port := "80"
	if req.TLS != nil {
		port = "443"
	}
	if matches := trailingPort.FindStringSubmatch(req.Host); len(matches) != 0 {
		port = matches[1]
	}

	env := []string{
		"SERVER_SOFTWARE=go",
		"SERVER_PROTOCOL=HTTP/1.1",
		"HTTP_HOST=" + req.Host,
		"GATEWAY_INTERFACE=CGI/1.1",
		"REQUEST_METHOD=" + req.Method,
		"QUERY_STRING=" + req.URL.RawQuery,

	p2, err := plugin.Open("plugin2.so")
	if err != nil {
		log.Fatalf("plugin.Open failed: %v", err)
	}
	// Check that plugin2's init function was called, and
	// that it modifies the same global variable as the host.
	if got, want := common.X, 2; got != want {
		log.Fatalf("after loading plugin2, common.X=%d, want %d", got, want)
	}

	_, err = plugin.Open("plugin2-dup.so")
	if err == nil {

    This feature is off by default, but can be enabled by setting the following flags in Istio:
    `ENABLE_MCS_HOST` and `ENABLE_MCS_SERVICE_DISCOVERY`. When enabled Istio will include the MCS host as a
    domain in the service's HTTP route. Additionally, Istio will support the MCS host during a DNS lookup.

spec:
  hosts:
    - "allow.{{ .To.ServiceName }}.com"
    - "deny.{{ .To.ServiceName }}.com"
  gateways:
    - gw-{{ .To.ServiceName }}
  http:
    - route:
        - destination:
            host: "{{ .To.ClusterLocalFQDN }}"
            port:
              number: {{ (.To.PortForName "http").ServicePort }}
---
apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:

apiVersion: apps/v1
kind: Deployment
metadata:
  name: hello-host-network
spec:
  replicas: 7
  selector:
    matchLabels:
      app: hello-host-network  
      tier: backend
      track: stable
  template:
    metadata:
      labels:
        app: hello-host-network
        tier: backend
        track: stable
    spec:
      containers:
        - name: hello-host-network

apiVersion: release-notes/v2
kind: bug-fix
area: networking
issue:
- 25691
releaseNotes:
- |

apiVersion: release-notes/v2
kind: feature
area: traffic-management
issues:
- 33226
releaseNotes:
- |

  configuration.
upgradeNotes:
  - title: Host header fallback disabled by default for Prometheus metrics for *all* inbound traffic.
    content: |
      Host header fallback for determining values for Prometheus `destination_service` labels has been disabled for all incoming traffic.
      Previously, this was disabled *only* for traffic arriving at Gateways. If you are relying on host header fallback behavior to properly

apiVersion: apps/v1
kind: Deployment
metadata:
  creationTimestamp: null
  name: hello-host-network
spec:
  replicas: 7
  selector:
    matchLabels:
      app: hello-host-network
      tier: backend
      track: stable
  strategy: {}
  template:
    metadata:
      creationTimestamp: null
      labels:
        app: hello-host-network
        tier: backend
        track: stable
    spec:
      containers:

Ben Leggett <******@****.***> 1710179183 -0400