Istio is an open-source service mesh platform that helps developers connect, secure, and manage microservices-based applications. With features such as traffic management, security policies, and observability tools, Istio simplifies the complexities of microservices architecture, enabling developers to build resilient and scalable applications. Through documentation, tutorials, and community support, Istio provides developers with the tools and resources needed to implement service mesh patterns and improve the reliability and performance of their distributed systems.

Istio

Istio 1.29.4 is a patch release addressing one high-severity security vulnerability (CVE-2026-47774, CVSS 7.5) in Envoy that allows unauthenticated remote attackers to exhaust memory via crafted HTTP/2 requests. Bug fixes include: a startup check for nftables JSON support with automatic iptables fallback, TLS certificate delivery for HTTPS listeners in ListenerSet with manual Gateway deployments, silent dropping of invalid HTTPRoute/GRPCRoute header filters, multi-network ambient waypoint routing, a concurrent map writes panic in istio-cni, and an ambient mode bug where publishNotReadyAddresses combined with traffic distribution presets incorrectly propagated healthPolicy to unrelated services.

Announcing Istio 1.29.4