Issues

• [release-1.31] pin h2 crate at 0.4.15

  istio/ztunnel#2103 · Filter by author istio-testing opened on Sep 15, 2026
  

• [release-1.30] pin h2 crate at 0.4.15

  istio/ztunnel#2102 · Filter by author istio-testing opened on Sep 15, 2026
  

• exit 133 on GKE Axion arm64 (aws-lc aborts on transient RNDR failure)

  istio/ztunnel#2072 · Filter by author PetrMc opened on Aug 26, 2026
  9

  

• connection metadata in no allow policies matched logs

  istio/ztunnel#2055 · Filter by author holyspectral opened on Aug 18, 2026

• Ambient: ~0.5 ms increase in MySQL connect time to external (non-mesh) servers after enrollment

  istio/ztunnel#2019 · Filter by author Truefiber opened on Jul 29, 2026

• [release-1.29] reduce wds full push on ztunnel reconnect

  istio/ztunnel#1997 · Filter by author istio-testing opened on Jul 21, 2026
  

• Connections dropped under backpressure with ambient mode enabled

  istio/ztunnel#1945 · Filter by author seilerre opened on Jun 9, 2026
  13

• Unbounded Ztunnel metric cardinality

  istio/ztunnel#1942 · Filter by author cathal-c opened on Jun 5, 2026

• Evaluate using Profile-Guided Optimization (PGO) for better CPU performance

  istio/ztunnel#1899 · Filter by author zamazan4ik opened on May 8, 2026
  1

• Runtime TLS configuration with xDS

  istio/ztunnel#1817 · Filter by author zmiklank opened on Mar 30, 2026
  7

• metric for xDS request size

  istio/ztunnel#1811 · Filter by author wenpincui opened on Mar 26, 2026

• ztunnel rejects connections on newly joined nodes — AuthorizationPolicy not synced yet

  istio/ztunnel#1805 · Filter by author barth12 opened on Mar 21, 2026
  1

• warn when ztunnel's own certificate appears in a configured CRL

  istio/ztunnel#1767 · Filter by author jlojosnegros opened on Feb 26, 2026
  

• metric for workload cert expiry

  istio/ztunnel#1748 · Filter by author garrettheel opened on Feb 2, 2026
  3

  

• Possible memory / fd leak

  istio/ztunnel#1747 · Filter by author patelprayag1990 opened on Feb 1, 2026
  9

• ztunnel metrics cardinality explosion: stale pods in workload labels

  istio/ztunnel#1719 · Filter by author romanpanov993 opened on Jan 13, 2026
  3

• Implement integration tests for CRL support

  istio/ztunnel#1714 · Filter by author nilekhc opened on Jan 12, 2026
  

• [release-1.29] feat: implement crl support in ztunnel

  istio/ztunnel#1713 · Filter by author istio-testing opened on Jan 12, 2026
  

• deprecate prefered_service_namespace

  istio/ztunnel#1709 · Filter by author ilrudie opened on Jan 9, 2026
  1

  

• Multiple ztunnel getting stuck in crashloopbackoff with error wrokloadmanager failed to start proxy: can't assign requested address

  istio/ztunnel#1707 · Filter by author karan56625 opened on Jan 9, 2026
  7

  

• Think about keepalives

  istio/ztunnel#1699 · Filter by author Stevenjin8 opened on Dec 17, 2025

• Certificate provisioning race condition causes "allow policies exist, but none allowed" rejection on newly scheduled pods

  istio/ztunnel#1686 · Filter by author barth12 opened on Dec 9, 2025

• AWSPCA root CA rotation causes ztunnel communication failures

  istio/ztunnel#1679 · Filter by author agnewp opened on Nov 25, 2025
  1

• Istio CNI reports healthy but returns 500 to ztunnel readiness probe

  istio/ztunnel#1674 · Filter by author adudorov-sre opened on Nov 19, 2025
  13

  

• Reuse Inner HBONE connection when sending cross cluster traffic

  istio/ztunnel#1672 · Filter by author Stevenjin8 opened on Nov 18, 2025
  1