From 53a525a4034e6466fe827970f631e3f15ffea176 Mon Sep 17 00:00:00 2001 From: "update-envoy[bot]" <135279899+update-envoy[bot]@users.noreply.github.com> Date: Thu, 31 Oct 2024 13:10:40 +0000 Subject: [PATCH] http: removing the default trusted address list (#36643) Risk Level: high Testing: adapted tests previously Docs Changes: yes Release Notes: yes --------- Signed-off-by: Alyssa Wilk Mirrored from https://github.com/envoyproxy/envoy @ 87ac1d2a5a69dfda86156003a2ecddd8cac500e0 --- .../http_connection_manager/v3/http_connection_manager.proto | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager.proto b/envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager.proto index 3b49f132..5fb9f24c 100644 --- a/envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager.proto +++ b/envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager.proto @@ -691,7 +691,7 @@ message HttpConnectionManager { // information about internal/external addresses. // // .. warning:: - // In the next release, no IP addresses will be considered trusted. If you have tooling such as probes + // As of Envoy 1.33.0 no IP addresses will be considered trusted. If you have tooling such as probes // on your private network which need to be treated as trusted (e.g. changing arbitrary x-envoy headers) // you will have to manually include those addresses or CIDR ranges like: //