Guy Daich

Support METADATA operator in header mutation

1

*Title*: *Support METADATA operator in header mutation* *Description*: The `METADATA` [formatter operator](https://www.envoyproxy.io/docs/envoy/latest/configuration/observability/access_log/usage), provided by the [metadata formatter extension](https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/formatter/metadata/v3/metadata.proto.html#envoy-v3-api-msg-extensions-formatter-metadata-v3-metadata) is planned to replace existing built-in access log operators such as `DYNAMIC_METADATA`,...

feat(translator): xds route and vhost metadata

14

**What this PR does / why we need it**: - Design doc for metadata propagation - Implement propagation of `HTTPRoute`/`GRPCRoute` metadata to envoy route resources - Implement propagation of `Gateway`...

Support Listener Access Logging for TLS troubleshooting

9

*Description*: Envoy supports several types of Access Loggers. The [access log](https://www.envoyproxy.io/docs/envoy/latest/configuration/observability/access_log/usage) that is most commonly in use is configured in HCM or TCP/UDP/Thrift Proxy. Envoy additionally supports a [listener](https://www.envoyproxy.io/docs/envoy/latest/api-v3/config/listener/v3/listener.proto)-level access...

feat(translator): http2 upstream settings

2

**What this PR does / why we need it**: - Exposes HTTP2 settings for upstream in Backend Traffic Policy - Apply by default envoy's secure-by-default values for HTTP2: https://www.envoyproxy.io/docs/envoy/latest/configuration/best_practices/edge -...

Support DNS resolution settings

2

*Description*: Currently, Envoy Gateway overrides the envoy default values for certain DNS resolution: https://github.com/envoyproxy/gateway/blob/8abf1efef4176092fe4db5ad9239e6d433ca57f2/internal/xds/translator/cluster.go#L145-L146 These settings are typically configurable in similar projects (see links below): - Istio: `dns_refresh_rate` - Ambassador:...

*Description*: When using merge-gateways, the proxy can be eagerly deployed based on the gatewayclass, before any gateway is available. This is useful for users that want to ensure that the...

*Description*: Several HTTP2 Protocol options can have an impact on resilience, performance and security of upstream connections. For example `max_concurrent_stream` defines "For upstream connections, [...] how many streams Envoy will...

Backend Implementation

1

# Backend API Implementation This issue tracks activities related to the implementation of the Backend API: #2997 ## Backend Implementation ### API - [x] API Definition: #3063 ### Endpoint types...

Support GEP-995 / Support Attaching Policies to Route Rules

7

*Description*: https://github.com/kubernetes-sigs/gateway-api/pull/2985 Wait for GW-API v1.2 - Propagate route rule names to xds as route metadata - Support attachment of policies to route rules

**How to categorize this issue?** /area networking /kind enhancement /platform aws **What would you like to be added**: Support static IPv6 addresses for dualstack LBs. To achieve this, gardener may...