istio.io/istio@v0.0.0-20240520182934-d79c90f27776/releasenotes/notes/protocol-detection-timeout.yaml (about)

     1  apiVersion: release-notes/v2
     2  kind: feature
     3  area: networking
     4  issue:
     5  - 24379
     6  releaseNotes:
     7  - |
     8    **Removed** the protocol detection timeout by default, reducing traffic failures during slow connections.
     9  upgradeNotes:
    10  - title: Protocol Detection Timeout Changes
    11    content: |
    12      In order to support permissive mTLS traffic as well as [automatic protocol detection](istio.io/latest/docs/ops/configuration/traffic-management/protocol-selection/#automatic-protocol-selection),
    13      the proxy will sniff the first few bytes of traffic to determine the protocol used. For certain "server first" protocols, such
    14      as the protocol used by `MySQL`, there will be no initial bytes to sniff. To mitigate this issue in the past, Istio introduced
    15      a detection timeout. However, we found this caused frequent telemetry and traffic failures during slow connections, while increasing latency
    16      for misconfigured server first protocols rather than failing fast.
    17  
    18      This timeout has been disabled by default. This has the following impacts:
    19  
    20      - Non "server first" protocols will no longer have a risk of telemetry or traffic failures during slow connections
    21      - Properly configured "server first" protocols will no longer have an extra 5s latency on each connection
    22      - Improperly configured "server first" protocols will experience connection timeouts. Please ensure you follow the steps listed in [Server First Protocols](https://preliminary.istio.io/latest/docs/ops/configuration/traffic-management/protocol-selection/#server-first-protocols)
    23        to ensure you do not run into traffic issues.