update envoy version to v1.35.3 (#923)

Author: doujiang24

.github/workflows/lint.yml

@@ -2,7 +2,7 @@ name: lint
 
 on:
   push:
-    branches: [ "main", "release/**" ]
+    branches: [ "main", "release/**", "envoy-**" ]
   pull_request:
     branches: [ "main", "release/**" ]
 
@@ -127,4 +127,4 @@ jobs:
       run: make lint-markdown
 
     - name: lint yaml
-      run: make lint-yaml
+      run: make lint-yaml

.github/workflows/test.yml

@@ -2,7 +2,7 @@ name: test
 
 on:
   push:
-    branches: [ "main", "release/**" ]
+    branches: [ "main", "release/**", "envoy-**" ]
     paths-ignore:
     - "site/**"
     - "**/*.md"
@@ -53,13 +53,13 @@ jobs:
         FULL_ENVOY_VERSION=${ENVOY_API_VERSION}.0
         if [[ $ENVOY_API_VERSION == dev ]]; then
           # update this once there are more breaking changes
-          FULL_ENVOY_VERSION=1.33.1-0.20250411033243-86ca8d764bbd
+          FULL_ENVOY_VERSION=1.35.3
           # This is the envoy:contrib-dev image pull in 2025-04-11.
           # Use docker inspect --format='{{index .RepoDigests 0}}' envoyproxy/envoy:contrib-dev to get the sha256 ID.
           # We don't use the envoy:contrib-dev tag directly because it will be rewritten by the latest commit and
           # our test suite uses IfPresent policy to pull image.
           # We don't use the CI to catch the breaking change from the upstream so far.
-          export PROXY_IMAGE=envoyproxy/envoy@sha256:2e1202c7b0bc3694a8d4a4b642888602deab77ec1bf54cb8569184112b5c0ab3
+          export PROXY_IMAGE=envoyproxy/envoy@sha256:34c15269e0ee344fd90da7cf081124633692454ccf1be70b8078d9d2ba41a27c
           echo PROXY_IMAGE=$PROXY_IMAGE >> $GITHUB_ENV
         fi
         pushd ..

api/pkg/filtermanager/api/api.go

@@ -264,6 +264,30 @@ type FilterProcessCallbacks interface {
 
 type DecoderFilterCallbacks interface {
 	FilterProcessCallbacks
+	// Sets an upstream address override for the request. When the overridden host exists in the host list of the routed cluster
+	// and can be selected directly, the load balancer bypasses its algorithm and routes traffic directly to the specified host.
+	//
+	// Here are some cases:
+	// 1. Set a valid host(no matter in or not in the cluster), will route to the specified host directly and return 200.
+	// 2. Set a non-IP host, C++ side will return error and not route to cluster.
+	// 3. Set a unavailable host, and the host is not in the cluster, will req the valid host in the cluster and return 200.
+	// 4. Set a unavailable host, and the host is in the cluster, but not available(can not connect to the host), will req the unavailable hoat and return 503.
+	// 5. Set a unavailable host, and the host is in the cluster, but not available(can not connect to the host), and with retry. when first request with unavailable host failed 503, the second request will retry with the valid host, then the second request will succeed and finally return 200.
+	// 6. Set a unavailable host with strict mode, and the host is in the cluster, will req the unavailable host and return 503.
+	// 7. Set a unavailable host with strict mode, and the host is not in the cluster, will req the unavailable host and return 503.
+	// 8. Set a unavailable host with strict mode and retry. when first request with unavailable host failed 503, the second request will retry with the valid host, then the second request will succeed and finally return 200.
+	// 9. Set a unavailable host with strict mode and retry, and the host is not in the cluster, will req the unavailable host and return 503.
+	//
+	// The function takes two arguments:
+	//
+	// host (string): The upstream host address to use for the request. This must be a valid IP address(with port); otherwise, the
+	// C++ side will throw an error.
+	//
+	// strict (boolean): Determines whether the HTTP request must be strictly routed to the requested
+	// host. When set to ``true``, if the requested host is invalid, Envoy will return a 503 status code.
+	// The default value is ``false``, which allows Envoy to fall back to its load balancing mechanism. In this case, if the
+	// requested host is invalid, the request will be routed according to the load balancing algorithm and choose other hosts.
+	SetUpstreamOverrideHost(host string, strict bool) error
 }
 
 type EncoderFilterCallbacks interface {

api/pkg/filtermanager/api_impl_129.go

@@ -17,6 +17,7 @@
 package filtermanager
 
 import (
+	"fmt"
 	"runtime/debug"
 
 	capi "github.com/envoyproxy/envoy/contrib/golang/common/go/api"
@@ -50,6 +51,10 @@ func (cb *filterManagerCallbackHandler) InjectData([]byte) {
 	api.LogErrorf("InjectData is not implemented: %s", debug.Stack())
 }
 
+func (cb *filterManagerCallbackHandler) SetUpstreamOverrideHost(host string, strict bool) error {
+	return fmt.Errorf("SetUpstreamOverrideHost is not implemented: %s", debug.Stack())
+}
+
 func (cb *filterManagerCallbackHandler) DecoderFilterCallbacks() api.DecoderFilterCallbacks {
 	return cb
 }

api/pkg/filtermanager/api_impl_131_132.go

@@ -17,6 +17,7 @@
 package filtermanager
 
 import (
+	"fmt"
 	"runtime/debug"
 
 	capi "github.com/envoyproxy/envoy/contrib/golang/common/go/api"
@@ -50,6 +51,10 @@ type decoderFilterCallbackHandlerWrapper struct {
 	capi.DecoderFilterCallbacks
 }
 
+func (cb *decoderFilterCallbackHandlerWrapper) SetUpstreamOverrideHost(host string, strict bool) error {
+	return fmt.Errorf("SetUpstreamOverrideHost is not implemented: %s", debug.Stack())
+}
+
 func NewDecoderFilterCallbackHandlerWrapper(h capi.DecoderFilterCallbacks) api.DecoderFilterCallbacks {
 	return &decoderFilterCallbackHandlerWrapper{DecoderFilterCallbacks: h}
 }

api/plugins/tests/pkg/envoy/capi.go

@@ -572,6 +572,10 @@ func (i *filterCallbackHandler) AddData([]byte, bool) {
 func (i *filterCallbackHandler) InjectData([]byte) {
 }
 
+func (i *filterCallbackHandler) SetUpstreamOverrideHost(host string, strict bool) error {
+	return nil
+}
+
 func (i *filterCallbackHandler) LookupConsumer(_, _ string) (api.Consumer, bool) {
 	return nil, false
 }

patch/switch-envoy-go-version.sh

@@ -35,7 +35,7 @@ if [[ "$envoy_version" =~ ^1\.32\.[0-9]+$ ]]; then
     exit 0
 fi
 
-if [[ ! "$envoy_version" =~ ^1\.(29|31|32|33)\. ]]; then
+if [[ ! "$envoy_version" =~ ^1\.(29|31|32|33|35)\. ]]; then
     echo "Unsupported envoy version $envoy_version"
     exit 1
 fi