The Wire · Showcase
CONSUL API GATEWAY FIX STOPS 503 CASCADES IN MULTI-PARTITION SETUPS
By RepoJournal · Filed · About HashiCorp
Consul Enterprise users hitting HTTP 503s after upgrading to 2.0.x now have a fix: API gateways with HTTP listeners were resolving downstream services with wrong protocols, breaking discovery chains in peered clusters.
The root cause is in gateway synthesis. When API gateways compose service-router destinations, they were resolving backends as TCP by default instead of respecting HTTP protocol overrides, triggering cluster_not_found errors in multi-partition and cluster-peering topologies [1] [2]. This fix resolves composed service-router destinations as HTTP during gateway synthesis, eliminating the protocol mismatch that cascaded into widespread 503s. Meanwhile, Consul dataplane is quieting noisy logs from UDP timeout chatter [4] [5], and gRPC bumped to 1.82.1 with security hardening against frame flood attacks [3]. On the Azure provider side, the team is cleaning house by removing all 5.0 feature flag gates across legacy, monitor, containers, arc-kubernetes, authorization, automation, batch, and ioThub modules [6] [7] [8] [9] [10], signaling that 5.0 is now the stable baseline and legacy code paths can be junked.
One email a day. Unsubscribe in one click.
Keep up with HashiCorp in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.
One email a day. Unsubscribe in one click. Read a past issue →
Action items
- → Deploy Consul fix for API gateway 503s immediately if running 2.0.x with peering or multi-partition setups hashicorp/consul [immediate]
- → Upgrade gRPC to 1.82.1 in consul-dataplane to patch frame flood vulnerability hashicorp/consul-dataplane [plan]
- → Plan removal of 5.0 feature flag gates from your Azure provider code hashicorp/terraform-provider-azurerm [monitor]
References
- [1] fix(apigw): resolve composed service-router destinations as http during gateway synthesis ↗ hashicorp/consul
- [2] fix(apigw): resolve composed service-router destinations as http during gateway synthesis (#23793) hashicorp/consul
- [3] Bump google.golang.org/grpc from 1.72.2 to 1.82.1 in /integration-tests ↗ hashicorp/consul-dataplane
- [4] Removal of noisy log ↗ hashicorp/consul-dataplane
- [5] Removal of noisy log (#1198) hashicorp/consul-dataplane
- [6] remove 5.0 feature flag gates from legacy (#32993) hashicorp/terraform-provider-azurerm
- [7] remove 5.0 feature flag gates from monitor (#32990) hashicorp/terraform-provider-azurerm
- [8] remove 5.0 feature flag gates from arckubernetes, authorization, automation and batch (#32994) hashicorp/terraform-provider-azurerm
- [9] remove 5.0 feature flag gates from containers (#32991) hashicorp/terraform-provider-azurerm
- [10] remove 5.0 feature flag gates from iothub (#32995) hashicorp/terraform-provider-azurerm