Announcing Istio 1.0.3

We’re pleased to announce the availability of Istio 1.0.3. Please see below for what’s changed.

Behavior changes

  • Validating webhook is now mandatory. Disabling it may result in Pilot crashes.

  • Service entry validation now rejects the wildcard hostname (*) when configuring DNS resolution. The API has never allowed this, however ServiceEntry was erroneously excluded from validation in the previous release. Use of wildcards as part of a hostname, e.g. *, remains unchanged.

  • The core dump path for istio-proxy has changed to /var/lib/istio.


  • Mutual TLS Permissive mode is enabled by default.

  • Pilot performance and scalability has been greatly enhanced. Pilot now delivers endpoint updates to 500 sidecars in under 1 second.

  • Default trace sampling is set to 1%.

Policy and telemetry

  • Mixer (istio-telemetry) now supports load shedding based on request rate and expected latency.

  • Mixer client (istio-policy) now supports FAIL_OPEN setting.

  • Istio Performance dashboard added to Grafana.

  • Reduced istio-telemetry CPU usage by 10%.

  • Eliminated statsd-to-prometheus deployment. Prometheus now directly scrapes from istio-proxy.