# Latest **URL:** https://linkerd.buoyant.io/latest.md [Latest](https://linkerd.buoyant.io/latest.md) · [Categories](https://linkerd.buoyant.io/categories.md) · [Tags](https://linkerd.buoyant.io/tags.md) --- ## [GKE node deletion leads to brief pod IP overlap and GetProfile requests failing with "conflicting IP" error](https://linkerd.buoyant.io/t/gke-node-deletion-leads-to-brief-pod-ip-overlap-and-getprofile-requests-failing-with-conflicting-ip-error/891)
**Author:** [@kylekizirian](https://linkerd.buoyant.io/u/kylekizirian)\ **Replies:** 2\ **Last updated:** [September 8, 2026, 10:56pm UTC](https://linkerd.buoyant.io/t/gke-node-deletion-leads-to-brief-pod-ip-overlap-and-getprofile-requests-failing-with-conflicting-ip-error/891 "2026-09-08T22:56:43Z")
We run on GKE and we’ve seen two instances in the past month where a GKE node will get removed, and immediately replaced by another GKE node, and the new node is given the same pod CIDR as the deleted node. Additionally,… --- ## [Request for consistent hashing / affinity routing](https://linkerd.buoyant.io/t/request-for-consistent-hashing-affinity-routing/892)
**Author:** [@kylekizirian](https://linkerd.buoyant.io/u/kylekizirian)\ **Replies:** 2\ **Last updated:** [August 31, 2026, 6:32pm UTC](https://linkerd.buoyant.io/t/request-for-consistent-hashing-affinity-routing/892 "2026-08-31T18:32:20Z")
Hello all, I’d like to submit a feature request (let me know if there is a better place to submit this!) for best-effort request affinity. Please let me know if this is already a way to do this, and I have just overlook… --- ## [Linkerd with gvisor runtime class](https://linkerd.buoyant.io/t/linkerd-with-gvisor-runtime-class/855)
**Author:** [@ryant](https://linkerd.buoyant.io/u/ryant)\ **Replies:** 3\ **Last updated:** [August 31, 2026, 3:55pm UTC](https://linkerd.buoyant.io/t/linkerd-with-gvisor-runtime-class/855 "2026-08-31T15:55:19Z")
Hoping someone can help here. I’m currently running agent-sandbox(https://agent-sandbox.sigs.k8s.io/) for a template pod with a gvisor runtime class. Initially I tried just a normal linkerd-init, but because CAP\_NET\_ADM… --- ## [SPIFFEE Identity Outside of Cluster](https://linkerd.buoyant.io/t/spiffee-identity-outside-of-cluster/875)
**Author:** [@peacememories](https://linkerd.buoyant.io/u/peacememories)\ **Replies:** 1\ **Last updated:** [July 17, 2026, 4:12pm UTC](https://linkerd.buoyant.io/t/spiffee-identity-outside-of-cluster/875 "2026-07-17T16:12:29Z")
Hi there. I’m pretty new to Linkerd and we’re currently just evaluating it, so please excuse my ignorance if this question has an obvious answer. As far as I can tell, Linkerd’s automatic mTLS uses SPIFFEE to generate u… --- ## [TLS Origination for Egress](https://linkerd.buoyant.io/t/tls-origination-for-egress/876)
**Author:** [@peacememories](https://linkerd.buoyant.io/u/peacememories)\ **Replies:** 1\ **Last updated:** [July 17, 2026, 4:08pm UTC](https://linkerd.buoyant.io/t/tls-origination-for-egress/876 "2026-07-17T16:08:38Z")
Hi there. I’m pretty new to Linkerd and we’re currently just evaluating it, so please excuse my ignorance if this question has an obvious answer. We want to control cluster egress through our service mesh, specifically … --- ## [Linkerd-destination has stale data in endpoint cache](https://linkerd.buoyant.io/t/linkerd-destination-has-stale-data-in-endpoint-cache/171)
**Author:** [@MarkRobinson](https://linkerd.buoyant.io/u/MarkRobinson)\ **Replies:** 7\ **Last updated:** [June 4, 2026, 7:28pm UTC](https://linkerd.buoyant.io/t/linkerd-destination-has-stale-data-in-endpoint-cache/171 "2026-06-04T19:28:59Z")
We’re running linkerd 2.13.4 and we had a weird problem this morning. Around 15% of our traffic started dropping with failed to find transactions for account: rpc error: code = Unavailable desc = logical service transact… --- ## [Linkerd version 2025.3.1 and RKE2 k8s 1.34](https://linkerd.buoyant.io/t/linkerd-version-2025-3-1-and-rke2-k8s-1-34/852)
**Author:** [@hearysunny](https://linkerd.buoyant.io/u/hearysunny)\ **Replies:** 1\ **Last updated:** [April 24, 2026, 4:48pm UTC](https://linkerd.buoyant.io/t/linkerd-version-2025-3-1-and-rke2-k8s-1-34/852 "2026-04-24T16:48:18Z")
Hello, Have upgraded RKE2 from 1.33 to 1.34 after which linkerd control plane components (destination/identity/proxy-injector are not starting up plugin type=“linkerd-cni” name=“linkerd-cni” failed (add): exit status 1… --- ## [Linkerd compatibility with Kubernetes 1.35](https://linkerd.buoyant.io/t/linkerd-compatibility-with-kubernetes-1-35/851)
**Author:** [@Darren](https://linkerd.buoyant.io/u/Darren)\ **Replies:** 2\ **Last updated:** [April 9, 2026, 4:31pm UTC](https://linkerd.buoyant.io/t/linkerd-compatibility-with-kubernetes-1-35/851 "2026-04-09T16:31:02Z")
There is no information about Kubernetes 1.35 in the compatibility chart. The chart shows the highest support version of Linkerd is 2.19 which is compatible with Kubernetes 1.34. Is there any information as to when we wi… --- ## [Regression in Buoyant Linkerd 2.19.5](https://linkerd.buoyant.io/t/regression-in-buoyant-linkerd-2-19-5/850)
**Author:** [@Jan](https://linkerd.buoyant.io/u/Jan)\ **Replies:** 1\ **Last updated:** [April 2, 2026, 4:35pm UTC](https://linkerd.buoyant.io/t/regression-in-buoyant-linkerd-2-19-5/850 "2026-04-02T16:35:16Z")
We recently upgraded from version 2.19.4 to 2.19.5. On the surface it seemed to work fine. But we now get reports about issues with ExternalName services. We have a couple of ExternalName services that map to another se… --- ## [Ingress nginx retirement](https://linkerd.buoyant.io/t/ingress-nginx-retirement/849)
**Author:** [@rich](https://linkerd.buoyant.io/u/rich)\ **Replies:** 2\ **Last updated:** [March 10, 2026, 6:43am UTC](https://linkerd.buoyant.io/t/ingress-nginx-retirement/849 "2026-03-10T06:43:55Z")
Hi, Currently exploring options to replace ingress nginx and at the same time k8s ingress kind with gateway api. This requirement may be achieved using a cloud vendor solution like aws load balancer controller and appli… --- ## [Outbound calls failure](https://linkerd.buoyant.io/t/outbound-calls-failure/845)
**Author:** [@Darshan](https://linkerd.buoyant.io/u/Darshan)\ **Replies:** 2\ **Last updated:** [February 28, 2026, 7:25pm UTC](https://linkerd.buoyant.io/t/outbound-calls-failure/845 "2026-02-28T19:25:16Z")
Hi team, Recently we’ve started facing issue with outbound calls for many pods when trying to connect with services within same cluster. Proxy was OOM killed and we fixed it, we restarted Linkerd control plane components… --- ## [Adding support for HTTP Local Concurrency Limit Policy similar to HTTP Local Rate Limit Policy](https://linkerd.buoyant.io/t/adding-support-for-http-local-concurrency-limit-policy-similar-to-http-local-rate-limit-policy/846)
**Author:** [@himanshu.garg.zepto](https://linkerd.buoyant.io/u/himanshu.garg.zepto)\ **Replies:** 0\ **Last updated:** [February 26, 2026, 7:25am UTC](https://linkerd.buoyant.io/t/adding-support-for-http-local-concurrency-limit-policy-similar-to-http-local-rate-limit-policy/846 "2026-02-26T07:25:24Z")
I need help with adding support for HTTPLocalConcurrencyLimitPolicy similar to HTTPLocalRateLimitPolicy Essentially, a policy to limit number of concurrent requests to the service container to protect it from overload N… --- ## [Envoy httproute conflict with linkerd URLRewrite filter is not supported](https://linkerd.buoyant.io/t/envoy-httproute-conflict-with-linkerd-urlrewrite-filter-is-not-supported/841)
**Author:** [@idanml](https://linkerd.buoyant.io/u/idanml)\ **Replies:** 4\ **Last updated:** [February 19, 2026, 5:37pm UTC](https://linkerd.buoyant.io/t/envoy-httproute-conflict-with-linkerd-urlrewrite-filter-is-not-supported/841 "2026-02-19T17:37:40Z")
In k8s cluster I have linkerd and envoy installed one of my httproute that serve the envoy (parentref exist) has also URLRewrite filter (supported bt envoy) my linkerd destination logs crazy amount of logs “URLRewrite … --- ## [How to change a value with Linkerd CLI?](https://linkerd.buoyant.io/t/how-to-change-a-value-with-linkerd-cli/810)
**Author:** [@MewanthaB](https://linkerd.buoyant.io/u/MewanthaB)\ **Replies:** 1\ **Last updated:** [February 8, 2026, 2:23pm UTC](https://linkerd.buoyant.io/t/how-to-change-a-value-with-linkerd-cli/810 "2026-02-08T14:23:19Z")
According to the Linkerd doc: Authority Label For metrics with the direction=inbound label value, the authority label is omitted. This is done as a security measure to prevent malicious clients from being able to cause… --- ## [Does Linkerd support slow start load balancing?](https://linkerd.buoyant.io/t/does-linkerd-support-slow-start-load-balancing/805)
**Author:** [@aidenlim](https://linkerd.buoyant.io/u/aidenlim)\ **Replies:** 1\ **Last updated:** [February 4, 2026, 11:26pm UTC](https://linkerd.buoyant.io/t/does-linkerd-support-slow-start-load-balancing/805 "2026-02-04T23:26:17Z")
Hello I’m evaluating load balancing behavior in service meshes and came across Envoy’s slow start mode, which progressively ramps up traffic to newly added endpoints. This is particularly useful for cases like Kubernete… --- ## [LinkerD seems to swallow certain requests, left hanging on frontend + tap](https://linkerd.buoyant.io/t/linkerd-seems-to-swallow-certain-requests-left-hanging-on-frontend-tap/833)
**Author:** [@KrisM4c](https://linkerd.buoyant.io/u/KrisM4c)\ **Replies:** 6\ **Last updated:** [January 12, 2026, 1:45pm UTC](https://linkerd.buoyant.io/t/linkerd-seems-to-swallow-certain-requests-left-hanging-on-frontend-tap/833 "2026-01-12T13:45:10Z")
Hey all, I’m also x-posting this from the LinkerD Slack: got a bit of a strange issue occurring that looks like Linkerd is swallowing some requests, and not actually erroring out the call so we just sit hanging and the… --- ## [linkerd-Identity-Issuer not refreshing certificates as expected](https://linkerd.buoyant.io/t/linkerd-identity-issuer-not-refreshing-certificates-as-expected/811)
**Author:** [@Shubham](https://linkerd.buoyant.io/u/Shubham)\ **Replies:** 5\ **Last updated:** [January 8, 2026, 4:13pm UTC](https://linkerd.buoyant.io/t/linkerd-identity-issuer-not-refreshing-certificates-as-expected/811 "2026-01-08T16:13:46Z")
Recently we’ve started facing issue with outbound calls for some pods when trying to connect with services within same cluster. Can see following logs in proxy \[9515905.481616s\] WARN ThreadId(01) outbound:proxy{addr=1… --- ## [Linkerd and k8s service session affinity](https://linkerd.buoyant.io/t/linkerd-and-k8s-service-session-affinity/836)
**Author:** [@chri4774](https://linkerd.buoyant.io/u/chri4774)\ **Replies:** 0\ **Last updated:** [December 17, 2025, 3:34pm UTC](https://linkerd.buoyant.io/t/linkerd-and-k8s-service-session-affinity/836 "2025-12-17T15:34:57Z")
Hello, Some of our applications rely on service session affinity when communicating with other applications in the cluster. (See Virtual IPs and Service Proxies | Kubernetes ) As I understand it, when the Linkerd proxy… --- ## [Linkerd-Viz Tap FailedDiscoveryCheck while Running on EKS](https://linkerd.buoyant.io/t/linkerd-viz-tap-faileddiscoverycheck-while-running-on-eks/252)
**Author:** [@yourbromike](https://linkerd.buoyant.io/u/yourbromike)\ **Replies:** 3\ **Last updated:** [December 8, 2025, 3:21pm UTC](https://linkerd.buoyant.io/t/linkerd-viz-tap-faileddiscoverycheck-while-running-on-eks/252 "2025-12-08T15:21:36Z")
I wanted to post some information here in case someone runs into this issue with Linkerd in the future and are running on EKS. Specifically those running the Terraform EKS Module. ‼ tap API service is running Failed… --- ## [Linkerd-enterprise-windows-cni helm chart does not support tolerations](https://linkerd.buoyant.io/t/linkerd-enterprise-windows-cni-helm-chart-does-not-support-tolerations/827)
**Author:** [@Jan](https://linkerd.buoyant.io/u/Jan)\ **Replies:** 10\ **Last updated:** [November 25, 2025, 7:50am UTC](https://linkerd.buoyant.io/t/linkerd-enterprise-windows-cni-helm-chart-does-not-support-tolerations/827 "2025-11-25T07:50:21Z")
The linkerd-enterprise-windows-cni helm chart does not support tolerations. The normal use-case as I see it is to install this on the Windows nodes in a k8s cluster that has both Linux and Windows nodes. The normal patte… --- ## [How to forward the client IP for whitelisting policies instead of the Linkerd sidecar IP in NGINX Ingress Controller (v4.12+)?](https://linkerd.buoyant.io/t/how-to-forward-the-client-ip-for-whitelisting-policies-instead-of-the-linkerd-sidecar-ip-in-nginx-ingress-controller-v4-12/698)
**Author:** [@TheusesKristus](https://linkerd.buoyant.io/u/TheusesKristus)\ **Replies:** 3\ **Last updated:** [November 20, 2025, 4:27pm UTC](https://linkerd.buoyant.io/t/how-to-forward-the-client-ip-for-whitelisting-policies-instead-of-the-linkerd-sidecar-ip-in-nginx-ingress-controller-v4-12/698 "2025-11-20T16:27:34Z")
Question: I’m using the NGINX Ingress Controller with Linkerd as a service mesh. I need to enforce IP whitelisting policies based on the client’s IP address, but the NGINX Ingress Controller is currently using the Linke… --- ## [Can external devices like F5 BIG-IP use MTLs certificates to talk to mTLS meshed pods?](https://linkerd.buoyant.io/t/can-external-devices-like-f5-big-ip-use-mtls-certificates-to-talk-to-mtls-meshed-pods/826)
**Author:** [@Nikolayy1](https://linkerd.buoyant.io/u/Nikolayy1)\ **Replies:** 3\ **Last updated:** [November 20, 2025, 3:40pm UTC](https://linkerd.buoyant.io/t/can-external-devices-like-f5-big-ip-use-mtls-certificates-to-talk-to-mtls-meshed-pods/826 "2025-11-20T15:40:18Z")
Hello Everyone, My question is Can external devices like F5 BIG-IP use MTLs certificates to talk to mTLS meshed pods? The idea is that F5 BIG-IP uses CIS F5Networks/k8s-bigip-ctlr: Repository for F5 Container Ingress S… --- ## [Best practices for avoiding excessive TLS encryption/decryption?](https://linkerd.buoyant.io/t/best-practices-for-avoiding-excessive-tls-encryption-decryption/291)
**Author:** [@marc](https://linkerd.buoyant.io/u/marc)\ **Replies:** 3\ **Last updated:** [November 20, 2025, 3:31pm UTC](https://linkerd.buoyant.io/t/best-practices-for-avoiding-excessive-tls-encryption-decryption/291 "2025-11-20T15:31:16Z")
I’m wondering how we can avoid excessive TLS encryption/decryption, specifically in the following cases: Can an external client connect via https directly to the linkerd-proxy (bypassing Nginx-ingress TLS termination a… --- ## [NGINX sticky session not working with Linkerd](https://linkerd.buoyant.io/t/nginx-sticky-session-not-working-with-linkerd/321)
**Author:** [@arielzadino](https://linkerd.buoyant.io/u/arielzadino)\ **Replies:** 11\ **Last updated:** [November 20, 2025, 3:26pm UTC](https://linkerd.buoyant.io/t/nginx-sticky-session-not-working-with-linkerd/321 "2025-11-20T15:26:55Z")
I installed Linkerd in a fresh GKE cluster using the following Helm Chart: “linkerd-control-plane:1.15.0” Everything works as expected apart to “session affinity” with nginx which used to work for me before starting usi… --- ## [Linkerd does not start when using Cert Manager and Trust manager to rotate the MTLS certs](https://linkerd.buoyant.io/t/linkerd-does-not-start-when-using-cert-manager-and-trust-manager-to-rotate-the-mtls-certs/825)
**Author:** [@Nikolayy1](https://linkerd.buoyant.io/u/Nikolayy1)\ **Replies:** 0\ **Last updated:** [November 14, 2025, 9:38am UTC](https://linkerd.buoyant.io/t/linkerd-does-not-start-when-using-cert-manager-and-trust-manager-to-rotate-the-mtls-certs/825 "2025-11-14T09:38:22Z")
Followed article Automatically Rotating Control Plane TLS Credentials | Linkerd but linkerd did not start because of config error. kubectl get pods -A -o wide linkerd linkerd-destination-768cc5bd8c-dxhs5 … --- ## [Linkerd support for Postgresql database connectivity](https://linkerd.buoyant.io/t/linkerd-support-for-postgresql-database-connectivity/824)
**Author:** [@Anindya227](https://linkerd.buoyant.io/u/Anindya227)\ **Replies:** 1\ **Last updated:** [November 6, 2025, 2:14pm UTC](https://linkerd.buoyant.io/t/linkerd-support-for-postgresql-database-connectivity/824 "2025-11-06T14:14:50Z")
Hi, I would like to know if linkerd supports connectivity to postgresql database. I will be using crunchy postgres operator to create pg-clusters(db services). And i want to connect to the db via psql client. I would… --- ## [Error when testing Windows proxy](https://linkerd.buoyant.io/t/error-when-testing-windows-proxy/823)
**Author:** [@Jan](https://linkerd.buoyant.io/u/Jan)\ **Replies:** 4\ **Last updated:** [November 5, 2025, 7:09am UTC](https://linkerd.buoyant.io/t/error-when-testing-windows-proxy/823 "2025-11-05T07:09:36Z")
Hi, We have upgraded one cluster to enterprise-2.19. The cluster in an AKS cluster. I tested to add the annotations to some Windows pods. But the init container fails with an error. annotations: linkerd.i… --- ## [Custom headers being stripped before reaching application - is this expected?](https://linkerd.buoyant.io/t/custom-headers-being-stripped-before-reaching-application-is-this-expected/821)
**Author:** [@JonathanGill](https://linkerd.buoyant.io/u/JonathanGill)\ **Replies:** 3\ **Last updated:** [November 3, 2025, 9:23am UTC](https://linkerd.buoyant.io/t/custom-headers-being-stripped-before-reaching-application-is-this-expected/821 "2025-11-03T09:23:02Z")
I’ve been debugging why custom HTTP headers aren’t reaching our application in a Linkerd-injected environment, and I’ve narrowed it down to the proxy layer. I’m wondering if this is expected behavior or if there’s a conf… --- ## [Linkerd upgrade from 2.14.10 to edge-25.8.1](https://linkerd.buoyant.io/t/linkerd-upgrade-from-2-14-10-to-edge-25-8-1/818)
**Author:** [@Tangrisnir](https://linkerd.buoyant.io/u/Tangrisnir)\ **Replies:** 0\ **Last updated:** [October 27, 2025, 9:48am UTC](https://linkerd.buoyant.io/t/linkerd-upgrade-from-2-14-10-to-edge-25-8-1/818 "2025-10-27T09:48:22Z")
Hi all, We are in a multicloud setup currently using Linkerd 2.14.10. We are now looking into upgrading, and for various reasons the desired version is edge-25.8.1 (licensing for one part). The documentation states: i… --- ## [Support Round Robin Algorithim](https://linkerd.buoyant.io/t/support-round-robin-algorithim/817)
**Author:** [@Srijan](https://linkerd.buoyant.io/u/Srijan)\ **Replies:** 0\ **Last updated:** [October 24, 2025, 9:05am UTC](https://linkerd.buoyant.io/t/support-round-robin-algorithim/817 "2025-10-24T09:05:40Z")
Hey team, I want to know how I can configure Linkerd to use Round Robin Algorithm. Due to EWMA algorithm there is an uneven traffic distribution happening among the pods ..leading to high resource utilisation etc. I… [Next page](https://linkerd.buoyant.io/latest.md?page=1)