apiVersion: release-notes/v2
kind: feature
area: networking
releaseNotes:
  - |

layer over the underlying cluster management platform, such as Kubernetes.

Istio is composed of these components:

- **Envoy** - Sidecar proxies per microservice to handle ingress/egress traffic
   between services in the cluster and from a service to external
   services. The proxies form a _secure microservice mesh_ providing a rich
   set of functions like discovery, rich layer-7 routing, circuit breakers,

apiVersion: release-notes/v2
kind: bug-fix
area: traffic-management
issue: 
  - 48373
releaseNotes:
  - |

  }

  override fun proxySelectStart(url: HttpUrl) {
    eventListener.proxySelectStart(call, url)
  }

  override fun proxySelectEnd(
    url: HttpUrl,
    proxies: List<Proxy>,
  ) {
    eventListener.proxySelectEnd(call, url, proxies)
  }

  override fun dnsStart(socketHost: String) {
    eventListener.dnsStart(call, socketHost)
  }

  override fun dnsEnd(
    socketHost: String,

apiVersion: release-notes/v2
kind: bug-fix
area: installation
issue:
- 35657

releaseNotes:
  - |

apiVersion: release-notes/v2
kind: bug-fix
area: security
issue:
  - https://github.com/istio/istio/issues/43785
releaseNotes:
  - |

kind: feature
area: networking
issue:
  - 30054
releaseNotes:
- |
  **Fixed** Modifying multi-network gateway configuration via Services with the label `topology.istio.io/network` will

apiVersion: release-notes/v2
kind: feature
area: traffic-management
releaseNotes:
- |
  **Added** support for tunneling outbound traffic via external HTTP forward proxies using HTTP CONNECT or POST methods.

apiVersion: release-notes/v2
kind: bug-fix
area: networking
issue:
  - 26617
releaseNotes:
  - |

apiVersion: release-notes/v2
kind: feature
area: traffic-management
issue:
  - 45329
releaseNotes:
- |
  **Fixed** when creating a `WorkloadGroup`, `WorkloadEntry` auto-registration will occur immediately for proxies