istio

1
apiVersion: release-notes/v2
2
kind: feature
3
area: networking
4
issue:
5
- 24379
6
releaseNotes:
7
- |
8
  **Removed** the protocol detection timeout by default, reducing traffic failures during slow connections.
9
upgradeNotes:
10
- title: Protocol Detection Timeout Changes
11
  content: |
12
    In order to support permissive mTLS traffic as well as [automatic protocol detection](istio.io/latest/docs/ops/configuration/traffic-management/protocol-selection/#automatic-protocol-selection),
13
    the proxy will sniff the first few bytes of traffic to determine the protocol used. For certain "server first" protocols, such
14
    as the protocol used by `MySQL`, there will be no initial bytes to sniff. To mitigate this issue in the past, Istio introduced
15
    a detection timeout. However, we found this caused frequent telemetry and traffic failures during slow connections, while increasing latency
16
    for misconfigured server first protocols rather than failing fast.
17

18
    This timeout has been disabled by default. This has the following impacts:
19

20
    - Non "server first" protocols will no longer have a risk of telemetry or traffic failures during slow connections
21
    - Properly configured "server first" protocols will no longer have an extra 5s latency on each connection
22
    - Improperly configured "server first" protocols will experience connection timeouts. Please ensure you follow the steps listed in [Server First Protocols](https://preliminary.istio.io/latest/docs/ops/configuration/traffic-management/protocol-selection/#server-first-protocols)
23
      to ensure you do not run into traffic issues.
24