docs: misc fixes (#474)

Signed-off-by: Matt Klein <mklein@lyft.com>

docs/root/intro/arch_overview/ssl.rst

@@ -18,8 +18,7 @@ requirements (TLS1.2, SNI, etc.). Envoy supports the following TLS features:
   (CRL) if one is :ref:`provided <envoy_api_field_auth.CertificateValidationContext.crl>`.
 * **ALPN**: TLS listeners support ALPN. The HTTP connection manager uses this information (in
   addition to protocol inference) to determine whether a client is speaking HTTP/1.1 or HTTP/2.
-* **SNI**: SNI is currently supported for client connections. Listener support is likely to be added
-  in the future.
+* **SNI**: SNI is supported for both server (listener) and client (upstream) connections.
 * **Session resumption**: Server connections support resuming previous sessions via TLS session
   tickets (see `RFC 5077 <https://www.ietf.org/rfc/rfc5077.txt>`_). Resumption can be performed
   across hot restarts and between parallel Envoy instances (typically useful in a front proxy

envoy/api/v2/cds.proto

@@ -320,6 +320,7 @@ message Cluster {
     // be allocated a single virtual node.
     google.protobuf.UInt64Value minimum_ring_size = 1;
 
+    // [#not-implemented-hide:] Hide from docs.
     message DeprecatedV1 {
       // Defaults to true, meaning that std::hash is used to hash hosts onto
       // the ketama ring. std::hash can vary by platform. For this reason,
@@ -329,7 +330,9 @@ message Cluster {
       // to use `xxHash <https://github.com/Cyan4973/xxHash>`_ now.
       google.protobuf.BoolValue use_std_hash = 1;
     }
+
     // Deprecated settings from v1 config.
+    // [#not-implemented-hide:] Hide from docs.
     DeprecatedV1 deprecated_v1 = 2 [deprecated = true];
   }
 
@@ -349,6 +352,9 @@ message Cluster {
   message CommonLbConfig {
     // Configures the :ref:`healthy panic threshold <arch_overview_load_balancing_panic_threshold>`.
     // If not specified, the default is 50%.
+    //
+    // .. note::
+    //   The specified percent will be truncated to the nearest 1%.
     core.Percent healthy_panic_threshold = 1;
   }