Notices
This change (#1195) disables unproxied ports for app containers. This will prevent processes other than gorouter + tcp-router from connecting to app ports via the underlay network.
New Ops-files
-
BREAKING The use of unproxied ports for app containers is now disabled. All traffic coming into applications from the underlay network must go through the envoy proxy to reach the application. For details, see PR #1195.
-
TLS has been enabled for TCP routes, providing the same level of encryption and configuration as Gorouter's TLS/mTLS verification with app backends. For details, see PR #1195.
Release Updates
Warning: The Release Notes column only highlights noteworthy updates for each release bump. However, it is not exhaustive and we recommend you visit the actual release notes below before every upgrade.
| Release | Old Version | New Version | Release Notes |
|---|---|---|---|
| bpm | 1.3.3 | 1.4.0 | |
| diego | 2.104.0 | 2.105.0 | |
| credhub | 2.12.91 | 2.12.92 | |
| cflinuxfs4 | 1.152.0 | 1.158.0 | |
| cf-smoke-tests | 42.0.165 | 42.0.170 | |
| nats | 56.24.0 | 56.25.0 | |
| routing | 0.311.0 | 0.312.0 | |
| mapfs | 1.3.0 | 1.4.0 | |
| nfs-volume | 7.2.0 | 7.4.0 | |
| smb-volume | 3.4.0 | 3.5.0 | |
| windows2019fs | 2.71.0 | 2.72.0 | |
| cflinuxfs4-compat | 1.152.0 | 1.158.0 | |
| backup-and-restore-sdk | 1.19.33 | 1.19.34 | |
| windowsfs | 2.71.0 | 2.72.0 | |
| envoy-nginx | 0.28.0 | 0.29.0 |