3 Commits

Author	SHA1	Message	Date
freddygv	283b989ba5	Validate SANs for failovers	2021-07-14 23:41:33 -06:00
freddygv	752f5ff961	Validate Subject Alternative Name for upstreams ... These changes ensure that the identity of services dialed is cryptographically verified. For all upstreams we validate against SPIFFE IDs in the format used by Consul's service mesh: spiffe://<trust-domain>/ns/<namespace>/dc/<datacenter>/svc/<service>	2021-07-14 23:41:19 -06:00
R.B. Boyer	2142a697ad	[backport: 1.8.x] xds: version sniff envoy and switch regular expressions from 'regex' to 'safe_regex' on newer envoy versions (#8265) ... cherry-pick of #8222 onto origin/release/1.8.x Fixes: #8205	2020-07-09 17:04:23 -05:00