a CONNECT request is sent to JWT filter configured with regex match on the Host header.
tcp_proxy: fix a crash that occurs when configured for upstream tunneling and the downstream connection disconnects while the the upstream connection or http/2 stream is still being established.
upstream: fix stack overflow when a cluster with large number of idle connections is removed.
Removed Config or Runtime¶
Normally occurs at the end of the deprecation period
New Features¶
+* tls: added support for match_typed_subject_alt_names for subject alternative names to enforce specifying the subject alternative name type for the matcher to prevent matching against an unintended type in the certificate.
Deprecated¶
+* tls: match_subject_alt_names has been deprecated in favor of the match_typed_subject_alt_names.