v0.14.0

Release Notes - v0.14.0

Features

• Gateway API Support: Added support for TCPRoute, UDPRoute, and TLSRoute resources (6c55002)
• TLS Termination Mode: Support for TLSRoute with hostname matching in terminate mode (d2e357d, 553d9ee, 9e17fba)
• Gateway CLI Commands: Added gateway CRUD operations and route subcommands (fd1c896, 170fb78)
• Multi-resource Apply: Top-level apply command with server-side apply support (72f588b, 0877506, 9077f67)
• Tunnel TUI: Basic text user interface for tunnel with simplified non-TUI mode (d20aab1, 6d68305)
• Namespace Support: Added namespace support for lwtunnel (807e6d8)
• TunnelNode Table Converter: Added v1alpha.TunnelNode table converter for CLI (a828cdb)

Bug Fixes

• SNAT Panic Fix: Fixed panic when SNAT has no addresses (4e5fc75)
• Tunnel Cleanup: Address cleanup in router on disconnect (2d8c5bd)
• Gateway Extension Server: Fixed nil client bug and improved connection handling (dfec695, 047b05c, 945255e)
• Domain Validation: Fixed domain object validation (1039992)
• ICX Tunnel: Remove relay address from list on shutdown (8542795)
• Build Fix: Fixed borked backplane build (cb4e7b4)

Improvements

• API v1alpha2 Migration: Migrated Proxy to core/v1alpha2 API (7375973, 8fb5dba, 8e23941)
• Logging Enhancements:
  • Added slog support and JSON logging (79e620d, 0f49f84)
  • Moved gRPC logs to debug level and structured subprocess logs (eeb73d5)
  • Verbose tunnel mode automatically disables TUI (00ed474)
• Dashboard Auth: Improved dashboard authentication flow (84533bf)
• Multi-cluster Support: Refactored tunnel and proxy controller for multi-cluster environments (d81cec5, 65435df)
• Tunnel Interface Simplification: Simplified TunnelServer interface and made ClientGetter required (82076a2, be3fbc1, 5a57b27)
• Token Management: Added TokenIssuer interface and consolidated token dependencies (44f9a3d, c154c3e)
• xDS Extensions: Added gateway listener xDS extension hooks with credential options (0b46db0, 1b20997, afc1364)
• Envoy Node Metadata: Set metadata from Proxy reconciler (b57fb03, a3f1f04)
• API Server Updates:
  • Set Proxy replica connectedAt at xDS stream connection (f8e4250)
  • Reconcile missed updates (56a2b4a)
  • Re-enabled GRPC, TLS, TCP and UDP (6c55002)
  • Port override option via APOXY_API_SERVER_PORT (a4997cc)
• Gateway Updates:
  • Pulled upstream TCP/TLS listener refactors from Envoy Gateway (fc199d6, 143f21c)
  • Omit ALPNs on TCP/TLS routes (efd571e)
  • Made controller name configurable (88f3084, fc6e545)

Infrastructure

• CI/CD Enhancements:
  • Added LLM-generated release notes to Dagger pipeline with commit links (a3ab13d, 41ddf88)
  • Fetch full git history for release notes generation (bd7b550)
  • Updated Dagger version to v0.19.10 across all workflows (2dde2ad)

---

Full Changelog: v0.13.0...v0.14.0

v0.13.0

What's Changed

• [icxtunnel/cmd] fix all the things + add health endpoint by @dpeckett in #74
• [icxtunnel] Wire up controllers and integrate with kubernetes. by @dpeckett in #76
• [icxtunnel/controllers] periodically publish connection stats by @dpeckett in #79

Full Changelog: v0.12.4...v0.13.0

v0.12.4

What's Changed

• [icxtunnel] upgrade icx and dpeckett/network to switch to remove dpeckett/treemap by @dpeckett in #71
• [edge-functions] label EdgeFunctionRevisions with the EdgeFunction name by @theRealWardo in #72
• [icxtunnel] implement batched io by @dpeckett in #73

Full Changelog: v0.12.3...v0.12.4

v0.12.3

Full Changelog: v0.12.2...v0.12.3

v0.12.2

What's Changed

• [icxtunnel] get the netlink + AF_XDP router working by @dpeckett in #70

Full Changelog: v0.12.1...v0.12.2

v0.12.1

What's Changed

• [icxtunnel] upgrade icx for keepalive support by @dpeckett in #69

Full Changelog: v0.12.0...v0.12.1

v0.12.0

What's Changed

• [icxtunnel] add usermode router for relays and get end-to-end working by @dpeckett in #68

Full Changelog: v0.11.21...v0.12.0

v0.11.21

What's Changed

• [icxtunnel] implement autodiscovery and include a hidden standalone dev relay command for testing by @dpeckett in #67

Full Changelog: v0.11.20...v0.11.21

v0.11.20

What's Changed

• [icxtunnel] establish redundant connections to relays by @dpeckett in #64
• [icxtunnel] implement multiplexed packetconn for QUIC control plane by @dpeckett in #66

Full Changelog: v0.11.19...v0.11.20

v0.11.19

What's Changed

• [icxtunnel] add connect command and begin fleshing out routers by @dpeckett in #63
• [api] Move more types to core/v1alpha2 by @dilyevsky in #65

Full Changelog: v0.11.18...v0.11.19