diff --git a/WORKSPACE b/WORKSPACE
index e32140162e7..9f4c2bfd62f 100644
--- a/WORKSPACE
+++ b/WORKSPACE
@@ -38,8 +38,8 @@ bind(
 # When updating envoy sha manually please update the sha in istio.deps file also
 #
 # Determine SHA256 `wget https://github.com/envoyproxy/envoy/archive/COMMIT.tar.gz && sha256sum COMMIT.tar.gz`
-ENVOY_SHA = "52a04b6c55b7f6d5646c0fb235ce403394f67839"
-ENVOY_SHA256 = "101b2401ee702d2a13e6232a51d5ad16caea30654b726e29ad847480845e6552"
+ENVOY_SHA = "8e549722d88708d9c5c246e7c531fd3db76e7dec"
+ENVOY_SHA256 = "0c4a4fdc798248d4311f099241ec46a4d6fe6b14cd521d230736ab425d8f55d0"
 LOCAL_ENVOY_PROJECT = "/PATH/TO/ENVOY"
 
 http_archive(
diff --git a/istio.deps b/istio.deps
index eb2d52f0985..3e0e489e69f 100644
--- a/istio.deps
+++ b/istio.deps
@@ -11,6 +11,6 @@
 		"name": "ENVOY_SHA",
 		"repoName": "istio/envoy",
 		"file": "WORKSPACE",
-		"lastStableSHA": "52a04b6c55b7f6d5646c0fb235ce403394f67839"
+		"lastStableSHA": "8e549722d88708d9c5c246e7c531fd3db76e7dec"
 	}
 ]