envoyproxy/gateway

Fix conformance for GatewayHTTPSListenerDetectMisdirectedRequests

Aberta

#5.879 aberto em 1 de mai. de 2025

 (14 comentários) (2 reações) (1 responsável)Go (802 forks)auto 404
area/envoyhelp wanted

Métricas do repositório

Stars
 (2.871 estrelas)
Métricas de merge de PR
 (Métricas PR pendentes)

Description

We should return 421 when http/2 connection coalescing is detected

one workaround for now, is to disable http/2 ALPN when overlapping hostnames are detected, with the OverlappingTLSConfig condition added to the listeners https://gateway-api.sigs.k8s.io/geps/gep-3567/

I might be technically not deep enough into this https://gateway-api.sigs.k8s.io/geps/gep-3567/ states an option b of returning 421 for this. Is there a reason that envoy gateway is doing that which i am missing and/or could this be tracked as a followup in this or a new issue? Ideally it would be nice to not break http2 support like this :)

Originally posted by @MTRNord in #2675

Guia do colaborador