RATATOSKRATATOSK
Sign in

Envoy

v1.37.0Networking & Messaging
Jan 13, 2026

ACTION 1CHECK 2PLAN 1OTHER 30

Envoy v1.37.0 expands dynamic modules, filters, routing, observability, and certificate capabilities. The release also changes HTTP reset behavior, removes runtime guards and legacy paths, and deprecates the OpenTelemetry access log `common_config` field.

Action needed (1)

  • breakingRuntime guards and legacy code paths removed

    Multiple runtime guards and legacy code paths are removed in Envoy v1.37.0.

Check if affected (2)

  • breakingThe default HTTP reset code, changed to INTERNAL_ERROR

    Applies when you use HTTP reset handling.

    The default HTTP reset code changes from NO_ERROR to INTERNAL_ERROR.

  • breakingDefault handling of upstream protocol errors during resets

    Applies when upstream protocol errors can trigger resets.

    Reset handling now ignores upstream protocol errors by default.

Plan ahead (1)

  • deprecatedOpenTelemetry access log common_config field deprecation

    Applies if you configure OpenTelemetry access logs with common_config.

    The OpenTelemetry access log common_config field is deprecated in favor of explicit http_service or grpc_service configuration.

All 30 other recorded changesadditions 15 · value changes 11 · constraints 3 · fixes 1

additions (15)

  • - Added support for network, listener, UDP listener, and access logger filters
  • - Introduced streaming HTTP callouts to HTTP filters
  • - Added global module loading and improved module search path handling
  • - Added vhost header customization and forward client cert matching via xDS matcher
  • - New transform filter for request/response body modification
  • - New MCP (Model Context Protocol) filter and router for agentic network
  • - Network-layer geoip filter for non-HTTP geolocation
  • - Postgres Inspector listener filter for PostgreSQL traffic routing
  • - On-demand certificate fetching via SDS
  • - Support for filter chains and named filter chains
  • - New stats-based access logger
  • - Process-level rate limiting for access logs
  • - Added execution counters and improved tracing support across filters
  • - Composite cluster extension for retry-aware cluster selection
  • - Enhanced TCP proxy with upstream connect mode and early data buffering

value changes (11)

  • - Enhanced ABI for streaming body manipulation and header operations
  • - Container-aware CPU detection for improved resource utilization in containerized environments
  • - HTTP/2 performance optimizations including reduced allocations for well-known headers
  • - Enhanced cookie matching in route configuration
  • - Proto API Scrubber filter now production-ready with comprehensive metrics
  • - Enhanced ext_authz with error response support and improved header handling
  • - Better TLS certificate validation failure messages in access logs
  • - Improved scalability through filter chain reuse across match actions
  • - Enhanced OTLP stats sink with metric dropping support
  • - Improved QUIC path migration using QUICHE logic
  • - Proto API Scrubber now returns 404 Not Found instead of 403 Forbidden for blocked methods

constraints (3)

  • - Cluster-level retry policies, hash policies, and request mirroring
  • - Substitution formatting for direct response bodies and descriptor values
  • - Added MaxMind Country database support for geoip

fixes (1)

  • - Fixed multiple memory leaks and crashes in HTTP/2, Lua, and connection handling
Add Envoy to your stack

A weekly email arrives when a release needs action. Like the breaking changes in this release.

Add to stack →
Official release note ↗All Envoy releases →