--- title: Cilium 1.20: Gateway API ExternalAuth,... description: Cilium 1.20 is a major release expanding Gateway API support from v1.4 to v1.6, adding ExternalAuth filters for pre-request authentication, TCPRoute/UDPRoute... canonical: https://daily.dev/posts/cilium-1-20-gateway-api-externalauth-tcproute-udproute-eni-ipam-for-ipv6-and-more--yq0kboimx twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Cilium 1.20: Gateway API ExternalAuth, TCPRoute/UDPRoute, ENI IPAM for IPv6, and more! | daily.dev og:description: Cilium 1.20 is a major release expanding Gateway API support from v1.4 to v1.6, adding ExternalAuth filters for pre-request authentication, TCPRoute/UDPRoute... og:url: https://daily.dev/posts/cilium-1-20-gateway-api-externalauth-tcproute-udproute-eni-ipam-for-ipv6-and-more--yq0kboimx og:image: https://api.daily.dev/og/posts/YQ0kbOimx.png og:image:alt: Cilium 1.20: Gateway API ExternalAuth, TCPRoute/UDPRoute, ENI IPAM for IPv6, and more! og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Cilium 1.20: Gateway API ExternalAuth, TCPRoute/UDPRoute, ENI IPAM for IPv6, and more! **[Isovalent](https://daily.dev/sources/isovalent)** · 30 min read · 5 upvotes · 1 comments ## Summary Cilium 1.20 is a major release expanding Gateway API support from v1.4 to v1.6, adding ExternalAuth filters for pre-request authentication, TCPRoute/UDPRoute for non-HTTP traffic management, and ListenerSets for multi-tenant gateway delegation. Networking improvements include ENI IPAM with IPv6 support on AWS (beta), automatic netkit/veth datapath selection for mixed kernel fleets, and a new datapath plugin system allowing cloud providers to extend Cilium's eBPF datapath without forking. Security enhancements include ztunnel sidecarless mTLS via HBONE tunnels, Kubernetes ClusterNetworkPolicy support, and a new cluster-mesh policy entity. Operational improvements include an 80% reduction in the cilium-cni binary size (76 MB to 16 MB), stable MCS-API support for cross-cluster service discovery, topology-aware traffic distribution with PreferSameZone/PreferSameNode, and BPF policy-map aggregation for world/remote-node identities to reduce map pressure at scale. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Community discussion Top comments from developers on daily.dev. **@pdfopsdev** · 0 upvotes > 76 to 16mb for the cni binary is the sleeper feature in this release, shaves real seconds off node bootstrap when you're autoscaling under a spike. --- Tags: [#linux](https://daily.dev/tags/linux), [#kubernetes](https://daily.dev/tags/kubernetes), [#networking](https://daily.dev/tags/networking), [#cilium](https://daily.dev/tags/cilium), [#gateway-api](https://daily.dev/tags/gateway-api) [View this post on daily.dev](https://daily.dev/posts/cilium-1-20-gateway-api-externalauth-tcproute-udproute-eni-ipam-for-ipv6-and-more--yq0kboimx) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Cilium 1.20: Gateway API ExternalAuth, TCPRoute/UDPRoute, ENI IPAM for IPv6, and more!","url":"https://daily.dev/posts/cilium-1-20-gateway-api-externalauth-tcproute-udproute-eni-ipam-for-ipv6-and-more--yq0kboimx","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/cilium-1-20-gateway-api-externalauth-tcproute-udproute-eni-ipam-for-ipv6-and-more--yq0kboimx"},"datePublished":"2026-07-30T08:43:40.493Z","dateModified":"2026-07-30T08:44:12.547Z","description":"Cilium 1.20 is a major release expanding Gateway API support from v1.4 to v1.6, adding ExternalAuth filters for pre-request authentication, TCPRoute/UDPRoute...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/432f8a300ece38638a4b8cb9c3941963?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/432f8a300ece38638a4b8cb9c3941963?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Isovalent","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Isovalent","logo":"https://media.daily.dev/image/upload/s--aJv8XyPY--/f_auto/v1716188539/logos/isovalent","url":"https://daily.dev/sources/isovalent"},"commentCount":1,"discussionUrl":"https://daily.dev/posts/cilium-1-20-gateway-api-externalauth-tcproute-udproute-eni-ipam-for-ipv6-and-more--yq0kboimx","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":5},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":1}],"keywords":"linux,kubernetes,networking,cilium,gateway-api","timeRequired":"PT30M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Isovalent","item":"https://daily.dev/sources/isovalent"},{"@type":"ListItem","position":3,"name":"Cilium 1.20: Gateway API ExternalAuth, TCPRoute/UDPRoute, ENI IPAM for IPv6, and more!"}]} {"@context":"https://schema.org","@type":"WebPage","@id":"https://daily.dev/posts/cilium-1-20-gateway-api-externalauth-tcproute-udproute-eni-ipam-for-ipv6-and-more--yq0kboimx","comment":[{"@type":"Comment","text":"76 to 16mb for the cni binary is the sleeper feature in this release, shaves real seconds off node bootstrap when you’re autoscaling under a spike.","datePublished":"2026-07-30T18:05:28.148Z","url":"https://daily.dev/posts/YQ0kbOimx#c-c6zE8qLFG","author":{"@type":"Person","name":"PDFops","url":"https://daily.dev/pdfopsdev","image":"https://media.daily.dev/image/upload/s---8isRBKc--/f_auto/v1782922291/avatars/avatar_orjMeK8QKaaVZwGq7ScPz?_a=BAMAMicg0"}}]} ```