v0.11.24

Full Changelog: v0.11.23...v0.11.24

v0.11.23

Full Changelog: v0.11.22...v0.11.23

v0.11.22

Fixes

• gateway: Upstream clusters (including dynamic forward proxy) are no longer silently capped at Envoy's implicit 1024 max_connections / max_requests defaults.
• gateway: Dynamic forward proxy clusters now speak HTTP/2 upstream when the Backend uses protocol: h2 or h2c (previously these always defaulted to HTTP/1.1).

Full Changelog: v0.11.21...v0.11.22

v0.20.0

This release adds certificate management capabilities to the k8s subcommands and improves local development workflows.

Features

• Add certificate management subcommands for listing, rotating, and revoking certificates (8c90478)
• Support --local flag for k8s installations against dev cosmos environment (b721dfb)

Improvements

• Reduce reconciliation log volume by tightening watch predicates in gateway (4f73290)

v0.19.3

This release focuses on infrastructure improvements to the API server, enhanced tunnel diagnostics and metrics, and gateway configuration updates.

Features

• Agent-side debug RPC over QUIC control channel (3592719)
• MTU/PTB kernel-metric collector and connect-ip ICMP counter for tunnels (ae63923)
• Automatic CLI version check with upgrade prompts (3b84338)
• Tunnel per-connection uptime metric and agent-process identifier (042dc2d)
• Opt-in metadata.generation tracking on default builder strategy (8fe2939)
• Expose resource.Apply/ReadInputs/SplitYAMLDocuments in CLI (435f287)

Bug Fixes

• Fix auth --check by hitting /version instead of listing proxies (d199937)
• Lowercase Backend.spec.protocol on write (25bb559)
• Revert server-side reconnect circuit breaker (c823174)

Improvements

• Bump default HTTPRoute timeout from 15s to 100s (162899b)
• Advertise CLI build version as agent label (38e535f)
• Disable health and metrics endpoints in TUI mode (fca57c2)
• Extract IsInteractive helper and migrate call sites (936292a)

Infrastructure

• Bump envoyproxy/gateway to v1.4.0 (8355495)
• Remove apiserver-runtime dependency (3c49790)
• Replace sample-apiserver and add integration coverage (1c4ae63)
• Remove unused Docker driver package from ratelimit (1c5a612)

v0.19.2

This release improves the CLI upgrade experience and Kubernetes installation workflow, plus fixes CI publishing issues.

Features

• Wait for workloads to become healthy after k8s install (617b503)

Bug Fixes

• Fix apoxy upgrade version parsing and add --force flag (287679e)

Infrastructure

• Publish checksums.txt and goarch-named tarballs for apoxy upgrade (d5c5cb2)
• Skip arm64 goarch tarball copies to avoid GitHub asset name collision (fe10797)

v0.19.1

This release pins the OpenTelemetry gRPC dependency to maintain compatibility with Temporal v1.23.

Infrastructure

• Pin otelgrpc to v0.59.0 to maintain Temporal v1.23 compatibility (60c9364)

v0.19.0

This release focuses on significant performance improvements to the tunnel subsystem and enhanced reliability through better connection management and monitoring.

Features

• Add async send queues per connection in muxer (35ccced)
• Add push-based TCP stats metrics (d04674d)
• Replace overlay metrics scraping with push over HTTP/3 (744e089)
• Add BFD server onDown callback for proactive endpoint drain (e08e06a)
• Distribute tunnel workers across multiple relay addresses (385787d)

Bug Fixes

• Fix BFD goroutine leak and missing connections gauge decrement (9faf84b)
• Fix Geneve MTU update on reload (17435fb)
• Fix homebrew tap updater by embedding formula template (a618679)

Improvements

• Tune TCP stack for high throughput (74add4f, 050d125)
• Bump TUN MTU to 1420 (17435fb)
• Bump upstream per-connection buffer limit to 1 MiB (cf38c3d)

Infrastructure

• Bump builder image to golang:1.25-bookworm (8657bfd)
• Switch quic-go and gvisor to remote fork refs (4cd8125)
• Add workflow_dispatch to release for manual homebrew formula updates (d03ad8c)

v0.18.1

This release introduces a new generic delete command, domain record replacement capabilities, and HTTP response compression support, along with several reliability improvements.

Features

• Generic delete command: Add support for deleting resources using file-based and type/name modes (1ef4659)
• Domain record replacement: Add DomainReplaceAnnotation for atomic record-type changes (abc339f)
• HTTP response compression: Add HTTPRouteFilter CRD with default-on response compression (aae75f2)

Bug Fixes

• Tunnel metrics registration: Guard RegisterAgentMetrics with sync.Once to prevent double-registration (8f437c4)

Improvements

• Tunnel metrics: Move agent-only metrics out of init() into explicit RegisterAgentMetrics() (9c9417e)

Infrastructure

• CLI documentation: Update CLI reference with delete command and k8s install --version flag (14fceee)

v0.18.0

This release adds enhanced tunnel monitoring capabilities and improves Kubernetes operations with automatic namespace handling and version information.

Features

• Tunnel agent metrics and overlay scraper: Add comprehensive agent metrics collection and overlay scraper with re-export collector support (1894a0b)
• Traffic pause with auto-detection: Implement automatic traffic pause detection for high throughput scenarios (938c50f)
• Version flag for install command: Add --version flag to Kubernetes install command (8e9d8a1)

Bug Fixes

• Namespace creation in Kubernetes: Ensure namespace exists before performing server-side dry-run operations (23ed5ab)