Skip to content

[1.4] listener: clean up accept filters before connection creation#119

Merged
howardjohn merged 1 commit intoistio:release-1.4from
lambdai:listenertocont14
Nov 7, 2019
Merged

[1.4] listener: clean up accept filters before connection creation#119
howardjohn merged 1 commit intoistio:release-1.4from
lambdai:listenertocont14

Conversation

@lambdai
Copy link

@lambdai lambdai commented Nov 7, 2019

Signed-off-by: Yuchen Dai silentdai@gmail.com

Early adopt of envoyproxy#8922 in 1.4

Fix istio/istio#18229

Signed-off-by: Yuchen Dai <silentdai@gmail.com>
@howardjohn howardjohn merged commit bc4e866 into istio:release-1.4 Nov 7, 2019
@lambdai lambdai deleted the listenertocont14 branch November 7, 2019 21:31
@lambdai
Copy link
Author

lambdai commented Nov 7, 2019

Thanks! istio/proxy on the way

lambdai added a commit to lambdai/proxy that referenced this pull request Nov 7, 2019
Signed-off-by: Yuchen Dai <silentdai@gmail.com>
istio-testing pushed a commit to istio/proxy that referenced this pull request Nov 7, 2019
Signed-off-by: Yuchen Dai <silentdai@gmail.com>
howardjohn pushed a commit that referenced this pull request Mar 3, 2020
Previously, TLS inspector didn't support TLSv1.3 and clients configured
to use only TLSv1.3 were not recognized as TLS clients.

Because TLS extensions (SNI, ALPN) were not inspected, those connections
might have been matched to a wrong filter chain, possibly bypassing some
security restrictions in the process.

Fixes istio/istio#18695.

Signed-off-by: Piotr Sikora <piotrsikora@google.com>
brian-avery pushed a commit that referenced this pull request Jun 30, 2020
Previously, TLS inspector didn't support TLSv1.3 and clients configured
to use only TLSv1.3 were not recognized as TLS clients.

Because TLS extensions (SNI, ALPN) were not inspected, those connections
might have been matched to a wrong filter chain, possibly bypassing some
security restrictions in the process.

Fixes istio/istio#18695.

Signed-off-by: Piotr Sikora <piotrsikora@google.com>
Miss-you pushed a commit to Miss-you/envoy that referenced this pull request Nov 17, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants