istio/ztunnel

View on GitHub

The `ztunnel` component of ambient mesh

Stars: 487
Forks: 189
Open beginner issues: 0
Indexed issues: 99
Avg merge: 6h 44m
Merged PRs (30d): 40

Dominant language: Rust
License: Apache-2.0
Last GitHub push: Sep 15, 2026
Latest indexed: Sep 17, 2026
Contributing guide: Contributing guide
Code of conduct: No code of conduct
Beginner labels: help wanted

Open All

99 open issues indexed

Setup cargo audit (or similar) to report dependency CVEs and validate license Open

area/security area/testing P0 size/TBD

istio/ztunnel#3 · 9 comments · 0 reactions · 1 assignee · Indexed Sep 17, 2026
Setup prow to cache rustc outputs Open

area/dev-exp backlog

istio/ztunnel#6 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Tune HTTP2 settings Open

area/performance P1 size/TBD

istio/ztunnel#20 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Tune TLS settings Open

area/performance P0 size/TBD

istio/ztunnel#21 · 11 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Figure out how to ensure fairness between clients Open

area/performance P0 size/TBD

istio/ztunnel#24 · 9 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Question: any consideration for HA(high availability) of ztunnel? Open

istio/ztunnel#40 · 6 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Implement proper load balancing Open

area/traffic-flow P1 size/L

istio/ztunnel#64 · 6 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Support for TUN interception in ztunnel Open

area/traffic-flow

istio/ztunnel#68 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
[Investigation] Identify and test unhappy paths. Open

area/testing P1 size/M

istio/ztunnel#79 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Vulnerability Testing Open

area/security area/testing P0 size/M

istio/ztunnel#80 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Tracing Open

area/debuggability P0 size/TBD

istio/ztunnel#82 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
API/Config Documentation Open

area/configurability P1 size/TBD

istio/ztunnel#88 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Run Kubernetes conformance Tests Open

area/testing P2 size/TBD

istio/ztunnel#91 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Add a mechanism to propagate tunnel metadata to client/servers Open

backlog

istio/ztunnel#136 · 6 comments · 0 reactions · 1 assignee · Indexed Sep 17, 2026
Add support for tunneling UDP traffic Open

area/traffic-flow

istio/ztunnel#148 · 24 comments · 0 reactions · 2 assignees · Indexed Sep 17, 2026
Switch tunneling protocol from HTTP/2 to HTTP/3 (QUIC) Open

area/traffic-flow

istio/ztunnel#150 · 5 comments · 0 reactions · 1 assignee · Indexed Sep 17, 2026
Define an internal L4 routing API and IP metadata API Open

P1

istio/ztunnel#152 · 3 comments · 0 reactions · 2 assignees · Indexed Sep 17, 2026
Development tips: getting started developing in rust on ztunnel Open

lifecycle/staleproof

istio/ztunnel#153 · 4 comments · 14 reactions · 0 assignees · Indexed Sep 17, 2026
Expand fuzz testing Open

area/testing size/L

istio/ztunnel#183 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Reduce Xds config race Open

istio/ztunnel#203 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Track performance of ztunnel in CI Open

istio/ztunnel#214 · 6 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Mixing build container with non-build container invalidates compiler caches Open

area/dev-exp help-wanted

istio/ztunnel#223 · 5 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Unit tests for xDS Client Open

area/configurability area/testing lifecycle/automatically-closed

istio/ztunnel#227 · 3 comments · 0 reactions · 1 assignee · Indexed Sep 17, 2026
Unit test IPV6 Open

area/testing

istio/ztunnel#228 · 3 comments · 0 reactions · 1 assignee · Indexed Sep 17, 2026
Define complete set of integration points Open

size/S

istio/ztunnel#251 · 22 comments · 1 reaction · 0 assignees · Indexed Sep 17, 2026
Validate redirection don't break services with multiple ports Open

istio/ztunnel#260 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Close upstream connections on downstream disconnect Open

istio/ztunnel#347 · 10 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Support ProxyTerminatingEndpoints KEP Open

area/traffic-flow backlog size/TBD

istio/ztunnel#375 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Handle invalid logger names and types in /logging API Open

istio/ztunnel#426 · 5 comments · 0 reactions · 1 assignee · Indexed Sep 17, 2026
cluster.local default behavior in ambient Open

area/traffic-flow

istio/ztunnel#438 · 26 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
SessionAffinity in Service Open

istio/ztunnel#450 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
dedicated mode: control plane auth fails after token expires Open

area/authentication area/lifecycle

istio/ztunnel#484 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 17, 2026
Hit unreachable code Open

istio/ztunnel#488 · 12 comments · 0 reactions · 1 assignee · Indexed Sep 17, 2026
Support Multi Network - HBONE protocol + metadata needs origin network Open

feature/multi-cluster

istio/ztunnel#515 · 6 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Support per-pod DNS settings Open

area/configurability size/TBD

istio/ztunnel#555 · 6 comments · 3 reactions · 1 assignee · Indexed Sep 17, 2026
Support DNS in on-demand XDS Open

istio/ztunnel#577 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Improve ztunnel dashboard UI Open

area/debuggability area/dev-exp

istio/ztunnel#638 · 9 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
iterate on close connections which violate policy after updates Open

istio/ztunnel#798 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
consider more api-defined behaviors Open

area/configurability area/security

istio/ztunnel#830 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
waypoint handling review Open

istio/ztunnel#851 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Scalability of ztunnel Open

istio/ztunnel#852 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Enhance ztunnel heap instrumentation Open

istio/ztunnel#863 · 5 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Allow Prometheus -> ztunnel scraping to be HBONE Open

istio/ztunnel#928 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Access log tests are not useful when running tests concurrently Open

istio/ztunnel#1084 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Provide a new label for metrics regarding destination type Open

istio/ztunnel#1128 · 14 comments · 0 reactions · 1 assignee · Indexed Sep 17, 2026
Stress test on-demand DNS querying Open

istio/ztunnel#1160 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
local_address and peer_address can panic Open

istio/ztunnel#1167 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Ztunnel does not scale up with number of worker threads in expected way due to h2 locking Open

istio/ztunnel#1174 · 16 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Implement improved draining Open

istio/ztunnel#1191 · 16 comments · 1 reaction · 1 assignee · Indexed Sep 17, 2026
enable deny for use of unwrap Open

istio/ztunnel#1245 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 17, 2026

istio/ztunnel

Get new issues in your inbox