●Change8

Migrating to Consul Connect ent-changelog-1.19.4

Version ent-changelog-1.19.4 introduces 1 breaking change. This guide details how to update your code.

Released: 1/22/2025

1
Breaking Changes
2
Migration Steps
7
Affected Symbols

⚠️ Check Your Code

If you use any of these symbols, you need to read this guide:

meshEnvoybexpracl policy configurationproxycfgpeered upstreams watchesvirtual IP updates

Breaking Changes

●Issue #1

mesh: (Enterprise Only) Envoy `HttpConnectionManager.normalize_path` is now enabled by default on inbound traffic to mesh proxies, resolving CVE-2024-10005. Users relying on unnormalized paths must adjust configurations.

Migration Steps

  1. 1
    If you are using Enterprise mesh proxies and rely on unnormalized inbound paths, review the impact of enabling Envoy `HttpConnectionManager.normalize_path` by default.
  2. 2
    If you are using Enterprise L7 Intentions, you can now use `contains` and `ignoreCase` for HTTP header matching.

Release Summary

Consul 1.19.4 Enterprise release focuses heavily on security fixes, dependency updates, and introduces path normalization enforcement in Enterprise mesh proxies as a breaking change. It also adds new matching capabilities for L7 Intentions in Enterprise environments.

Need More Details?

View the full release notes and all changes for Consul Connect ent-changelog-1.19.4.

View Full Changelog