proxy: v2.129.0

[olix0r]

This release improves diagnostics about the proxy's failfast state:

• Warnings are now emitted when the failfast state is entered;
• The "max concurrency exhausted" gRPC message has been changed to
  more-clearly indicate a failfast state error; and
• Failfast recovery has been made more robust, ensuring that a service
  can recover indepenently of new requests being received.

Furthermore, metric labeling has been improved:

• TCP server metrics are now annotated with the original target_addr;
• The tls label is now set to true for inbound TLS connections that
  lack a client ID. This is mostly helpful to clarify inbound metrics on
  the identity controller;
• Outbound tls metrics could be reported incorrectly when a proxy was
  configured to not use identity. This has been corrected.

Finally, socket-level errors now include a client or server prefix
to indicate which side of the proxy encountered the error.

---

• stack: remove map_response (stack: remove map_response linkerd2-proxy#835)
• replace RequestFilter with Tower's upstream impl (replace RequestFilter with Tower's upstream impl linkerd2-proxy#842)
• tracing: fix incorrect field format when logging in JSON (tracing: fix incorrect field format when logging in JSON linkerd2-proxy#845)
• replace FutureService with Tower's upstream impl (replace FutureService with Tower's upstream impl linkerd2-proxy#839)
• integration: improve tracing in tests (integration: improve tracing in tests linkerd2-proxy#846)
• service-profiles: Prevent Duration coercion panics (service-profiles: Prevent Duration coercion panics linkerd2-proxy#844)
• inbound: Separate HTTP server logic from protocol detection (inbound: Separate HTTP server logic from protocol detection linkerd2-proxy#843)
• Correct gRPC 'max-concurrency exhausted' error messages (Correct gRPC 'max-concurrency exhausted' error messages linkerd2-proxy#847)
• Update tonic to v0.4 (Update tonic to v0.4 linkerd2-proxy#849)
• failfast: Improve diagnostic logging (failfast: Improve diagnostic logging linkerd2-proxy#848)
• Update the base docker image (Update the base docker image linkerd2-proxy#850)
• stack: Implement Clone for ResultService (stack: Implement Clone for ResultService linkerd2-proxy#851)
• Ensure services in failfast can become ready (Ensure services in failfast can become ready linkerd2-proxy#858)
• tests: replace string matching on metrics with parsing (tests: replace string matching on metrics with parsing linkerd2-proxy#859)
• Decouple tls::accept from TcpStream (Decouple tls::accept from TcpStream linkerd2-proxy#853)
• metrics: Handle NoPeerIdFromRemote properly (metrics: Handle NoPeerIdFromRemote properly linkerd2-proxy#857)
• metrics: Reorder metrics labels (metrics: Reorder metrics labels linkerd2-proxy#856)
• Rename tls::accept to tls::server (Rename tls::accept to tls::server linkerd2-proxy#854)
• Annotate socket-level errors with a scope (Annotate socket-level errors with a scope linkerd2-proxy#852)
• test: reduce repetition in metrics tests (test: reduce repetition in metrics tests linkerd2-proxy#860)
• tls: Disambiguate client and server identities (tls: Disambiguate client and server identities linkerd2-proxy#855)
• Update to tower v0.4.4 (Update to tower v0.4.4 linkerd2-proxy#864)
• Update cargo dependencies (Update cargo dependencies linkerd2-proxy#865)
• metrics: add target_addr label for accepted transport metrics (metrics: add target_addr label for accepted transport metrics linkerd2-proxy#861)
• outbound: Strip endpoint identity when disabled (outbound: Strip endpoint identity when disabled linkerd2-proxy#862)

---

The opaque-ports test has been updated to reflect proxy metrics changes.

[Pothulapati]

LGTM