istio/ztunnel

Issues

• Coverage pipeline is failing.

  #1386 opened 22 days ago by Stevenjin8
  1

• workload_info is missing when running inpodserver

  #1311 opened 22 days ago by LiorLieberman
  1

• metrics endpoint sends content-type: application/openmetrics-text

  #1356 opened a month ago by craigbox
  9

• CPU pprof causes memory spike

  #1348 opened 2 months ago by howardjohn
  1

• Issue trying ambient mode on an ipv4-only k8s cluster

  #1131 opened 6 months ago by aek-dsk
  22

• building image from source run into invalid peer certificate: UnknownIssuer issue

  #1363 opened a month ago by kranurag7
  4

• istio ambient with Ztunnel on premise - XDS client connection error

  #1362 opened 2 months ago by qfaure
  4

• Upgrading Ztunnel to 1.24 with `cni.ambient.dnsCapture=true` causes DNS failures for workloads programmed by CNI 1.23

  #1360 opened 2 months ago by joke
  6

• Provide a new label for metrics regarding destination type

  #1128 opened 7 months ago by howardjohn
  10

• Consistent error "proxy::h2 ping error: broken pipe" from ztunnel containers across cluster

  #1346 opened 2 months ago by jessebye
  6

• performance: upstream and downstream will never run concurrently

  #1327 opened 3 months ago by howardjohn
  4

• [release-1.23] h2: drop spammy ping/pong errors

  #1292 opened 3 months ago by istio-testing
  1

• tls-rustls-aws-ls-sys-fips build option

  #1323 opened 3 months ago by xnox
  13

• ztunnel fails to connect istiod with COMPLIANCE_POLICY set to fips-140-2 for istiod

  #1296 opened 4 months ago by rubel-ahammad
  1

• High CPU consumption observed in ztunnel during connection spikes

  #1288 opened 4 months ago by barth12
  2

• Investigate DNS proxy port bind issues

  #1272 opened 4 months ago by bleggett
  5

• Send forwarded DNS traffic from users pod

  #1281 opened 4 months ago by howardjohn
  0

• Implement DNS-over-TCP redirection

  #1177 opened 4 months ago by howardjohn
  1

• log output in json format

  #1206 opened 4 months ago by snuggie12
  1

• Ambient mode getting started fails due to proxy protocol in 1.22.1

  #1124 opened 4 months ago by feynmanliang
  9

• Refactoring improvements now that we have a proxy-per-workload approach

  #1198 opened 4 months ago by howardjohn
  4

• [release-1.22] Properly handle named targetPort services

  #1145 opened 4 months ago by istio-testing
  1

• Ztunnel does not scale up with number of worker threads in expected way due to h2 locking

  #1174 opened 6 months ago by howardjohn
  14

• Ztunnel may want to use a different DNS resolution strategy

  #1225 opened 4 months ago by howardjohn
  1

• Optimize endpoint management for large services

  #1268 opened 4 months ago by howardjohn
  1

• AuthorizationPolicy still take effect by namespace scope after a workloadSelector added to it

  #1247 opened 5 months ago by ZarrianShi
  1

• `cluster.local` cannot be used as a pointer to the local trust domain

  #1260 opened 5 months ago by rinormaloku
  1

• Failure to do `apk update` when ambient captured from wolfi pods

  #1196 opened 5 months ago by howardjohn
  13

• enable deny for use of unwrap

  #1245 opened 5 months ago by ilrudie
  1

• [release-1.22] Add warning log to check NetworkPolicy for 15008 denial

  #1232 opened 5 months ago by istio-testing
  1

• Warn users when netpol might be blocking their requests

  #1228 opened 5 months ago by howardjohn
  1

• failed to connect to server "/var/run/ztunnel/ztunnel.sock"

  #1208 opened 6 months ago by piotrwasilewski420
  12

• Add more XDS operational metrics

  #1104 opened 6 months ago by howardjohn
  4

• Feature Request: Allow Customized XDS Address to be set

  #1203 opened 6 months ago by Dr-Octavius
  7

• CVE-2023-4039 when will fix ?

  #1194 opened 6 months ago by huanghuangzym
  4

• Implement improved draining

  #1191 opened 6 months ago by howardjohn
  14

• Do not error if the app sends a RST

  #1183 opened 6 months ago by howardjohn
  0

• Emit end-of-process access logs

  #1155 opened 6 months ago by howardjohn
  0

• [release-1.22] Add option for disabling IPv6

  #1164 opened 6 months ago by istio-testing
  1

• dualstack: DNS always returns both IP families regardless of service configuration

  #1152 opened 6 months ago by howardjohn
  0

• local_address and peer_address can panic

  #1167 opened 6 months ago by howardjohn
  0

• Stress test on-demand DNS querying

  #1160 opened 7 months ago by howardjohn
  0

• Support dual-stack localhost binding for DNS

  #1153 opened 7 months ago by howardjohn
  0

• [release-1.22] h2: remove illegal double oneshot recv

  #1130 opened 7 months ago by istio-testing
  1

• [release-1.22] dns: fix search lookup

  #1112 opened 7 months ago by istio-testing
  1

• [release-1.22] Refactor build_requests

  #1087 opened 7 months ago by istio-testing
  0

• [release-1.22] Drop improper workload DNS lookups

  #1122 opened 7 months ago by istio-testing
  0

• h2 ping/pong task can panic

  #1127 opened 7 months ago by howardjohn
  0

• Fixes around workload.hostname

  #1119 opened 7 months ago by howardjohn
  0

• Access log tests are not useful when running tests concurrently

  #1084 opened 7 months ago by howardjohn
  4