From 1125d60ea5bd42f454479927bef0a6d566696c26 Mon Sep 17 00:00:00 2001 From: Mike Morris Date: Thu, 5 Aug 2021 18:04:56 -0400 Subject: [PATCH] changelog: add KNOWN ISSUES note for streaming with mesh gateways (#10799) * changelog: suggest use_streaming_backend=false --- CHANGELOG.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 52b85c6041..1faf2a73e2 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,10 @@ ## 1.10.1 (July 15, 2021) +KNOWN ISSUES: + +* The change to enable streaming by default uncovered an incompatibility between streaming and WAN federation over mesh gateways causing traffic to fall back to attempting a direct WAN connection rather than transiting through the gateways. We currently suggest explicitly setting [`use_streaming_backend=false`](https://www.consul.io/docs/agent/options#use_streaming_backend) if using WAN federation over mesh gateways when upgrading to 1.10.1 and are working to address this issue in a future patch release. + SECURITY: * xds: ensure envoy verifies the subject alternative name for upstreams [CVE-2021-32574](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32574) [[GH-10621](https://github.com/hashicorp/consul/issues/10621)]