Upcoming status change for Envoy HTTP Cache filter.

18 views
Skip to first unread message

Yan Avlasov

unread,
Jul 11, 2025, 10:57:27 AMJul 11
to envoy-a...@googlegroups.com
Hello,
The status of Envoy HTTP cache filter https://www.envoyproxy.io/docs/envoy/latest/configuration/http/http_filters/cache_filter
 is Work-In-Process however its security posture was set in error to `robust_to_untrusted_downstream_and_upstream` placing the unfinished code under security release process.

Since it is not practical for the security team to address vulnerabilities in an unfinished component, we are changing the filter's security posture to 'unknown' and will remove it from the security release coverage.

Please respond to this e-mail to indicate if you have significant production deployment with the HTTP cache extension and changing the filter's security posture will have significant impact.

On behalf of Envoy maintainers,
Yan Avlasov

Reply all
Reply to author
Forward
0 new messages