Feature Status

This page lists the relative maturity and support level of every Istio feature. Please note that the phases (Alpha, Beta, and Stable) are applied to individual features within the project, not to the project as a whole. Here is a high level description of what these labels mean.

Feature phase definitions

Alpha Beta Stable
Purpose Demo-able, works end-to-end but has limitations. If you use it in production and encounter a serious issue we may not be able to fix it for you, so be sure that you can continue to function if you have to disable it Usable in production, not a toy anymore Dependable, production hardened
API No guarantees on backward compatibility APIs are versioned Dependable, production-worthy. APIs are versioned, with automated version conversion for backward compatibility
Performance Not quantified or guaranteed Not quantified or guaranteed Performance (latency/scale) is quantified, documented, with guarantees against regression
Deprecation Policy None Weak - 3 months Dependable, Firm. 1 year notice will be provided before changes
Security Security vulnerabilities will be handled publicly as simple bug fixes Security vulnerabilities will be handled according to our security vulnerability policy Security vulnerabilities will be handled according to our security vulnerability policy

Istio features

Below is our list of existing features and their current phases. This information will be updated after every monthly release.

Traffic management

Feature Phase
Protocols: HTTP1.1 / HTTP2 / gRPC / TCP Stable
Protocols: Websockets / MongoDB Stable
Traffic Control: label/content based routing, traffic shifting Stable
Resilience features: timeouts, retries, connection pools, outlier detection Stable
Gateway: Ingress, Egress for all protocols Stable
TLS termination and SNI Support in Gateways Stable
SNI (multiple certs) at ingress Stable
Locality load balancing Beta
Enabling custom filters in Envoy Alpha
CNI container interface Alpha
Sidecar API Beta


Feature Phase
Prometheus Integration Stable
Local Logging (STDIO) Stable
Statsd Integration Stable
Client and Server Telemetry Reporting Stable
Service Dashboard in Grafana Stable
Istio Component Dashboard in Grafana Stable
Distributed Tracing Stable
Stackdriver Integration Beta
Distributed Tracing to Zipkin / Jaeger Beta
Logging with Fluentd Beta
Trace Sampling Beta

Security and policy enforcement

Feature Phase
Service-to-service mutual TLS Stable
Kubernetes: Service Credential Distribution Stable
Certificate management on Ingress Gateway Stable
Pluggable Key/Cert Support for Istio CA Stable
Authorization Beta
End User (JWT) Authentication Beta
Automatic mutual TLS Beta
VM: Service Credential Distribution Beta
Mutual TLS Migration Beta
Deny Checker Deprecated
List Checker Deprecated
OPA Checker Deprecated


Feature Phase
Standalone Operator Beta
Kubernetes: Envoy Installation and Traffic Interception Stable
Kubernetes: Istio Control Plane Installation Stable
Attribute Expression Language Stable
Mixer Out-of-Process Adapter Authoring Model Beta
Multicluster Mesh over VPN Alpha
Kubernetes: Istio Control Plane Upgrade Beta
Consul Integration Alpha
Basic Configuration Resource Validation Beta
Configuration Processing with Galley Beta
Mixer Self Monitoring Beta
Custom Mixer Build Model deprecated
Out of Process Mixer Adapters (gRPC Adapters) Beta
Istio CNI plugin Alpha
IPv6 support for Kubernetes Alpha. Dual-stack IPv4 and IPv6 is not supported.
Distroless base images for Istio Alpha
Virtual Machine Integration Alpha
Was this information useful?
Do you have any suggestions for improvement?

Thanks for your feedback!