Issues

• ztunnel keepalive leaves the pod with source port 15006 on half-closed plaintext inbound connections

  istio/ztunnel#2210 · Filter by author d-mankowski-synerise opened on Oct 24, 2026

• [release-1.32] proxy: retry outbound connects with endpoint deprioritization

  istio/ztunnel#2208 · Filter by author istio-testing opened on Oct 23, 2026
  

• [release-1.32] update rustls-webpki

  istio/ztunnel#2196 · Filter by author istio-testing opened on Oct 21, 2026
  

• Unread TCP connections stall independent connections in ambient mode

  istio/ztunnel#2190 · Filter by author brianpursley opened on Oct 21, 2026
  2

• [release-1.31] pin h2 crate at 0.4.15

  istio/ztunnel#2103 · Filter by author istio-testing opened on Sep 15, 2026
  

• [release-1.30] pin h2 crate at 0.4.15

  istio/ztunnel#2102 · Filter by author istio-testing opened on Sep 15, 2026
  

• connection metadata in no allow policies matched logs

  istio/ztunnel#2055 · Filter by author holyspectral opened on Aug 18, 2026

• Ambient: ~0.5 ms increase in MySQL connect time to external (non-mesh) servers after enrollment

  istio/ztunnel#2019 · Filter by author Truefiber opened on Jul 29, 2026

• [release-1.29] reduce wds full push on ztunnel reconnect

  istio/ztunnel#1997 · Filter by author istio-testing opened on Jul 21, 2026
  

• Connections dropped under backpressure with ambient mode enabled

  istio/ztunnel#1945 · Filter by author seilerre opened on Jun 9, 2026
  17

• Unbounded Ztunnel metric cardinality

  istio/ztunnel#1942 · Filter by author cathal-c opened on Jun 5, 2026

• Evaluate using Profile-Guided Optimization (PGO) for better CPU performance

  istio/ztunnel#1899 · Filter by author zamazan4ik opened on May 8, 2026
  1

• Runtime TLS configuration with xDS

  istio/ztunnel#1817 · Filter by author zmiklank opened on Mar 30, 2026
  7

• metric for xDS request size

  istio/ztunnel#1811 · Filter by author wenpincui opened on Mar 26, 2026

• ztunnel rejects connections on newly joined nodes — AuthorizationPolicy not synced yet

  istio/ztunnel#1805 · Filter by author barth12 opened on Mar 21, 2026
  1

• warn when ztunnel's own certificate appears in a configured CRL

  istio/ztunnel#1767 · Filter by author jlojosnegros opened on Feb 26, 2026
  2

  

• metric for workload cert expiry

  istio/ztunnel#1748 · Filter by author garrettheel opened on Feb 2, 2026
  3

  

• Possible memory / fd leak

  istio/ztunnel#1747 · Filter by author patelprayag1990 opened on Feb 1, 2026
  9

• ztunnel metrics cardinality explosion: stale pods in workload labels

  istio/ztunnel#1719 · Filter by author romanpanov993 opened on Jan 13, 2026
  3

• Implement integration tests for CRL support

  istio/ztunnel#1714 · Filter by author nilekhc opened on Jan 12, 2026
  

• [release-1.29] feat: implement crl support in ztunnel

  istio/ztunnel#1713 · Filter by author istio-testing opened on Jan 12, 2026
  

• deprecate prefered_service_namespace

  istio/ztunnel#1709 · Filter by author ilrudie opened on Jan 9, 2026
  1

  

• Multiple ztunnel getting stuck in crashloopbackoff with error wrokloadmanager failed to start proxy: can't assign requested address

  istio/ztunnel#1707 · Filter by author karan56625 opened on Jan 9, 2026
  7

  

• Think about keepalives

  istio/ztunnel#1699 · Filter by author Stevenjin8 opened on Dec 17, 2025

• Certificate provisioning race condition causes "allow policies exist, but none allowed" rejection on newly scheduled pods

  istio/ztunnel#1686 · Filter by author barth12 opened on Dec 9, 2025