Feature Status

This page lists the relative maturity and support level of every Istio feature. Please note that the phases (Alpha, Beta, and Stable) are applied to individual features within the project, not to the project as a whole. Here is a high level description of what these labels mean.

Feature phase definitions

PurposeDemo-able, works end-to-end but has limitations. If you use it in production and encounter a serious issue we may not be able to fix it for you, so be sure that you can continue to function if you have to disable itUsable in production, not a toy anymoreDependable, production hardened
APINo guarantees on backward compatibilityAPIs are versionedDependable, production-worthy. APIs are versioned, with automated version conversion for backward compatibility
PerformanceNot quantified or guaranteedNot quantified or guaranteedPerformance (latency/scale) is quantified, documented, with guarantees against regression
Deprecation PolicyNoneWeak - 3 monthsDependable, Firm. 1 year notice will be provided before changes
SecuritySecurity vulnerabilities will be handled publicly as simple bug fixesSecurity vulnerabilities will be handled according to our security vulnerability policySecurity vulnerabilities will be handled according to our security vulnerability policy

Istio features

Below is our list of existing features and their current phases. This information will be updated after every monthly release.

Traffic management

Protocols: HTTP1.1 / HTTP2 / gRPC / TCPStable
Protocols: Websockets / MongoDBStable
Traffic Control: label/content based routing, traffic shiftingStable
Resilience features: timeouts, retries, connection pools, outlier detectionStable
Gateway: Ingress, Egress for all protocolsStable
TLS termination and SNI Support in GatewaysStable
SNI (multiple certs) at ingressStable
Locality load balancingBeta
Enabling custom filters in EnvoyAlpha
CNI container interfaceAlpha
Sidecar APIBeta


Prometheus IntegrationStable
Client and Server Telemetry ReportingStable
Service Dashboard in GrafanaStable
Distributed TracingStable
Stackdriver IntegrationStable
Distributed Tracing to Zipkin / JaegerBeta
Trace SamplingBeta

Security and policy enforcement

Service-to-service mutual TLSStable
Kubernetes: Service Credential DistributionStable
Certificate management on Ingress GatewayStable
Pluggable Key/Cert Support for Istio CAStable
End User (JWT) AuthenticationBeta
Automatic mutual TLSBeta
VM: Service Credential DistributionBeta
Mutual TLS MigrationBeta


Standalone OperatorBeta
Kubernetes: Envoy Installation and Traffic InterceptionStable
Kubernetes: Istio Control Plane InstallationStable
Multicluster MeshBeta
External Control PlaneAlpha
Kubernetes: Istio Control Plane UpgradeBeta
Basic Configuration Resource ValidationBeta
Istio CNI pluginAlpha
IPv6 Support for KubernetesAlpha. Dual-stack IPv4 and IPv6 is not supported.
Distroless Base Images for IstioAlpha
Virtual Machine IntegrationAlpha
Helm Based InstallationAlpha
Was this information useful?
Do you have any suggestions for improvement?

Thanks for your feedback!