- Do not use global optflags (temporarily) - enabling them causes
linker errors.
- Disable incompatible_bzl_disallow_load_after_statement check in
Bazel - some dependencies still do not pass it.
- Remove obsolete Groups tag (fate#326485)
- Update to version 20191004:
* Compatibility with Cilium 1.6.
* Compatibility with Envoy 1.11.1.
- Add sources of envoy-openssl project which makes use of OpenSSL
instead of BoringSSL.
- Add patches which makes Envoy compatible with versions of
libraries available in openSUSE:
* 0001-bazel-Update-protobuf-and-other-needed-dependencies.patch
* 0002-bazel-Update-grpc-to-1.23.0.patch
- Remove patches which are not needed anymore:
* 0001-Remove-deprecated-Blaze-PACKAGE_NAME-macro-5330.patch
* 0001-Upgrade-gabime-spdlog-dependency-to-1.3.0-5604.patch
* 0001-bazel-transport-sockets-Update-grpc-to-1.19.1.patch
- Do not use global optflags (temporarily) - enabling them causes
linker errors.
- Disable incompatible_bzl_disallow_load_after_statement check in
Bazel - some dependencies still do not pass it.
- Remove obsolete Groups tag (fate#326485)
- Remove duplicate tarball of golang-org-x-tools and unneeded
tarballs of msgpack and http-parser.
- Update to version 1.11.1:
* http: added mitigation of client initiated attacks that result
in flooding of the downstream HTTP/2 connections. Those attacks
can be logged at the “warning” level when the runtime feature
http.connection_manager.log_flood_exception is enabled. The
runtime setting defaults to disabled to avoid log spam when
under attack.
* http: added inbound_empty_frames_flood counter stat to the
HTTP/2 codec stats, for tracking number of connections
terminated for exceeding the limit on consecutive inbound
frames with an empty payload and no end stream flag. The limit
is configured by setting the
max_consecutive_inbound_frames_with_empty_payload config
setting.
* http: added inbound_priority_frames_flood counter stat to the
HTTP/2 codec stats, for tracking number of connections
terminated for exceeding the limit on inbound PRIORITY frames.
The limit is configured by setting the
max_inbound_priority_frames_per_stream config setting.
* http: added inbound_window_update_frames_flood counter stat
to the HTTP/2 codec stats, for tracking number of connections
terminated for exceeding the limit on inbound WINDOW_UPDATE
frames.
* http: added outbound_flood counter stat to the HTTP/2 codec
stats, for tracking number of connections terminated for
exceeding the outbound queue limit.
* http: added outbound_control_flood counter stat to the HTTP/2
codec stats, for tracking number of connections terminated
for exceeding the outbound queue limit for PING, SETTINGS and
RST_STREAM frames.
* http: enabled strict validation of HTTP/2 messaging. Previous
behavior can be restored using
stream_error_on_invalid_http_messaging config setting.
- Add sources of envoy-openssl project which makes use of OpenSSL
instead of BoringSSL.
- Add patches which makes Envoy compatible with versions of
libraries available in openSUSE:
* 0001-bazel-Update-protobuf-and-other-needed-dependencies.patch
* 0002-bazel-Update-grpc-to-1.23.0.patch
- Remove patches which are not needed anymore:
* 0001-Remove-deprecated-Blaze-PACKAGE_NAME-macro-5330.patch
* 0001-Upgrade-gabime-spdlog-dependency-to-1.3.0-5604.patch
* 0001-bazel-transport-sockets-Update-grpc-to-1.19.1.patch