Dingkang Li

feat: add support to enable IP Transparency for TCP via Original Source listener filter

8

*Description*: > With current EG, in order to enable IP Transparency for TCP (not HTTP), Proxy Protocol is the only way, it requires upstream host should support Proxy Protocol too....

feat: add support to configuring downstream idle timeout for TCP listener

4

*Description*: > Add `idleTimeout` to clientTrafficPolicy for TCP listener, for the same reason as #2861.

**What this PR does / why we need it**: Implement consistent hash table size in BackendTrafficPolicy, follow up #3348 **Which issue(s) this PR fixes**: Fixes #3272

*Description*: After #3371 is done, we can attach policies to gateway or specific listener. When multiple listeners differentiated by SNI are translated into single xDS listener, `PostHTTPListenerModify` will be invoked...

e2e: Add backend health check e2e case via active http

4

**What this PR does / why we need it**: Check whether backend health check via active http works in e2e, inspired by https://github.com/projectcontour/contour/blob/main/test/e2e/httpproxy/http_health_checks_test.go. EG use the default `50%` from Envoy...

api: add socket buffer limit field in ClientTrafficPolicy and BackendTrafficPolicy

1

**What this PR does / why we need it**: Allow user to configure socket buffer limit for both incoming socket and outgoing socket to control memory consumed by Envoy, especially...

feat(translator): Set zone for endpoint and arrange endpoints by zone in EDS

2

**What this PR does / why we need it**: Set zone for endpoint and arrange endpoints by zone in EDS if zone is available in EndpointSlice. This is required before...

Split HTTP and TCP/UDP access log format in EnvoyProxy

3

*Description*: HTTP and TCP/UDP don't have same command operators, `REQ` and `RESP` operators only in HTTP is important for observability. If operators only in HTTP is configured for TCP/UDP, `-`...

feat(translator): prefix TCP FilterChain name by irListener name

6

**What this PR does / why we need it**: Prefix TCP FilterChain name by irListener name, to let extension server can locate TCP FilterChain according to policy's targetRef(s). xref https://github.com/envoyproxy/gateway/issues/3461#issuecomment-2146544345