ode>iptables</code> setup to use <code>iptables-restore</code> by default <a href=https://github.com/istio/istio/pull/18847>#18847</a>.</li><li><strong>Improved</strong> Gateway performance by filtering unused clusters. This setting is disabled by default <a href=https://github.com/istio/istio/pull/20124>#20124</a>.</li></ul><h2 id=security>Security</h2><ul><li><strong>Graduated</strong> SDS to stable and enabled by default. It provides identity provisioning for Istio Envoy proxies.</li><li><strong>Added</s