content/en/news/releases/1.0.x/announcing-1.0.3/index.md
We're pleased to announce the availability of Istio 1.0.3. Please see below for what's changed.
{{< relnote >}}
Validating webhook is now mandatory. Disabling it may result in Pilot crashes.
Service entry validation now rejects the wildcard hostname (*) when configuring DNS resolution. The API has never allowed this, however ServiceEntry was erroneously excluded from validation in the previous release. Use of wildcards as part of a hostname, e.g. *.bar.com, remains unchanged.
The core dump path for istio-proxy has changed to /var/lib/istio.
Mutual TLS Permissive mode is enabled by default.
Pilot performance and scalability has been greatly enhanced. Pilot now delivers endpoint updates to 500 sidecars in under 1 second.
Default trace sampling is set to 1%.
Mixer (istio-telemetry) now supports load shedding based on request rate and expected latency.
Mixer client (istio-policy) now supports FAIL_OPEN setting.
Istio Performance dashboard added to Grafana.
Reduced istio-telemetry CPU usage by 10%.
Eliminated statsd-to-prometheus deployment. Prometheus now directly scrapes from istio-proxy.