diff --git a/analysis/v1alpha1/message.pb.html b/analysis/v1alpha1/message.pb.html
index bd53f75ea1..2c14e38e39 100644
--- a/analysis/v1alpha1/message.pb.html
+++ b/analysis/v1alpha1/message.pb.html
@@ -25,7 +25,7 @@ <h2 id="AnalysisMessageBase">AnalysisMessageBase</h2>
 </thead>
 <tbody>
 <tr id="AnalysisMessageBase-type">
-<td><code>type</code></td>
+<td><code><a href="#AnalysisMessageBase-type">type</a></code></td>
 <td><code><a href="#AnalysisMessageBase-Type">Type</a></code></td>
 <td>
 </td>
@@ -34,7 +34,7 @@ <h2 id="AnalysisMessageBase">AnalysisMessageBase</h2>
 </td>
 </tr>
 <tr id="AnalysisMessageBase-level">
-<td><code>level</code></td>
+<td><code><a href="#AnalysisMessageBase-level">level</a></code></td>
 <td><code><a href="#AnalysisMessageBase-Level">Level</a></code></td>
 <td>
 <p>Represents how severe a message is. Required.</p>
@@ -45,7 +45,7 @@ <h2 id="AnalysisMessageBase">AnalysisMessageBase</h2>
 </td>
 </tr>
 <tr id="AnalysisMessageBase-documentation_url">
-<td><code>documentationUrl</code></td>
+<td><code><a href="#AnalysisMessageBase-documentation_url">documentationUrl</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>A url pointing to the Istio documentation for this specific error type.
@@ -79,7 +79,7 @@ <h2 id="AnalysisMessageWeakSchema">AnalysisMessageWeakSchema</h2>
 </thead>
 <tbody>
 <tr id="AnalysisMessageWeakSchema-message_base">
-<td><code>messageBase</code></td>
+<td><code><a href="#AnalysisMessageWeakSchema-message_base">messageBase</a></code></td>
 <td><code><a href="#AnalysisMessageBase">AnalysisMessageBase</a></code></td>
 <td>
 <p>Required</p>
@@ -90,7 +90,7 @@ <h2 id="AnalysisMessageWeakSchema">AnalysisMessageWeakSchema</h2>
 </td>
 </tr>
 <tr id="AnalysisMessageWeakSchema-description">
-<td><code>description</code></td>
+<td><code><a href="#AnalysisMessageWeakSchema-description">description</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>A human readable description of what the error means. Required.</p>
@@ -101,7 +101,7 @@ <h2 id="AnalysisMessageWeakSchema">AnalysisMessageWeakSchema</h2>
 </td>
 </tr>
 <tr id="AnalysisMessageWeakSchema-template">
-<td><code>template</code></td>
+<td><code><a href="#AnalysisMessageWeakSchema-template">template</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>A go-style template string (<a href="https://golang.org/pkg/fmt/#hdr-Printing">https://golang.org/pkg/fmt/#hdr-Printing</a>)
@@ -114,7 +114,7 @@ <h2 id="AnalysisMessageWeakSchema">AnalysisMessageWeakSchema</h2>
 </td>
 </tr>
 <tr id="AnalysisMessageWeakSchema-args">
-<td><code>args</code></td>
+<td><code><a href="#AnalysisMessageWeakSchema-args">args</a></code></td>
 <td><code><a href="#AnalysisMessageWeakSchema-ArgType">ArgType[]</a></code></td>
 <td>
 <p>A description of the arguments for a particular message type</p>
@@ -147,7 +147,7 @@ <h2 id="GenericAnalysisMessage">GenericAnalysisMessage</h2>
 </thead>
 <tbody>
 <tr id="GenericAnalysisMessage-message_base">
-<td><code>messageBase</code></td>
+<td><code><a href="#GenericAnalysisMessage-message_base">messageBase</a></code></td>
 <td><code><a href="#AnalysisMessageBase">AnalysisMessageBase</a></code></td>
 <td>
 <p>Required</p>
@@ -158,7 +158,7 @@ <h2 id="GenericAnalysisMessage">GenericAnalysisMessage</h2>
 </td>
 </tr>
 <tr id="GenericAnalysisMessage-args">
-<td><code>args</code></td>
+<td><code><a href="#GenericAnalysisMessage-args">args</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#struct">Struct</a></code></td>
 <td>
 <p>Any message-type specific arguments that need to get codified. Optional.</p>
@@ -169,7 +169,7 @@ <h2 id="GenericAnalysisMessage">GenericAnalysisMessage</h2>
 </td>
 </tr>
 <tr id="GenericAnalysisMessage-resource_paths">
-<td><code>resourcePaths</code></td>
+<td><code><a href="#GenericAnalysisMessage-resource_paths">resourcePaths</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>A list of strings specifying the resource identifiers that were the cause
@@ -203,7 +203,7 @@ <h2 id="InternalErrorAnalysisMessage">InternalErrorAnalysisMessage</h2>
 </thead>
 <tbody>
 <tr id="InternalErrorAnalysisMessage-message_base">
-<td><code>messageBase</code></td>
+<td><code><a href="#InternalErrorAnalysisMessage-message_base">messageBase</a></code></td>
 <td><code><a href="#AnalysisMessageBase">AnalysisMessageBase</a></code></td>
 <td>
 <p>Required</p>
@@ -214,7 +214,7 @@ <h2 id="InternalErrorAnalysisMessage">InternalErrorAnalysisMessage</h2>
 </td>
 </tr>
 <tr id="InternalErrorAnalysisMessage-detail">
-<td><code>detail</code></td>
+<td><code><a href="#InternalErrorAnalysisMessage-detail">detail</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Any detail regarding specifics of the error. Should be human-readable.</p>
@@ -245,7 +245,7 @@ <h2 id="AnalysisMessageBase-Type">AnalysisMessageBase.Type</h2>
 </thead>
 <tbody>
 <tr id="AnalysisMessageBase-Type-name">
-<td><code>name</code></td>
+<td><code><a href="#AnalysisMessageBase-Type-name">name</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>A human-readable name for the message type. e.g. &ldquo;InternalError&rdquo;,
@@ -258,7 +258,7 @@ <h2 id="AnalysisMessageBase-Type">AnalysisMessageBase.Type</h2>
 </td>
 </tr>
 <tr id="AnalysisMessageBase-Type-code">
-<td><code>code</code></td>
+<td><code><a href="#AnalysisMessageBase-Type-code">code</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>A 7 character code matching <code>^IST[0-9]{4}$</code> intended to uniquely identify
@@ -286,7 +286,7 @@ <h2 id="AnalysisMessageWeakSchema-ArgType">AnalysisMessageWeakSchema.ArgType</h2
 </thead>
 <tbody>
 <tr id="AnalysisMessageWeakSchema-ArgType-name">
-<td><code>name</code></td>
+<td><code><a href="#AnalysisMessageWeakSchema-ArgType-name">name</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Required</p>
@@ -297,7 +297,7 @@ <h2 id="AnalysisMessageWeakSchema-ArgType">AnalysisMessageWeakSchema.ArgType</h2
 </td>
 </tr>
 <tr id="AnalysisMessageWeakSchema-ArgType-go_type">
-<td><code>goType</code></td>
+<td><code><a href="#AnalysisMessageWeakSchema-ArgType-go_type">goType</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Required. Should be a golang type, used in code generation.
@@ -327,24 +327,24 @@ <h2 id="AnalysisMessageBase-Level">AnalysisMessageBase.Level</h2>
 </thead>
 <tbody>
 <tr id="AnalysisMessageBase-Level-UNKNOWN">
-<td><code>UNKNOWN</code></td>
+<td><code><a href="#AnalysisMessageBase-Level-UNKNOWN">UNKNOWN</a></code></td>
 <td>
 <p>invalid, but included for proto compatibility for 0 values</p>
 
 </td>
 </tr>
 <tr id="AnalysisMessageBase-Level-ERROR">
-<td><code>ERROR</code></td>
+<td><code><a href="#AnalysisMessageBase-Level-ERROR">ERROR</a></code></td>
 <td>
 </td>
 </tr>
 <tr id="AnalysisMessageBase-Level-WARNING">
-<td><code>WARNING</code></td>
+<td><code><a href="#AnalysisMessageBase-Level-WARNING">WARNING</a></code></td>
 <td>
 </td>
 </tr>
 <tr id="AnalysisMessageBase-Level-INFO">
-<td><code>INFO</code></td>
+<td><code><a href="#AnalysisMessageBase-Level-INFO">INFO</a></code></td>
 <td>
 </td>
 </tr>
diff --git a/extensions/v1alpha1/wasm.pb.html b/extensions/v1alpha1/wasm.pb.html
index da9d554ea2..785281bf06 100644
--- a/extensions/v1alpha1/wasm.pb.html
+++ b/extensions/v1alpha1/wasm.pb.html
@@ -183,7 +183,7 @@ <h2 id="WasmPlugin">WasmPlugin</h2>
 </thead>
 <tbody>
 <tr id="WasmPlugin-selector">
-<td><code>selector</code></td>
+<td><code><a href="#WasmPlugin-selector">selector</a></code></td>
 <td><code><a href="https://istio.io/docs/reference/config/type/workload-selector.html#WorkloadSelector">WorkloadSelector</a></code></td>
 <td>
 <p>Criteria used to select the specific set of pods/VMs on which
@@ -200,7 +200,7 @@ <h2 id="WasmPlugin">WasmPlugin</h2>
 </td>
 </tr>
 <tr id="WasmPlugin-targetRefs">
-<td><code>targetRefs</code></td>
+<td><code><a href="#WasmPlugin-targetRefs">targetRefs</a></code></td>
 <td><code><a href="https://istio.io/docs/reference/config/type/workload-selector.html#PolicyTargetReference">PolicyTargetReference[]</a></code></td>
 <td>
 <p>Optional. The targetRefs specifies a list of resources the policy should be
@@ -225,7 +225,7 @@ <h2 id="WasmPlugin">WasmPlugin</h2>
 </td>
 </tr>
 <tr id="WasmPlugin-url">
-<td><code>url</code></td>
+<td><code><a href="#WasmPlugin-url">url</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>URL of a Wasm module or OCI container. If no scheme is present,
@@ -240,7 +240,7 @@ <h2 id="WasmPlugin">WasmPlugin</h2>
 </td>
 </tr>
 <tr id="WasmPlugin-sha256">
-<td><code>sha256</code></td>
+<td><code><a href="#WasmPlugin-sha256">sha256</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>SHA256 checksum that will be used to verify Wasm module or OCI container.
@@ -255,7 +255,7 @@ <h2 id="WasmPlugin">WasmPlugin</h2>
 </td>
 </tr>
 <tr id="WasmPlugin-image_pull_policy">
-<td><code>imagePullPolicy</code></td>
+<td><code><a href="#WasmPlugin-image_pull_policy">imagePullPolicy</a></code></td>
 <td><code><a href="#PullPolicy">PullPolicy</a></code></td>
 <td>
 <p>The pull behaviour to be applied when fetching Wasm module by either
@@ -271,7 +271,7 @@ <h2 id="WasmPlugin">WasmPlugin</h2>
 </td>
 </tr>
 <tr id="WasmPlugin-image_pull_secret">
-<td><code>imagePullSecret</code></td>
+<td><code><a href="#WasmPlugin-image_pull_secret">imagePullSecret</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Credentials to use for OCI image pulling.
@@ -285,7 +285,7 @@ <h2 id="WasmPlugin">WasmPlugin</h2>
 </td>
 </tr>
 <tr id="WasmPlugin-plugin_config">
-<td><code>pluginConfig</code></td>
+<td><code><a href="#WasmPlugin-plugin_config">pluginConfig</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#struct">Struct</a></code></td>
 <td>
 <p>The configuration that will be passed on to the plugin.</p>
@@ -296,7 +296,7 @@ <h2 id="WasmPlugin">WasmPlugin</h2>
 </td>
 </tr>
 <tr id="WasmPlugin-plugin_name">
-<td><code>pluginName</code></td>
+<td><code><a href="#WasmPlugin-plugin_name">pluginName</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>The plugin name to be used in the Envoy configuration (used to be called
@@ -309,7 +309,7 @@ <h2 id="WasmPlugin">WasmPlugin</h2>
 </td>
 </tr>
 <tr id="WasmPlugin-phase">
-<td><code>phase</code></td>
+<td><code><a href="#WasmPlugin-phase">phase</a></code></td>
 <td><code><a href="#PluginPhase">PluginPhase</a></code></td>
 <td>
 <p>Determines where in the filter chain this <code>WasmPlugin</code> is to be injected.</p>
@@ -320,7 +320,7 @@ <h2 id="WasmPlugin">WasmPlugin</h2>
 </td>
 </tr>
 <tr id="WasmPlugin-priority">
-<td><code>priority</code></td>
+<td><code><a href="#WasmPlugin-priority">priority</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#int32value">Int32Value</a></code></td>
 <td>
 <p>Determines ordering of <code>WasmPlugins</code> in the same <code>phase</code>.
@@ -336,7 +336,7 @@ <h2 id="WasmPlugin">WasmPlugin</h2>
 </td>
 </tr>
 <tr id="WasmPlugin-fail_strategy">
-<td><code>failStrategy</code></td>
+<td><code><a href="#WasmPlugin-fail_strategy">failStrategy</a></code></td>
 <td><code><a href="#FailStrategy">FailStrategy</a></code></td>
 <td>
 <p>Specifies the failure behavior for the plugin due to fatal errors.</p>
@@ -347,7 +347,7 @@ <h2 id="WasmPlugin">WasmPlugin</h2>
 </td>
 </tr>
 <tr id="WasmPlugin-vm_config">
-<td><code>vmConfig</code></td>
+<td><code><a href="#WasmPlugin-vm_config">vmConfig</a></code></td>
 <td><code><a href="#VmConfig">VmConfig</a></code></td>
 <td>
 <p>Configuration for a Wasm VM.
@@ -359,7 +359,7 @@ <h2 id="WasmPlugin">WasmPlugin</h2>
 </td>
 </tr>
 <tr id="WasmPlugin-match">
-<td><code>match</code></td>
+<td><code><a href="#WasmPlugin-match">match</a></code></td>
 <td><code><a href="#WasmPlugin-TrafficSelector">TrafficSelector[]</a></code></td>
 <td>
 <p>Specifies the criteria to determine which traffic is passed to WasmPlugin.
@@ -372,7 +372,7 @@ <h2 id="WasmPlugin">WasmPlugin</h2>
 </td>
 </tr>
 <tr id="WasmPlugin-type">
-<td><code>type</code></td>
+<td><code><a href="#WasmPlugin-type">type</a></code></td>
 <td><code><a href="#PluginType">PluginType</a></code></td>
 <td>
 <p>Specifies the type of Wasm Extension to be used.</p>
@@ -401,7 +401,7 @@ <h2 id="VmConfig">VmConfig</h2>
 </thead>
 <tbody>
 <tr id="VmConfig-env">
-<td><code>env</code></td>
+<td><code><a href="#VmConfig-env">env</a></code></td>
 <td><code><a href="#EnvVar">EnvVar[]</a></code></td>
 <td>
 <p>Specifies environment variables to be injected to this VM.
@@ -429,7 +429,7 @@ <h2 id="EnvVar">EnvVar</h2>
 </thead>
 <tbody>
 <tr id="EnvVar-name">
-<td><code>name</code></td>
+<td><code><a href="#EnvVar-name">name</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Name of the environment variable.
@@ -441,7 +441,7 @@ <h2 id="EnvVar">EnvVar</h2>
 </td>
 </tr>
 <tr id="EnvVar-value_from">
-<td><code>valueFrom</code></td>
+<td><code><a href="#EnvVar-value_from">valueFrom</a></code></td>
 <td><code><a href="#EnvValueSource">EnvValueSource</a></code></td>
 <td>
 <p>Source for the environment variable&rsquo;s value.</p>
@@ -452,7 +452,7 @@ <h2 id="EnvVar">EnvVar</h2>
 </td>
 </tr>
 <tr id="EnvVar-value">
-<td><code>value</code></td>
+<td><code><a href="#EnvVar-value">value</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Value for the environment variable.
@@ -485,7 +485,7 @@ <h2 id="WasmPlugin-TrafficSelector">WasmPlugin.TrafficSelector</h2>
 </thead>
 <tbody>
 <tr id="WasmPlugin-TrafficSelector-mode">
-<td><code>mode</code></td>
+<td><code><a href="#WasmPlugin-TrafficSelector-mode">mode</a></code></td>
 <td><code><a href="https://istio.io/docs/reference/config/type/workload-selector.html#WorkloadMode">WorkloadMode</a></code></td>
 <td>
 <p>Criteria for selecting traffic by their direction.
@@ -500,7 +500,7 @@ <h2 id="WasmPlugin-TrafficSelector">WasmPlugin.TrafficSelector</h2>
 </td>
 </tr>
 <tr id="WasmPlugin-TrafficSelector-ports">
-<td><code>ports</code></td>
+<td><code><a href="#WasmPlugin-TrafficSelector-ports">ports</a></code></td>
 <td><code><a href="https://istio.io/docs/reference/config/type/workload-selector.html#PortSelector">PortSelector[]</a></code></td>
 <td>
 <p>Criteria for selecting traffic by their destination port.
@@ -545,21 +545,21 @@ <h2 id="PluginType">PluginType</h2>
 </thead>
 <tbody>
 <tr id="PluginType-UNSPECIFIED_PLUGIN_TYPE">
-<td><code>UNSPECIFIED_PLUGIN_TYPE</code></td>
+<td><code><a href="#PluginType-UNSPECIFIED_PLUGIN_TYPE">UNSPECIFIED_PLUGIN_TYPE</a></code></td>
 <td>
 <p>Defaults to HTTP.</p>
 
 </td>
 </tr>
 <tr id="PluginType-HTTP">
-<td><code>HTTP</code></td>
+<td><code><a href="#PluginType-HTTP">HTTP</a></code></td>
 <td>
 <p>Use HTTP Wasm Extension.</p>
 
 </td>
 </tr>
 <tr id="PluginType-NETWORK">
-<td><code>NETWORK</code></td>
+<td><code><a href="#PluginType-NETWORK">NETWORK</a></code></td>
 <td>
 <p>Use Network Wasm Extension.</p>
 
@@ -581,7 +581,7 @@ <h2 id="PluginPhase">PluginPhase</h2>
 </thead>
 <tbody>
 <tr id="PluginPhase-UNSPECIFIED_PHASE">
-<td><code>UNSPECIFIED_PHASE</code></td>
+<td><code><a href="#PluginPhase-UNSPECIFIED_PHASE">UNSPECIFIED_PHASE</a></code></td>
 <td>
 <p>Control plane decides where to insert the plugin. This will generally
 be at the end of the filter chain, right before the Router.
@@ -590,21 +590,21 @@ <h2 id="PluginPhase">PluginPhase</h2>
 </td>
 </tr>
 <tr id="PluginPhase-AUTHN">
-<td><code>AUTHN</code></td>
+<td><code><a href="#PluginPhase-AUTHN">AUTHN</a></code></td>
 <td>
 <p>Insert plugin before Istio authentication filters.</p>
 
 </td>
 </tr>
 <tr id="PluginPhase-AUTHZ">
-<td><code>AUTHZ</code></td>
+<td><code><a href="#PluginPhase-AUTHZ">AUTHZ</a></code></td>
 <td>
 <p>Insert plugin before Istio authorization filters and after Istio authentication filters.</p>
 
 </td>
 </tr>
 <tr id="PluginPhase-STATS">
-<td><code>STATS</code></td>
+<td><code><a href="#PluginPhase-STATS">STATS</a></code></td>
 <td>
 <p>Insert plugin before Istio stats filters and after Istio authorization filters.</p>
 
@@ -627,7 +627,7 @@ <h2 id="PullPolicy">PullPolicy</h2>
 </thead>
 <tbody>
 <tr id="PullPolicy-UNSPECIFIED_POLICY">
-<td><code>UNSPECIFIED_POLICY</code></td>
+<td><code><a href="#PullPolicy-UNSPECIFIED_POLICY">UNSPECIFIED_POLICY</a></code></td>
 <td>
 <p>Defaults to <code>IfNotPresent</code>, except for OCI images with tag <code>latest</code>, for which
 the default will be <code>Always</code>.</p>
@@ -635,7 +635,7 @@ <h2 id="PullPolicy">PullPolicy</h2>
 </td>
 </tr>
 <tr id="PullPolicy-IfNotPresent">
-<td><code>IfNotPresent</code></td>
+<td><code><a href="#PullPolicy-IfNotPresent">IfNotPresent</a></code></td>
 <td>
 <p>If an existing version of the image has been pulled before, that
 will be used. If no version of the image is present locally, we
@@ -644,7 +644,7 @@ <h2 id="PullPolicy">PullPolicy</h2>
 </td>
 </tr>
 <tr id="PullPolicy-Always">
-<td><code>Always</code></td>
+<td><code><a href="#PullPolicy-Always">Always</a></code></td>
 <td>
 <p>We will always pull the latest version of an image when changing
 this plugin. Note that the change includes <code>metadata</code> field as well.</p>
@@ -665,14 +665,14 @@ <h2 id="EnvValueSource">EnvValueSource</h2>
 </thead>
 <tbody>
 <tr id="EnvValueSource-INLINE">
-<td><code>INLINE</code></td>
+<td><code><a href="#EnvValueSource-INLINE">INLINE</a></code></td>
 <td>
 <p>Explicitly given key-value pairs to be injected to this VM</p>
 
 </td>
 </tr>
 <tr id="EnvValueSource-HOST">
-<td><code>HOST</code></td>
+<td><code><a href="#EnvValueSource-HOST">HOST</a></code></td>
 <td>
 <p><em>Istio-proxy&rsquo;s</em> environment variables exposed to this VM.</p>
 
@@ -692,7 +692,7 @@ <h2 id="FailStrategy">FailStrategy</h2>
 </thead>
 <tbody>
 <tr id="FailStrategy-FAIL_CLOSE">
-<td><code>FAIL_CLOSE</code></td>
+<td><code><a href="#FailStrategy-FAIL_CLOSE">FAIL_CLOSE</a></code></td>
 <td>
 <p>A fatal error in the binary fetching or during the plugin execution causes
 all subsequent requests to fail with 5xx.</p>
@@ -700,7 +700,7 @@ <h2 id="FailStrategy">FailStrategy</h2>
 </td>
 </tr>
 <tr id="FailStrategy-FAIL_OPEN">
-<td><code>FAIL_OPEN</code></td>
+<td><code><a href="#FailStrategy-FAIL_OPEN">FAIL_OPEN</a></code></td>
 <td>
 <p>Enables the fail open behavior for the Wasm plugin fatal errors to bypass
 the plugin execution. A fatal error can be a failure to fetch the remote
diff --git a/kubernetes/customresourcedefinitions.gen.yaml b/kubernetes/customresourcedefinitions.gen.yaml
index 63389bc3ce..26044e2deb 100644
--- a/kubernetes/customresourcedefinitions.gen.yaml
+++ b/kubernetes/customresourcedefinitions.gen.yaml
@@ -7341,6 +7341,11 @@ spec:
                     description: The image type of the image.
                     type: string
                 type: object
+              preserveCase:
+                description: When true, the original case of HTTP/1.x headers will
+                  be preserved as they pass through the proxy, rather than normalizing
+                  them to lowercase.
+                type: boolean
               selector:
                 description: Optional.
                 properties:
diff --git a/mesh/v1alpha1/istio.mesh.v1alpha1.pb.html b/mesh/v1alpha1/istio.mesh.v1alpha1.pb.html
index 667a280942..4c8634b2b9 100644
--- a/mesh/v1alpha1/istio.mesh.v1alpha1.pb.html
+++ b/mesh/v1alpha1/istio.mesh.v1alpha1.pb.html
@@ -24,7 +24,7 @@ <h2 id="MeshConfig">MeshConfig</h2>
 </thead>
 <tbody>
 <tr id="MeshConfig-proxy_listen_port">
-<td><code>proxyListenPort</code></td>
+<td><code><a href="#MeshConfig-proxy_listen_port">proxyListenPort</a></code></td>
 <td><code>int32</code></td>
 <td>
 <p>Port on which Envoy should listen for all outbound traffic to other services.
@@ -36,7 +36,7 @@ <h2 id="MeshConfig">MeshConfig</h2>
 </td>
 </tr>
 <tr id="MeshConfig-proxy_inbound_listen_port">
-<td><code>proxyInboundListenPort</code></td>
+<td><code><a href="#MeshConfig-proxy_inbound_listen_port">proxyInboundListenPort</a></code></td>
 <td><code>int32</code></td>
 <td>
 <p>Port on which Envoy should listen for all inbound traffic to the pod/vm will be captured to.
@@ -48,7 +48,7 @@ <h2 id="MeshConfig">MeshConfig</h2>
 </td>
 </tr>
 <tr id="MeshConfig-proxy_http_port">
-<td><code>proxyHttpPort</code></td>
+<td><code><a href="#MeshConfig-proxy_http_port">proxyHttpPort</a></code></td>
 <td><code>int32</code></td>
 <td>
 <p>Port on which Envoy should listen for HTTP PROXY requests if set.</p>
@@ -59,7 +59,7 @@ <h2 id="MeshConfig">MeshConfig</h2>
 </td>
 </tr>
 <tr id="MeshConfig-connect_timeout">
-<td><code>connectTimeout</code></td>
+<td><code><a href="#MeshConfig-connect_timeout">connectTimeout</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#duration">Duration</a></code></td>
 <td>
 <p>Connection timeout used by Envoy. (MUST BE &gt;=1ms)
@@ -71,7 +71,7 @@ <h2 id="MeshConfig">MeshConfig</h2>
 </td>
 </tr>
 <tr id="MeshConfig-tcp_keepalive">
-<td><code>tcpKeepalive</code></td>
+<td><code><a href="#MeshConfig-tcp_keepalive">tcpKeepalive</a></code></td>
 <td><code><a href="https://istio.io/docs/reference/config/networking/destination-rule.html#ConnectionPoolSettings-TCPSettings-TcpKeepalive">TcpKeepalive</a></code></td>
 <td>
 <p>If set then set <code>SO_KEEPALIVE</code> on the socket to enable TCP Keepalives.</p>
@@ -82,7 +82,7 @@ <h2 id="MeshConfig">MeshConfig</h2>
 </td>
 </tr>
 <tr id="MeshConfig-ingress_class">
-<td><code>ingressClass</code></td>
+<td><code><a href="#MeshConfig-ingress_class">ingressClass</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Class of ingress resources to be processed by Istio ingress
@@ -95,7 +95,7 @@ <h2 id="MeshConfig">MeshConfig</h2>
 </td>
 </tr>
 <tr id="MeshConfig-ingress_service">
-<td><code>ingressService</code></td>
+<td><code><a href="#MeshConfig-ingress_service">ingressService</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Name of the Kubernetes service used for the istio ingress controller.
@@ -107,7 +107,7 @@ <h2 id="MeshConfig">MeshConfig</h2>
 </td>
 </tr>
 <tr id="MeshConfig-ingress_controller_mode">
-<td><code>ingressControllerMode</code></td>
+<td><code><a href="#MeshConfig-ingress_controller_mode">ingressControllerMode</a></code></td>
 <td><code><a href="#MeshConfig-IngressControllerMode">IngressControllerMode</a></code></td>
 <td>
 <p>Defines whether to use Istio ingress controller for annotated or all ingress resources.
@@ -119,7 +119,7 @@ <h2 id="MeshConfig">MeshConfig</h2>
 </td>
 </tr>
 <tr id="MeshConfig-ingress_selector">
-<td><code>ingressSelector</code></td>
+<td><code><a href="#MeshConfig-ingress_selector">ingressSelector</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Defines which gateway deployment to use as the Ingress controller. This field corresponds to
@@ -134,7 +134,7 @@ <h2 id="MeshConfig">MeshConfig</h2>
 </td>
 </tr>
 <tr id="MeshConfig-enable_tracing">
-<td><code>enableTracing</code></td>
+<td><code><a href="#MeshConfig-enable_tracing">enableTracing</a></code></td>
 <td><code>bool</code></td>
 <td>
 <p>Flag to control generation of trace spans and request IDs.
@@ -146,7 +146,7 @@ <h2 id="MeshConfig">MeshConfig</h2>
 </td>
 </tr>
 <tr id="MeshConfig-access_log_file">
-<td><code>accessLogFile</code></td>
+<td><code><a href="#MeshConfig-access_log_file">accessLogFile</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>File address for the proxy access log (e.g. /dev/stdout).
@@ -158,7 +158,7 @@ <h2 id="MeshConfig">MeshConfig</h2>
 </td>
 </tr>
 <tr id="MeshConfig-access_log_format">
-<td><code>accessLogFormat</code></td>
+<td><code><a href="#MeshConfig-access_log_format">accessLogFormat</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Format for the proxy access log
@@ -170,7 +170,7 @@ <h2 id="MeshConfig">MeshConfig</h2>
 </td>
 </tr>
 <tr id="MeshConfig-access_log_encoding">
-<td><code>accessLogEncoding</code></td>
+<td><code><a href="#MeshConfig-access_log_encoding">accessLogEncoding</a></code></td>
 <td><code><a href="#MeshConfig-AccessLogEncoding">AccessLogEncoding</a></code></td>
 <td>
 <p>Encoding for the proxy access log (<code>TEXT</code> or <code>JSON</code>).
@@ -182,7 +182,7 @@ <h2 id="MeshConfig">MeshConfig</h2>
 </td>
 </tr>
 <tr id="MeshConfig-enable_envoy_access_log_service">
-<td><code>enableEnvoyAccessLogService</code></td>
+<td><code><a href="#MeshConfig-enable_envoy_access_log_service">enableEnvoyAccessLogService</a></code></td>
 <td><code>bool</code></td>
 <td>
 <p>This flag enables Envoy&rsquo;s gRPC Access Log Service.
@@ -196,7 +196,7 @@ <h2 id="MeshConfig">MeshConfig</h2>
 </td>
 </tr>
 <tr id="MeshConfig-disable_envoy_listener_log">
-<td><code>disableEnvoyListenerLog</code></td>
+<td><code><a href="#MeshConfig-disable_envoy_listener_log">disableEnvoyListenerLog</a></code></td>
 <td><code>bool</code></td>
 <td>
 <p>This flag disables Envoy Listener logs.
@@ -210,7 +210,7 @@ <h2 id="MeshConfig">MeshConfig</h2>
 </td>
 </tr>
 <tr id="MeshConfig-default_config">
-<td><code>defaultConfig</code></td>
+<td><code><a href="#MeshConfig-default_config">defaultConfig</a></code></td>
 <td><code><a href="#ProxyConfig">ProxyConfig</a></code></td>
 <td>
 <p>Default proxy config used by gateway and sidecars.
@@ -225,7 +225,7 @@ <h2 id="MeshConfig">MeshConfig</h2>
 </td>
 </tr>
 <tr id="MeshConfig-outbound_traffic_policy">
-<td><code>outboundTrafficPolicy</code></td>
+<td><code><a href="#MeshConfig-outbound_traffic_policy">outboundTrafficPolicy</a></code></td>
 <td><code><a href="#MeshConfig-OutboundTrafficPolicy">OutboundTrafficPolicy</a></code></td>
 <td>
 <p>Set the default behavior of the sidecar for handling outbound
@@ -240,7 +240,7 @@ <h2 id="MeshConfig">MeshConfig</h2>
 </td>
 </tr>
 <tr id="MeshConfig-inbound_traffic_policy">
-<td><code>inboundTrafficPolicy</code></td>
+<td><code><a href="#MeshConfig-inbound_traffic_policy">inboundTrafficPolicy</a></code></td>
 <td><code><a href="#MeshConfig-InboundTrafficPolicy">InboundTrafficPolicy</a></code></td>
 <td>
 <p>Set the default behavior of the sidecar for handling inbound
@@ -253,7 +253,7 @@ <h2 id="MeshConfig">MeshConfig</h2>
 </td>
 </tr>
 <tr id="MeshConfig-config_sources">
-<td><code>configSources</code></td>
+<td><code><a href="#MeshConfig-config_sources">configSources</a></code></td>
 <td><code><a href="#ConfigSource">ConfigSource[]</a></code></td>
 <td>
 <p>ConfigSource describes a source of configuration data for networking
@@ -266,7 +266,7 @@ <h2 id="MeshConfig">MeshConfig</h2>
 </td>
 </tr>
 <tr id="MeshConfig-enable_auto_mtls">
-<td><code>enableAutoMtls</code></td>
+<td><code><a href="#MeshConfig-enable_auto_mtls">enableAutoMtls</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#boolvalue">BoolValue</a></code></td>
 <td>
 <p>This flag is used to enable mutual <code>TLS</code> automatically for service to service communication
@@ -287,7 +287,7 @@ <h2 id="MeshConfig">MeshConfig</h2>
 </td>
 </tr>
 <tr id="MeshConfig-trust_domain">
-<td><code>trustDomain</code></td>
+<td><code><a href="#MeshConfig-trust_domain">trustDomain</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>The trust domain corresponds to the trust root of a system.
@@ -299,7 +299,7 @@ <h2 id="MeshConfig">MeshConfig</h2>
 </td>
 </tr>
 <tr id="MeshConfig-trust_domain_aliases">
-<td><code>trustDomainAliases</code></td>
+<td><code><a href="#MeshConfig-trust_domain_aliases">trustDomainAliases</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>The trust domain aliases represent the aliases of <code>trustDomain</code>.
@@ -316,7 +316,7 @@ <h2 id="MeshConfig">MeshConfig</h2>
 </td>
 </tr>
 <tr id="MeshConfig-ca_certificates">
-<td><code>caCertificates</code></td>
+<td><code><a href="#MeshConfig-ca_certificates">caCertificates</a></code></td>
 <td><code><a href="#MeshConfig-CertificateData">CertificateData[]</a></code></td>
 <td>
 <p>The extra root certificates for workload-to-workload communication.
@@ -330,7 +330,7 @@ <h2 id="MeshConfig">MeshConfig</h2>
 </td>
 </tr>
 <tr id="MeshConfig-default_service_export_to">
-<td><code>defaultServiceExportTo</code></td>
+<td><code><a href="#MeshConfig-default_service_export_to">defaultServiceExportTo</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>The default value for the ServiceEntry.exportTo field and services
@@ -361,7 +361,7 @@ <h2 id="MeshConfig">MeshConfig</h2>
 </td>
 </tr>
 <tr id="MeshConfig-default_virtual_service_export_to">
-<td><code>defaultVirtualServiceExportTo</code></td>
+<td><code><a href="#MeshConfig-default_virtual_service_export_to">defaultVirtualServiceExportTo</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>The default value for the VirtualService.exportTo field. Has the same
@@ -375,7 +375,7 @@ <h2 id="MeshConfig">MeshConfig</h2>
 </td>
 </tr>
 <tr id="MeshConfig-default_destination_rule_export_to">
-<td><code>defaultDestinationRuleExportTo</code></td>
+<td><code><a href="#MeshConfig-default_destination_rule_export_to">defaultDestinationRuleExportTo</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>The default value for the <code>DestinationRule.exportTo</code> field. Has the same
@@ -389,7 +389,7 @@ <h2 id="MeshConfig">MeshConfig</h2>
 </td>
 </tr>
 <tr id="MeshConfig-root_namespace">
-<td><code>rootNamespace</code></td>
+<td><code><a href="#MeshConfig-root_namespace">rootNamespace</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>The namespace to treat as the administrative root namespace for
@@ -406,7 +406,7 @@ <h2 id="MeshConfig">MeshConfig</h2>
 </td>
 </tr>
 <tr id="MeshConfig-locality_lb_setting">
-<td><code>localityLbSetting</code></td>
+<td><code><a href="#MeshConfig-locality_lb_setting">localityLbSetting</a></code></td>
 <td><code><a href="https://istio.io/docs/reference/config/networking/destination-rule.html#LocalityLoadBalancerSetting">LocalityLoadBalancerSetting</a></code></td>
 <td>
 <p>Locality based load balancing distribution or failover settings.
@@ -420,7 +420,7 @@ <h2 id="MeshConfig">MeshConfig</h2>
 </td>
 </tr>
 <tr id="MeshConfig-dns_refresh_rate">
-<td><code>dnsRefreshRate</code></td>
+<td><code><a href="#MeshConfig-dns_refresh_rate">dnsRefreshRate</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#duration">Duration</a></code></td>
 <td>
 <p>Configures DNS refresh rate for Envoy clusters of type <code>STRICT_DNS</code>
@@ -432,7 +432,7 @@ <h2 id="MeshConfig">MeshConfig</h2>
 </td>
 </tr>
 <tr id="MeshConfig-h2_upgrade_policy">
-<td><code>h2UpgradePolicy</code></td>
+<td><code><a href="#MeshConfig-h2_upgrade_policy">h2UpgradePolicy</a></code></td>
 <td><code><a href="#MeshConfig-H2UpgradePolicy">H2UpgradePolicy</a></code></td>
 <td>
 <p>Specify if http1.1 connections should be upgraded to http2 by default.
@@ -446,7 +446,7 @@ <h2 id="MeshConfig">MeshConfig</h2>
 </td>
 </tr>
 <tr id="MeshConfig-inbound_cluster_stat_name">
-<td><code>inboundClusterStatName</code></td>
+<td><code><a href="#MeshConfig-inbound_cluster_stat_name">inboundClusterStatName</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Name to be used while emitting statistics for inbound clusters. The same pattern is used while computing stat prefix for
@@ -474,7 +474,7 @@ <h2 id="MeshConfig">MeshConfig</h2>
 </td>
 </tr>
 <tr id="MeshConfig-outbound_cluster_stat_name">
-<td><code>outboundClusterStatName</code></td>
+<td><code><a href="#MeshConfig-outbound_cluster_stat_name">outboundClusterStatName</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Name to be used while emitting statistics for outbound clusters. The same pattern is used while computing stat prefix for
@@ -502,7 +502,7 @@ <h2 id="MeshConfig">MeshConfig</h2>
 </td>
 </tr>
 <tr id="MeshConfig-enable_prometheus_merge">
-<td><code>enablePrometheusMerge</code></td>
+<td><code><a href="#MeshConfig-enable_prometheus_merge">enablePrometheusMerge</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#boolvalue">BoolValue</a></code></td>
 <td>
 <p>If enabled, Istio agent will merge metrics exposed by the application with metrics from Envoy
@@ -521,7 +521,7 @@ <h2 id="MeshConfig">MeshConfig</h2>
 </td>
 </tr>
 <tr id="MeshConfig-extension_providers">
-<td><code>extensionProviders</code></td>
+<td><code><a href="#MeshConfig-extension_providers">extensionProviders</a></code></td>
 <td><code><a href="#MeshConfig-ExtensionProvider">ExtensionProvider[]</a></code></td>
 <td>
 <p>Defines a list of extension providers that extend Istio&rsquo;s functionality. For example, the AuthorizationPolicy
@@ -533,7 +533,7 @@ <h2 id="MeshConfig">MeshConfig</h2>
 </td>
 </tr>
 <tr id="MeshConfig-default_providers">
-<td><code>defaultProviders</code></td>
+<td><code><a href="#MeshConfig-default_providers">defaultProviders</a></code></td>
 <td><code><a href="#MeshConfig-DefaultProviders">DefaultProviders</a></code></td>
 <td>
 <p>Specifies extension providers to use by default in Istio configuration resources.</p>
@@ -544,7 +544,7 @@ <h2 id="MeshConfig">MeshConfig</h2>
 </td>
 </tr>
 <tr id="MeshConfig-discovery_selectors">
-<td><code>discoverySelectors</code></td>
+<td><code><a href="#MeshConfig-discovery_selectors">discoverySelectors</a></code></td>
 <td><code><a href="#LabelSelector">LabelSelector[]</a></code></td>
 <td>
 <p>A list of Kubernetes selectors that specify the set of namespaces that Istio considers when
@@ -577,7 +577,7 @@ <h2 id="MeshConfig">MeshConfig</h2>
 </td>
 </tr>
 <tr id="MeshConfig-path_normalization">
-<td><code>pathNormalization</code></td>
+<td><code><a href="#MeshConfig-path_normalization">pathNormalization</a></code></td>
 <td><code><a href="#MeshConfig-ProxyPathNormalization">ProxyPathNormalization</a></code></td>
 <td>
 <p>ProxyPathNormalization configures how URL paths in incoming and outgoing HTTP requests are
@@ -594,7 +594,7 @@ <h2 id="MeshConfig">MeshConfig</h2>
 </td>
 </tr>
 <tr id="MeshConfig-default_http_retry_policy">
-<td><code>defaultHttpRetryPolicy</code></td>
+<td><code><a href="#MeshConfig-default_http_retry_policy">defaultHttpRetryPolicy</a></code></td>
 <td><code><a href="https://istio.io/docs/reference/config/networking/virtual-service.html#HTTPRetry">HTTPRetry</a></code></td>
 <td>
 <p>Configure the default HTTP retry policy.
@@ -612,7 +612,7 @@ <h2 id="MeshConfig">MeshConfig</h2>
 </td>
 </tr>
 <tr id="MeshConfig-mesh_mTLS">
-<td><code>meshMTLS</code></td>
+<td><code><a href="#MeshConfig-mesh_mTLS">meshMTLS</a></code></td>
 <td><code><a href="#MeshConfig-TLSConfig">TLSConfig</a></code></td>
 <td>
 <p>The below configuration parameters can be used to specify TLSConfig for mesh traffic.
@@ -635,7 +635,7 @@ <h2 id="MeshConfig">MeshConfig</h2>
 </td>
 </tr>
 <tr id="MeshConfig-tls_defaults">
-<td><code>tlsDefaults</code></td>
+<td><code><a href="#MeshConfig-tls_defaults">tlsDefaults</a></code></td>
 <td><code><a href="#MeshConfig-TLSConfig">TLSConfig</a></code></td>
 <td>
 <p>Configuration of TLS for all traffic except for ISTIO_MUTUAL mode.
@@ -667,7 +667,7 @@ <h2 id="LabelSelector">LabelSelector</h2>
 </thead>
 <tbody>
 <tr id="LabelSelector-matchLabels">
-<td><code>matchLabels</code></td>
+<td><code><a href="#LabelSelector-matchLabels">matchLabels</a></code></td>
 <td><code>map&lt;string,&nbsp;string&gt;</code></td>
 <td>
 <p>matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
@@ -680,7 +680,7 @@ <h2 id="LabelSelector">LabelSelector</h2>
 </td>
 </tr>
 <tr id="LabelSelector-matchExpressions">
-<td><code>matchExpressions</code></td>
+<td><code><a href="#LabelSelector-matchExpressions">matchExpressions</a></code></td>
 <td><code><a href="#LabelSelectorRequirement">LabelSelectorRequirement[]</a></code></td>
 <td>
 <p>matchExpressions is a list of label selector requirements. The requirements are ANDed.</p>
@@ -710,7 +710,7 @@ <h2 id="LabelSelectorRequirement">LabelSelectorRequirement</h2>
 </thead>
 <tbody>
 <tr id="LabelSelectorRequirement-key">
-<td><code>key</code></td>
+<td><code><a href="#LabelSelectorRequirement-key">key</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>key is the label key that the selector applies to.</p>
@@ -721,7 +721,7 @@ <h2 id="LabelSelectorRequirement">LabelSelectorRequirement</h2>
 </td>
 </tr>
 <tr id="LabelSelectorRequirement-operator">
-<td><code>operator</code></td>
+<td><code><a href="#LabelSelectorRequirement-operator">operator</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>operator represents a key&rsquo;s relationship to a set of values.
@@ -733,7 +733,7 @@ <h2 id="LabelSelectorRequirement">LabelSelectorRequirement</h2>
 </td>
 </tr>
 <tr id="LabelSelectorRequirement-values">
-<td><code>values</code></td>
+<td><code><a href="#LabelSelectorRequirement-values">values</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>values is an array of string values. If the operator is In or NotIn,
@@ -766,7 +766,7 @@ <h2 id="ConfigSource">ConfigSource</h2>
 </thead>
 <tbody>
 <tr id="ConfigSource-address">
-<td><code>address</code></td>
+<td><code><a href="#ConfigSource-address">address</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Address of the server implementing the Istio Mesh Configuration
@@ -780,7 +780,7 @@ <h2 id="ConfigSource">ConfigSource</h2>
 </td>
 </tr>
 <tr id="ConfigSource-tls_settings">
-<td><code>tlsSettings</code></td>
+<td><code><a href="#ConfigSource-tls_settings">tlsSettings</a></code></td>
 <td><code><a href="https://istio.io/docs/reference/config/networking/destination-rule.html#ClientTLSSettings">ClientTLSSettings</a></code></td>
 <td>
 <p>Use the tlsSettings to specify the tls mode to use. If the MCP server
@@ -793,7 +793,7 @@ <h2 id="ConfigSource">ConfigSource</h2>
 </td>
 </tr>
 <tr id="ConfigSource-subscribed_resources">
-<td><code>subscribedResources</code></td>
+<td><code><a href="#ConfigSource-subscribed_resources">subscribedResources</a></code></td>
 <td><code><a href="#Resource">Resource[]</a></code></td>
 <td>
 <p>Describes the source of configuration, if nothing is specified default is MCP</p>
@@ -822,7 +822,7 @@ <h2 id="MeshConfig-OutboundTrafficPolicy">MeshConfig.OutboundTrafficPolicy</h2>
 </thead>
 <tbody>
 <tr id="MeshConfig-OutboundTrafficPolicy-mode">
-<td><code>mode</code></td>
+<td><code><a href="#MeshConfig-OutboundTrafficPolicy-mode">mode</a></code></td>
 <td><code><a href="#MeshConfig-OutboundTrafficPolicy-Mode">Mode</a></code></td>
 <td>
 </td>
@@ -846,7 +846,7 @@ <h2 id="MeshConfig-InboundTrafficPolicy">MeshConfig.InboundTrafficPolicy</h2>
 </thead>
 <tbody>
 <tr id="MeshConfig-InboundTrafficPolicy-mode">
-<td><code>mode</code></td>
+<td><code><a href="#MeshConfig-InboundTrafficPolicy-mode">mode</a></code></td>
 <td><code><a href="#MeshConfig-InboundTrafficPolicy-Mode">Mode</a></code></td>
 <td>
 </td>
@@ -870,7 +870,7 @@ <h2 id="MeshConfig-CertificateData">MeshConfig.CertificateData</h2>
 </thead>
 <tbody>
 <tr id="MeshConfig-CertificateData-pem" class="oneof oneof-start">
-<td><code>pem</code></td>
+<td><code><a href="#MeshConfig-CertificateData-pem">pem</a></code></td>
 <td><code>string (oneof)</code></td>
 <td>
 <p>The PEM data of the certificate.</p>
@@ -881,7 +881,7 @@ <h2 id="MeshConfig-CertificateData">MeshConfig.CertificateData</h2>
 </td>
 </tr>
 <tr id="MeshConfig-CertificateData-spiffe_bundle_url" class="oneof">
-<td><code>spiffeBundleUrl</code></td>
+<td><code><a href="#MeshConfig-CertificateData-spiffe_bundle_url">spiffeBundleUrl</a></code></td>
 <td><code>string (oneof)</code></td>
 <td>
 <p>The SPIFFE bundle endpoint URL that complies to:
@@ -896,7 +896,7 @@ <h2 id="MeshConfig-CertificateData">MeshConfig.CertificateData</h2>
 </td>
 </tr>
 <tr id="MeshConfig-CertificateData-cert_signers">
-<td><code>certSigners</code></td>
+<td><code><a href="#MeshConfig-CertificateData-cert_signers">certSigners</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>Optional. Specify the kubernetes signers (External CA) that use this trustAnchor
@@ -909,7 +909,7 @@ <h2 id="MeshConfig-CertificateData">MeshConfig.CertificateData</h2>
 </td>
 </tr>
 <tr id="MeshConfig-CertificateData-trust_domains">
-<td><code>trustDomains</code></td>
+<td><code><a href="#MeshConfig-CertificateData-trust_domains">trustDomains</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>Optional. Specify the list of trust domains to which this trustAnchor data belongs.
@@ -943,7 +943,7 @@ <h2 id="MeshConfig-CA">MeshConfig.CA</h2>
 </thead>
 <tbody>
 <tr id="MeshConfig-CA-address">
-<td><code>address</code></td>
+<td><code><a href="#MeshConfig-CA-address">address</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>REQUIRED. Address of the CA server implementing the Istio CA gRPC API.
@@ -956,7 +956,7 @@ <h2 id="MeshConfig-CA">MeshConfig.CA</h2>
 </td>
 </tr>
 <tr id="MeshConfig-CA-tls_settings">
-<td><code>tlsSettings</code></td>
+<td><code><a href="#MeshConfig-CA-tls_settings">tlsSettings</a></code></td>
 <td><code><a href="https://istio.io/docs/reference/config/networking/destination-rule.html#ClientTLSSettings">ClientTLSSettings</a></code></td>
 <td>
 <p>Use the tlsSettings to specify the tls mode to use.
@@ -975,7 +975,7 @@ <h2 id="MeshConfig-CA">MeshConfig.CA</h2>
 </td>
 </tr>
 <tr id="MeshConfig-CA-request_timeout">
-<td><code>requestTimeout</code></td>
+<td><code><a href="#MeshConfig-CA-request_timeout">requestTimeout</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#duration">Duration</a></code></td>
 <td>
 <p>timeout for forward CSR requests from Istiod to External CA
@@ -987,7 +987,7 @@ <h2 id="MeshConfig-CA">MeshConfig.CA</h2>
 </td>
 </tr>
 <tr id="MeshConfig-CA-istiod_side">
-<td><code>istiodSide</code></td>
+<td><code><a href="#MeshConfig-CA-istiod_side">istiodSide</a></code></td>
 <td><code>bool</code></td>
 <td>
 <p>Use istiodSide to specify CA Server integrate to Istiod side or Agent side
@@ -1014,7 +1014,7 @@ <h2 id="MeshConfig-ExtensionProvider">MeshConfig.ExtensionProvider</h2>
 </thead>
 <tbody>
 <tr id="MeshConfig-ExtensionProvider-name">
-<td><code>name</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-name">name</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>REQUIRED. A unique name identifying the extension provider.</p>
@@ -1025,7 +1025,7 @@ <h2 id="MeshConfig-ExtensionProvider">MeshConfig.ExtensionProvider</h2>
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-envoy_ext_authz_http" class="oneof oneof-start">
-<td><code>envoyExtAuthzHttp</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-envoy_ext_authz_http">envoyExtAuthzHttp</a></code></td>
 <td><code><a href="#MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider">EnvoyExternalAuthorizationHttpProvider (oneof)</a></code></td>
 <td>
 <p>Configures an external authorizer that implements the Envoy ext_authz filter authorization check service using the HTTP API.</p>
@@ -1036,7 +1036,7 @@ <h2 id="MeshConfig-ExtensionProvider">MeshConfig.ExtensionProvider</h2>
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-envoy_ext_authz_grpc" class="oneof">
-<td><code>envoyExtAuthzGrpc</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-envoy_ext_authz_grpc">envoyExtAuthzGrpc</a></code></td>
 <td><code><a href="#MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationGrpcProvider">EnvoyExternalAuthorizationGrpcProvider (oneof)</a></code></td>
 <td>
 <p>Configures an external authorizer that implements the Envoy ext_authz filter authorization check service using the gRPC API.</p>
@@ -1047,7 +1047,7 @@ <h2 id="MeshConfig-ExtensionProvider">MeshConfig.ExtensionProvider</h2>
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-zipkin" class="oneof">
-<td><code>zipkin</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-zipkin">zipkin</a></code></td>
 <td><code><a href="#MeshConfig-ExtensionProvider-ZipkinTracingProvider">ZipkinTracingProvider (oneof)</a></code></td>
 <td>
 <p>Configures a tracing provider that uses the Zipkin API.</p>
@@ -1058,7 +1058,7 @@ <h2 id="MeshConfig-ExtensionProvider">MeshConfig.ExtensionProvider</h2>
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-datadog" class="oneof">
-<td><code>datadog</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-datadog">datadog</a></code></td>
 <td><code><a href="#MeshConfig-ExtensionProvider-DatadogTracingProvider">DatadogTracingProvider (oneof)</a></code></td>
 <td>
 <p>Configures a Datadog tracing provider.</p>
@@ -1069,7 +1069,7 @@ <h2 id="MeshConfig-ExtensionProvider">MeshConfig.ExtensionProvider</h2>
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-stackdriver" class="oneof">
-<td><code>stackdriver</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-stackdriver">stackdriver</a></code></td>
 <td><code><a href="#MeshConfig-ExtensionProvider-StackdriverProvider">StackdriverProvider (oneof)</a></code></td>
 <td>
 <p>Configures a Stackdriver provider.</p>
@@ -1080,7 +1080,7 @@ <h2 id="MeshConfig-ExtensionProvider">MeshConfig.ExtensionProvider</h2>
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-skywalking" class="oneof">
-<td><code>skywalking</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-skywalking">skywalking</a></code></td>
 <td><code><a href="#MeshConfig-ExtensionProvider-SkyWalkingTracingProvider">SkyWalkingTracingProvider (oneof)</a></code></td>
 <td>
 <p>Configures a Apache SkyWalking provider.</p>
@@ -1091,7 +1091,7 @@ <h2 id="MeshConfig-ExtensionProvider">MeshConfig.ExtensionProvider</h2>
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-opentelemetry" class="oneof">
-<td><code>opentelemetry</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-opentelemetry">opentelemetry</a></code></td>
 <td><code><a href="#MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider">OpenTelemetryTracingProvider (oneof)</a></code></td>
 <td>
 <p>Configures an OpenTelemetry tracing provider.</p>
@@ -1102,7 +1102,7 @@ <h2 id="MeshConfig-ExtensionProvider">MeshConfig.ExtensionProvider</h2>
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-prometheus" class="oneof">
-<td><code>prometheus</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-prometheus">prometheus</a></code></td>
 <td><code><a href="#MeshConfig-ExtensionProvider-PrometheusMetricsProvider">PrometheusMetricsProvider (oneof)</a></code></td>
 <td>
 <p>Configures a Prometheus metrics provider.</p>
@@ -1113,7 +1113,7 @@ <h2 id="MeshConfig-ExtensionProvider">MeshConfig.ExtensionProvider</h2>
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-envoy_file_access_log" class="oneof">
-<td><code>envoyFileAccessLog</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-envoy_file_access_log">envoyFileAccessLog</a></code></td>
 <td><code><a href="#MeshConfig-ExtensionProvider-EnvoyFileAccessLogProvider">EnvoyFileAccessLogProvider (oneof)</a></code></td>
 <td>
 <p>Configures an Envoy File Access Log provider.</p>
@@ -1124,7 +1124,7 @@ <h2 id="MeshConfig-ExtensionProvider">MeshConfig.ExtensionProvider</h2>
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-envoy_http_als" class="oneof">
-<td><code>envoyHttpAls</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-envoy_http_als">envoyHttpAls</a></code></td>
 <td><code><a href="#MeshConfig-ExtensionProvider-EnvoyHttpGrpcV3LogProvider">EnvoyHttpGrpcV3LogProvider (oneof)</a></code></td>
 <td>
 <p>Configures an Envoy Access Logging Service provider for HTTP traffic.</p>
@@ -1135,7 +1135,7 @@ <h2 id="MeshConfig-ExtensionProvider">MeshConfig.ExtensionProvider</h2>
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-envoy_tcp_als" class="oneof">
-<td><code>envoyTcpAls</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-envoy_tcp_als">envoyTcpAls</a></code></td>
 <td><code><a href="#MeshConfig-ExtensionProvider-EnvoyTcpGrpcV3LogProvider">EnvoyTcpGrpcV3LogProvider (oneof)</a></code></td>
 <td>
 <p>Configures an Envoy Access Logging Service provider for TCP traffic.</p>
@@ -1146,7 +1146,7 @@ <h2 id="MeshConfig-ExtensionProvider">MeshConfig.ExtensionProvider</h2>
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-envoy_otel_als" class="oneof">
-<td><code>envoyOtelAls</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-envoy_otel_als">envoyOtelAls</a></code></td>
 <td><code><a href="#MeshConfig-ExtensionProvider-EnvoyOpenTelemetryLogProvider">EnvoyOpenTelemetryLogProvider (oneof)</a></code></td>
 <td>
 <p>Configures an Envoy Open Telemetry Access Logging Service provider.</p>
@@ -1177,7 +1177,7 @@ <h2 id="MeshConfig-DefaultProviders">MeshConfig.DefaultProviders</h2>
 </thead>
 <tbody>
 <tr id="MeshConfig-DefaultProviders-tracing">
-<td><code>tracing</code></td>
+<td><code><a href="#MeshConfig-DefaultProviders-tracing">tracing</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>Name of the default provider(s) for tracing.</p>
@@ -1188,7 +1188,7 @@ <h2 id="MeshConfig-DefaultProviders">MeshConfig.DefaultProviders</h2>
 </td>
 </tr>
 <tr id="MeshConfig-DefaultProviders-metrics">
-<td><code>metrics</code></td>
+<td><code><a href="#MeshConfig-DefaultProviders-metrics">metrics</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>Name of the default provider(s) for metrics.</p>
@@ -1199,7 +1199,7 @@ <h2 id="MeshConfig-DefaultProviders">MeshConfig.DefaultProviders</h2>
 </td>
 </tr>
 <tr id="MeshConfig-DefaultProviders-access_logging">
-<td><code>accessLogging</code></td>
+<td><code><a href="#MeshConfig-DefaultProviders-access_logging">accessLogging</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>Name of the default provider(s) for access logging.</p>
@@ -1225,7 +1225,7 @@ <h2 id="MeshConfig-ProxyPathNormalization">MeshConfig.ProxyPathNormalization</h2
 </thead>
 <tbody>
 <tr id="MeshConfig-ProxyPathNormalization-normalization">
-<td><code>normalization</code></td>
+<td><code><a href="#MeshConfig-ProxyPathNormalization-normalization">normalization</a></code></td>
 <td><code><a href="#MeshConfig-ProxyPathNormalization-NormalizationType">NormalizationType</a></code></td>
 <td>
 </td>
@@ -1249,7 +1249,7 @@ <h2 id="MeshConfig-TLSConfig">MeshConfig.TLSConfig</h2>
 </thead>
 <tbody>
 <tr id="MeshConfig-TLSConfig-min_protocol_version">
-<td><code>minProtocolVersion</code></td>
+<td><code><a href="#MeshConfig-TLSConfig-min_protocol_version">minProtocolVersion</a></code></td>
 <td><code><a href="#MeshConfig-TLSConfig-TLSProtocol">TLSProtocol</a></code></td>
 <td>
 <p>Optional: the minimum TLS protocol version. The default minimum
@@ -1265,7 +1265,7 @@ <h2 id="MeshConfig-TLSConfig">MeshConfig.TLSConfig</h2>
 </td>
 </tr>
 <tr id="MeshConfig-TLSConfig-ecdh_curves">
-<td><code>ecdhCurves</code></td>
+<td><code><a href="#MeshConfig-TLSConfig-ecdh_curves">ecdhCurves</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>Optional: If specified, the TLS connection will only support the specified ECDH curves for the DH key exchange.
@@ -1278,7 +1278,7 @@ <h2 id="MeshConfig-TLSConfig">MeshConfig.TLSConfig</h2>
 </td>
 </tr>
 <tr id="MeshConfig-TLSConfig-cipher_suites">
-<td><code>cipherSuites</code></td>
+<td><code><a href="#MeshConfig-TLSConfig-cipher_suites">cipherSuites</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>Optional: If specified, the TLS connection will only support the specified cipher list when negotiating TLS 1.0-1.2.
@@ -1314,7 +1314,7 @@ <h2 id="MeshConfig-ServiceSettings-Settings">MeshConfig.ServiceSettings.Settings
 </thead>
 <tbody>
 <tr id="MeshConfig-ServiceSettings-Settings-cluster_local">
-<td><code>clusterLocal</code></td>
+<td><code><a href="#MeshConfig-ServiceSettings-Settings-cluster_local">clusterLocal</a></code></td>
 <td><code>bool</code></td>
 <td>
 <p>If true, specifies that the client and service endpoints must reside in the same cluster.
@@ -1355,7 +1355,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationRequestBody">Mesh
 </thead>
 <tbody>
 <tr id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationRequestBody-max_request_bytes">
-<td><code>maxRequestBytes</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationRequestBody-max_request_bytes">maxRequestBytes</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>Sets the maximum size of a message body that the ext-authz filter will hold in memory.
@@ -1370,7 +1370,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationRequestBody">Mesh
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationRequestBody-allow_partial_message">
-<td><code>allowPartialMessage</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationRequestBody-allow_partial_message">allowPartialMessage</a></code></td>
 <td><code>bool</code></td>
 <td>
 <p>When this field is true, ext-authz filter will buffer the message until maxRequestBytes is reached.
@@ -1384,7 +1384,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationRequestBody">Mesh
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationRequestBody-pack_as_bytes">
-<td><code>packAsBytes</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationRequestBody-pack_as_bytes">packAsBytes</a></code></td>
 <td><code>bool</code></td>
 <td>
 <p>If true, the body sent to the external authorization service in the gRPC authorization request is set with raw bytes
@@ -1413,7 +1413,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider">Mes
 </thead>
 <tbody>
 <tr id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider-service">
-<td><code>service</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider-service">service</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>REQUIRED. Specifies the service that implements the Envoy ext_authz HTTP authorization service.
@@ -1428,7 +1428,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider">Mes
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider-port">
-<td><code>port</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider-port">port</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>REQUIRED. Specifies the port of the service.</p>
@@ -1439,7 +1439,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider">Mes
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider-timeout">
-<td><code>timeout</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider-timeout">timeout</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#duration">Duration</a></code></td>
 <td>
 <p>The maximum duration that the proxy will wait for a response from the provider (default timeout: 600s).
@@ -1452,7 +1452,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider">Mes
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider-path_prefix">
-<td><code>pathPrefix</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider-path_prefix">pathPrefix</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Sets a prefix to the value of authorization request header <em>Path</em>.
@@ -1465,7 +1465,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider">Mes
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider-fail_open">
-<td><code>failOpen</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider-fail_open">failOpen</a></code></td>
 <td><code>bool</code></td>
 <td>
 <p>If true, the user request will be allowed even if the communication with the authorization service has failed,
@@ -1478,7 +1478,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider">Mes
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider-clear_route_cache">
-<td><code>clearRouteCache</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider-clear_route_cache">clearRouteCache</a></code></td>
 <td><code>bool</code></td>
 <td>
 <p>If true, clears route cache in order to allow the external authorization service to correctly affect routing decisions.
@@ -1491,7 +1491,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider">Mes
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider-status_on_error">
-<td><code>statusOnError</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider-status_on_error">statusOnError</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Sets the HTTP status that is returned to the client when there is a network error to the authorization service.
@@ -1503,7 +1503,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider">Mes
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider-include_request_headers_in_check">
-<td><code>includeRequestHeadersInCheck</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider-include_request_headers_in_check">includeRequestHeadersInCheck</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>List of client request headers that should be included in the authorization request sent to the authorization service.
@@ -1529,7 +1529,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider">Mes
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider-include_additional_headers_in_check">
-<td><code>includeAdditionalHeadersInCheck</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider-include_additional_headers_in_check">includeAdditionalHeadersInCheck</a></code></td>
 <td><code>map&lt;string,&nbsp;string&gt;</code></td>
 <td>
 <p>Set of additional fixed headers that should be included in the authorization request sent to the authorization service.
@@ -1542,7 +1542,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider">Mes
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider-include_request_body_in_check">
-<td><code>includeRequestBodyInCheck</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider-include_request_body_in_check">includeRequestBodyInCheck</a></code></td>
 <td><code><a href="#MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationRequestBody">EnvoyExternalAuthorizationRequestBody</a></code></td>
 <td>
 <p>If set, the client request body will be included in the authorization request sent to the authorization service.</p>
@@ -1553,7 +1553,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider">Mes
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider-headers_to_upstream_on_allow">
-<td><code>headersToUpstreamOnAllow</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider-headers_to_upstream_on_allow">headersToUpstreamOnAllow</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>List of headers from the authorization service that should be added or overridden in the original request and
@@ -1575,7 +1575,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider">Mes
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider-headers_to_downstream_on_deny">
-<td><code>headersToDownstreamOnDeny</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider-headers_to_downstream_on_deny">headersToDownstreamOnDeny</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>List of headers from the authorization service that should be forwarded to downstream when the authorization
@@ -1600,7 +1600,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider">Mes
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider-headers_to_downstream_on_allow">
-<td><code>headersToDownstreamOnAllow</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider-headers_to_downstream_on_allow">headersToDownstreamOnAllow</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>List of headers from the authorization service that should be forwarded to downstream when the authorization
@@ -1622,7 +1622,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider">Mes
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider-include_headers_in_check" class="deprecated ">
-<td><code>includeHeadersInCheck</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider-include_headers_in_check">includeHeadersInCheck</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>DEPRECATED. Use includeRequestHeadersInCheck instead.</p>
@@ -1648,7 +1648,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationGrpcProvider">Mes
 </thead>
 <tbody>
 <tr id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationGrpcProvider-service">
-<td><code>service</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationGrpcProvider-service">service</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>REQUIRED. Specifies the service that implements the Envoy ext_authz gRPC authorization service.
@@ -1663,7 +1663,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationGrpcProvider">Mes
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationGrpcProvider-port">
-<td><code>port</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationGrpcProvider-port">port</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>REQUIRED. Specifies the port of the service.</p>
@@ -1674,7 +1674,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationGrpcProvider">Mes
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationGrpcProvider-timeout">
-<td><code>timeout</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationGrpcProvider-timeout">timeout</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#duration">Duration</a></code></td>
 <td>
 <p>The maximum duration that the proxy will wait for a response from the provider, this is the timeout for a specific request (default timeout: 600s).
@@ -1687,7 +1687,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationGrpcProvider">Mes
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationGrpcProvider-fail_open">
-<td><code>failOpen</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationGrpcProvider-fail_open">failOpen</a></code></td>
 <td><code>bool</code></td>
 <td>
 <p>If true, the HTTP request or TCP connection will be allowed even if the communication with the authorization service has failed,
@@ -1700,7 +1700,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationGrpcProvider">Mes
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationGrpcProvider-clear_route_cache">
-<td><code>clearRouteCache</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationGrpcProvider-clear_route_cache">clearRouteCache</a></code></td>
 <td><code>bool</code></td>
 <td>
 <p>If true, clears route cache in order to allow the external authorization service to correctly affect routing decisions.
@@ -1713,7 +1713,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationGrpcProvider">Mes
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationGrpcProvider-status_on_error">
-<td><code>statusOnError</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationGrpcProvider-status_on_error">statusOnError</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Sets the HTTP status that is returned to the client when there is a network error to the authorization service.
@@ -1725,7 +1725,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationGrpcProvider">Mes
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationGrpcProvider-include_request_body_in_check">
-<td><code>includeRequestBodyInCheck</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationGrpcProvider-include_request_body_in_check">includeRequestBodyInCheck</a></code></td>
 <td><code><a href="#MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationRequestBody">EnvoyExternalAuthorizationRequestBody</a></code></td>
 <td>
 <p>If set, the client request body will be included in the authorization request sent to the authorization service.</p>
@@ -1753,7 +1753,7 @@ <h2 id="MeshConfig-ExtensionProvider-ZipkinTracingProvider">MeshConfig.Extension
 </thead>
 <tbody>
 <tr id="MeshConfig-ExtensionProvider-ZipkinTracingProvider-service">
-<td><code>service</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-ZipkinTracingProvider-service">service</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>REQUIRED. Specifies the service that the Zipkin API.
@@ -1768,7 +1768,7 @@ <h2 id="MeshConfig-ExtensionProvider-ZipkinTracingProvider">MeshConfig.Extension
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-ZipkinTracingProvider-port">
-<td><code>port</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-ZipkinTracingProvider-port">port</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>REQUIRED. Specifies the port of the service.</p>
@@ -1779,7 +1779,7 @@ <h2 id="MeshConfig-ExtensionProvider-ZipkinTracingProvider">MeshConfig.Extension
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-ZipkinTracingProvider-max_tag_length">
-<td><code>maxTagLength</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-ZipkinTracingProvider-max_tag_length">maxTagLength</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>Optional. Controls the overall path length allowed in a reported span.
@@ -1791,7 +1791,7 @@ <h2 id="MeshConfig-ExtensionProvider-ZipkinTracingProvider">MeshConfig.Extension
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-ZipkinTracingProvider-enable_64bit_trace_id">
-<td><code>enable64bitTraceId</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-ZipkinTracingProvider-enable_64bit_trace_id">enable64bitTraceId</a></code></td>
 <td><code>bool</code></td>
 <td>
 <p>Optional. A 128 bit trace id will be used in Istio.
@@ -1803,7 +1803,7 @@ <h2 id="MeshConfig-ExtensionProvider-ZipkinTracingProvider">MeshConfig.Extension
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-ZipkinTracingProvider-path">
-<td><code>path</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-ZipkinTracingProvider-path">path</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Optional. Specifies the endpoint of Zipkin API.
@@ -1834,7 +1834,7 @@ <h2 id="MeshConfig-ExtensionProvider-LightstepTracingProvider">MeshConfig.Extens
 </thead>
 <tbody>
 <tr id="MeshConfig-ExtensionProvider-LightstepTracingProvider-service">
-<td><code>service</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-LightstepTracingProvider-service">service</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>REQUIRED. Specifies the service for the Lightstep collector.
@@ -1849,7 +1849,7 @@ <h2 id="MeshConfig-ExtensionProvider-LightstepTracingProvider">MeshConfig.Extens
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-LightstepTracingProvider-port">
-<td><code>port</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-LightstepTracingProvider-port">port</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>REQUIRED. Specifies the port of the service.</p>
@@ -1860,7 +1860,7 @@ <h2 id="MeshConfig-ExtensionProvider-LightstepTracingProvider">MeshConfig.Extens
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-LightstepTracingProvider-access_token">
-<td><code>accessToken</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-LightstepTracingProvider-access_token">accessToken</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>The Lightstep access token.</p>
@@ -1871,7 +1871,7 @@ <h2 id="MeshConfig-ExtensionProvider-LightstepTracingProvider">MeshConfig.Extens
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-LightstepTracingProvider-max_tag_length">
-<td><code>maxTagLength</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-LightstepTracingProvider-max_tag_length">maxTagLength</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>Optional. Controls the overall path length allowed in a reported span.
@@ -1900,7 +1900,7 @@ <h2 id="MeshConfig-ExtensionProvider-DatadogTracingProvider">MeshConfig.Extensio
 </thead>
 <tbody>
 <tr id="MeshConfig-ExtensionProvider-DatadogTracingProvider-service">
-<td><code>service</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-DatadogTracingProvider-service">service</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>REQUIRED. Specifies the service for the Datadog agent.
@@ -1915,7 +1915,7 @@ <h2 id="MeshConfig-ExtensionProvider-DatadogTracingProvider">MeshConfig.Extensio
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-DatadogTracingProvider-port">
-<td><code>port</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-DatadogTracingProvider-port">port</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>REQUIRED. Specifies the port of the service.</p>
@@ -1926,7 +1926,7 @@ <h2 id="MeshConfig-ExtensionProvider-DatadogTracingProvider">MeshConfig.Extensio
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-DatadogTracingProvider-max_tag_length">
-<td><code>maxTagLength</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-DatadogTracingProvider-max_tag_length">maxTagLength</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>Optional. Controls the overall path length allowed in a reported span.
@@ -1955,7 +1955,7 @@ <h2 id="MeshConfig-ExtensionProvider-SkyWalkingTracingProvider">MeshConfig.Exten
 </thead>
 <tbody>
 <tr id="MeshConfig-ExtensionProvider-SkyWalkingTracingProvider-service">
-<td><code>service</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-SkyWalkingTracingProvider-service">service</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>REQUIRED. Specifies the service for the SkyWalking receiver.
@@ -1970,7 +1970,7 @@ <h2 id="MeshConfig-ExtensionProvider-SkyWalkingTracingProvider">MeshConfig.Exten
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-SkyWalkingTracingProvider-port">
-<td><code>port</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-SkyWalkingTracingProvider-port">port</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>REQUIRED. Specifies the port of the service.</p>
@@ -1981,7 +1981,7 @@ <h2 id="MeshConfig-ExtensionProvider-SkyWalkingTracingProvider">MeshConfig.Exten
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-SkyWalkingTracingProvider-access_token">
-<td><code>accessToken</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-SkyWalkingTracingProvider-access_token">accessToken</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Optional. The SkyWalking OAP access token.</p>
@@ -2012,7 +2012,7 @@ <h2 id="MeshConfig-ExtensionProvider-StackdriverProvider">MeshConfig.ExtensionPr
 </thead>
 <tbody>
 <tr id="MeshConfig-ExtensionProvider-StackdriverProvider-max_tag_length">
-<td><code>maxTagLength</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-StackdriverProvider-max_tag_length">maxTagLength</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>Optional. Controls the overall path length allowed in a reported span.
@@ -2024,7 +2024,7 @@ <h2 id="MeshConfig-ExtensionProvider-StackdriverProvider">MeshConfig.ExtensionPr
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-StackdriverProvider-logging">
-<td><code>logging</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-StackdriverProvider-logging">logging</a></code></td>
 <td><code><a href="#MeshConfig-ExtensionProvider-StackdriverProvider-Logging">Logging</a></code></td>
 <td>
 <p>Optional. Controls Stackdriver logging behavior.</p>
@@ -2059,7 +2059,7 @@ <h2 id="MeshConfig-ExtensionProvider-OpenCensusAgentTracingProvider">MeshConfig.
 </thead>
 <tbody>
 <tr id="MeshConfig-ExtensionProvider-OpenCensusAgentTracingProvider-service">
-<td><code>service</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-OpenCensusAgentTracingProvider-service">service</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>REQUIRED. Specifies the service for the OpenCensusAgent.
@@ -2074,7 +2074,7 @@ <h2 id="MeshConfig-ExtensionProvider-OpenCensusAgentTracingProvider">MeshConfig.
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-OpenCensusAgentTracingProvider-port">
-<td><code>port</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-OpenCensusAgentTracingProvider-port">port</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>REQUIRED. Specifies the port of the service.</p>
@@ -2085,7 +2085,7 @@ <h2 id="MeshConfig-ExtensionProvider-OpenCensusAgentTracingProvider">MeshConfig.
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-OpenCensusAgentTracingProvider-context">
-<td><code>context</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-OpenCensusAgentTracingProvider-context">context</a></code></td>
 <td><code><a href="#MeshConfig-ExtensionProvider-OpenCensusAgentTracingProvider-TraceContext">TraceContext[]</a></code></td>
 <td>
 <p>Specifies the set of context propagation headers used for distributed
@@ -2099,7 +2099,7 @@ <h2 id="MeshConfig-ExtensionProvider-OpenCensusAgentTracingProvider">MeshConfig.
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-OpenCensusAgentTracingProvider-max_tag_length">
-<td><code>maxTagLength</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-OpenCensusAgentTracingProvider-max_tag_length">maxTagLength</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>Optional. Controls the overall path length allowed in a reported span.
@@ -2132,7 +2132,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyFileAccessLogProvider">MeshConfig.Exte
 </thead>
 <tbody>
 <tr id="MeshConfig-ExtensionProvider-EnvoyFileAccessLogProvider-path">
-<td><code>path</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyFileAccessLogProvider-path">path</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Path to a local file to write the access log entries.
@@ -2145,7 +2145,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyFileAccessLogProvider">MeshConfig.Exte
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-EnvoyFileAccessLogProvider-log_format">
-<td><code>logFormat</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyFileAccessLogProvider-log_format">logFormat</a></code></td>
 <td><code><a href="#MeshConfig-ExtensionProvider-EnvoyFileAccessLogProvider-LogFormat">LogFormat</a></code></td>
 <td>
 <p>Optional. Allows overriding of the default access log format.</p>
@@ -2174,7 +2174,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyHttpGrpcV3LogProvider">MeshConfig.Exte
 </thead>
 <tbody>
 <tr id="MeshConfig-ExtensionProvider-EnvoyHttpGrpcV3LogProvider-service">
-<td><code>service</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyHttpGrpcV3LogProvider-service">service</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>REQUIRED. Specifies the service that implements the Envoy ALS gRPC authorization service.
@@ -2189,7 +2189,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyHttpGrpcV3LogProvider">MeshConfig.Exte
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-EnvoyHttpGrpcV3LogProvider-port">
-<td><code>port</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyHttpGrpcV3LogProvider-port">port</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>REQUIRED. Specifies the port of the service.</p>
@@ -2200,7 +2200,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyHttpGrpcV3LogProvider">MeshConfig.Exte
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-EnvoyHttpGrpcV3LogProvider-log_name">
-<td><code>logName</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyHttpGrpcV3LogProvider-log_name">logName</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Optional. The friendly name of the access log.
@@ -2216,7 +2216,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyHttpGrpcV3LogProvider">MeshConfig.Exte
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-EnvoyHttpGrpcV3LogProvider-filter_state_objects_to_log">
-<td><code>filterStateObjectsToLog</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyHttpGrpcV3LogProvider-filter_state_objects_to_log">filterStateObjectsToLog</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>Optional. Additional filter state objects to log.</p>
@@ -2227,7 +2227,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyHttpGrpcV3LogProvider">MeshConfig.Exte
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-EnvoyHttpGrpcV3LogProvider-additional_request_headers_to_log">
-<td><code>additionalRequestHeadersToLog</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyHttpGrpcV3LogProvider-additional_request_headers_to_log">additionalRequestHeadersToLog</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>Optional. Additional request headers to log.</p>
@@ -2238,7 +2238,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyHttpGrpcV3LogProvider">MeshConfig.Exte
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-EnvoyHttpGrpcV3LogProvider-additional_response_headers_to_log">
-<td><code>additionalResponseHeadersToLog</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyHttpGrpcV3LogProvider-additional_response_headers_to_log">additionalResponseHeadersToLog</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>Optional. Additional response headers to log.</p>
@@ -2249,7 +2249,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyHttpGrpcV3LogProvider">MeshConfig.Exte
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-EnvoyHttpGrpcV3LogProvider-additional_response_trailers_to_log">
-<td><code>additionalResponseTrailersToLog</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyHttpGrpcV3LogProvider-additional_response_trailers_to_log">additionalResponseTrailersToLog</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>Optional. Additional response trailers to log.</p>
@@ -2278,7 +2278,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyTcpGrpcV3LogProvider">MeshConfig.Exten
 </thead>
 <tbody>
 <tr id="MeshConfig-ExtensionProvider-EnvoyTcpGrpcV3LogProvider-service">
-<td><code>service</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyTcpGrpcV3LogProvider-service">service</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>REQUIRED. Specifies the service that implements the Envoy ALS gRPC authorization service.
@@ -2293,7 +2293,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyTcpGrpcV3LogProvider">MeshConfig.Exten
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-EnvoyTcpGrpcV3LogProvider-port">
-<td><code>port</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyTcpGrpcV3LogProvider-port">port</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>REQUIRED. Specifies the port of the service.</p>
@@ -2304,7 +2304,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyTcpGrpcV3LogProvider">MeshConfig.Exten
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-EnvoyTcpGrpcV3LogProvider-log_name">
-<td><code>logName</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyTcpGrpcV3LogProvider-log_name">logName</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Optional. The friendly name of the access log.
@@ -2320,7 +2320,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyTcpGrpcV3LogProvider">MeshConfig.Exten
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-EnvoyTcpGrpcV3LogProvider-filter_state_objects_to_log">
-<td><code>filterStateObjectsToLog</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyTcpGrpcV3LogProvider-filter_state_objects_to_log">filterStateObjectsToLog</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>Optional. Additional filter state objects to log.</p>
@@ -2348,7 +2348,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyOpenTelemetryLogProvider">MeshConfig.E
 </thead>
 <tbody>
 <tr id="MeshConfig-ExtensionProvider-EnvoyOpenTelemetryLogProvider-service">
-<td><code>service</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyOpenTelemetryLogProvider-service">service</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>REQUIRED. Specifies the service that implements the Envoy ALS gRPC authorization service.
@@ -2363,7 +2363,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyOpenTelemetryLogProvider">MeshConfig.E
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-EnvoyOpenTelemetryLogProvider-port">
-<td><code>port</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyOpenTelemetryLogProvider-port">port</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>REQUIRED. Specifies the port of the service.</p>
@@ -2374,7 +2374,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyOpenTelemetryLogProvider">MeshConfig.E
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-EnvoyOpenTelemetryLogProvider-log_name">
-<td><code>logName</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyOpenTelemetryLogProvider-log_name">logName</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Optional. The friendly name of the access log.
@@ -2389,7 +2389,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyOpenTelemetryLogProvider">MeshConfig.E
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-EnvoyOpenTelemetryLogProvider-log_format">
-<td><code>logFormat</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyOpenTelemetryLogProvider-log_format">logFormat</a></code></td>
 <td><code><a href="#MeshConfig-ExtensionProvider-EnvoyOpenTelemetryLogProvider-LogFormat">LogFormat</a></code></td>
 <td>
 <p>Optional. Format for the proxy access log
@@ -2418,7 +2418,7 @@ <h2 id="MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider">MeshConfig.Ex
 </thead>
 <tbody>
 <tr id="MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider-service">
-<td><code>service</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider-service">service</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>REQUIRED. Specifies the OpenTelemetry endpoint that will receive OTLP traces.
@@ -2433,7 +2433,7 @@ <h2 id="MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider">MeshConfig.Ex
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider-port">
-<td><code>port</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider-port">port</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>REQUIRED. Specifies the port of the service.</p>
@@ -2444,7 +2444,7 @@ <h2 id="MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider">MeshConfig.Ex
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider-max_tag_length">
-<td><code>maxTagLength</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider-max_tag_length">maxTagLength</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>Optional. Controls the overall path length allowed in a reported span.
@@ -2456,7 +2456,7 @@ <h2 id="MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider">MeshConfig.Ex
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider-http">
-<td><code>http</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider-http">http</a></code></td>
 <td><code><a href="#MeshConfig-ExtensionProvider-HttpService">HttpService</a></code></td>
 <td>
 <p>Optional. Specifies the configuration for exporting OTLP traces via HTTP.
@@ -2513,7 +2513,7 @@ <h2 id="MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider">MeshConfig.Ex
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider-grpc">
-<td><code>grpc</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider-grpc">grpc</a></code></td>
 <td><code><a href="#MeshConfig-ExtensionProvider-GrpcService">GrpcService</a></code></td>
 <td>
 <p>Optional. Specifies the configuration for exporting OTLP traces via GRPC.
@@ -2557,7 +2557,7 @@ <h2 id="MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider">MeshConfig.Ex
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider-resource_detectors">
-<td><code>resourceDetectors</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider-resource_detectors">resourceDetectors</a></code></td>
 <td><code><a href="#MeshConfig-ExtensionProvider-ResourceDetectors">ResourceDetectors</a></code></td>
 <td>
 <p>Optional. Specifies <a href="https://opentelemetry.io/docs/specs/otel/resource/sdk/">Resource Detectors</a>
@@ -2579,7 +2579,7 @@ <h2 id="MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider">MeshConfig.Ex
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider-dynatrace_sampler" class="oneof oneof-start">
-<td><code>dynatraceSampler</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider-dynatrace_sampler">dynatraceSampler</a></code></td>
 <td><code><a href="#MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider-DynatraceSampler">DynatraceSampler (oneof)</a></code></td>
 <td>
 <p>The Dynatrace adaptive traffic management (ATM) sampler.</p>
@@ -2624,7 +2624,7 @@ <h2 id="MeshConfig-ExtensionProvider-HttpService">MeshConfig.ExtensionProvider.H
 </thead>
 <tbody>
 <tr id="MeshConfig-ExtensionProvider-HttpService-path">
-<td><code>path</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-HttpService-path">path</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>REQUIRED. Specifies the path on the service.</p>
@@ -2635,7 +2635,7 @@ <h2 id="MeshConfig-ExtensionProvider-HttpService">MeshConfig.ExtensionProvider.H
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-HttpService-timeout">
-<td><code>timeout</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-HttpService-timeout">timeout</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#duration">Duration</a></code></td>
 <td>
 <p>Optional. Specifies the timeout for the HTTP request.
@@ -2647,7 +2647,7 @@ <h2 id="MeshConfig-ExtensionProvider-HttpService">MeshConfig.ExtensionProvider.H
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-HttpService-headers">
-<td><code>headers</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-HttpService-headers">headers</a></code></td>
 <td><code><a href="#MeshConfig-ExtensionProvider-HttpHeader">HttpHeader[]</a></code></td>
 <td>
 <p>Optional. Allows specifying custom HTTP headers that will be added
@@ -2674,7 +2674,7 @@ <h2 id="MeshConfig-ExtensionProvider-HttpHeader">MeshConfig.ExtensionProvider.Ht
 </thead>
 <tbody>
 <tr id="MeshConfig-ExtensionProvider-HttpHeader-name">
-<td><code>name</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-HttpHeader-name">name</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>REQUIRED. The HTTP header name.</p>
@@ -2685,7 +2685,7 @@ <h2 id="MeshConfig-ExtensionProvider-HttpHeader">MeshConfig.ExtensionProvider.Ht
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-HttpHeader-value">
-<td><code>value</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-HttpHeader-value">value</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>REQUIRED. The HTTP header value.</p>
@@ -2711,7 +2711,7 @@ <h2 id="MeshConfig-ExtensionProvider-ResourceDetectors">MeshConfig.ExtensionProv
 </thead>
 <tbody>
 <tr id="MeshConfig-ExtensionProvider-ResourceDetectors-environment">
-<td><code>environment</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-ResourceDetectors-environment">environment</a></code></td>
 <td><code><a href="#MeshConfig-ExtensionProvider-ResourceDetectors-EnvironmentResourceDetector">EnvironmentResourceDetector</a></code></td>
 <td>
 </td>
@@ -2720,7 +2720,7 @@ <h2 id="MeshConfig-ExtensionProvider-ResourceDetectors">MeshConfig.ExtensionProv
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-ResourceDetectors-dynatrace">
-<td><code>dynatrace</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-ResourceDetectors-dynatrace">dynatrace</a></code></td>
 <td><code><a href="#MeshConfig-ExtensionProvider-ResourceDetectors-DynatraceResourceDetector">DynatraceResourceDetector</a></code></td>
 <td>
 </td>
@@ -2747,7 +2747,7 @@ <h2 id="MeshConfig-ExtensionProvider-GrpcService">MeshConfig.ExtensionProvider.G
 </thead>
 <tbody>
 <tr id="MeshConfig-ExtensionProvider-GrpcService-timeout">
-<td><code>timeout</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-GrpcService-timeout">timeout</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#duration">Duration</a></code></td>
 <td>
 <p>Optional. Specifies the timeout for the GRPC request.</p>
@@ -2758,7 +2758,7 @@ <h2 id="MeshConfig-ExtensionProvider-GrpcService">MeshConfig.ExtensionProvider.G
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-GrpcService-initial_metadata">
-<td><code>initialMetadata</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-GrpcService-initial_metadata">initialMetadata</a></code></td>
 <td><code><a href="#MeshConfig-ExtensionProvider-HttpHeader">HttpHeader[]</a></code></td>
 <td>
 <p>Optional. Additional metadata to include in streams initiated to the GrpcService. This can be used for
@@ -2786,7 +2786,7 @@ <h2 id="MeshConfig-ExtensionProvider-StackdriverProvider-Logging">MeshConfig.Ext
 </thead>
 <tbody>
 <tr id="MeshConfig-ExtensionProvider-StackdriverProvider-Logging-labels">
-<td><code>labels</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-StackdriverProvider-Logging-labels">labels</a></code></td>
 <td><code>map&lt;string,&nbsp;string&gt;</code></td>
 <td>
 <p>Collection of tag names and tag expressions to include in the log
@@ -2818,7 +2818,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyFileAccessLogProvider-LogFormat">MeshC
 </thead>
 <tbody>
 <tr id="MeshConfig-ExtensionProvider-EnvoyFileAccessLogProvider-LogFormat-text" class="oneof oneof-start">
-<td><code>text</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyFileAccessLogProvider-LogFormat-text">text</a></code></td>
 <td><code>string (oneof)</code></td>
 <td>
 <p>Textual format for the envoy access logs. Envoy <a href="https://www.envoyproxy.io/docs/envoy/latest/configuration/observability/access_log/usage#command-operators">command operators</a> may be
@@ -2833,7 +2833,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyFileAccessLogProvider-LogFormat">MeshC
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-EnvoyFileAccessLogProvider-LogFormat-labels" class="oneof">
-<td><code>labels</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyFileAccessLogProvider-LogFormat-labels">labels</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#struct">Struct (oneof)</a></code></td>
 <td>
 <p>JSON structured format for the envoy access logs. Envoy <a href="https://www.envoyproxy.io/docs/envoy/latest/configuration/observability/access_log/usage#command-operators">command operators</a>
@@ -2869,7 +2869,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyOpenTelemetryLogProvider-LogFormat">Me
 </thead>
 <tbody>
 <tr id="MeshConfig-ExtensionProvider-EnvoyOpenTelemetryLogProvider-LogFormat-text">
-<td><code>text</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyOpenTelemetryLogProvider-LogFormat-text">text</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Textual format for the envoy access logs. Envoy <a href="https://www.envoyproxy.io/docs/envoy/latest/configuration/observability/access_log/usage#command-operators">command operators</a> may be
@@ -2884,7 +2884,7 @@ <h2 id="MeshConfig-ExtensionProvider-EnvoyOpenTelemetryLogProvider-LogFormat">Me
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-EnvoyOpenTelemetryLogProvider-LogFormat-labels">
-<td><code>labels</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-EnvoyOpenTelemetryLogProvider-LogFormat-labels">labels</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#struct">Struct</a></code></td>
 <td>
 <p>Optional. Additional attributes that describe the specific event occurrence.
@@ -2921,7 +2921,7 @@ <h2 id="MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider-DynatraceSampl
 </thead>
 <tbody>
 <tr id="MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider-DynatraceSampler-tenant">
-<td><code>tenant</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider-DynatraceSampler-tenant">tenant</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>REQUIRED. The Dynatrace customer&rsquo;s tenant identifier.</p>
@@ -2933,7 +2933,7 @@ <h2 id="MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider-DynatraceSampl
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider-DynatraceSampler-cluster_id">
-<td><code>clusterId</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider-DynatraceSampler-cluster_id">clusterId</a></code></td>
 <td><code>int32</code></td>
 <td>
 <p>REQUIRED. The identifier of the cluster in the Dynatrace platform.
@@ -2946,7 +2946,7 @@ <h2 id="MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider-DynatraceSampl
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider-DynatraceSampler-root_spans_per_minute">
-<td><code>rootSpansPerMinute</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider-DynatraceSampler-root_spans_per_minute">rootSpansPerMinute</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>Optional. Number of sampled spans per minute to be used
@@ -2963,7 +2963,7 @@ <h2 id="MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider-DynatraceSampl
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider-DynatraceSampler-http_service">
-<td><code>httpService</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider-DynatraceSampler-http_service">httpService</a></code></td>
 <td><code><a href="#MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider-DynatraceSampler-DynatraceApi">DynatraceApi</a></code></td>
 <td>
 <p>Optional. Dynatrace HTTP API to obtain sampling configuration.</p>
@@ -2991,7 +2991,7 @@ <h2 id="MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider-DynatraceSampl
 </thead>
 <tbody>
 <tr id="MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider-DynatraceSampler-DynatraceApi-service">
-<td><code>service</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider-DynatraceSampler-DynatraceApi-service">service</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>REQUIRED. Specifies the Dynatrace environment to obtain the sampling configuration.
@@ -3005,7 +3005,7 @@ <h2 id="MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider-DynatraceSampl
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider-DynatraceSampler-DynatraceApi-port">
-<td><code>port</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider-DynatraceSampler-DynatraceApi-port">port</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>REQUIRED. Specifies the port of the service.</p>
@@ -3016,7 +3016,7 @@ <h2 id="MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider-DynatraceSampl
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider-DynatraceSampler-DynatraceApi-http">
-<td><code>http</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-OpenTelemetryTracingProvider-DynatraceSampler-DynatraceApi-http">http</a></code></td>
 <td><code><a href="#MeshConfig-ExtensionProvider-HttpService">HttpService</a></code></td>
 <td>
 <p>REQUIRED. Specifies sampling configuration URI.</p>
@@ -3060,7 +3060,7 @@ <h2 id="Tracing">Tracing</h2>
 </thead>
 <tbody>
 <tr id="Tracing-zipkin" class="oneof oneof-start">
-<td><code>zipkin</code></td>
+<td><code><a href="#Tracing-zipkin">zipkin</a></code></td>
 <td><code><a href="#Tracing-Zipkin">Zipkin (oneof)</a></code></td>
 <td>
 <p>Use a Zipkin tracer.</p>
@@ -3071,7 +3071,7 @@ <h2 id="Tracing">Tracing</h2>
 </td>
 </tr>
 <tr id="Tracing-lightstep" class="oneof">
-<td><code>lightstep</code></td>
+<td><code><a href="#Tracing-lightstep">lightstep</a></code></td>
 <td><code><a href="#Tracing-Lightstep">Lightstep (oneof)</a></code></td>
 <td>
 <p>Use a Lightstep tracer.
@@ -3084,7 +3084,7 @@ <h2 id="Tracing">Tracing</h2>
 </td>
 </tr>
 <tr id="Tracing-datadog" class="oneof">
-<td><code>datadog</code></td>
+<td><code><a href="#Tracing-datadog">datadog</a></code></td>
 <td><code><a href="#Tracing-Datadog">Datadog (oneof)</a></code></td>
 <td>
 <p>Use a Datadog tracer.</p>
@@ -3095,7 +3095,7 @@ <h2 id="Tracing">Tracing</h2>
 </td>
 </tr>
 <tr id="Tracing-stackdriver" class="oneof">
-<td><code>stackdriver</code></td>
+<td><code><a href="#Tracing-stackdriver">stackdriver</a></code></td>
 <td><code><a href="#Tracing-Stackdriver">Stackdriver (oneof)</a></code></td>
 <td>
 <p>Use a Stackdriver tracer.</p>
@@ -3106,7 +3106,7 @@ <h2 id="Tracing">Tracing</h2>
 </td>
 </tr>
 <tr id="Tracing-open_census_agent" class="oneof">
-<td><code>openCensusAgent</code></td>
+<td><code><a href="#Tracing-open_census_agent">openCensusAgent</a></code></td>
 <td><code><a href="#Tracing-OpenCensusAgent">OpenCensusAgent (oneof)</a></code></td>
 <td>
 <p>Use an OpenCensus tracer exporting to an OpenCensus agent.</p>
@@ -3117,7 +3117,7 @@ <h2 id="Tracing">Tracing</h2>
 </td>
 </tr>
 <tr id="Tracing-sampling">
-<td><code>sampling</code></td>
+<td><code><a href="#Tracing-sampling">sampling</a></code></td>
 <td><code>double</code></td>
 <td>
 <p>The percentage of requests (0.0 - 100.0) that will be randomly selected for trace generation,
@@ -3129,7 +3129,7 @@ <h2 id="Tracing">Tracing</h2>
 </td>
 </tr>
 <tr id="Tracing-tls_settings">
-<td><code>tlsSettings</code></td>
+<td><code><a href="#Tracing-tls_settings">tlsSettings</a></code></td>
 <td><code><a href="https://istio.io/docs/reference/config/networking/destination-rule.html#ClientTLSSettings">ClientTLSSettings</a></code></td>
 <td>
 <p>Use the tlsSettings to specify the tls mode to use. If the remote tracing service
@@ -3142,7 +3142,7 @@ <h2 id="Tracing">Tracing</h2>
 </td>
 </tr>
 <tr id="Tracing-enable_istio_tags">
-<td><code>enableIstioTags</code></td>
+<td><code><a href="#Tracing-enable_istio_tags">enableIstioTags</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#boolvalue">BoolValue</a></code></td>
 <td>
 <p>Determines whether or not trace spans generated by Envoy will include Istio specific tags.
@@ -3174,7 +3174,7 @@ <h2 id="Topology">Topology</h2>
 </thead>
 <tbody>
 <tr id="Topology-num_trusted_proxies">
-<td><code>numTrustedProxies</code></td>
+<td><code><a href="#Topology-num_trusted_proxies">numTrustedProxies</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>Number of trusted proxies deployed in front of the Istio gateway proxy.
@@ -3198,7 +3198,7 @@ <h2 id="Topology">Topology</h2>
 </td>
 </tr>
 <tr id="Topology-forward_client_cert_details">
-<td><code>forwardClientCertDetails</code></td>
+<td><code><a href="#Topology-forward_client_cert_details">forwardClientCertDetails</a></code></td>
 <td><code><a href="#ForwardClientCertDetails">ForwardClientCertDetails</a></code></td>
 <td>
 <p>Configures how the gateway proxy handles x-forwarded-client-cert (XFCC)
@@ -3210,7 +3210,7 @@ <h2 id="Topology">Topology</h2>
 </td>
 </tr>
 <tr id="Topology-proxy_protocol">
-<td><code>proxyProtocol</code></td>
+<td><code><a href="#Topology-proxy_protocol">proxyProtocol</a></code></td>
 <td><code><a href="#Topology-ProxyProtocolConfiguration">ProxyProtocolConfiguration</a></code></td>
 <td>
 <p>Enables <a href="http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt">PROXY protocol</a> for
@@ -3240,7 +3240,7 @@ <h2 id="PrivateKeyProvider">PrivateKeyProvider</h2>
 </thead>
 <tbody>
 <tr id="PrivateKeyProvider-cryptomb" class="oneof oneof-start">
-<td><code>cryptomb</code></td>
+<td><code><a href="#PrivateKeyProvider-cryptomb">cryptomb</a></code></td>
 <td><code><a href="#PrivateKeyProvider-CryptoMb">CryptoMb (oneof)</a></code></td>
 <td>
 <p>Use CryptoMb private key provider</p>
@@ -3251,7 +3251,7 @@ <h2 id="PrivateKeyProvider">PrivateKeyProvider</h2>
 </td>
 </tr>
 <tr id="PrivateKeyProvider-qat" class="oneof">
-<td><code>qat</code></td>
+<td><code><a href="#PrivateKeyProvider-qat">qat</a></code></td>
 <td><code><a href="#PrivateKeyProvider-QAT">QAT (oneof)</a></code></td>
 <td>
 <p>Use QAT private key provider</p>
@@ -3295,7 +3295,7 @@ <h2 id="ProxyConfig">ProxyConfig</h2>
 </thead>
 <tbody>
 <tr id="ProxyConfig-config_path">
-<td><code>configPath</code></td>
+<td><code><a href="#ProxyConfig-config_path">configPath</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Path to the generated configuration file directory.
@@ -3307,7 +3307,7 @@ <h2 id="ProxyConfig">ProxyConfig</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-binary_path">
-<td><code>binaryPath</code></td>
+<td><code><a href="#ProxyConfig-binary_path">binaryPath</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Path to the proxy binary</p>
@@ -3318,7 +3318,7 @@ <h2 id="ProxyConfig">ProxyConfig</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-service_cluster" class="oneof oneof-start">
-<td><code>serviceCluster</code></td>
+<td><code><a href="#ProxyConfig-service_cluster">serviceCluster</a></code></td>
 <td><code>string (oneof)</code></td>
 <td>
 <p>Service cluster defines the name for the <code>service_cluster</code> that is
@@ -3340,7 +3340,7 @@ <h2 id="ProxyConfig">ProxyConfig</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-tracing_service_name" class="oneof">
-<td><code>tracingServiceName</code></td>
+<td><code><a href="#ProxyConfig-tracing_service_name">tracingServiceName</a></code></td>
 <td><code><a href="#ProxyConfig-TracingServiceName">TracingServiceName (oneof)</a></code></td>
 <td>
 <p>Used by Envoy proxies to assign the values for the service names in trace
@@ -3352,7 +3352,7 @@ <h2 id="ProxyConfig">ProxyConfig</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-drain_duration">
-<td><code>drainDuration</code></td>
+<td><code><a href="#ProxyConfig-drain_duration">drainDuration</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#duration">Duration</a></code></td>
 <td>
 <p>The time in seconds that Envoy will drain connections during a hot
@@ -3365,7 +3365,7 @@ <h2 id="ProxyConfig">ProxyConfig</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-discovery_address">
-<td><code>discoveryAddress</code></td>
+<td><code><a href="#ProxyConfig-discovery_address">discoveryAddress</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Address of the discovery service exposing xDS with mTLS connection.
@@ -3377,7 +3377,7 @@ <h2 id="ProxyConfig">ProxyConfig</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-statsd_udp_address">
-<td><code>statsdUdpAddress</code></td>
+<td><code><a href="#ProxyConfig-statsd_udp_address">statsdUdpAddress</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>IP Address and Port of a statsd UDP listener (e.g. <code>10.75.241.127:9125</code>).</p>
@@ -3388,7 +3388,7 @@ <h2 id="ProxyConfig">ProxyConfig</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-proxy_admin_port">
-<td><code>proxyAdminPort</code></td>
+<td><code><a href="#ProxyConfig-proxy_admin_port">proxyAdminPort</a></code></td>
 <td><code>int32</code></td>
 <td>
 <p>Port on which Envoy should listen for administrative commands.
@@ -3400,7 +3400,7 @@ <h2 id="ProxyConfig">ProxyConfig</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-control_plane_auth_policy">
-<td><code>controlPlaneAuthPolicy</code></td>
+<td><code><a href="#ProxyConfig-control_plane_auth_policy">controlPlaneAuthPolicy</a></code></td>
 <td><code><a href="#AuthenticationPolicy">AuthenticationPolicy</a></code></td>
 <td>
 <p>AuthenticationPolicy defines how the proxy is authenticated when it connects to the control plane.
@@ -3412,7 +3412,7 @@ <h2 id="ProxyConfig">ProxyConfig</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-custom_config_file">
-<td><code>customConfigFile</code></td>
+<td><code><a href="#ProxyConfig-custom_config_file">customConfigFile</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>File path of custom proxy configuration, currently used by proxies
@@ -3424,7 +3424,7 @@ <h2 id="ProxyConfig">ProxyConfig</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-stat_name_length">
-<td><code>statNameLength</code></td>
+<td><code><a href="#ProxyConfig-stat_name_length">statNameLength</a></code></td>
 <td><code>int32</code></td>
 <td>
 <p>Maximum length of name field in Envoy&rsquo;s metrics. The length of the name field
@@ -3439,7 +3439,7 @@ <h2 id="ProxyConfig">ProxyConfig</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-concurrency">
-<td><code>concurrency</code></td>
+<td><code><a href="#ProxyConfig-concurrency">concurrency</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#int32value">Int32Value</a></code></td>
 <td>
 <p>The number of worker threads to run.
@@ -3453,7 +3453,7 @@ <h2 id="ProxyConfig">ProxyConfig</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-proxy_bootstrap_template_path">
-<td><code>proxyBootstrapTemplatePath</code></td>
+<td><code><a href="#ProxyConfig-proxy_bootstrap_template_path">proxyBootstrapTemplatePath</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Path to the proxy bootstrap template file</p>
@@ -3464,7 +3464,7 @@ <h2 id="ProxyConfig">ProxyConfig</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-interception_mode">
-<td><code>interceptionMode</code></td>
+<td><code><a href="#ProxyConfig-interception_mode">interceptionMode</a></code></td>
 <td><code><a href="#ProxyConfig-InboundInterceptionMode">InboundInterceptionMode</a></code></td>
 <td>
 <p>The mode used to redirect inbound traffic to Envoy.</p>
@@ -3475,7 +3475,7 @@ <h2 id="ProxyConfig">ProxyConfig</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-tracing">
-<td><code>tracing</code></td>
+<td><code><a href="#ProxyConfig-tracing">tracing</a></code></td>
 <td><code><a href="#Tracing">Tracing</a></code></td>
 <td>
 <p>Tracing configuration to be used by the proxy.</p>
@@ -3486,7 +3486,7 @@ <h2 id="ProxyConfig">ProxyConfig</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-envoy_access_log_service">
-<td><code>envoyAccessLogService</code></td>
+<td><code><a href="#ProxyConfig-envoy_access_log_service">envoyAccessLogService</a></code></td>
 <td><code><a href="#RemoteService">RemoteService</a></code></td>
 <td>
 <p>Address of the service to which access logs from Envoys should be
@@ -3500,7 +3500,7 @@ <h2 id="ProxyConfig">ProxyConfig</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-envoy_metrics_service">
-<td><code>envoyMetricsService</code></td>
+<td><code><a href="#ProxyConfig-envoy_metrics_service">envoyMetricsService</a></code></td>
 <td><code><a href="#RemoteService">RemoteService</a></code></td>
 <td>
 <p>Address of the Envoy Metrics Service implementation (e.g. <code>metrics-service:15000</code>).
@@ -3513,7 +3513,7 @@ <h2 id="ProxyConfig">ProxyConfig</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-proxy_metadata">
-<td><code>proxyMetadata</code></td>
+<td><code><a href="#ProxyConfig-proxy_metadata">proxyMetadata</a></code></td>
 <td><code>map&lt;string,&nbsp;string&gt;</code></td>
 <td>
 <p>Additional environment variables for the proxy.
@@ -3525,7 +3525,7 @@ <h2 id="ProxyConfig">ProxyConfig</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-runtime_values">
-<td><code>runtimeValues</code></td>
+<td><code><a href="#ProxyConfig-runtime_values">runtimeValues</a></code></td>
 <td><code>map&lt;string,&nbsp;string&gt;</code></td>
 <td>
 <p>Envoy <a href="https://www.envoyproxy.io/docs/envoy/latest/intro/arch_overview/operations/runtime">runtime configuration</a> to set during bootstrapping.
@@ -3537,7 +3537,7 @@ <h2 id="ProxyConfig">ProxyConfig</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-status_port">
-<td><code>statusPort</code></td>
+<td><code><a href="#ProxyConfig-status_port">statusPort</a></code></td>
 <td><code>int32</code></td>
 <td>
 <p>Port on which the agent should listen for administrative commands such as readiness probe.
@@ -3549,7 +3549,7 @@ <h2 id="ProxyConfig">ProxyConfig</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-extra_stat_tags">
-<td><code>extraStatTags</code></td>
+<td><code><a href="#ProxyConfig-extra_stat_tags">extraStatTags</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>An additional list of tags to extract from the in-proxy Istio telemetry. These extra tags can be
@@ -3564,7 +3564,7 @@ <h2 id="ProxyConfig">ProxyConfig</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-gateway_topology">
-<td><code>gatewayTopology</code></td>
+<td><code><a href="#ProxyConfig-gateway_topology">gatewayTopology</a></code></td>
 <td><code><a href="#Topology">Topology</a></code></td>
 <td>
 <p>Topology encapsulates the configuration which describes where the proxy is
@@ -3579,7 +3579,7 @@ <h2 id="ProxyConfig">ProxyConfig</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-termination_drain_duration">
-<td><code>terminationDrainDuration</code></td>
+<td><code><a href="#ProxyConfig-termination_drain_duration">terminationDrainDuration</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#duration">Duration</a></code></td>
 <td>
 <p>The amount of time allowed for connections to complete on proxy shutdown.
@@ -3594,7 +3594,7 @@ <h2 id="ProxyConfig">ProxyConfig</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-mesh_id">
-<td><code>meshId</code></td>
+<td><code><a href="#ProxyConfig-mesh_id">meshId</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>The unique identifier for the <a href="https://istio.io/docs/reference/glossary/#service-mesh">service mesh</a>
@@ -3607,7 +3607,7 @@ <h2 id="ProxyConfig">ProxyConfig</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-readiness_probe">
-<td><code>readinessProbe</code></td>
+<td><code><a href="#ProxyConfig-readiness_probe">readinessProbe</a></code></td>
 <td><code><a href="https://istio.io/docs/reference/config/networking/workload-group.html#ReadinessProbe">ReadinessProbe</a></code></td>
 <td>
 <p>VM Health Checking readiness probe. This health check config exactly mirrors the
@@ -3620,7 +3620,7 @@ <h2 id="ProxyConfig">ProxyConfig</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-proxy_stats_matcher">
-<td><code>proxyStatsMatcher</code></td>
+<td><code><a href="#ProxyConfig-proxy_stats_matcher">proxyStatsMatcher</a></code></td>
 <td><code><a href="#ProxyConfig-ProxyStatsMatcher">ProxyStatsMatcher</a></code></td>
 <td>
 <p>Proxy stats matcher defines configuration for reporting custom Envoy stats.
@@ -3652,7 +3652,7 @@ <h2 id="ProxyConfig">ProxyConfig</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-hold_application_until_proxy_starts">
-<td><code>holdApplicationUntilProxyStarts</code></td>
+<td><code><a href="#ProxyConfig-hold_application_until_proxy_starts">holdApplicationUntilProxyStarts</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#boolvalue">BoolValue</a></code></td>
 <td>
 <p>Boolean flag for enabling/disabling the holdApplicationUntilProxyStarts behavior.
@@ -3666,7 +3666,7 @@ <h2 id="ProxyConfig">ProxyConfig</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-ca_certificates_pem">
-<td><code>caCertificatesPem</code></td>
+<td><code><a href="#ProxyConfig-ca_certificates_pem">caCertificatesPem</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>The PEM data of the extra root certificates for workload-to-workload communication.
@@ -3680,18 +3680,37 @@ <h2 id="ProxyConfig">ProxyConfig</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-image">
-<td><code>image</code></td>
+<td><code><a href="#ProxyConfig-image">image</a></code></td>
 <td><code><a href="https://istio.io/docs/reference/config/networking/proxy-config.html#ProxyImage">ProxyImage</a></code></td>
 <td>
 <p>Specifies the details of the proxy image.</p>
 
+</td>
+<td>
+No
+</td>
+</tr>
+<tr id="ProxyConfig-preserve_case">
+<td><code><a href="#ProxyConfig-preserve_case">preserveCase</a></code></td>
+<td><code>bool</code></td>
+<td>
+<p>When true, the original case of HTTP/1.x headers will be preserved
+as they pass through the proxy, rather than normalizing them to lowercase.
+This field is particularly useful for applications that require case-sensitive
+headers for interoperability with downstream systems or APIs that expect specific
+casing.
+The preserve_case option only applies to HTTP/1.x traffic, as HTTP/2 requires all headers
+to be lowercase per the protocol specification. Envoy will ignore this field for HTTP/2
+requests and automatically normalize headers to lowercase, ensuring compliance with HTTP/2
+standards.</p>
+
 </td>
 <td>
 No
 </td>
 </tr>
 <tr id="ProxyConfig-private_key_provider">
-<td><code>privateKeyProvider</code></td>
+<td><code><a href="#ProxyConfig-private_key_provider">privateKeyProvider</a></code></td>
 <td><code><a href="#PrivateKeyProvider">PrivateKeyProvider</a></code></td>
 <td>
 <p>Specifies the details of the Private Key Provider configuration for gateway and sidecar proxies.</p>
@@ -3702,7 +3721,7 @@ <h2 id="ProxyConfig">ProxyConfig</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-proxy_headers">
-<td><code>proxyHeaders</code></td>
+<td><code><a href="#ProxyConfig-proxy_headers">proxyHeaders</a></code></td>
 <td><code><a href="#ProxyConfig-ProxyHeaders">ProxyHeaders</a></code></td>
 <td>
 <p>Define the set of headers to add/modify for HTTP request/responses.</p>
@@ -3737,7 +3756,7 @@ <h2 id="ProxyConfig">ProxyConfig</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-zipkin_address" class="deprecated ">
-<td><code>zipkinAddress</code></td>
+<td><code><a href="#ProxyConfig-zipkin_address">zipkinAddress</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Address of the Zipkin service (e.g. <em>zipkin:9411</em>).
@@ -3764,7 +3783,7 @@ <h2 id="RemoteService">RemoteService</h2>
 </thead>
 <tbody>
 <tr id="RemoteService-address">
-<td><code>address</code></td>
+<td><code><a href="#RemoteService-address">address</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Address of a remove service used for various purposes (access log
@@ -3777,7 +3796,7 @@ <h2 id="RemoteService">RemoteService</h2>
 </td>
 </tr>
 <tr id="RemoteService-tls_settings">
-<td><code>tlsSettings</code></td>
+<td><code><a href="#RemoteService-tls_settings">tlsSettings</a></code></td>
 <td><code><a href="https://istio.io/docs/reference/config/networking/destination-rule.html#ClientTLSSettings">ClientTLSSettings</a></code></td>
 <td>
 <p>Use the <code>tlsSettings</code> to specify the tls mode to use. If the remote service
@@ -3790,7 +3809,7 @@ <h2 id="RemoteService">RemoteService</h2>
 </td>
 </tr>
 <tr id="RemoteService-tcp_keepalive">
-<td><code>tcpKeepalive</code></td>
+<td><code><a href="#RemoteService-tcp_keepalive">tcpKeepalive</a></code></td>
 <td><code><a href="https://istio.io/docs/reference/config/networking/destination-rule.html#ConnectionPoolSettings-TCPSettings-TcpKeepalive">TcpKeepalive</a></code></td>
 <td>
 <p>If set then set <code>SO_KEEPALIVE</code> on the socket to enable TCP Keepalives.</p>
@@ -3818,7 +3837,7 @@ <h2 id="Tracing-Zipkin">Tracing.Zipkin</h2>
 </thead>
 <tbody>
 <tr id="Tracing-Zipkin-address">
-<td><code>address</code></td>
+<td><code><a href="#Tracing-Zipkin-address">address</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Address of the Zipkin service (e.g. <em>zipkin:9411</em>).</p>
@@ -3846,7 +3865,7 @@ <h2 id="Tracing-Datadog">Tracing.Datadog</h2>
 </thead>
 <tbody>
 <tr id="Tracing-Datadog-address">
-<td><code>address</code></td>
+<td><code><a href="#Tracing-Datadog-address">address</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Address of the Datadog Agent.</p>
@@ -3899,7 +3918,7 @@ <h2 id="Tracing-OpenCensusAgent">Tracing.OpenCensusAgent</h2>
 </thead>
 <tbody>
 <tr id="Tracing-OpenCensusAgent-address">
-<td><code>address</code></td>
+<td><code><a href="#Tracing-OpenCensusAgent-address">address</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>gRPC address for the OpenCensus agent (e.g. dns://authority/host:port or
@@ -3913,7 +3932,7 @@ <h2 id="Tracing-OpenCensusAgent">Tracing.OpenCensusAgent</h2>
 </td>
 </tr>
 <tr id="Tracing-OpenCensusAgent-context">
-<td><code>context</code></td>
+<td><code><a href="#Tracing-OpenCensusAgent-context">context</a></code></td>
 <td><code><a href="#Tracing-OpenCensusAgent-TraceContext">TraceContext[]</a></code></td>
 <td>
 <p>Specifies the set of context propagation headers used for distributed
@@ -3949,7 +3968,7 @@ <h2 id="PrivateKeyProvider-CryptoMb">PrivateKeyProvider.CryptoMb</h2>
 </thead>
 <tbody>
 <tr id="PrivateKeyProvider-CryptoMb-poll_delay">
-<td><code>pollDelay</code></td>
+<td><code><a href="#PrivateKeyProvider-CryptoMb-poll_delay">pollDelay</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#duration">Duration</a></code></td>
 <td>
 <p>How long to wait until the per-thread processing queue should be processed. If the processing queue
@@ -3965,7 +3984,7 @@ <h2 id="PrivateKeyProvider-CryptoMb">PrivateKeyProvider.CryptoMb</h2>
 </td>
 </tr>
 <tr id="PrivateKeyProvider-CryptoMb-fallback">
-<td><code>fallback</code></td>
+<td><code><a href="#PrivateKeyProvider-CryptoMb-fallback">fallback</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#boolvalue">BoolValue</a></code></td>
 <td>
 <p>If the private key provider isn’t available (eg. the required hardware capability doesn’t existed)
@@ -3995,7 +4014,7 @@ <h2 id="PrivateKeyProvider-QAT">PrivateKeyProvider.QAT</h2>
 </thead>
 <tbody>
 <tr id="PrivateKeyProvider-QAT-poll_delay">
-<td><code>pollDelay</code></td>
+<td><code><a href="#PrivateKeyProvider-QAT-poll_delay">pollDelay</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#duration">Duration</a></code></td>
 <td>
 <p>How long to wait before polling the hardware accelerator after a request has been submitted there.
@@ -4009,7 +4028,7 @@ <h2 id="PrivateKeyProvider-QAT">PrivateKeyProvider.QAT</h2>
 </td>
 </tr>
 <tr id="PrivateKeyProvider-QAT-fallback">
-<td><code>fallback</code></td>
+<td><code><a href="#PrivateKeyProvider-QAT-fallback">fallback</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#boolvalue">BoolValue</a></code></td>
 <td>
 <p>If the private key provider isn’t available (eg. the required hardware capability doesn’t existed)
@@ -4040,7 +4059,7 @@ <h2 id="ProxyConfig-ProxyStatsMatcher">ProxyConfig.ProxyStatsMatcher</h2>
 </thead>
 <tbody>
 <tr id="ProxyConfig-ProxyStatsMatcher-inclusion_prefixes">
-<td><code>inclusionPrefixes</code></td>
+<td><code><a href="#ProxyConfig-ProxyStatsMatcher-inclusion_prefixes">inclusionPrefixes</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>Proxy stats name prefix matcher for inclusion.</p>
@@ -4051,7 +4070,7 @@ <h2 id="ProxyConfig-ProxyStatsMatcher">ProxyConfig.ProxyStatsMatcher</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-ProxyStatsMatcher-inclusion_suffixes">
-<td><code>inclusionSuffixes</code></td>
+<td><code><a href="#ProxyConfig-ProxyStatsMatcher-inclusion_suffixes">inclusionSuffixes</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>Proxy stats name suffix matcher for inclusion.</p>
@@ -4062,7 +4081,7 @@ <h2 id="ProxyConfig-ProxyStatsMatcher">ProxyConfig.ProxyStatsMatcher</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-ProxyStatsMatcher-inclusion_regexps">
-<td><code>inclusionRegexps</code></td>
+<td><code><a href="#ProxyConfig-ProxyStatsMatcher-inclusion_regexps">inclusionRegexps</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>Proxy stats name regexps matcher for inclusion.</p>
@@ -4088,7 +4107,7 @@ <h2 id="ProxyConfig-ProxyHeaders">ProxyConfig.ProxyHeaders</h2>
 </thead>
 <tbody>
 <tr id="ProxyConfig-ProxyHeaders-forwarded_client_cert">
-<td><code>forwardedClientCert</code></td>
+<td><code><a href="#ProxyConfig-ProxyHeaders-forwarded_client_cert">forwardedClientCert</a></code></td>
 <td><code><a href="#ForwardClientCertDetails">ForwardClientCertDetails</a></code></td>
 <td>
 <p>Controls the <code>X-Forwarded-Client-Cert</code> header for inbound sidecar requests. To set this on gateways, use the <code>Topology</code> setting.
@@ -4101,7 +4120,7 @@ <h2 id="ProxyConfig-ProxyHeaders">ProxyConfig.ProxyHeaders</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-ProxyHeaders-set_current_client_cert_details">
-<td><code>setCurrentClientCertDetails</code></td>
+<td><code><a href="#ProxyConfig-ProxyHeaders-set_current_client_cert_details">setCurrentClientCertDetails</a></code></td>
 <td><code><a href="#ProxyConfig-ProxyHeaders-SetCurrentClientCertDetails">SetCurrentClientCertDetails</a></code></td>
 <td>
 <p>This field is valid only when forward_client_cert_details is APPEND_FORWARD or SANITIZE_SET
@@ -4115,7 +4134,7 @@ <h2 id="ProxyConfig-ProxyHeaders">ProxyConfig.ProxyHeaders</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-ProxyHeaders-request_id">
-<td><code>requestId</code></td>
+<td><code><a href="#ProxyConfig-ProxyHeaders-request_id">requestId</a></code></td>
 <td><code><a href="#ProxyConfig-ProxyHeaders-RequestId">RequestId</a></code></td>
 <td>
 <p>Controls the <code>X-Request-Id</code> header. If enabled, a request ID is generated for each request if one is not already set.
@@ -4130,7 +4149,7 @@ <h2 id="ProxyConfig-ProxyHeaders">ProxyConfig.ProxyHeaders</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-ProxyHeaders-server">
-<td><code>server</code></td>
+<td><code><a href="#ProxyConfig-ProxyHeaders-server">server</a></code></td>
 <td><code><a href="#ProxyConfig-ProxyHeaders-Server">Server</a></code></td>
 <td>
 <p>Controls the <code>server</code> header. If enabled, the <code>Server: istio-envoy</code> header is set in response headers for inbound traffic (including gateways).
@@ -4142,7 +4161,7 @@ <h2 id="ProxyConfig-ProxyHeaders">ProxyConfig.ProxyHeaders</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-ProxyHeaders-attempt_count">
-<td><code>attemptCount</code></td>
+<td><code><a href="#ProxyConfig-ProxyHeaders-attempt_count">attemptCount</a></code></td>
 <td><code><a href="#ProxyConfig-ProxyHeaders-AttemptCount">AttemptCount</a></code></td>
 <td>
 <p>Controls the <code>X-Envoy-Attempt-Count</code> header.
@@ -4156,7 +4175,7 @@ <h2 id="ProxyConfig-ProxyHeaders">ProxyConfig.ProxyHeaders</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-ProxyHeaders-envoy_debug_headers">
-<td><code>envoyDebugHeaders</code></td>
+<td><code><a href="#ProxyConfig-ProxyHeaders-envoy_debug_headers">envoyDebugHeaders</a></code></td>
 <td><code><a href="#ProxyConfig-ProxyHeaders-EnvoyDebugHeaders">EnvoyDebugHeaders</a></code></td>
 <td>
 <p>Controls various <code>X-Envoy-*</code> headers, such as <code>X-Envoy-Overloaded</code> and <code>X-Envoy-Upstream-Service-Time</code>. If enabled,
@@ -4171,7 +4190,7 @@ <h2 id="ProxyConfig-ProxyHeaders">ProxyConfig.ProxyHeaders</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-ProxyHeaders-metadata_exchange_headers">
-<td><code>metadataExchangeHeaders</code></td>
+<td><code><a href="#ProxyConfig-ProxyHeaders-metadata_exchange_headers">metadataExchangeHeaders</a></code></td>
 <td><code><a href="#ProxyConfig-ProxyHeaders-MetadataExchangeHeaders">MetadataExchangeHeaders</a></code></td>
 <td>
 <p>Controls Istio metadata exchange headers <code>X-Envoy-Peer-Metadata</code> and <code>X-Envoy-Peer-Metadata-Id</code>.
@@ -4199,7 +4218,7 @@ <h2 id="ProxyConfig-ProxyHeaders-Server">ProxyConfig.ProxyHeaders.Server</h2>
 </thead>
 <tbody>
 <tr id="ProxyConfig-ProxyHeaders-Server-disabled">
-<td><code>disabled</code></td>
+<td><code><a href="#ProxyConfig-ProxyHeaders-Server-disabled">disabled</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#boolvalue">BoolValue</a></code></td>
 <td>
 </td>
@@ -4208,7 +4227,7 @@ <h2 id="ProxyConfig-ProxyHeaders-Server">ProxyConfig.ProxyHeaders.Server</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-ProxyHeaders-Server-value">
-<td><code>value</code></td>
+<td><code><a href="#ProxyConfig-ProxyHeaders-Server-value">value</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>If set, and the server header is enabled, this value will be set as the server header. By default, <code>istio-envoy</code> will be used.</p>
@@ -4234,7 +4253,7 @@ <h2 id="ProxyConfig-ProxyHeaders-RequestId">ProxyConfig.ProxyHeaders.RequestId</
 </thead>
 <tbody>
 <tr id="ProxyConfig-ProxyHeaders-RequestId-disabled">
-<td><code>disabled</code></td>
+<td><code><a href="#ProxyConfig-ProxyHeaders-RequestId-disabled">disabled</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#boolvalue">BoolValue</a></code></td>
 <td>
 </td>
@@ -4258,7 +4277,7 @@ <h2 id="ProxyConfig-ProxyHeaders-AttemptCount">ProxyConfig.ProxyHeaders.AttemptC
 </thead>
 <tbody>
 <tr id="ProxyConfig-ProxyHeaders-AttemptCount-disabled">
-<td><code>disabled</code></td>
+<td><code><a href="#ProxyConfig-ProxyHeaders-AttemptCount-disabled">disabled</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#boolvalue">BoolValue</a></code></td>
 <td>
 </td>
@@ -4282,7 +4301,7 @@ <h2 id="ProxyConfig-ProxyHeaders-EnvoyDebugHeaders">ProxyConfig.ProxyHeaders.Env
 </thead>
 <tbody>
 <tr id="ProxyConfig-ProxyHeaders-EnvoyDebugHeaders-disabled">
-<td><code>disabled</code></td>
+<td><code><a href="#ProxyConfig-ProxyHeaders-EnvoyDebugHeaders-disabled">disabled</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#boolvalue">BoolValue</a></code></td>
 <td>
 </td>
@@ -4306,7 +4325,7 @@ <h2 id="ProxyConfig-ProxyHeaders-MetadataExchangeHeaders">ProxyConfig.ProxyHeade
 </thead>
 <tbody>
 <tr id="ProxyConfig-ProxyHeaders-MetadataExchangeHeaders-mode">
-<td><code>mode</code></td>
+<td><code><a href="#ProxyConfig-ProxyHeaders-MetadataExchangeHeaders-mode">mode</a></code></td>
 <td><code><a href="#ProxyConfig-ProxyHeaders-MetadataExchangeMode">MetadataExchangeMode</a></code></td>
 <td>
 </td>
@@ -4330,7 +4349,7 @@ <h2 id="ProxyConfig-ProxyHeaders-SetCurrentClientCertDetails">ProxyConfig.ProxyH
 </thead>
 <tbody>
 <tr id="ProxyConfig-ProxyHeaders-SetCurrentClientCertDetails-subject">
-<td><code>subject</code></td>
+<td><code><a href="#ProxyConfig-ProxyHeaders-SetCurrentClientCertDetails-subject">subject</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#boolvalue">BoolValue</a></code></td>
 <td>
 <p>Whether to forward the subject of the client cert. Defaults to true.</p>
@@ -4341,7 +4360,7 @@ <h2 id="ProxyConfig-ProxyHeaders-SetCurrentClientCertDetails">ProxyConfig.ProxyH
 </td>
 </tr>
 <tr id="ProxyConfig-ProxyHeaders-SetCurrentClientCertDetails-cert">
-<td><code>cert</code></td>
+<td><code><a href="#ProxyConfig-ProxyHeaders-SetCurrentClientCertDetails-cert">cert</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#boolvalue">BoolValue</a></code></td>
 <td>
 <p>Whether to forward the entire client cert in URL encoded PEM format. This will appear in the
@@ -4354,7 +4373,7 @@ <h2 id="ProxyConfig-ProxyHeaders-SetCurrentClientCertDetails">ProxyConfig.ProxyH
 </td>
 </tr>
 <tr id="ProxyConfig-ProxyHeaders-SetCurrentClientCertDetails-chain">
-<td><code>chain</code></td>
+<td><code><a href="#ProxyConfig-ProxyHeaders-SetCurrentClientCertDetails-chain">chain</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#boolvalue">BoolValue</a></code></td>
 <td>
 <p>Whether to forward the entire client cert chain (including the leaf cert) in URL encoded PEM
@@ -4368,7 +4387,7 @@ <h2 id="ProxyConfig-ProxyHeaders-SetCurrentClientCertDetails">ProxyConfig.ProxyH
 </td>
 </tr>
 <tr id="ProxyConfig-ProxyHeaders-SetCurrentClientCertDetails-dns">
-<td><code>dns</code></td>
+<td><code><a href="#ProxyConfig-ProxyHeaders-SetCurrentClientCertDetails-dns">dns</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#boolvalue">BoolValue</a></code></td>
 <td>
 <p>Whether to forward the DNS type Subject Alternative Names of the client cert.
@@ -4380,7 +4399,7 @@ <h2 id="ProxyConfig-ProxyHeaders-SetCurrentClientCertDetails">ProxyConfig.ProxyH
 </td>
 </tr>
 <tr id="ProxyConfig-ProxyHeaders-SetCurrentClientCertDetails-uri">
-<td><code>uri</code></td>
+<td><code><a href="#ProxyConfig-ProxyHeaders-SetCurrentClientCertDetails-uri">uri</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#boolvalue">BoolValue</a></code></td>
 <td>
 <p>Whether to forward the URI type Subject Alternative Name of the client cert. Defaults to
@@ -4413,7 +4432,7 @@ <h2 id="Network">Network</h2>
 </thead>
 <tbody>
 <tr id="Network-endpoints">
-<td><code>endpoints</code></td>
+<td><code><a href="#Network-endpoints">endpoints</a></code></td>
 <td><code><a href="#Network-NetworkEndpoints">NetworkEndpoints[]</a></code></td>
 <td>
 <p>The list of endpoints in the network (obtained through the
@@ -4426,7 +4445,7 @@ <h2 id="Network">Network</h2>
 </td>
 </tr>
 <tr id="Network-gateways">
-<td><code>gateways</code></td>
+<td><code><a href="#Network-gateways">gateways</a></code></td>
 <td><code><a href="#Network-IstioNetworkGateway">IstioNetworkGateway[]</a></code></td>
 <td>
 <p>Set of gateways associated with the network.</p>
@@ -4469,7 +4488,7 @@ <h2 id="MeshNetworks">MeshNetworks</h2>
 </thead>
 <tbody>
 <tr id="MeshNetworks-networks">
-<td><code>networks</code></td>
+<td><code><a href="#MeshNetworks-networks">networks</a></code></td>
 <td><code>map&lt;string,&nbsp;<a href="#Network">Network</a>&gt;</code></td>
 <td>
 <p>The set of networks inside this mesh. Each network should
@@ -4519,7 +4538,7 @@ <h2 id="Network-NetworkEndpoints">Network.NetworkEndpoints</h2>
 </thead>
 <tbody>
 <tr id="Network-NetworkEndpoints-from_cidr" class="oneof oneof-start">
-<td><code>fromCidr</code></td>
+<td><code><a href="#Network-NetworkEndpoints-from_cidr">fromCidr</a></code></td>
 <td><code>string (oneof)</code></td>
 <td>
 <p>A CIDR range for the set of endpoints in this network. The CIDR
@@ -4531,7 +4550,7 @@ <h2 id="Network-NetworkEndpoints">Network.NetworkEndpoints</h2>
 </td>
 </tr>
 <tr id="Network-NetworkEndpoints-from_registry" class="oneof">
-<td><code>fromRegistry</code></td>
+<td><code><a href="#Network-NetworkEndpoints-from_registry">fromRegistry</a></code></td>
 <td><code>string (oneof)</code></td>
 <td>
 <p>Add all endpoints from the specified registry into this network.
@@ -4564,7 +4583,7 @@ <h2 id="Network-IstioNetworkGateway">Network.IstioNetworkGateway</h2>
 </thead>
 <tbody>
 <tr id="Network-IstioNetworkGateway-registry_service_name" class="oneof oneof-start">
-<td><code>registryServiceName</code></td>
+<td><code><a href="#Network-IstioNetworkGateway-registry_service_name">registryServiceName</a></code></td>
 <td><code>string (oneof)</code></td>
 <td>
 <p>A fully qualified domain name of the gateway service.  Pilot will
@@ -4581,7 +4600,7 @@ <h2 id="Network-IstioNetworkGateway">Network.IstioNetworkGateway</h2>
 </td>
 </tr>
 <tr id="Network-IstioNetworkGateway-address" class="oneof">
-<td><code>address</code></td>
+<td><code><a href="#Network-IstioNetworkGateway-address">address</a></code></td>
 <td><code>string (oneof)</code></td>
 <td>
 <p>IP address or externally resolvable DNS address associated with the gateway.</p>
@@ -4592,7 +4611,7 @@ <h2 id="Network-IstioNetworkGateway">Network.IstioNetworkGateway</h2>
 </td>
 </tr>
 <tr id="Network-IstioNetworkGateway-port">
-<td><code>port</code></td>
+<td><code><a href="#Network-IstioNetworkGateway-port">port</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>The port associated with the gateway.</p>
@@ -4603,7 +4622,7 @@ <h2 id="Network-IstioNetworkGateway">Network.IstioNetworkGateway</h2>
 </td>
 </tr>
 <tr id="Network-IstioNetworkGateway-locality">
-<td><code>locality</code></td>
+<td><code><a href="#Network-IstioNetworkGateway-locality">locality</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>The locality associated with an explicitly specified gateway (i.e. ip)</p>
@@ -4627,7 +4646,7 @@ <h2 id="MeshConfig-OutboundTrafficPolicy-Mode">MeshConfig.OutboundTrafficPolicy.
 </thead>
 <tbody>
 <tr id="MeshConfig-OutboundTrafficPolicy-Mode-REGISTRY_ONLY">
-<td><code>REGISTRY_ONLY</code></td>
+<td><code><a href="#MeshConfig-OutboundTrafficPolicy-Mode-REGISTRY_ONLY">REGISTRY_ONLY</a></code></td>
 <td>
 <p>In <code>REGISTRY_ONLY</code> mode, unknown outbound traffic will be dropped.
 Traffic destinations must be explicitly declared into the service registry through <code>ServiceEntry</code> configurations.</p>
@@ -4638,7 +4657,7 @@ <h2 id="MeshConfig-OutboundTrafficPolicy-Mode">MeshConfig.OutboundTrafficPolicy.
 </td>
 </tr>
 <tr id="MeshConfig-OutboundTrafficPolicy-Mode-ALLOW_ANY">
-<td><code>ALLOW_ANY</code></td>
+<td><code><a href="#MeshConfig-OutboundTrafficPolicy-Mode-ALLOW_ANY">ALLOW_ANY</a></code></td>
 <td>
 <p>In <code>ALLOW_ANY</code> mode, any traffic to unknown destinations will be allowed.
 Unknown destination traffic will have limited functionality, however, such as reduced observability.
@@ -4661,7 +4680,7 @@ <h2 id="MeshConfig-InboundTrafficPolicy-Mode">MeshConfig.InboundTrafficPolicy.Mo
 </thead>
 <tbody>
 <tr id="MeshConfig-InboundTrafficPolicy-Mode-PASSTHROUGH">
-<td><code>PASSTHROUGH</code></td>
+<td><code><a href="#MeshConfig-InboundTrafficPolicy-Mode-PASSTHROUGH">PASSTHROUGH</a></code></td>
 <td>
 <p>inbound traffic will be passed through to the destination listening
 on Pod IP. This matches the behavior without Istio enabled at all
@@ -4670,7 +4689,7 @@ <h2 id="MeshConfig-InboundTrafficPolicy-Mode">MeshConfig.InboundTrafficPolicy.Mo
 </td>
 </tr>
 <tr id="MeshConfig-InboundTrafficPolicy-Mode-LOCALHOST">
-<td><code>LOCALHOST</code></td>
+<td><code><a href="#MeshConfig-InboundTrafficPolicy-Mode-LOCALHOST">LOCALHOST</a></code></td>
 <td>
 <p>inbound traffic will be sent to the destinations listening on localhost.</p>
 
@@ -4693,7 +4712,7 @@ <h2 id="MeshConfig-ExtensionProvider-OpenCensusAgentTracingProvider-TraceContext
 </thead>
 <tbody>
 <tr id="MeshConfig-ExtensionProvider-OpenCensusAgentTracingProvider-TraceContext-W3C_TRACE_CONTEXT">
-<td><code>W3C_TRACE_CONTEXT</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-OpenCensusAgentTracingProvider-TraceContext-W3C_TRACE_CONTEXT">W3C_TRACE_CONTEXT</a></code></td>
 <td>
 <p>Use W3C Trace Context propagation using the <code>traceparent</code> HTTP header.
 See the
@@ -4702,14 +4721,14 @@ <h2 id="MeshConfig-ExtensionProvider-OpenCensusAgentTracingProvider-TraceContext
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-OpenCensusAgentTracingProvider-TraceContext-GRPC_BIN">
-<td><code>GRPC_BIN</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-OpenCensusAgentTracingProvider-TraceContext-GRPC_BIN">GRPC_BIN</a></code></td>
 <td>
 <p>Use gRPC binary context propagation using the <code>grpc-trace-bin</code> http header.</p>
 
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-OpenCensusAgentTracingProvider-TraceContext-CLOUD_TRACE_CONTEXT">
-<td><code>CLOUD_TRACE_CONTEXT</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-OpenCensusAgentTracingProvider-TraceContext-CLOUD_TRACE_CONTEXT">CLOUD_TRACE_CONTEXT</a></code></td>
 <td>
 <p>Use Cloud Trace context propagation using the
 <code>X-Cloud-Trace-Context</code> http header.</p>
@@ -4717,7 +4736,7 @@ <h2 id="MeshConfig-ExtensionProvider-OpenCensusAgentTracingProvider-TraceContext
 </td>
 </tr>
 <tr id="MeshConfig-ExtensionProvider-OpenCensusAgentTracingProvider-TraceContext-B3">
-<td><code>B3</code></td>
+<td><code><a href="#MeshConfig-ExtensionProvider-OpenCensusAgentTracingProvider-TraceContext-B3">B3</a></code></td>
 <td>
 <p>Use multi-header B3 context propagation using the <code>X-B3-TraceId</code>,
 <code>X-B3-SpanId</code>, and <code>X-B3-Sampled</code> HTTP headers. See
@@ -4740,21 +4759,21 @@ <h2 id="MeshConfig-ProxyPathNormalization-NormalizationType">MeshConfig.ProxyPat
 </thead>
 <tbody>
 <tr id="MeshConfig-ProxyPathNormalization-NormalizationType-DEFAULT">
-<td><code>DEFAULT</code></td>
+<td><code><a href="#MeshConfig-ProxyPathNormalization-NormalizationType-DEFAULT">DEFAULT</a></code></td>
 <td>
 <p>Apply default normalizations. Currently, this is BASE.</p>
 
 </td>
 </tr>
 <tr id="MeshConfig-ProxyPathNormalization-NormalizationType-NONE">
-<td><code>NONE</code></td>
+<td><code><a href="#MeshConfig-ProxyPathNormalization-NormalizationType-NONE">NONE</a></code></td>
 <td>
 <p>No normalization, paths are used as is.</p>
 
 </td>
 </tr>
 <tr id="MeshConfig-ProxyPathNormalization-NormalizationType-BASE">
-<td><code>BASE</code></td>
+<td><code><a href="#MeshConfig-ProxyPathNormalization-NormalizationType-BASE">BASE</a></code></td>
 <td>
 <p>Normalize according to <a href="https://tools.ietf.org/html/rfc3986">RFC 3986</a>.
 For Envoy proxies, this is the <a href="https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/network/http_connection_manager/v3/http_connection_manager.proto.html"><code>normalize_path</code></a> option.
@@ -4763,7 +4782,7 @@ <h2 id="MeshConfig-ProxyPathNormalization-NormalizationType">MeshConfig.ProxyPat
 </td>
 </tr>
 <tr id="MeshConfig-ProxyPathNormalization-NormalizationType-MERGE_SLASHES">
-<td><code>MERGE_SLASHES</code></td>
+<td><code><a href="#MeshConfig-ProxyPathNormalization-NormalizationType-MERGE_SLASHES">MERGE_SLASHES</a></code></td>
 <td>
 <p>In addition to the <code>BASE</code> normalization, consecutive slashes are also merged.
 For example, <code>/a//b</code> normalizes to <code>a/b</code>.</p>
@@ -4771,7 +4790,7 @@ <h2 id="MeshConfig-ProxyPathNormalization-NormalizationType">MeshConfig.ProxyPat
 </td>
 </tr>
 <tr id="MeshConfig-ProxyPathNormalization-NormalizationType-DECODE_AND_MERGE_SLASHES">
-<td><code>DECODE_AND_MERGE_SLASHES</code></td>
+<td><code><a href="#MeshConfig-ProxyPathNormalization-NormalizationType-DECODE_AND_MERGE_SLASHES">DECODE_AND_MERGE_SLASHES</a></code></td>
 <td>
 <p>In addition to normalization in <code>MERGE_SLASHES</code>, slash characters are UTF-8 decoded (case insensitive) prior to merging.
 This means <code>%2F</code>, <code>%2f</code>, <code>%5C</code>, and <code>%5c</code> sequences in the request path will be rewritten to <code>/</code> or <code>\</code>.
@@ -4795,21 +4814,21 @@ <h2 id="MeshConfig-TLSConfig-TLSProtocol">MeshConfig.TLSConfig.TLSProtocol</h2>
 </thead>
 <tbody>
 <tr id="MeshConfig-TLSConfig-TLSProtocol-TLS_AUTO">
-<td><code>TLS_AUTO</code></td>
+<td><code><a href="#MeshConfig-TLSConfig-TLSProtocol-TLS_AUTO">TLS_AUTO</a></code></td>
 <td>
 <p>Automatically choose the optimal TLS version.</p>
 
 </td>
 </tr>
 <tr id="MeshConfig-TLSConfig-TLSProtocol-TLSV1_2">
-<td><code>TLSV1_2</code></td>
+<td><code><a href="#MeshConfig-TLSConfig-TLSProtocol-TLSV1_2">TLSV1_2</a></code></td>
 <td>
 <p>TLS version 1.2</p>
 
 </td>
 </tr>
 <tr id="MeshConfig-TLSConfig-TLSProtocol-TLSV1_3">
-<td><code>TLSV1_3</code></td>
+<td><code><a href="#MeshConfig-TLSConfig-TLSProtocol-TLSV1_3">TLSV1_3</a></code></td>
 <td>
 <p>TLS version 1.3</p>
 
@@ -4829,21 +4848,21 @@ <h2 id="MeshConfig-IngressControllerMode">MeshConfig.IngressControllerMode</h2>
 </thead>
 <tbody>
 <tr id="MeshConfig-IngressControllerMode-UNSPECIFIED">
-<td><code>UNSPECIFIED</code></td>
+<td><code><a href="#MeshConfig-IngressControllerMode-UNSPECIFIED">UNSPECIFIED</a></code></td>
 <td>
 <p>Unspecified Istio ingress controller.</p>
 
 </td>
 </tr>
 <tr id="MeshConfig-IngressControllerMode-OFF">
-<td><code>OFF</code></td>
+<td><code><a href="#MeshConfig-IngressControllerMode-OFF">OFF</a></code></td>
 <td>
 <p>Disables Istio ingress controller.</p>
 
 </td>
 </tr>
 <tr id="MeshConfig-IngressControllerMode-DEFAULT">
-<td><code>DEFAULT</code></td>
+<td><code><a href="#MeshConfig-IngressControllerMode-DEFAULT">DEFAULT</a></code></td>
 <td>
 <p>Istio ingress controller will act on ingress resources that do not
 contain any annotation or whose annotations match the value
@@ -4854,7 +4873,7 @@ <h2 id="MeshConfig-IngressControllerMode">MeshConfig.IngressControllerMode</h2>
 </td>
 </tr>
 <tr id="MeshConfig-IngressControllerMode-STRICT">
-<td><code>STRICT</code></td>
+<td><code><a href="#MeshConfig-IngressControllerMode-STRICT">STRICT</a></code></td>
 <td>
 <p>Istio ingress controller will only act on ingress resources whose
 annotations match the value specified in the ingressClass parameter
@@ -4878,14 +4897,14 @@ <h2 id="MeshConfig-AccessLogEncoding">MeshConfig.AccessLogEncoding</h2>
 </thead>
 <tbody>
 <tr id="MeshConfig-AccessLogEncoding-TEXT">
-<td><code>TEXT</code></td>
+<td><code><a href="#MeshConfig-AccessLogEncoding-TEXT">TEXT</a></code></td>
 <td>
 <p>text encoding for the proxy access log</p>
 
 </td>
 </tr>
 <tr id="MeshConfig-AccessLogEncoding-JSON">
-<td><code>JSON</code></td>
+<td><code><a href="#MeshConfig-AccessLogEncoding-JSON">JSON</a></code></td>
 <td>
 <p>json encoding for the proxy access log</p>
 
@@ -4907,14 +4926,14 @@ <h2 id="MeshConfig-H2UpgradePolicy">MeshConfig.H2UpgradePolicy</h2>
 </thead>
 <tbody>
 <tr id="MeshConfig-H2UpgradePolicy-DO_NOT_UPGRADE">
-<td><code>DO_NOT_UPGRADE</code></td>
+<td><code><a href="#MeshConfig-H2UpgradePolicy-DO_NOT_UPGRADE">DO_NOT_UPGRADE</a></code></td>
 <td>
 <p>Do not upgrade connections to http2.</p>
 
 </td>
 </tr>
 <tr id="MeshConfig-H2UpgradePolicy-UPGRADE">
-<td><code>UPGRADE</code></td>
+<td><code><a href="#MeshConfig-H2UpgradePolicy-UPGRADE">UPGRADE</a></code></td>
 <td>
 <p>Upgrade the connections to http2.</p>
 
@@ -4936,7 +4955,7 @@ <h2 id="Resource">Resource</h2>
 </thead>
 <tbody>
 <tr id="Resource-SERVICE_REGISTRY">
-<td><code>SERVICE_REGISTRY</code></td>
+<td><code><a href="#Resource-SERVICE_REGISTRY">SERVICE_REGISTRY</a></code></td>
 <td>
 <p>Set to only receive service entries that are generated by the platform.
 These auto generated service entries are combination of services and endpoints
@@ -4961,7 +4980,7 @@ <h2 id="Tracing-OpenCensusAgent-TraceContext">Tracing.OpenCensusAgent.TraceConte
 </thead>
 <tbody>
 <tr id="Tracing-OpenCensusAgent-TraceContext-W3C_TRACE_CONTEXT">
-<td><code>W3C_TRACE_CONTEXT</code></td>
+<td><code><a href="#Tracing-OpenCensusAgent-TraceContext-W3C_TRACE_CONTEXT">W3C_TRACE_CONTEXT</a></code></td>
 <td>
 <p>Use W3C Trace Context propagation using the <code>traceparent</code> HTTP header.
 See the
@@ -4970,14 +4989,14 @@ <h2 id="Tracing-OpenCensusAgent-TraceContext">Tracing.OpenCensusAgent.TraceConte
 </td>
 </tr>
 <tr id="Tracing-OpenCensusAgent-TraceContext-GRPC_BIN">
-<td><code>GRPC_BIN</code></td>
+<td><code><a href="#Tracing-OpenCensusAgent-TraceContext-GRPC_BIN">GRPC_BIN</a></code></td>
 <td>
 <p>Use gRPC binary context propagation using the <code>grpc-trace-bin</code> http header.</p>
 
 </td>
 </tr>
 <tr id="Tracing-OpenCensusAgent-TraceContext-CLOUD_TRACE_CONTEXT">
-<td><code>CLOUD_TRACE_CONTEXT</code></td>
+<td><code><a href="#Tracing-OpenCensusAgent-TraceContext-CLOUD_TRACE_CONTEXT">CLOUD_TRACE_CONTEXT</a></code></td>
 <td>
 <p>Use Cloud Trace context propagation using the
 <code>X-Cloud-Trace-Context</code> http header.</p>
@@ -4985,7 +5004,7 @@ <h2 id="Tracing-OpenCensusAgent-TraceContext">Tracing.OpenCensusAgent.TraceConte
 </td>
 </tr>
 <tr id="Tracing-OpenCensusAgent-TraceContext-B3">
-<td><code>B3</code></td>
+<td><code><a href="#Tracing-OpenCensusAgent-TraceContext-B3">B3</a></code></td>
 <td>
 <p>Use multi-header B3 context propagation using the <code>X-B3-TraceId</code>,
 <code>X-B3-SpanId</code>, and <code>X-B3-Sampled</code> HTTP headers. See
@@ -5008,14 +5027,14 @@ <h2 id="ProxyConfig-ProxyHeaders-MetadataExchangeMode">ProxyConfig.ProxyHeaders.
 </thead>
 <tbody>
 <tr id="ProxyConfig-ProxyHeaders-MetadataExchangeMode-UNDEFINED">
-<td><code>UNDEFINED</code></td>
+<td><code><a href="#ProxyConfig-ProxyHeaders-MetadataExchangeMode-UNDEFINED">UNDEFINED</a></code></td>
 <td>
 <p>Existing Istio behavior for the metadata exchange headers is unchanged.</p>
 
 </td>
 </tr>
 <tr id="ProxyConfig-ProxyHeaders-MetadataExchangeMode-IN_MESH">
-<td><code>IN_MESH</code></td>
+<td><code><a href="#ProxyConfig-ProxyHeaders-MetadataExchangeMode-IN_MESH">IN_MESH</a></code></td>
 <td>
 <p>Only append the istio metadata exchange headers for services considered in-mesh.
 Traffic is considered in-mesh if it is secured with Istio mutual TLS. This means that <code>MESH_EXTERNAL</code> services, unmatched passthrough traffic, and requests to workloads without Istio enabled will be considered out of mesh.</p>
@@ -5040,7 +5059,7 @@ <h2 id="ProxyConfig-TracingServiceName">ProxyConfig.TracingServiceName</h2>
 </thead>
 <tbody>
 <tr id="ProxyConfig-TracingServiceName-APP_LABEL_AND_NAMESPACE">
-<td><code>APP_LABEL_AND_NAMESPACE</code></td>
+<td><code><a href="#ProxyConfig-TracingServiceName-APP_LABEL_AND_NAMESPACE">APP_LABEL_AND_NAMESPACE</a></code></td>
 <td>
 <p>Default scheme. Uses the <code>app</code> label and workload namespace to construct
 a cluster name. If the <code>app</code> label does not exist <code>istio-proxy</code> is used.</p>
@@ -5048,14 +5067,14 @@ <h2 id="ProxyConfig-TracingServiceName">ProxyConfig.TracingServiceName</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-TracingServiceName-CANONICAL_NAME_ONLY">
-<td><code>CANONICAL_NAME_ONLY</code></td>
+<td><code><a href="#ProxyConfig-TracingServiceName-CANONICAL_NAME_ONLY">CANONICAL_NAME_ONLY</a></code></td>
 <td>
 <p>Uses the canonical name for a workload (<em>excluding namespace</em>).</p>
 
 </td>
 </tr>
 <tr id="ProxyConfig-TracingServiceName-CANONICAL_NAME_AND_NAMESPACE">
-<td><code>CANONICAL_NAME_AND_NAMESPACE</code></td>
+<td><code><a href="#ProxyConfig-TracingServiceName-CANONICAL_NAME_AND_NAMESPACE">CANONICAL_NAME_AND_NAMESPACE</a></code></td>
 <td>
 <p>Uses the canonical name and namespace for a workload.</p>
 
@@ -5079,7 +5098,7 @@ <h2 id="ProxyConfig-InboundInterceptionMode">ProxyConfig.InboundInterceptionMode
 </thead>
 <tbody>
 <tr id="ProxyConfig-InboundInterceptionMode-REDIRECT">
-<td><code>REDIRECT</code></td>
+<td><code><a href="#ProxyConfig-InboundInterceptionMode-REDIRECT">REDIRECT</a></code></td>
 <td>
 <p>The <code>REDIRECT</code> mode uses iptables <code>REDIRECT</code> to <code>NAT</code> and redirect to Envoy. This mode loses
 source IP addresses during redirection. This is the default redirection mode.</p>
@@ -5087,7 +5106,7 @@ <h2 id="ProxyConfig-InboundInterceptionMode">ProxyConfig.InboundInterceptionMode
 </td>
 </tr>
 <tr id="ProxyConfig-InboundInterceptionMode-TPROXY">
-<td><code>TPROXY</code></td>
+<td><code><a href="#ProxyConfig-InboundInterceptionMode-TPROXY">TPROXY</a></code></td>
 <td>
 <p>The <code>TPROXY</code> mode uses iptables <code>TPROXY</code> to redirect to Envoy. This mode preserves both the
 source and destination IP addresses and ports, so that they can be used for advanced
@@ -5097,7 +5116,7 @@ <h2 id="ProxyConfig-InboundInterceptionMode">ProxyConfig.InboundInterceptionMode
 </td>
 </tr>
 <tr id="ProxyConfig-InboundInterceptionMode-NONE">
-<td><code>NONE</code></td>
+<td><code><a href="#ProxyConfig-InboundInterceptionMode-NONE">NONE</a></code></td>
 <td>
 <p>The <code>NONE</code> mode does not configure redirect to Envoy at all. This is an advanced
 configuration that typically requires changes to user applications.</p>
@@ -5122,21 +5141,21 @@ <h2 id="AuthenticationPolicy">AuthenticationPolicy</h2>
 </thead>
 <tbody>
 <tr id="AuthenticationPolicy-NONE">
-<td><code>NONE</code></td>
+<td><code><a href="#AuthenticationPolicy-NONE">NONE</a></code></td>
 <td>
 <p>Do not encrypt proxy to control plane traffic.</p>
 
 </td>
 </tr>
 <tr id="AuthenticationPolicy-MUTUAL_TLS">
-<td><code>MUTUAL_TLS</code></td>
+<td><code><a href="#AuthenticationPolicy-MUTUAL_TLS">MUTUAL_TLS</a></code></td>
 <td>
 <p>Proxy to control plane traffic is wrapped into mutual TLS connections.</p>
 
 </td>
 </tr>
 <tr id="AuthenticationPolicy-INHERIT">
-<td><code>INHERIT</code></td>
+<td><code><a href="#AuthenticationPolicy-INHERIT">INHERIT</a></code></td>
 <td>
 <p>Use the policy defined by the parent scope. Should not be used for mesh
 policy.</p>
@@ -5162,21 +5181,21 @@ <h2 id="ForwardClientCertDetails">ForwardClientCertDetails</h2>
 </thead>
 <tbody>
 <tr id="ForwardClientCertDetails-UNDEFINED">
-<td><code>UNDEFINED</code></td>
+<td><code><a href="#ForwardClientCertDetails-UNDEFINED">UNDEFINED</a></code></td>
 <td>
 <p>Field is not set</p>
 
 </td>
 </tr>
 <tr id="ForwardClientCertDetails-SANITIZE">
-<td><code>SANITIZE</code></td>
+<td><code><a href="#ForwardClientCertDetails-SANITIZE">SANITIZE</a></code></td>
 <td>
 <p>Do not send the XFCC header to the next hop.</p>
 
 </td>
 </tr>
 <tr id="ForwardClientCertDetails-FORWARD_ONLY">
-<td><code>FORWARD_ONLY</code></td>
+<td><code><a href="#ForwardClientCertDetails-FORWARD_ONLY">FORWARD_ONLY</a></code></td>
 <td>
 <p>When the client connection is mTLS (Mutual TLS), forward the XFCC header
 in the request.</p>
@@ -5184,7 +5203,7 @@ <h2 id="ForwardClientCertDetails">ForwardClientCertDetails</h2>
 </td>
 </tr>
 <tr id="ForwardClientCertDetails-APPEND_FORWARD">
-<td><code>APPEND_FORWARD</code></td>
+<td><code><a href="#ForwardClientCertDetails-APPEND_FORWARD">APPEND_FORWARD</a></code></td>
 <td>
 <p>When the client connection is mTLS, append the client certificate
 information to the request’s XFCC header and forward it. This is the default value for sidecar proxies.</p>
@@ -5192,7 +5211,7 @@ <h2 id="ForwardClientCertDetails">ForwardClientCertDetails</h2>
 </td>
 </tr>
 <tr id="ForwardClientCertDetails-SANITIZE_SET">
-<td><code>SANITIZE_SET</code></td>
+<td><code><a href="#ForwardClientCertDetails-SANITIZE_SET">SANITIZE_SET</a></code></td>
 <td>
 <p>When the client connection is mTLS, reset the XFCC header with the client
 certificate information and send it to the next hop. This is the default value for gateway proxies.</p>
@@ -5200,7 +5219,7 @@ <h2 id="ForwardClientCertDetails">ForwardClientCertDetails</h2>
 </td>
 </tr>
 <tr id="ForwardClientCertDetails-ALWAYS_FORWARD_ONLY">
-<td><code>ALWAYS_FORWARD_ONLY</code></td>
+<td><code><a href="#ForwardClientCertDetails-ALWAYS_FORWARD_ONLY">ALWAYS_FORWARD_ONLY</a></code></td>
 <td>
 <p>Always forward the XFCC header in the request, regardless of whether the
 client connection is mTLS.</p>
diff --git a/mesh/v1alpha1/proxy.pb.go b/mesh/v1alpha1/proxy.pb.go
index ee4c84433a..3cac04da9d 100644
--- a/mesh/v1alpha1/proxy.pb.go
+++ b/mesh/v1alpha1/proxy.pb.go
@@ -1006,6 +1006,16 @@ type ProxyConfig struct {
 	CaCertificatesPem []string `protobuf:"bytes,34,rep,name=ca_certificates_pem,json=caCertificatesPem,proto3" json:"ca_certificates_pem,omitempty"`
 	// Specifies the details of the proxy image.
 	Image *v1beta1.ProxyImage `protobuf:"bytes,35,opt,name=image,proto3" json:"image,omitempty"`
+	// When true, the original case of HTTP/1.x headers will be preserved
+	// as they pass through the proxy, rather than normalizing them to lowercase.
+	// This field is particularly useful for applications that require case-sensitive
+	// headers for interoperability with downstream systems or APIs that expect specific
+	// casing.
+	// The preserve_case option only applies to HTTP/1.x traffic, as HTTP/2 requires all headers
+	// to be lowercase per the protocol specification. Envoy will ignore this field for HTTP/2
+	// requests and automatically normalize headers to lowercase, ensuring compliance with HTTP/2
+	// standards.
+	PreserveCase bool `protobuf:"varint,40,opt,name=preserve_case,json=preserveCase,proto3" json:"preserve_case,omitempty"`
 	// Specifies the details of the Private Key Provider configuration for gateway and sidecar proxies.
 	PrivateKeyProvider *PrivateKeyProvider `protobuf:"bytes,38,opt,name=private_key_provider,json=privateKeyProvider,proto3" json:"private_key_provider,omitempty"`
 	// Define the set of headers to add/modify for HTTP request/responses.
@@ -1327,6 +1337,13 @@ func (x *ProxyConfig) GetImage() *v1beta1.ProxyImage {
 	return nil
 }
 
+func (x *ProxyConfig) GetPreserveCase() bool {
+	if x != nil {
+		return x.PreserveCase
+	}
+	return false
+}
+
 func (x *ProxyConfig) GetPrivateKeyProvider() *PrivateKeyProvider {
 	if x != nil {
 		return x.PrivateKeyProvider
@@ -2866,7 +2883,7 @@ var file_mesh_v1alpha1_proxy_proto_rawDesc = []byte{
 	0x63, 0x6b, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c,
 	0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x42, 0x6f, 0x6f, 0x6c, 0x56,
 	0x61, 0x6c, 0x75, 0x65, 0x52, 0x08, 0x66, 0x61, 0x6c, 0x6c, 0x62, 0x61, 0x63, 0x6b, 0x42, 0x0a,
-	0x0a, 0x08, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72, 0x22, 0xea, 0x22, 0x0a, 0x0b, 0x50,
+	0x0a, 0x08, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72, 0x22, 0x8f, 0x23, 0x0a, 0x0b, 0x50,
 	0x72, 0x6f, 0x78, 0x79, 0x43, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x12, 0x1f, 0x0a, 0x0b, 0x63, 0x6f,
 	0x6e, 0x66, 0x69, 0x67, 0x5f, 0x70, 0x61, 0x74, 0x68, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52,
 	0x0a, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x50, 0x61, 0x74, 0x68, 0x12, 0x1f, 0x0a, 0x0b, 0x62,
@@ -3006,176 +3023,178 @@ var file_mesh_v1alpha1_proxy_proto_rawDesc = []byte{
 	0x01, 0x28, 0x0b, 0x32, 0x24, 0x2e, 0x69, 0x73, 0x74, 0x69, 0x6f, 0x2e, 0x6e, 0x65, 0x74, 0x77,
 	0x6f, 0x72, 0x6b, 0x69, 0x6e, 0x67, 0x2e, 0x76, 0x31, 0x62, 0x65, 0x74, 0x61, 0x31, 0x2e, 0x50,
 	0x72, 0x6f, 0x78, 0x79, 0x49, 0x6d, 0x61, 0x67, 0x65, 0x52, 0x05, 0x69, 0x6d, 0x61, 0x67, 0x65,
-	0x12, 0x59, 0x0a, 0x14, 0x70, 0x72, 0x69, 0x76, 0x61, 0x74, 0x65, 0x5f, 0x6b, 0x65, 0x79, 0x5f,
-	0x70, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72, 0x18, 0x26, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x27,
-	0x2e, 0x69, 0x73, 0x74, 0x69, 0x6f, 0x2e, 0x6d, 0x65, 0x73, 0x68, 0x2e, 0x76, 0x31, 0x61, 0x6c,
-	0x70, 0x68, 0x61, 0x31, 0x2e, 0x50, 0x72, 0x69, 0x76, 0x61, 0x74, 0x65, 0x4b, 0x65, 0x79, 0x50,
-	0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72, 0x52, 0x12, 0x70, 0x72, 0x69, 0x76, 0x61, 0x74, 0x65,
-	0x4b, 0x65, 0x79, 0x50, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72, 0x12, 0x52, 0x0a, 0x0d, 0x70,
-	0x72, 0x6f, 0x78, 0x79, 0x5f, 0x68, 0x65, 0x61, 0x64, 0x65, 0x72, 0x73, 0x18, 0x27, 0x20, 0x01,
-	0x28, 0x0b, 0x32, 0x2d, 0x2e, 0x69, 0x73, 0x74, 0x69, 0x6f, 0x2e, 0x6d, 0x65, 0x73, 0x68, 0x2e,
-	0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x50, 0x72, 0x6f, 0x78, 0x79, 0x43, 0x6f,
-	0x6e, 0x66, 0x69, 0x67, 0x2e, 0x50, 0x72, 0x6f, 0x78, 0x79, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72,
-	0x73, 0x52, 0x0c, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72, 0x73, 0x1a,
-	0x40, 0x0a, 0x12, 0x50, 0x72, 0x6f, 0x78, 0x79, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61,
-	0x45, 0x6e, 0x74, 0x72, 0x79, 0x12, 0x10, 0x0a, 0x03, 0x6b, 0x65, 0x79, 0x18, 0x01, 0x20, 0x01,
-	0x28, 0x09, 0x52, 0x03, 0x6b, 0x65, 0x79, 0x12, 0x14, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65,
-	0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x3a, 0x02, 0x38,
-	0x01, 0x1a, 0x40, 0x0a, 0x12, 0x52, 0x75, 0x6e, 0x74, 0x69, 0x6d, 0x65, 0x56, 0x61, 0x6c, 0x75,
-	0x65, 0x73, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x12, 0x10, 0x0a, 0x03, 0x6b, 0x65, 0x79, 0x18, 0x01,
-	0x20, 0x01, 0x28, 0x09, 0x52, 0x03, 0x6b, 0x65, 0x79, 0x12, 0x14, 0x0a, 0x05, 0x76, 0x61, 0x6c,
-	0x75, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x3a,
-	0x02, 0x38, 0x01, 0x1a, 0x9e, 0x01, 0x0a, 0x11, 0x50, 0x72, 0x6f, 0x78, 0x79, 0x53, 0x74, 0x61,
-	0x74, 0x73, 0x4d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x12, 0x2d, 0x0a, 0x12, 0x69, 0x6e, 0x63,
-	0x6c, 0x75, 0x73, 0x69, 0x6f, 0x6e, 0x5f, 0x70, 0x72, 0x65, 0x66, 0x69, 0x78, 0x65, 0x73, 0x18,
-	0x01, 0x20, 0x03, 0x28, 0x09, 0x52, 0x11, 0x69, 0x6e, 0x63, 0x6c, 0x75, 0x73, 0x69, 0x6f, 0x6e,
-	0x50, 0x72, 0x65, 0x66, 0x69, 0x78, 0x65, 0x73, 0x12, 0x2d, 0x0a, 0x12, 0x69, 0x6e, 0x63, 0x6c,
-	0x75, 0x73, 0x69, 0x6f, 0x6e, 0x5f, 0x73, 0x75, 0x66, 0x66, 0x69, 0x78, 0x65, 0x73, 0x18, 0x02,
-	0x20, 0x03, 0x28, 0x09, 0x52, 0x11, 0x69, 0x6e, 0x63, 0x6c, 0x75, 0x73, 0x69, 0x6f, 0x6e, 0x53,
-	0x75, 0x66, 0x66, 0x69, 0x78, 0x65, 0x73, 0x12, 0x2b, 0x0a, 0x11, 0x69, 0x6e, 0x63, 0x6c, 0x75,
-	0x73, 0x69, 0x6f, 0x6e, 0x5f, 0x72, 0x65, 0x67, 0x65, 0x78, 0x70, 0x73, 0x18, 0x03, 0x20, 0x03,
-	0x28, 0x09, 0x52, 0x10, 0x69, 0x6e, 0x63, 0x6c, 0x75, 0x73, 0x69, 0x6f, 0x6e, 0x52, 0x65, 0x67,
-	0x65, 0x78, 0x70, 0x73, 0x1a, 0xec, 0x0b, 0x0a, 0x0c, 0x50, 0x72, 0x6f, 0x78, 0x79, 0x48, 0x65,
-	0x61, 0x64, 0x65, 0x72, 0x73, 0x12, 0x61, 0x0a, 0x15, 0x66, 0x6f, 0x72, 0x77, 0x61, 0x72, 0x64,
-	0x65, 0x64, 0x5f, 0x63, 0x6c, 0x69, 0x65, 0x6e, 0x74, 0x5f, 0x63, 0x65, 0x72, 0x74, 0x18, 0x01,
-	0x20, 0x01, 0x28, 0x0e, 0x32, 0x2d, 0x2e, 0x69, 0x73, 0x74, 0x69, 0x6f, 0x2e, 0x6d, 0x65, 0x73,
-	0x68, 0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x46, 0x6f, 0x72, 0x77, 0x61,
-	0x72, 0x64, 0x43, 0x6c, 0x69, 0x65, 0x6e, 0x74, 0x43, 0x65, 0x72, 0x74, 0x44, 0x65, 0x74, 0x61,
-	0x69, 0x6c, 0x73, 0x52, 0x13, 0x66, 0x6f, 0x72, 0x77, 0x61, 0x72, 0x64, 0x65, 0x64, 0x43, 0x6c,
-	0x69, 0x65, 0x6e, 0x74, 0x43, 0x65, 0x72, 0x74, 0x12, 0x8f, 0x01, 0x0a, 0x1f, 0x73, 0x65, 0x74,
-	0x5f, 0x63, 0x75, 0x72, 0x72, 0x65, 0x6e, 0x74, 0x5f, 0x63, 0x6c, 0x69, 0x65, 0x6e, 0x74, 0x5f,
-	0x63, 0x65, 0x72, 0x74, 0x5f, 0x64, 0x65, 0x74, 0x61, 0x69, 0x6c, 0x73, 0x18, 0x07, 0x20, 0x01,
-	0x28, 0x0b, 0x32, 0x49, 0x2e, 0x69, 0x73, 0x74, 0x69, 0x6f, 0x2e, 0x6d, 0x65, 0x73, 0x68, 0x2e,
-	0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x50, 0x72, 0x6f, 0x78, 0x79, 0x43, 0x6f,
-	0x6e, 0x66, 0x69, 0x67, 0x2e, 0x50, 0x72, 0x6f, 0x78, 0x79, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72,
-	0x73, 0x2e, 0x53, 0x65, 0x74, 0x43, 0x75, 0x72, 0x72, 0x65, 0x6e, 0x74, 0x43, 0x6c, 0x69, 0x65,
-	0x6e, 0x74, 0x43, 0x65, 0x72, 0x74, 0x44, 0x65, 0x74, 0x61, 0x69, 0x6c, 0x73, 0x52, 0x1b, 0x73,
-	0x65, 0x74, 0x43, 0x75, 0x72, 0x72, 0x65, 0x6e, 0x74, 0x43, 0x6c, 0x69, 0x65, 0x6e, 0x74, 0x43,
-	0x65, 0x72, 0x74, 0x44, 0x65, 0x74, 0x61, 0x69, 0x6c, 0x73, 0x12, 0x56, 0x0a, 0x0a, 0x72, 0x65,
-	0x71, 0x75, 0x65, 0x73, 0x74, 0x5f, 0x69, 0x64, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x37,
-	0x2e, 0x69, 0x73, 0x74, 0x69, 0x6f, 0x2e, 0x6d, 0x65, 0x73, 0x68, 0x2e, 0x76, 0x31, 0x61, 0x6c,
-	0x70, 0x68, 0x61, 0x31, 0x2e, 0x50, 0x72, 0x6f, 0x78, 0x79, 0x43, 0x6f, 0x6e, 0x66, 0x69, 0x67,
-	0x2e, 0x50, 0x72, 0x6f, 0x78, 0x79, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72, 0x73, 0x2e, 0x52, 0x65,
-	0x71, 0x75, 0x65, 0x73, 0x74, 0x49, 0x64, 0x52, 0x09, 0x72, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74,
-	0x49, 0x64, 0x12, 0x4c, 0x0a, 0x06, 0x73, 0x65, 0x72, 0x76, 0x65, 0x72, 0x18, 0x02, 0x20, 0x01,
-	0x28, 0x0b, 0x32, 0x34, 0x2e, 0x69, 0x73, 0x74, 0x69, 0x6f, 0x2e, 0x6d, 0x65, 0x73, 0x68, 0x2e,
-	0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x50, 0x72, 0x6f, 0x78, 0x79, 0x43, 0x6f,
-	0x6e, 0x66, 0x69, 0x67, 0x2e, 0x50, 0x72, 0x6f, 0x78, 0x79, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72,
-	0x73, 0x2e, 0x53, 0x65, 0x72, 0x76, 0x65, 0x72, 0x52, 0x06, 0x73, 0x65, 0x72, 0x76, 0x65, 0x72,
-	0x12, 0x5f, 0x0a, 0x0d, 0x61, 0x74, 0x74, 0x65, 0x6d, 0x70, 0x74, 0x5f, 0x63, 0x6f, 0x75, 0x6e,
-	0x74, 0x18, 0x04, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x3a, 0x2e, 0x69, 0x73, 0x74, 0x69, 0x6f, 0x2e,
+	0x12, 0x23, 0x0a, 0x0d, 0x70, 0x72, 0x65, 0x73, 0x65, 0x72, 0x76, 0x65, 0x5f, 0x63, 0x61, 0x73,
+	0x65, 0x18, 0x28, 0x20, 0x01, 0x28, 0x08, 0x52, 0x0c, 0x70, 0x72, 0x65, 0x73, 0x65, 0x72, 0x76,
+	0x65, 0x43, 0x61, 0x73, 0x65, 0x12, 0x59, 0x0a, 0x14, 0x70, 0x72, 0x69, 0x76, 0x61, 0x74, 0x65,
+	0x5f, 0x6b, 0x65, 0x79, 0x5f, 0x70, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72, 0x18, 0x26, 0x20,
+	0x01, 0x28, 0x0b, 0x32, 0x27, 0x2e, 0x69, 0x73, 0x74, 0x69, 0x6f, 0x2e, 0x6d, 0x65, 0x73, 0x68,
+	0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x50, 0x72, 0x69, 0x76, 0x61, 0x74,
+	0x65, 0x4b, 0x65, 0x79, 0x50, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72, 0x52, 0x12, 0x70, 0x72,
+	0x69, 0x76, 0x61, 0x74, 0x65, 0x4b, 0x65, 0x79, 0x50, 0x72, 0x6f, 0x76, 0x69, 0x64, 0x65, 0x72,
+	0x12, 0x52, 0x0a, 0x0d, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x5f, 0x68, 0x65, 0x61, 0x64, 0x65, 0x72,
+	0x73, 0x18, 0x27, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x2d, 0x2e, 0x69, 0x73, 0x74, 0x69, 0x6f, 0x2e,
 	0x6d, 0x65, 0x73, 0x68, 0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x50, 0x72,
 	0x6f, 0x78, 0x79, 0x43, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x50, 0x72, 0x6f, 0x78, 0x79, 0x48,
-	0x65, 0x61, 0x64, 0x65, 0x72, 0x73, 0x2e, 0x41, 0x74, 0x74, 0x65, 0x6d, 0x70, 0x74, 0x43, 0x6f,
-	0x75, 0x6e, 0x74, 0x52, 0x0c, 0x61, 0x74, 0x74, 0x65, 0x6d, 0x70, 0x74, 0x43, 0x6f, 0x75, 0x6e,
-	0x74, 0x12, 0x6f, 0x0a, 0x13, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x5f, 0x64, 0x65, 0x62, 0x75, 0x67,
-	0x5f, 0x68, 0x65, 0x61, 0x64, 0x65, 0x72, 0x73, 0x18, 0x05, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x3f,
-	0x2e, 0x69, 0x73, 0x74, 0x69, 0x6f, 0x2e, 0x6d, 0x65, 0x73, 0x68, 0x2e, 0x76, 0x31, 0x61, 0x6c,
-	0x70, 0x68, 0x61, 0x31, 0x2e, 0x50, 0x72, 0x6f, 0x78, 0x79, 0x43, 0x6f, 0x6e, 0x66, 0x69, 0x67,
-	0x2e, 0x50, 0x72, 0x6f, 0x78, 0x79, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72, 0x73, 0x2e, 0x45, 0x6e,
-	0x76, 0x6f, 0x79, 0x44, 0x65, 0x62, 0x75, 0x67, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72, 0x73, 0x52,
-	0x11, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x44, 0x65, 0x62, 0x75, 0x67, 0x48, 0x65, 0x61, 0x64, 0x65,
-	0x72, 0x73, 0x12, 0x81, 0x01, 0x0a, 0x19, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x5f,
-	0x65, 0x78, 0x63, 0x68, 0x61, 0x6e, 0x67, 0x65, 0x5f, 0x68, 0x65, 0x61, 0x64, 0x65, 0x72, 0x73,
-	0x18, 0x06, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x45, 0x2e, 0x69, 0x73, 0x74, 0x69, 0x6f, 0x2e, 0x6d,
-	0x65, 0x73, 0x68, 0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x50, 0x72, 0x6f,
-	0x78, 0x79, 0x43, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x50, 0x72, 0x6f, 0x78, 0x79, 0x48, 0x65,
-	0x61, 0x64, 0x65, 0x72, 0x73, 0x2e, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x45, 0x78,
-	0x63, 0x68, 0x61, 0x6e, 0x67, 0x65, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72, 0x73, 0x52, 0x17, 0x6d,
-	0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x45, 0x78, 0x63, 0x68, 0x61, 0x6e, 0x67, 0x65, 0x48,
-	0x65, 0x61, 0x64, 0x65, 0x72, 0x73, 0x1a, 0x56, 0x0a, 0x06, 0x53, 0x65, 0x72, 0x76, 0x65, 0x72,
+	0x65, 0x61, 0x64, 0x65, 0x72, 0x73, 0x52, 0x0c, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x48, 0x65, 0x61,
+	0x64, 0x65, 0x72, 0x73, 0x1a, 0x40, 0x0a, 0x12, 0x50, 0x72, 0x6f, 0x78, 0x79, 0x4d, 0x65, 0x74,
+	0x61, 0x64, 0x61, 0x74, 0x61, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x12, 0x10, 0x0a, 0x03, 0x6b, 0x65,
+	0x79, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x03, 0x6b, 0x65, 0x79, 0x12, 0x14, 0x0a, 0x05,
+	0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x76, 0x61, 0x6c,
+	0x75, 0x65, 0x3a, 0x02, 0x38, 0x01, 0x1a, 0x40, 0x0a, 0x12, 0x52, 0x75, 0x6e, 0x74, 0x69, 0x6d,
+	0x65, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x73, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x12, 0x10, 0x0a, 0x03,
+	0x6b, 0x65, 0x79, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x03, 0x6b, 0x65, 0x79, 0x12, 0x14,
+	0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x76,
+	0x61, 0x6c, 0x75, 0x65, 0x3a, 0x02, 0x38, 0x01, 0x1a, 0x9e, 0x01, 0x0a, 0x11, 0x50, 0x72, 0x6f,
+	0x78, 0x79, 0x53, 0x74, 0x61, 0x74, 0x73, 0x4d, 0x61, 0x74, 0x63, 0x68, 0x65, 0x72, 0x12, 0x2d,
+	0x0a, 0x12, 0x69, 0x6e, 0x63, 0x6c, 0x75, 0x73, 0x69, 0x6f, 0x6e, 0x5f, 0x70, 0x72, 0x65, 0x66,
+	0x69, 0x78, 0x65, 0x73, 0x18, 0x01, 0x20, 0x03, 0x28, 0x09, 0x52, 0x11, 0x69, 0x6e, 0x63, 0x6c,
+	0x75, 0x73, 0x69, 0x6f, 0x6e, 0x50, 0x72, 0x65, 0x66, 0x69, 0x78, 0x65, 0x73, 0x12, 0x2d, 0x0a,
+	0x12, 0x69, 0x6e, 0x63, 0x6c, 0x75, 0x73, 0x69, 0x6f, 0x6e, 0x5f, 0x73, 0x75, 0x66, 0x66, 0x69,
+	0x78, 0x65, 0x73, 0x18, 0x02, 0x20, 0x03, 0x28, 0x09, 0x52, 0x11, 0x69, 0x6e, 0x63, 0x6c, 0x75,
+	0x73, 0x69, 0x6f, 0x6e, 0x53, 0x75, 0x66, 0x66, 0x69, 0x78, 0x65, 0x73, 0x12, 0x2b, 0x0a, 0x11,
+	0x69, 0x6e, 0x63, 0x6c, 0x75, 0x73, 0x69, 0x6f, 0x6e, 0x5f, 0x72, 0x65, 0x67, 0x65, 0x78, 0x70,
+	0x73, 0x18, 0x03, 0x20, 0x03, 0x28, 0x09, 0x52, 0x10, 0x69, 0x6e, 0x63, 0x6c, 0x75, 0x73, 0x69,
+	0x6f, 0x6e, 0x52, 0x65, 0x67, 0x65, 0x78, 0x70, 0x73, 0x1a, 0xec, 0x0b, 0x0a, 0x0c, 0x50, 0x72,
+	0x6f, 0x78, 0x79, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72, 0x73, 0x12, 0x61, 0x0a, 0x15, 0x66, 0x6f,
+	0x72, 0x77, 0x61, 0x72, 0x64, 0x65, 0x64, 0x5f, 0x63, 0x6c, 0x69, 0x65, 0x6e, 0x74, 0x5f, 0x63,
+	0x65, 0x72, 0x74, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x2d, 0x2e, 0x69, 0x73, 0x74, 0x69,
+	0x6f, 0x2e, 0x6d, 0x65, 0x73, 0x68, 0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e,
+	0x46, 0x6f, 0x72, 0x77, 0x61, 0x72, 0x64, 0x43, 0x6c, 0x69, 0x65, 0x6e, 0x74, 0x43, 0x65, 0x72,
+	0x74, 0x44, 0x65, 0x74, 0x61, 0x69, 0x6c, 0x73, 0x52, 0x13, 0x66, 0x6f, 0x72, 0x77, 0x61, 0x72,
+	0x64, 0x65, 0x64, 0x43, 0x6c, 0x69, 0x65, 0x6e, 0x74, 0x43, 0x65, 0x72, 0x74, 0x12, 0x8f, 0x01,
+	0x0a, 0x1f, 0x73, 0x65, 0x74, 0x5f, 0x63, 0x75, 0x72, 0x72, 0x65, 0x6e, 0x74, 0x5f, 0x63, 0x6c,
+	0x69, 0x65, 0x6e, 0x74, 0x5f, 0x63, 0x65, 0x72, 0x74, 0x5f, 0x64, 0x65, 0x74, 0x61, 0x69, 0x6c,
+	0x73, 0x18, 0x07, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x49, 0x2e, 0x69, 0x73, 0x74, 0x69, 0x6f, 0x2e,
+	0x6d, 0x65, 0x73, 0x68, 0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x50, 0x72,
+	0x6f, 0x78, 0x79, 0x43, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x50, 0x72, 0x6f, 0x78, 0x79, 0x48,
+	0x65, 0x61, 0x64, 0x65, 0x72, 0x73, 0x2e, 0x53, 0x65, 0x74, 0x43, 0x75, 0x72, 0x72, 0x65, 0x6e,
+	0x74, 0x43, 0x6c, 0x69, 0x65, 0x6e, 0x74, 0x43, 0x65, 0x72, 0x74, 0x44, 0x65, 0x74, 0x61, 0x69,
+	0x6c, 0x73, 0x52, 0x1b, 0x73, 0x65, 0x74, 0x43, 0x75, 0x72, 0x72, 0x65, 0x6e, 0x74, 0x43, 0x6c,
+	0x69, 0x65, 0x6e, 0x74, 0x43, 0x65, 0x72, 0x74, 0x44, 0x65, 0x74, 0x61, 0x69, 0x6c, 0x73, 0x12,
+	0x56, 0x0a, 0x0a, 0x72, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x5f, 0x69, 0x64, 0x18, 0x03, 0x20,
+	0x01, 0x28, 0x0b, 0x32, 0x37, 0x2e, 0x69, 0x73, 0x74, 0x69, 0x6f, 0x2e, 0x6d, 0x65, 0x73, 0x68,
+	0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x50, 0x72, 0x6f, 0x78, 0x79, 0x43,
+	0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x50, 0x72, 0x6f, 0x78, 0x79, 0x48, 0x65, 0x61, 0x64, 0x65,
+	0x72, 0x73, 0x2e, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x49, 0x64, 0x52, 0x09, 0x72, 0x65,
+	0x71, 0x75, 0x65, 0x73, 0x74, 0x49, 0x64, 0x12, 0x4c, 0x0a, 0x06, 0x73, 0x65, 0x72, 0x76, 0x65,
+	0x72, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x34, 0x2e, 0x69, 0x73, 0x74, 0x69, 0x6f, 0x2e,
+	0x6d, 0x65, 0x73, 0x68, 0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x50, 0x72,
+	0x6f, 0x78, 0x79, 0x43, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x50, 0x72, 0x6f, 0x78, 0x79, 0x48,
+	0x65, 0x61, 0x64, 0x65, 0x72, 0x73, 0x2e, 0x53, 0x65, 0x72, 0x76, 0x65, 0x72, 0x52, 0x06, 0x73,
+	0x65, 0x72, 0x76, 0x65, 0x72, 0x12, 0x5f, 0x0a, 0x0d, 0x61, 0x74, 0x74, 0x65, 0x6d, 0x70, 0x74,
+	0x5f, 0x63, 0x6f, 0x75, 0x6e, 0x74, 0x18, 0x04, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x3a, 0x2e, 0x69,
+	0x73, 0x74, 0x69, 0x6f, 0x2e, 0x6d, 0x65, 0x73, 0x68, 0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68,
+	0x61, 0x31, 0x2e, 0x50, 0x72, 0x6f, 0x78, 0x79, 0x43, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x50,
+	0x72, 0x6f, 0x78, 0x79, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72, 0x73, 0x2e, 0x41, 0x74, 0x74, 0x65,
+	0x6d, 0x70, 0x74, 0x43, 0x6f, 0x75, 0x6e, 0x74, 0x52, 0x0c, 0x61, 0x74, 0x74, 0x65, 0x6d, 0x70,
+	0x74, 0x43, 0x6f, 0x75, 0x6e, 0x74, 0x12, 0x6f, 0x0a, 0x13, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x5f,
+	0x64, 0x65, 0x62, 0x75, 0x67, 0x5f, 0x68, 0x65, 0x61, 0x64, 0x65, 0x72, 0x73, 0x18, 0x05, 0x20,
+	0x01, 0x28, 0x0b, 0x32, 0x3f, 0x2e, 0x69, 0x73, 0x74, 0x69, 0x6f, 0x2e, 0x6d, 0x65, 0x73, 0x68,
+	0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x50, 0x72, 0x6f, 0x78, 0x79, 0x43,
+	0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x50, 0x72, 0x6f, 0x78, 0x79, 0x48, 0x65, 0x61, 0x64, 0x65,
+	0x72, 0x73, 0x2e, 0x45, 0x6e, 0x76, 0x6f, 0x79, 0x44, 0x65, 0x62, 0x75, 0x67, 0x48, 0x65, 0x61,
+	0x64, 0x65, 0x72, 0x73, 0x52, 0x11, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x44, 0x65, 0x62, 0x75, 0x67,
+	0x48, 0x65, 0x61, 0x64, 0x65, 0x72, 0x73, 0x12, 0x81, 0x01, 0x0a, 0x19, 0x6d, 0x65, 0x74, 0x61,
+	0x64, 0x61, 0x74, 0x61, 0x5f, 0x65, 0x78, 0x63, 0x68, 0x61, 0x6e, 0x67, 0x65, 0x5f, 0x68, 0x65,
+	0x61, 0x64, 0x65, 0x72, 0x73, 0x18, 0x06, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x45, 0x2e, 0x69, 0x73,
+	0x74, 0x69, 0x6f, 0x2e, 0x6d, 0x65, 0x73, 0x68, 0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61,
+	0x31, 0x2e, 0x50, 0x72, 0x6f, 0x78, 0x79, 0x43, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x50, 0x72,
+	0x6f, 0x78, 0x79, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72, 0x73, 0x2e, 0x4d, 0x65, 0x74, 0x61, 0x64,
+	0x61, 0x74, 0x61, 0x45, 0x78, 0x63, 0x68, 0x61, 0x6e, 0x67, 0x65, 0x48, 0x65, 0x61, 0x64, 0x65,
+	0x72, 0x73, 0x52, 0x17, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x45, 0x78, 0x63, 0x68,
+	0x61, 0x6e, 0x67, 0x65, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72, 0x73, 0x1a, 0x56, 0x0a, 0x06, 0x53,
+	0x65, 0x72, 0x76, 0x65, 0x72, 0x12, 0x36, 0x0a, 0x08, 0x64, 0x69, 0x73, 0x61, 0x62, 0x6c, 0x65,
+	0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65,
+	0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x42, 0x6f, 0x6f, 0x6c, 0x56, 0x61,
+	0x6c, 0x75, 0x65, 0x52, 0x08, 0x64, 0x69, 0x73, 0x61, 0x62, 0x6c, 0x65, 0x64, 0x12, 0x14, 0x0a,
+	0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x76, 0x61,
+	0x6c, 0x75, 0x65, 0x1a, 0x43, 0x0a, 0x09, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x49, 0x64,
 	0x12, 0x36, 0x0a, 0x08, 0x64, 0x69, 0x73, 0x61, 0x62, 0x6c, 0x65, 0x64, 0x18, 0x01, 0x20, 0x01,
 	0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74,
 	0x6f, 0x62, 0x75, 0x66, 0x2e, 0x42, 0x6f, 0x6f, 0x6c, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x08,
-	0x64, 0x69, 0x73, 0x61, 0x62, 0x6c, 0x65, 0x64, 0x12, 0x14, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75,
-	0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x1a, 0x43,
-	0x0a, 0x09, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x49, 0x64, 0x12, 0x36, 0x0a, 0x08, 0x64,
-	0x69, 0x73, 0x61, 0x62, 0x6c, 0x65, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e,
-	0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e,
-	0x42, 0x6f, 0x6f, 0x6c, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x08, 0x64, 0x69, 0x73, 0x61, 0x62,
-	0x6c, 0x65, 0x64, 0x1a, 0x46, 0x0a, 0x0c, 0x41, 0x74, 0x74, 0x65, 0x6d, 0x70, 0x74, 0x43, 0x6f,
-	0x75, 0x6e, 0x74, 0x12, 0x36, 0x0a, 0x08, 0x64, 0x69, 0x73, 0x61, 0x62, 0x6c, 0x65, 0x64, 0x18,
-	0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70,
+	0x64, 0x69, 0x73, 0x61, 0x62, 0x6c, 0x65, 0x64, 0x1a, 0x46, 0x0a, 0x0c, 0x41, 0x74, 0x74, 0x65,
+	0x6d, 0x70, 0x74, 0x43, 0x6f, 0x75, 0x6e, 0x74, 0x12, 0x36, 0x0a, 0x08, 0x64, 0x69, 0x73, 0x61,
+	0x62, 0x6c, 0x65, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x67, 0x6f, 0x6f,
+	0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x42, 0x6f, 0x6f,
+	0x6c, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x08, 0x64, 0x69, 0x73, 0x61, 0x62, 0x6c, 0x65, 0x64,
+	0x1a, 0x4b, 0x0a, 0x11, 0x45, 0x6e, 0x76, 0x6f, 0x79, 0x44, 0x65, 0x62, 0x75, 0x67, 0x48, 0x65,
+	0x61, 0x64, 0x65, 0x72, 0x73, 0x12, 0x36, 0x0a, 0x08, 0x64, 0x69, 0x73, 0x61, 0x62, 0x6c, 0x65,
+	0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65,
+	0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x42, 0x6f, 0x6f, 0x6c, 0x56, 0x61,
+	0x6c, 0x75, 0x65, 0x52, 0x08, 0x64, 0x69, 0x73, 0x61, 0x62, 0x6c, 0x65, 0x64, 0x1a, 0x71, 0x0a,
+	0x17, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x45, 0x78, 0x63, 0x68, 0x61, 0x6e, 0x67,
+	0x65, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72, 0x73, 0x12, 0x56, 0x0a, 0x04, 0x6d, 0x6f, 0x64, 0x65,
+	0x18, 0x01, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x42, 0x2e, 0x69, 0x73, 0x74, 0x69, 0x6f, 0x2e, 0x6d,
+	0x65, 0x73, 0x68, 0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x50, 0x72, 0x6f,
+	0x78, 0x79, 0x43, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x50, 0x72, 0x6f, 0x78, 0x79, 0x48, 0x65,
+	0x61, 0x64, 0x65, 0x72, 0x73, 0x2e, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x45, 0x78,
+	0x63, 0x68, 0x61, 0x6e, 0x67, 0x65, 0x4d, 0x6f, 0x64, 0x65, 0x52, 0x04, 0x6d, 0x6f, 0x64, 0x65,
+	0x1a, 0x91, 0x02, 0x0a, 0x1b, 0x53, 0x65, 0x74, 0x43, 0x75, 0x72, 0x72, 0x65, 0x6e, 0x74, 0x43,
+	0x6c, 0x69, 0x65, 0x6e, 0x74, 0x43, 0x65, 0x72, 0x74, 0x44, 0x65, 0x74, 0x61, 0x69, 0x6c, 0x73,
+	0x12, 0x34, 0x0a, 0x07, 0x73, 0x75, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x18, 0x01, 0x20, 0x01, 0x28,
+	0x0b, 0x32, 0x1a, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f,
+	0x62, 0x75, 0x66, 0x2e, 0x42, 0x6f, 0x6f, 0x6c, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x07, 0x73,
+	0x75, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x12, 0x2e, 0x0a, 0x04, 0x63, 0x65, 0x72, 0x74, 0x18, 0x02,
+	0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72,
+	0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x42, 0x6f, 0x6f, 0x6c, 0x56, 0x61, 0x6c, 0x75, 0x65,
+	0x52, 0x04, 0x63, 0x65, 0x72, 0x74, 0x12, 0x30, 0x0a, 0x05, 0x63, 0x68, 0x61, 0x69, 0x6e, 0x18,
+	0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70,
 	0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x42, 0x6f, 0x6f, 0x6c, 0x56, 0x61, 0x6c, 0x75,
-	0x65, 0x52, 0x08, 0x64, 0x69, 0x73, 0x61, 0x62, 0x6c, 0x65, 0x64, 0x1a, 0x4b, 0x0a, 0x11, 0x45,
-	0x6e, 0x76, 0x6f, 0x79, 0x44, 0x65, 0x62, 0x75, 0x67, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72, 0x73,
-	0x12, 0x36, 0x0a, 0x08, 0x64, 0x69, 0x73, 0x61, 0x62, 0x6c, 0x65, 0x64, 0x18, 0x01, 0x20, 0x01,
-	0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74,
-	0x6f, 0x62, 0x75, 0x66, 0x2e, 0x42, 0x6f, 0x6f, 0x6c, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x08,
-	0x64, 0x69, 0x73, 0x61, 0x62, 0x6c, 0x65, 0x64, 0x1a, 0x71, 0x0a, 0x17, 0x4d, 0x65, 0x74, 0x61,
-	0x64, 0x61, 0x74, 0x61, 0x45, 0x78, 0x63, 0x68, 0x61, 0x6e, 0x67, 0x65, 0x48, 0x65, 0x61, 0x64,
-	0x65, 0x72, 0x73, 0x12, 0x56, 0x0a, 0x04, 0x6d, 0x6f, 0x64, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28,
-	0x0e, 0x32, 0x42, 0x2e, 0x69, 0x73, 0x74, 0x69, 0x6f, 0x2e, 0x6d, 0x65, 0x73, 0x68, 0x2e, 0x76,
-	0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x50, 0x72, 0x6f, 0x78, 0x79, 0x43, 0x6f, 0x6e,
-	0x66, 0x69, 0x67, 0x2e, 0x50, 0x72, 0x6f, 0x78, 0x79, 0x48, 0x65, 0x61, 0x64, 0x65, 0x72, 0x73,
-	0x2e, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x45, 0x78, 0x63, 0x68, 0x61, 0x6e, 0x67,
-	0x65, 0x4d, 0x6f, 0x64, 0x65, 0x52, 0x04, 0x6d, 0x6f, 0x64, 0x65, 0x1a, 0x91, 0x02, 0x0a, 0x1b,
-	0x53, 0x65, 0x74, 0x43, 0x75, 0x72, 0x72, 0x65, 0x6e, 0x74, 0x43, 0x6c, 0x69, 0x65, 0x6e, 0x74,
-	0x43, 0x65, 0x72, 0x74, 0x44, 0x65, 0x74, 0x61, 0x69, 0x6c, 0x73, 0x12, 0x34, 0x0a, 0x07, 0x73,
-	0x75, 0x62, 0x6a, 0x65, 0x63, 0x74, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x67,
-	0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x42,
-	0x6f, 0x6f, 0x6c, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x07, 0x73, 0x75, 0x62, 0x6a, 0x65, 0x63,
-	0x74, 0x12, 0x2e, 0x0a, 0x04, 0x63, 0x65, 0x72, 0x74, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32,
-	0x1a, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75,
-	0x66, 0x2e, 0x42, 0x6f, 0x6f, 0x6c, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x04, 0x63, 0x65, 0x72,
-	0x74, 0x12, 0x30, 0x0a, 0x05, 0x63, 0x68, 0x61, 0x69, 0x6e, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b,
-	0x32, 0x1a, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62,
-	0x75, 0x66, 0x2e, 0x42, 0x6f, 0x6f, 0x6c, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x05, 0x63, 0x68,
-	0x61, 0x69, 0x6e, 0x12, 0x2c, 0x0a, 0x03, 0x64, 0x6e, 0x73, 0x18, 0x04, 0x20, 0x01, 0x28, 0x0b,
-	0x32, 0x1a, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62,
-	0x75, 0x66, 0x2e, 0x42, 0x6f, 0x6f, 0x6c, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x03, 0x64, 0x6e,
-	0x73, 0x12, 0x2c, 0x0a, 0x03, 0x75, 0x72, 0x69, 0x18, 0x05, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a,
-	0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66,
-	0x2e, 0x42, 0x6f, 0x6f, 0x6c, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x03, 0x75, 0x72, 0x69, 0x22,
-	0x32, 0x0a, 0x14, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x45, 0x78, 0x63, 0x68, 0x61,
-	0x6e, 0x67, 0x65, 0x4d, 0x6f, 0x64, 0x65, 0x12, 0x0d, 0x0a, 0x09, 0x55, 0x4e, 0x44, 0x45, 0x46,
-	0x49, 0x4e, 0x45, 0x44, 0x10, 0x00, 0x12, 0x0b, 0x0a, 0x07, 0x49, 0x4e, 0x5f, 0x4d, 0x45, 0x53,
-	0x48, 0x10, 0x01, 0x22, 0x6c, 0x0a, 0x12, 0x54, 0x72, 0x61, 0x63, 0x69, 0x6e, 0x67, 0x53, 0x65,
-	0x72, 0x76, 0x69, 0x63, 0x65, 0x4e, 0x61, 0x6d, 0x65, 0x12, 0x1b, 0x0a, 0x17, 0x41, 0x50, 0x50,
-	0x5f, 0x4c, 0x41, 0x42, 0x45, 0x4c, 0x5f, 0x41, 0x4e, 0x44, 0x5f, 0x4e, 0x41, 0x4d, 0x45, 0x53,
-	0x50, 0x41, 0x43, 0x45, 0x10, 0x00, 0x12, 0x17, 0x0a, 0x13, 0x43, 0x41, 0x4e, 0x4f, 0x4e, 0x49,
-	0x43, 0x41, 0x4c, 0x5f, 0x4e, 0x41, 0x4d, 0x45, 0x5f, 0x4f, 0x4e, 0x4c, 0x59, 0x10, 0x01, 0x12,
-	0x20, 0x0a, 0x1c, 0x43, 0x41, 0x4e, 0x4f, 0x4e, 0x49, 0x43, 0x41, 0x4c, 0x5f, 0x4e, 0x41, 0x4d,
-	0x45, 0x5f, 0x41, 0x4e, 0x44, 0x5f, 0x4e, 0x41, 0x4d, 0x45, 0x53, 0x50, 0x41, 0x43, 0x45, 0x10,
-	0x02, 0x22, 0x3d, 0x0a, 0x17, 0x49, 0x6e, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x49, 0x6e, 0x74, 0x65,
-	0x72, 0x63, 0x65, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x4d, 0x6f, 0x64, 0x65, 0x12, 0x0c, 0x0a, 0x08,
-	0x52, 0x45, 0x44, 0x49, 0x52, 0x45, 0x43, 0x54, 0x10, 0x00, 0x12, 0x0a, 0x0a, 0x06, 0x54, 0x50,
-	0x52, 0x4f, 0x58, 0x59, 0x10, 0x01, 0x12, 0x08, 0x0a, 0x04, 0x4e, 0x4f, 0x4e, 0x45, 0x10, 0x02,
-	0x42, 0x0e, 0x0a, 0x0c, 0x63, 0x6c, 0x75, 0x73, 0x74, 0x65, 0x72, 0x5f, 0x6e, 0x61, 0x6d, 0x65,
-	0x4a, 0x04, 0x08, 0x05, 0x10, 0x06, 0x4a, 0x04, 0x08, 0x09, 0x10, 0x0a, 0x52, 0x18, 0x70, 0x61,
-	0x72, 0x65, 0x6e, 0x74, 0x5f, 0x73, 0x68, 0x75, 0x74, 0x64, 0x6f, 0x77, 0x6e, 0x5f, 0x64, 0x75,
-	0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x0f, 0x63, 0x6f, 0x6e, 0x6e, 0x65, 0x63, 0x74, 0x5f,
-	0x74, 0x69, 0x6d, 0x65, 0x6f, 0x75, 0x74, 0x22, 0xeb, 0x01, 0x0a, 0x0d, 0x52, 0x65, 0x6d, 0x6f,
-	0x74, 0x65, 0x53, 0x65, 0x72, 0x76, 0x69, 0x63, 0x65, 0x12, 0x18, 0x0a, 0x07, 0x61, 0x64, 0x64,
-	0x72, 0x65, 0x73, 0x73, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x07, 0x61, 0x64, 0x64, 0x72,
-	0x65, 0x73, 0x73, 0x12, 0x4f, 0x0a, 0x0c, 0x74, 0x6c, 0x73, 0x5f, 0x73, 0x65, 0x74, 0x74, 0x69,
-	0x6e, 0x67, 0x73, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x2c, 0x2e, 0x69, 0x73, 0x74, 0x69,
-	0x6f, 0x2e, 0x6e, 0x65, 0x74, 0x77, 0x6f, 0x72, 0x6b, 0x69, 0x6e, 0x67, 0x2e, 0x76, 0x31, 0x61,
-	0x6c, 0x70, 0x68, 0x61, 0x33, 0x2e, 0x43, 0x6c, 0x69, 0x65, 0x6e, 0x74, 0x54, 0x4c, 0x53, 0x53,
-	0x65, 0x74, 0x74, 0x69, 0x6e, 0x67, 0x73, 0x52, 0x0b, 0x74, 0x6c, 0x73, 0x53, 0x65, 0x74, 0x74,
-	0x69, 0x6e, 0x67, 0x73, 0x12, 0x6f, 0x0a, 0x0d, 0x74, 0x63, 0x70, 0x5f, 0x6b, 0x65, 0x65, 0x70,
-	0x61, 0x6c, 0x69, 0x76, 0x65, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x4a, 0x2e, 0x69, 0x73,
-	0x74, 0x69, 0x6f, 0x2e, 0x6e, 0x65, 0x74, 0x77, 0x6f, 0x72, 0x6b, 0x69, 0x6e, 0x67, 0x2e, 0x76,
-	0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x33, 0x2e, 0x43, 0x6f, 0x6e, 0x6e, 0x65, 0x63, 0x74, 0x69,
-	0x6f, 0x6e, 0x50, 0x6f, 0x6f, 0x6c, 0x53, 0x65, 0x74, 0x74, 0x69, 0x6e, 0x67, 0x73, 0x2e, 0x54,
-	0x43, 0x50, 0x53, 0x65, 0x74, 0x74, 0x69, 0x6e, 0x67, 0x73, 0x2e, 0x54, 0x63, 0x70, 0x4b, 0x65,
-	0x65, 0x70, 0x61, 0x6c, 0x69, 0x76, 0x65, 0x52, 0x0c, 0x74, 0x63, 0x70, 0x4b, 0x65, 0x65, 0x70,
-	0x61, 0x6c, 0x69, 0x76, 0x65, 0x2a, 0x3e, 0x0a, 0x14, 0x41, 0x75, 0x74, 0x68, 0x65, 0x6e, 0x74,
-	0x69, 0x63, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x50, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x12, 0x08, 0x0a,
-	0x04, 0x4e, 0x4f, 0x4e, 0x45, 0x10, 0x00, 0x12, 0x0e, 0x0a, 0x0a, 0x4d, 0x55, 0x54, 0x55, 0x41,
-	0x4c, 0x5f, 0x54, 0x4c, 0x53, 0x10, 0x01, 0x12, 0x0c, 0x0a, 0x07, 0x49, 0x4e, 0x48, 0x45, 0x52,
-	0x49, 0x54, 0x10, 0xe8, 0x07, 0x2a, 0x88, 0x01, 0x0a, 0x18, 0x46, 0x6f, 0x72, 0x77, 0x61, 0x72,
-	0x64, 0x43, 0x6c, 0x69, 0x65, 0x6e, 0x74, 0x43, 0x65, 0x72, 0x74, 0x44, 0x65, 0x74, 0x61, 0x69,
-	0x6c, 0x73, 0x12, 0x0d, 0x0a, 0x09, 0x55, 0x4e, 0x44, 0x45, 0x46, 0x49, 0x4e, 0x45, 0x44, 0x10,
-	0x00, 0x12, 0x0c, 0x0a, 0x08, 0x53, 0x41, 0x4e, 0x49, 0x54, 0x49, 0x5a, 0x45, 0x10, 0x01, 0x12,
-	0x10, 0x0a, 0x0c, 0x46, 0x4f, 0x52, 0x57, 0x41, 0x52, 0x44, 0x5f, 0x4f, 0x4e, 0x4c, 0x59, 0x10,
-	0x02, 0x12, 0x12, 0x0a, 0x0e, 0x41, 0x50, 0x50, 0x45, 0x4e, 0x44, 0x5f, 0x46, 0x4f, 0x52, 0x57,
-	0x41, 0x52, 0x44, 0x10, 0x03, 0x12, 0x10, 0x0a, 0x0c, 0x53, 0x41, 0x4e, 0x49, 0x54, 0x49, 0x5a,
-	0x45, 0x5f, 0x53, 0x45, 0x54, 0x10, 0x04, 0x12, 0x17, 0x0a, 0x13, 0x41, 0x4c, 0x57, 0x41, 0x59,
-	0x53, 0x5f, 0x46, 0x4f, 0x52, 0x57, 0x41, 0x52, 0x44, 0x5f, 0x4f, 0x4e, 0x4c, 0x59, 0x10, 0x05,
-	0x42, 0x1c, 0x5a, 0x1a, 0x69, 0x73, 0x74, 0x69, 0x6f, 0x2e, 0x69, 0x6f, 0x2f, 0x61, 0x70, 0x69,
-	0x2f, 0x6d, 0x65, 0x73, 0x68, 0x2f, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x62, 0x06,
-	0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
+	0x65, 0x52, 0x05, 0x63, 0x68, 0x61, 0x69, 0x6e, 0x12, 0x2c, 0x0a, 0x03, 0x64, 0x6e, 0x73, 0x18,
+	0x04, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70,
+	0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x42, 0x6f, 0x6f, 0x6c, 0x56, 0x61, 0x6c, 0x75,
+	0x65, 0x52, 0x03, 0x64, 0x6e, 0x73, 0x12, 0x2c, 0x0a, 0x03, 0x75, 0x72, 0x69, 0x18, 0x05, 0x20,
+	0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f,
+	0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x42, 0x6f, 0x6f, 0x6c, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52,
+	0x03, 0x75, 0x72, 0x69, 0x22, 0x32, 0x0a, 0x14, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61,
+	0x45, 0x78, 0x63, 0x68, 0x61, 0x6e, 0x67, 0x65, 0x4d, 0x6f, 0x64, 0x65, 0x12, 0x0d, 0x0a, 0x09,
+	0x55, 0x4e, 0x44, 0x45, 0x46, 0x49, 0x4e, 0x45, 0x44, 0x10, 0x00, 0x12, 0x0b, 0x0a, 0x07, 0x49,
+	0x4e, 0x5f, 0x4d, 0x45, 0x53, 0x48, 0x10, 0x01, 0x22, 0x6c, 0x0a, 0x12, 0x54, 0x72, 0x61, 0x63,
+	0x69, 0x6e, 0x67, 0x53, 0x65, 0x72, 0x76, 0x69, 0x63, 0x65, 0x4e, 0x61, 0x6d, 0x65, 0x12, 0x1b,
+	0x0a, 0x17, 0x41, 0x50, 0x50, 0x5f, 0x4c, 0x41, 0x42, 0x45, 0x4c, 0x5f, 0x41, 0x4e, 0x44, 0x5f,
+	0x4e, 0x41, 0x4d, 0x45, 0x53, 0x50, 0x41, 0x43, 0x45, 0x10, 0x00, 0x12, 0x17, 0x0a, 0x13, 0x43,
+	0x41, 0x4e, 0x4f, 0x4e, 0x49, 0x43, 0x41, 0x4c, 0x5f, 0x4e, 0x41, 0x4d, 0x45, 0x5f, 0x4f, 0x4e,
+	0x4c, 0x59, 0x10, 0x01, 0x12, 0x20, 0x0a, 0x1c, 0x43, 0x41, 0x4e, 0x4f, 0x4e, 0x49, 0x43, 0x41,
+	0x4c, 0x5f, 0x4e, 0x41, 0x4d, 0x45, 0x5f, 0x41, 0x4e, 0x44, 0x5f, 0x4e, 0x41, 0x4d, 0x45, 0x53,
+	0x50, 0x41, 0x43, 0x45, 0x10, 0x02, 0x22, 0x3d, 0x0a, 0x17, 0x49, 0x6e, 0x62, 0x6f, 0x75, 0x6e,
+	0x64, 0x49, 0x6e, 0x74, 0x65, 0x72, 0x63, 0x65, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x4d, 0x6f, 0x64,
+	0x65, 0x12, 0x0c, 0x0a, 0x08, 0x52, 0x45, 0x44, 0x49, 0x52, 0x45, 0x43, 0x54, 0x10, 0x00, 0x12,
+	0x0a, 0x0a, 0x06, 0x54, 0x50, 0x52, 0x4f, 0x58, 0x59, 0x10, 0x01, 0x12, 0x08, 0x0a, 0x04, 0x4e,
+	0x4f, 0x4e, 0x45, 0x10, 0x02, 0x42, 0x0e, 0x0a, 0x0c, 0x63, 0x6c, 0x75, 0x73, 0x74, 0x65, 0x72,
+	0x5f, 0x6e, 0x61, 0x6d, 0x65, 0x4a, 0x04, 0x08, 0x05, 0x10, 0x06, 0x4a, 0x04, 0x08, 0x09, 0x10,
+	0x0a, 0x52, 0x18, 0x70, 0x61, 0x72, 0x65, 0x6e, 0x74, 0x5f, 0x73, 0x68, 0x75, 0x74, 0x64, 0x6f,
+	0x77, 0x6e, 0x5f, 0x64, 0x75, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x0f, 0x63, 0x6f, 0x6e,
+	0x6e, 0x65, 0x63, 0x74, 0x5f, 0x74, 0x69, 0x6d, 0x65, 0x6f, 0x75, 0x74, 0x22, 0xeb, 0x01, 0x0a,
+	0x0d, 0x52, 0x65, 0x6d, 0x6f, 0x74, 0x65, 0x53, 0x65, 0x72, 0x76, 0x69, 0x63, 0x65, 0x12, 0x18,
+	0x0a, 0x07, 0x61, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52,
+	0x07, 0x61, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x12, 0x4f, 0x0a, 0x0c, 0x74, 0x6c, 0x73, 0x5f,
+	0x73, 0x65, 0x74, 0x74, 0x69, 0x6e, 0x67, 0x73, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x2c,
+	0x2e, 0x69, 0x73, 0x74, 0x69, 0x6f, 0x2e, 0x6e, 0x65, 0x74, 0x77, 0x6f, 0x72, 0x6b, 0x69, 0x6e,
+	0x67, 0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x33, 0x2e, 0x43, 0x6c, 0x69, 0x65, 0x6e,
+	0x74, 0x54, 0x4c, 0x53, 0x53, 0x65, 0x74, 0x74, 0x69, 0x6e, 0x67, 0x73, 0x52, 0x0b, 0x74, 0x6c,
+	0x73, 0x53, 0x65, 0x74, 0x74, 0x69, 0x6e, 0x67, 0x73, 0x12, 0x6f, 0x0a, 0x0d, 0x74, 0x63, 0x70,
+	0x5f, 0x6b, 0x65, 0x65, 0x70, 0x61, 0x6c, 0x69, 0x76, 0x65, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b,
+	0x32, 0x4a, 0x2e, 0x69, 0x73, 0x74, 0x69, 0x6f, 0x2e, 0x6e, 0x65, 0x74, 0x77, 0x6f, 0x72, 0x6b,
+	0x69, 0x6e, 0x67, 0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x33, 0x2e, 0x43, 0x6f, 0x6e,
+	0x6e, 0x65, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x50, 0x6f, 0x6f, 0x6c, 0x53, 0x65, 0x74, 0x74, 0x69,
+	0x6e, 0x67, 0x73, 0x2e, 0x54, 0x43, 0x50, 0x53, 0x65, 0x74, 0x74, 0x69, 0x6e, 0x67, 0x73, 0x2e,
+	0x54, 0x63, 0x70, 0x4b, 0x65, 0x65, 0x70, 0x61, 0x6c, 0x69, 0x76, 0x65, 0x52, 0x0c, 0x74, 0x63,
+	0x70, 0x4b, 0x65, 0x65, 0x70, 0x61, 0x6c, 0x69, 0x76, 0x65, 0x2a, 0x3e, 0x0a, 0x14, 0x41, 0x75,
+	0x74, 0x68, 0x65, 0x6e, 0x74, 0x69, 0x63, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x50, 0x6f, 0x6c, 0x69,
+	0x63, 0x79, 0x12, 0x08, 0x0a, 0x04, 0x4e, 0x4f, 0x4e, 0x45, 0x10, 0x00, 0x12, 0x0e, 0x0a, 0x0a,
+	0x4d, 0x55, 0x54, 0x55, 0x41, 0x4c, 0x5f, 0x54, 0x4c, 0x53, 0x10, 0x01, 0x12, 0x0c, 0x0a, 0x07,
+	0x49, 0x4e, 0x48, 0x45, 0x52, 0x49, 0x54, 0x10, 0xe8, 0x07, 0x2a, 0x88, 0x01, 0x0a, 0x18, 0x46,
+	0x6f, 0x72, 0x77, 0x61, 0x72, 0x64, 0x43, 0x6c, 0x69, 0x65, 0x6e, 0x74, 0x43, 0x65, 0x72, 0x74,
+	0x44, 0x65, 0x74, 0x61, 0x69, 0x6c, 0x73, 0x12, 0x0d, 0x0a, 0x09, 0x55, 0x4e, 0x44, 0x45, 0x46,
+	0x49, 0x4e, 0x45, 0x44, 0x10, 0x00, 0x12, 0x0c, 0x0a, 0x08, 0x53, 0x41, 0x4e, 0x49, 0x54, 0x49,
+	0x5a, 0x45, 0x10, 0x01, 0x12, 0x10, 0x0a, 0x0c, 0x46, 0x4f, 0x52, 0x57, 0x41, 0x52, 0x44, 0x5f,
+	0x4f, 0x4e, 0x4c, 0x59, 0x10, 0x02, 0x12, 0x12, 0x0a, 0x0e, 0x41, 0x50, 0x50, 0x45, 0x4e, 0x44,
+	0x5f, 0x46, 0x4f, 0x52, 0x57, 0x41, 0x52, 0x44, 0x10, 0x03, 0x12, 0x10, 0x0a, 0x0c, 0x53, 0x41,
+	0x4e, 0x49, 0x54, 0x49, 0x5a, 0x45, 0x5f, 0x53, 0x45, 0x54, 0x10, 0x04, 0x12, 0x17, 0x0a, 0x13,
+	0x41, 0x4c, 0x57, 0x41, 0x59, 0x53, 0x5f, 0x46, 0x4f, 0x52, 0x57, 0x41, 0x52, 0x44, 0x5f, 0x4f,
+	0x4e, 0x4c, 0x59, 0x10, 0x05, 0x42, 0x1c, 0x5a, 0x1a, 0x69, 0x73, 0x74, 0x69, 0x6f, 0x2e, 0x69,
+	0x6f, 0x2f, 0x61, 0x70, 0x69, 0x2f, 0x6d, 0x65, 0x73, 0x68, 0x2f, 0x76, 0x31, 0x61, 0x6c, 0x70,
+	0x68, 0x61, 0x31, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
 }
 
 var (
diff --git a/mesh/v1alpha1/proxy.proto b/mesh/v1alpha1/proxy.proto
index 623f2eaea7..f4bc793c74 100644
--- a/mesh/v1alpha1/proxy.proto
+++ b/mesh/v1alpha1/proxy.proto
@@ -603,6 +603,17 @@ message ProxyConfig {
   // Specifies the details of the proxy image.
   istio.networking.v1beta1.ProxyImage image = 35;
 
+  // When true, the original case of HTTP/1.x headers will be preserved
+  // as they pass through the proxy, rather than normalizing them to lowercase.
+  // This field is particularly useful for applications that require case-sensitive 
+  // headers for interoperability with downstream systems or APIs that expect specific 
+  // casing.
+  // The preserve_case option only applies to HTTP/1.x traffic, as HTTP/2 requires all headers 
+  // to be lowercase per the protocol specification. Envoy will ignore this field for HTTP/2 
+  // requests and automatically normalize headers to lowercase, ensuring compliance with HTTP/2 
+  // standards. 
+  bool preserve_case = 40;
+
   // Specifies the details of the Private Key Provider configuration for gateway and sidecar proxies.
   PrivateKeyProvider private_key_provider = 38;
 
diff --git a/meta/v1alpha1/status.pb.html b/meta/v1alpha1/status.pb.html
index 4d9de89d6b..8674ffc462 100644
--- a/meta/v1alpha1/status.pb.html
+++ b/meta/v1alpha1/status.pb.html
@@ -19,7 +19,7 @@ <h2 id="IstioStatus">IstioStatus</h2>
 </thead>
 <tbody>
 <tr id="IstioStatus-conditions">
-<td><code>conditions</code></td>
+<td><code><a href="#IstioStatus-conditions">conditions</a></code></td>
 <td><code><a href="#IstioCondition">IstioCondition[]</a></code></td>
 <td>
 <p>Current service state of the resource.
@@ -31,7 +31,7 @@ <h2 id="IstioStatus">IstioStatus</h2>
 </td>
 </tr>
 <tr id="IstioStatus-validation_messages">
-<td><code>validationMessages</code></td>
+<td><code><a href="#IstioStatus-validation_messages">validationMessages</a></code></td>
 <td><code><a href="https://istio.io/docs/reference/config/istio.analysis.v1alpha1.html#AnalysisMessageBase">AnalysisMessageBase[]</a></code></td>
 <td>
 <p>Includes any errors or warnings detected by Istio&rsquo;s analyzers.</p>
@@ -57,7 +57,7 @@ <h2 id="IstioCondition">IstioCondition</h2>
 </thead>
 <tbody>
 <tr id="IstioCondition-type">
-<td><code>type</code></td>
+<td><code><a href="#IstioCondition-type">type</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Type is the type of the condition.</p>
@@ -68,7 +68,7 @@ <h2 id="IstioCondition">IstioCondition</h2>
 </td>
 </tr>
 <tr id="IstioCondition-status">
-<td><code>status</code></td>
+<td><code><a href="#IstioCondition-status">status</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Status is the status of the condition.
@@ -80,7 +80,7 @@ <h2 id="IstioCondition">IstioCondition</h2>
 </td>
 </tr>
 <tr id="IstioCondition-last_probe_time">
-<td><code>lastProbeTime</code></td>
+<td><code><a href="#IstioCondition-last_probe_time">lastProbeTime</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#timestamp">Timestamp</a></code></td>
 <td>
 <p>Last time we probed the condition.</p>
@@ -91,7 +91,7 @@ <h2 id="IstioCondition">IstioCondition</h2>
 </td>
 </tr>
 <tr id="IstioCondition-last_transition_time">
-<td><code>lastTransitionTime</code></td>
+<td><code><a href="#IstioCondition-last_transition_time">lastTransitionTime</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#timestamp">Timestamp</a></code></td>
 <td>
 <p>Last time the condition transitioned from one status to another.</p>
@@ -102,7 +102,7 @@ <h2 id="IstioCondition">IstioCondition</h2>
 </td>
 </tr>
 <tr id="IstioCondition-reason">
-<td><code>reason</code></td>
+<td><code><a href="#IstioCondition-reason">reason</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Unique, one-word, CamelCase reason for the condition&rsquo;s last transition.</p>
@@ -113,7 +113,7 @@ <h2 id="IstioCondition">IstioCondition</h2>
 </td>
 </tr>
 <tr id="IstioCondition-message">
-<td><code>message</code></td>
+<td><code><a href="#IstioCondition-message">message</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Human-readable message indicating details about last transition.</p>
@@ -124,7 +124,7 @@ <h2 id="IstioCondition">IstioCondition</h2>
 </td>
 </tr>
 <tr id="IstioCondition-observed_generation">
-<td><code>observedGeneration</code></td>
+<td><code><a href="#IstioCondition-observed_generation">observedGeneration</a></code></td>
 <td><code>int64</code></td>
 <td>
 <p>Resource Generation to which the Condition refers.</p>
diff --git a/networking/v1alpha3/destination_rule.pb.html b/networking/v1alpha3/destination_rule.pb.html
index a0786c3e77..5efb061607 100644
--- a/networking/v1alpha3/destination_rule.pb.html
+++ b/networking/v1alpha3/destination_rule.pb.html
@@ -108,7 +108,7 @@ <h2 id="DestinationRule">DestinationRule</h2>
 </thead>
 <tbody>
 <tr id="DestinationRule-host">
-<td><code>host</code></td>
+<td><code><a href="#DestinationRule-host">host</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>The name of a service from the service registry. Service
@@ -132,7 +132,7 @@ <h2 id="DestinationRule">DestinationRule</h2>
 </td>
 </tr>
 <tr id="DestinationRule-traffic_policy">
-<td><code>trafficPolicy</code></td>
+<td><code><a href="#DestinationRule-traffic_policy">trafficPolicy</a></code></td>
 <td><code><a href="#TrafficPolicy">TrafficPolicy</a></code></td>
 <td>
 <p>Traffic policies to apply (load balancing policy, connection pool
@@ -144,7 +144,7 @@ <h2 id="DestinationRule">DestinationRule</h2>
 </td>
 </tr>
 <tr id="DestinationRule-subsets">
-<td><code>subsets</code></td>
+<td><code><a href="#DestinationRule-subsets">subsets</a></code></td>
 <td><code><a href="#Subset">Subset[]</a></code></td>
 <td>
 <p>One or more named sets that represent individual versions of a
@@ -156,7 +156,7 @@ <h2 id="DestinationRule">DestinationRule</h2>
 </td>
 </tr>
 <tr id="DestinationRule-export_to">
-<td><code>exportTo</code></td>
+<td><code><a href="#DestinationRule-export_to">exportTo</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>A list of namespaces to which this destination rule is exported.
@@ -178,7 +178,7 @@ <h2 id="DestinationRule">DestinationRule</h2>
 </td>
 </tr>
 <tr id="DestinationRule-workload_selector">
-<td><code>workloadSelector</code></td>
+<td><code><a href="#DestinationRule-workload_selector">workloadSelector</a></code></td>
 <td><code><a href="https://istio.io/docs/reference/config/type/workload-selector.html#WorkloadSelector">WorkloadSelector</a></code></td>
 <td>
 <p>Criteria used to select the specific set of pods/VMs on which this
@@ -214,7 +214,7 @@ <h2 id="TrafficPolicy">TrafficPolicy</h2>
 </thead>
 <tbody>
 <tr id="TrafficPolicy-load_balancer">
-<td><code>loadBalancer</code></td>
+<td><code><a href="#TrafficPolicy-load_balancer">loadBalancer</a></code></td>
 <td><code><a href="#LoadBalancerSettings">LoadBalancerSettings</a></code></td>
 <td>
 <p>Settings controlling the load balancer algorithms.</p>
@@ -225,7 +225,7 @@ <h2 id="TrafficPolicy">TrafficPolicy</h2>
 </td>
 </tr>
 <tr id="TrafficPolicy-connection_pool">
-<td><code>connectionPool</code></td>
+<td><code><a href="#TrafficPolicy-connection_pool">connectionPool</a></code></td>
 <td><code><a href="#ConnectionPoolSettings">ConnectionPoolSettings</a></code></td>
 <td>
 <p>Settings controlling the volume of connections to an upstream service</p>
@@ -236,7 +236,7 @@ <h2 id="TrafficPolicy">TrafficPolicy</h2>
 </td>
 </tr>
 <tr id="TrafficPolicy-outlier_detection">
-<td><code>outlierDetection</code></td>
+<td><code><a href="#TrafficPolicy-outlier_detection">outlierDetection</a></code></td>
 <td><code><a href="#OutlierDetection">OutlierDetection</a></code></td>
 <td>
 <p>Settings controlling eviction of unhealthy hosts from the load balancing pool</p>
@@ -247,7 +247,7 @@ <h2 id="TrafficPolicy">TrafficPolicy</h2>
 </td>
 </tr>
 <tr id="TrafficPolicy-tls">
-<td><code>tls</code></td>
+<td><code><a href="#TrafficPolicy-tls">tls</a></code></td>
 <td><code><a href="#ClientTLSSettings">ClientTLSSettings</a></code></td>
 <td>
 <p>TLS related settings for connections to the upstream service.</p>
@@ -258,7 +258,7 @@ <h2 id="TrafficPolicy">TrafficPolicy</h2>
 </td>
 </tr>
 <tr id="TrafficPolicy-port_level_settings">
-<td><code>portLevelSettings</code></td>
+<td><code><a href="#TrafficPolicy-port_level_settings">portLevelSettings</a></code></td>
 <td><code><a href="#TrafficPolicy-PortTrafficPolicy">PortTrafficPolicy[]</a></code></td>
 <td>
 <p>Traffic policies specific to individual ports. Note that port level
@@ -273,7 +273,7 @@ <h2 id="TrafficPolicy">TrafficPolicy</h2>
 </td>
 </tr>
 <tr id="TrafficPolicy-tunnel">
-<td><code>tunnel</code></td>
+<td><code><a href="#TrafficPolicy-tunnel">tunnel</a></code></td>
 <td><code><a href="#TrafficPolicy-TunnelSettings">TunnelSettings</a></code></td>
 <td>
 <p>Configuration of tunneling TCP over other transport or application layers
@@ -286,7 +286,7 @@ <h2 id="TrafficPolicy">TrafficPolicy</h2>
 </td>
 </tr>
 <tr id="TrafficPolicy-proxy_protocol">
-<td><code>proxyProtocol</code></td>
+<td><code><a href="#TrafficPolicy-proxy_protocol">proxyProtocol</a></code></td>
 <td><code><a href="#TrafficPolicy-ProxyProtocol">ProxyProtocol</a></code></td>
 <td>
 <p>The upstream PROXY protocol settings.</p>
@@ -345,7 +345,7 @@ <h2 id="Subset">Subset</h2>
 </thead>
 <tbody>
 <tr id="Subset-name">
-<td><code>name</code></td>
+<td><code><a href="#Subset-name">name</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Name of the subset. The service name and the subset name can
@@ -357,7 +357,7 @@ <h2 id="Subset">Subset</h2>
 </td>
 </tr>
 <tr id="Subset-labels">
-<td><code>labels</code></td>
+<td><code><a href="#Subset-labels">labels</a></code></td>
 <td><code>map&lt;string,&nbsp;string&gt;</code></td>
 <td>
 <p>Labels apply a filter over the endpoints of a service in the
@@ -369,7 +369,7 @@ <h2 id="Subset">Subset</h2>
 </td>
 </tr>
 <tr id="Subset-traffic_policy">
-<td><code>trafficPolicy</code></td>
+<td><code><a href="#Subset-traffic_policy">trafficPolicy</a></code></td>
 <td><code><a href="#TrafficPolicy">TrafficPolicy</a></code></td>
 <td>
 <p>Traffic policies that apply to this subset. Subsets inherit the
@@ -431,7 +431,7 @@ <h2 id="LoadBalancerSettings">LoadBalancerSettings</h2>
 </thead>
 <tbody>
 <tr id="LoadBalancerSettings-simple" class="oneof oneof-start">
-<td><code>simple</code></td>
+<td><code><a href="#LoadBalancerSettings-simple">simple</a></code></td>
 <td><code><a href="#LoadBalancerSettings-SimpleLB">SimpleLB (oneof)</a></code></td>
 <td>
 </td>
@@ -440,7 +440,7 @@ <h2 id="LoadBalancerSettings">LoadBalancerSettings</h2>
 </td>
 </tr>
 <tr id="LoadBalancerSettings-consistent_hash" class="oneof">
-<td><code>consistentHash</code></td>
+<td><code><a href="#LoadBalancerSettings-consistent_hash">consistentHash</a></code></td>
 <td><code><a href="#LoadBalancerSettings-ConsistentHashLB">ConsistentHashLB (oneof)</a></code></td>
 <td>
 </td>
@@ -449,7 +449,7 @@ <h2 id="LoadBalancerSettings">LoadBalancerSettings</h2>
 </td>
 </tr>
 <tr id="LoadBalancerSettings-locality_lb_setting">
-<td><code>localityLbSetting</code></td>
+<td><code><a href="#LoadBalancerSettings-locality_lb_setting">localityLbSetting</a></code></td>
 <td><code><a href="#LocalityLoadBalancerSetting">LocalityLoadBalancerSetting</a></code></td>
 <td>
 <p>Locality load balancer settings, this will override mesh wide settings in entirety, meaning no merging would be performed
@@ -461,7 +461,7 @@ <h2 id="LoadBalancerSettings">LoadBalancerSettings</h2>
 </td>
 </tr>
 <tr id="LoadBalancerSettings-warmup_duration_secs">
-<td><code>warmupDurationSecs</code></td>
+<td><code><a href="#LoadBalancerSettings-warmup_duration_secs">warmupDurationSecs</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#duration">Duration</a></code></td>
 <td>
 <p>Deprecated: use <code>warmup</code> instead.</p>
@@ -472,7 +472,7 @@ <h2 id="LoadBalancerSettings">LoadBalancerSettings</h2>
 </td>
 </tr>
 <tr id="LoadBalancerSettings-warmup">
-<td><code>warmup</code></td>
+<td><code><a href="#LoadBalancerSettings-warmup">warmup</a></code></td>
 <td><code><a href="#WarmupConfiguration">WarmupConfiguration</a></code></td>
 <td>
 <p>Represents the warmup configuration of Service. If set, the newly created endpoint of service
@@ -505,7 +505,7 @@ <h2 id="WarmupConfiguration">WarmupConfiguration</h2>
 </thead>
 <tbody>
 <tr id="WarmupConfiguration-duration">
-<td><code>duration</code></td>
+<td><code><a href="#WarmupConfiguration-duration">duration</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#duration">Duration</a></code></td>
 <td>
 <p>Duration of warmup mode</p>
@@ -516,7 +516,7 @@ <h2 id="WarmupConfiguration">WarmupConfiguration</h2>
 </td>
 </tr>
 <tr id="WarmupConfiguration-minimum_percent">
-<td><code>minimumPercent</code></td>
+<td><code><a href="#WarmupConfiguration-minimum_percent">minimumPercent</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#doublevalue">DoubleValue</a></code></td>
 <td>
 <p>Configures the minimum percentage of origin weight
@@ -528,7 +528,7 @@ <h2 id="WarmupConfiguration">WarmupConfiguration</h2>
 </td>
 </tr>
 <tr id="WarmupConfiguration-aggression">
-<td><code>aggression</code></td>
+<td><code><a href="#WarmupConfiguration-aggression">aggression</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#doublevalue">DoubleValue</a></code></td>
 <td>
 <p>This parameter controls the speed of traffic increase over the warmup duration. Defaults to 1.0, so that endpoints would
@@ -579,7 +579,7 @@ <h2 id="ConnectionPoolSettings">ConnectionPoolSettings</h2>
 </thead>
 <tbody>
 <tr id="ConnectionPoolSettings-tcp">
-<td><code>tcp</code></td>
+<td><code><a href="#ConnectionPoolSettings-tcp">tcp</a></code></td>
 <td><code><a href="#ConnectionPoolSettings-TCPSettings">TCPSettings</a></code></td>
 <td>
 <p>Settings common to both HTTP and TCP upstream connections.</p>
@@ -590,7 +590,7 @@ <h2 id="ConnectionPoolSettings">ConnectionPoolSettings</h2>
 </td>
 </tr>
 <tr id="ConnectionPoolSettings-http">
-<td><code>http</code></td>
+<td><code><a href="#ConnectionPoolSettings-http">http</a></code></td>
 <td><code><a href="#ConnectionPoolSettings-HTTPSettings">HTTPSettings</a></code></td>
 <td>
 <p>HTTP connection pool settings.</p>
@@ -649,7 +649,7 @@ <h2 id="OutlierDetection">OutlierDetection</h2>
 </thead>
 <tbody>
 <tr id="OutlierDetection-split_external_local_origin_errors">
-<td><code>splitExternalLocalOriginErrors</code></td>
+<td><code><a href="#OutlierDetection-split_external_local_origin_errors">splitExternalLocalOriginErrors</a></code></td>
 <td><code>bool</code></td>
 <td>
 <p>Determines whether to distinguish local origin failures from external errors. If set to true
@@ -667,7 +667,7 @@ <h2 id="OutlierDetection">OutlierDetection</h2>
 </td>
 </tr>
 <tr id="OutlierDetection-consecutive_local_origin_failures">
-<td><code>consecutiveLocalOriginFailures</code></td>
+<td><code><a href="#OutlierDetection-consecutive_local_origin_failures">consecutiveLocalOriginFailures</a></code></td>
 <td><code><a href="#google-protobuf-UInt32Value">UInt32Value</a></code></td>
 <td>
 <p>The number of consecutive locally originated failures before ejection
@@ -680,7 +680,7 @@ <h2 id="OutlierDetection">OutlierDetection</h2>
 </td>
 </tr>
 <tr id="OutlierDetection-consecutive_gateway_errors">
-<td><code>consecutiveGatewayErrors</code></td>
+<td><code><a href="#OutlierDetection-consecutive_gateway_errors">consecutiveGatewayErrors</a></code></td>
 <td><code><a href="#google-protobuf-UInt32Value">UInt32Value</a></code></td>
 <td>
 <p>Number of gateway errors before a host is ejected from the connection pool.
@@ -702,7 +702,7 @@ <h2 id="OutlierDetection">OutlierDetection</h2>
 </td>
 </tr>
 <tr id="OutlierDetection-consecutive_5xx_errors">
-<td><code>consecutive5xxErrors</code></td>
+<td><code><a href="#OutlierDetection-consecutive_5xx_errors">consecutive5xxErrors</a></code></td>
 <td><code><a href="#google-protobuf-UInt32Value">UInt32Value</a></code></td>
 <td>
 <p>Number of 5xx errors before a host is ejected from the connection pool.
@@ -723,7 +723,7 @@ <h2 id="OutlierDetection">OutlierDetection</h2>
 </td>
 </tr>
 <tr id="OutlierDetection-interval">
-<td><code>interval</code></td>
+<td><code><a href="#OutlierDetection-interval">interval</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#duration">Duration</a></code></td>
 <td>
 <p>Time interval between ejection sweep analysis. format:
@@ -735,7 +735,7 @@ <h2 id="OutlierDetection">OutlierDetection</h2>
 </td>
 </tr>
 <tr id="OutlierDetection-base_ejection_time">
-<td><code>baseEjectionTime</code></td>
+<td><code><a href="#OutlierDetection-base_ejection_time">baseEjectionTime</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#duration">Duration</a></code></td>
 <td>
 <p>Minimum ejection duration. A host will remain ejected for a period
@@ -750,7 +750,7 @@ <h2 id="OutlierDetection">OutlierDetection</h2>
 </td>
 </tr>
 <tr id="OutlierDetection-max_ejection_percent">
-<td><code>maxEjectionPercent</code></td>
+<td><code><a href="#OutlierDetection-max_ejection_percent">maxEjectionPercent</a></code></td>
 <td><code>int32</code></td>
 <td>
 <p>Maximum % of hosts in the load balancing pool for the upstream
@@ -762,7 +762,7 @@ <h2 id="OutlierDetection">OutlierDetection</h2>
 </td>
 </tr>
 <tr id="OutlierDetection-min_health_percent">
-<td><code>minHealthPercent</code></td>
+<td><code><a href="#OutlierDetection-min_health_percent">minHealthPercent</a></code></td>
 <td><code>int32</code></td>
 <td>
 <p>Outlier detection will be enabled as long as the associated load balancing
@@ -837,7 +837,7 @@ <h2 id="ClientTLSSettings">ClientTLSSettings</h2>
 </thead>
 <tbody>
 <tr id="ClientTLSSettings-mode">
-<td><code>mode</code></td>
+<td><code><a href="#ClientTLSSettings-mode">mode</a></code></td>
 <td><code><a href="#ClientTLSSettings-TLSmode">TLSmode</a></code></td>
 <td>
 <p>Indicates whether connections to this port should be secured
@@ -849,7 +849,7 @@ <h2 id="ClientTLSSettings">ClientTLSSettings</h2>
 </td>
 </tr>
 <tr id="ClientTLSSettings-client_certificate">
-<td><code>clientCertificate</code></td>
+<td><code><a href="#ClientTLSSettings-client_certificate">clientCertificate</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>REQUIRED if mode is <code>MUTUAL</code>. The path to the file holding the
@@ -862,7 +862,7 @@ <h2 id="ClientTLSSettings">ClientTLSSettings</h2>
 </td>
 </tr>
 <tr id="ClientTLSSettings-private_key">
-<td><code>privateKey</code></td>
+<td><code><a href="#ClientTLSSettings-private_key">privateKey</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>REQUIRED if mode is <code>MUTUAL</code>. The path to the file holding the
@@ -875,7 +875,7 @@ <h2 id="ClientTLSSettings">ClientTLSSettings</h2>
 </td>
 </tr>
 <tr id="ClientTLSSettings-ca_certificates">
-<td><code>caCertificates</code></td>
+<td><code><a href="#ClientTLSSettings-ca_certificates">caCertificates</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>OPTIONAL: The path to the file containing certificate authority
@@ -890,7 +890,7 @@ <h2 id="ClientTLSSettings">ClientTLSSettings</h2>
 </td>
 </tr>
 <tr id="ClientTLSSettings-credential_name">
-<td><code>credentialName</code></td>
+<td><code><a href="#ClientTLSSettings-credential_name">credentialName</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>The name of the secret that holds the TLS certs for the
@@ -918,7 +918,7 @@ <h2 id="ClientTLSSettings">ClientTLSSettings</h2>
 </td>
 </tr>
 <tr id="ClientTLSSettings-subject_alt_names">
-<td><code>subjectAltNames</code></td>
+<td><code><a href="#ClientTLSSettings-subject_alt_names">subjectAltNames</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>A list of alternate names to verify the subject identity in the
@@ -935,7 +935,7 @@ <h2 id="ClientTLSSettings">ClientTLSSettings</h2>
 </td>
 </tr>
 <tr id="ClientTLSSettings-sni">
-<td><code>sni</code></td>
+<td><code><a href="#ClientTLSSettings-sni">sni</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>SNI string to present to the server during TLS handshake.
@@ -948,7 +948,7 @@ <h2 id="ClientTLSSettings">ClientTLSSettings</h2>
 </td>
 </tr>
 <tr id="ClientTLSSettings-insecure_skip_verify">
-<td><code>insecureSkipVerify</code></td>
+<td><code><a href="#ClientTLSSettings-insecure_skip_verify">insecureSkipVerify</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#boolvalue">BoolValue</a></code></td>
 <td>
 <p><code>insecureSkipVerify</code> specifies whether the proxy should skip verifying the
@@ -961,7 +961,7 @@ <h2 id="ClientTLSSettings">ClientTLSSettings</h2>
 </td>
 </tr>
 <tr id="ClientTLSSettings-ca_crl">
-<td><code>caCrl</code></td>
+<td><code><a href="#ClientTLSSettings-ca_crl">caCrl</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>OPTIONAL: The path to the file containing the certificate revocation list (CRL)
@@ -1033,7 +1033,7 @@ <h2 id="LocalityLoadBalancerSetting">LocalityLoadBalancerSetting</h2>
 </thead>
 <tbody>
 <tr id="LocalityLoadBalancerSetting-distribute">
-<td><code>distribute</code></td>
+<td><code><a href="#LocalityLoadBalancerSetting-distribute">distribute</a></code></td>
 <td><code><a href="#LocalityLoadBalancerSetting-Distribute">Distribute[]</a></code></td>
 <td>
 <p>Optional: only one of distribute, failover or failoverPriority can be set.
@@ -1047,7 +1047,7 @@ <h2 id="LocalityLoadBalancerSetting">LocalityLoadBalancerSetting</h2>
 </td>
 </tr>
 <tr id="LocalityLoadBalancerSetting-failover">
-<td><code>failover</code></td>
+<td><code><a href="#LocalityLoadBalancerSetting-failover">failover</a></code></td>
 <td><code><a href="#LocalityLoadBalancerSetting-Failover">Failover[]</a></code></td>
 <td>
 <p>Optional: only one of distribute, failover or failoverPriority can be set.
@@ -1061,7 +1061,7 @@ <h2 id="LocalityLoadBalancerSetting">LocalityLoadBalancerSetting</h2>
 </td>
 </tr>
 <tr id="LocalityLoadBalancerSetting-failover_priority">
-<td><code>failoverPriority</code></td>
+<td><code><a href="#LocalityLoadBalancerSetting-failover_priority">failoverPriority</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>failoverPriority is an ordered list of labels used to sort endpoints to do priority based load balancing.
@@ -1133,7 +1133,7 @@ <h2 id="LocalityLoadBalancerSetting">LocalityLoadBalancerSetting</h2>
 </td>
 </tr>
 <tr id="LocalityLoadBalancerSetting-enabled">
-<td><code>enabled</code></td>
+<td><code><a href="#LocalityLoadBalancerSetting-enabled">enabled</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#boolvalue">BoolValue</a></code></td>
 <td>
 <p>enable locality load balancing, this is DestinationRule-level and will override mesh wide settings in entirety.
@@ -1162,7 +1162,7 @@ <h2 id="TrafficPolicy-PortTrafficPolicy">TrafficPolicy.PortTrafficPolicy</h2>
 </thead>
 <tbody>
 <tr id="TrafficPolicy-PortTrafficPolicy-port">
-<td><code>port</code></td>
+<td><code><a href="#TrafficPolicy-PortTrafficPolicy-port">port</a></code></td>
 <td><code><a href="https://istio.io/docs/reference/config/networking/virtual-service.html#PortSelector">PortSelector</a></code></td>
 <td>
 <p>Specifies the number of a port on the destination service
@@ -1174,7 +1174,7 @@ <h2 id="TrafficPolicy-PortTrafficPolicy">TrafficPolicy.PortTrafficPolicy</h2>
 </td>
 </tr>
 <tr id="TrafficPolicy-PortTrafficPolicy-load_balancer">
-<td><code>loadBalancer</code></td>
+<td><code><a href="#TrafficPolicy-PortTrafficPolicy-load_balancer">loadBalancer</a></code></td>
 <td><code><a href="#LoadBalancerSettings">LoadBalancerSettings</a></code></td>
 <td>
 <p>Settings controlling the load balancer algorithms.</p>
@@ -1185,7 +1185,7 @@ <h2 id="TrafficPolicy-PortTrafficPolicy">TrafficPolicy.PortTrafficPolicy</h2>
 </td>
 </tr>
 <tr id="TrafficPolicy-PortTrafficPolicy-connection_pool">
-<td><code>connectionPool</code></td>
+<td><code><a href="#TrafficPolicy-PortTrafficPolicy-connection_pool">connectionPool</a></code></td>
 <td><code><a href="#ConnectionPoolSettings">ConnectionPoolSettings</a></code></td>
 <td>
 <p>Settings controlling the volume of connections to an upstream service</p>
@@ -1196,7 +1196,7 @@ <h2 id="TrafficPolicy-PortTrafficPolicy">TrafficPolicy.PortTrafficPolicy</h2>
 </td>
 </tr>
 <tr id="TrafficPolicy-PortTrafficPolicy-outlier_detection">
-<td><code>outlierDetection</code></td>
+<td><code><a href="#TrafficPolicy-PortTrafficPolicy-outlier_detection">outlierDetection</a></code></td>
 <td><code><a href="#OutlierDetection">OutlierDetection</a></code></td>
 <td>
 <p>Settings controlling eviction of unhealthy hosts from the load balancing pool</p>
@@ -1207,7 +1207,7 @@ <h2 id="TrafficPolicy-PortTrafficPolicy">TrafficPolicy.PortTrafficPolicy</h2>
 </td>
 </tr>
 <tr id="TrafficPolicy-PortTrafficPolicy-tls">
-<td><code>tls</code></td>
+<td><code><a href="#TrafficPolicy-PortTrafficPolicy-tls">tls</a></code></td>
 <td><code><a href="#ClientTLSSettings">ClientTLSSettings</a></code></td>
 <td>
 <p>TLS related settings for connections to the upstream service.</p>
@@ -1233,7 +1233,7 @@ <h2 id="TrafficPolicy-TunnelSettings">TrafficPolicy.TunnelSettings</h2>
 </thead>
 <tbody>
 <tr id="TrafficPolicy-TunnelSettings-protocol">
-<td><code>protocol</code></td>
+<td><code><a href="#TrafficPolicy-TunnelSettings-protocol">protocol</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Specifies which protocol to use for tunneling the downstream connection.
@@ -1249,7 +1249,7 @@ <h2 id="TrafficPolicy-TunnelSettings">TrafficPolicy.TunnelSettings</h2>
 </td>
 </tr>
 <tr id="TrafficPolicy-TunnelSettings-target_host">
-<td><code>targetHost</code></td>
+<td><code><a href="#TrafficPolicy-TunnelSettings-target_host">targetHost</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Specifies a host to which the downstream connection is tunneled.
@@ -1261,7 +1261,7 @@ <h2 id="TrafficPolicy-TunnelSettings">TrafficPolicy.TunnelSettings</h2>
 </td>
 </tr>
 <tr id="TrafficPolicy-TunnelSettings-target_port">
-<td><code>targetPort</code></td>
+<td><code><a href="#TrafficPolicy-TunnelSettings-target_port">targetPort</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>Specifies a port to which the downstream connection is tunneled.</p>
@@ -1287,7 +1287,7 @@ <h2 id="TrafficPolicy-ProxyProtocol">TrafficPolicy.ProxyProtocol</h2>
 </thead>
 <tbody>
 <tr id="TrafficPolicy-ProxyProtocol-version">
-<td><code>version</code></td>
+<td><code><a href="#TrafficPolicy-ProxyProtocol-version">version</a></code></td>
 <td><code><a href="#TrafficPolicy-ProxyProtocol-VERSION">VERSION</a></code></td>
 <td>
 <p>The PROXY protocol version to use. See <a href="https://www.haproxy.org/download/2.1/doc/proxy-protocol.txt">https://www.haproxy.org/download/2.1/doc/proxy-protocol.txt</a> for details.
@@ -1329,7 +1329,7 @@ <h2 id="LoadBalancerSettings-ConsistentHashLB">LoadBalancerSettings.ConsistentHa
 </thead>
 <tbody>
 <tr id="LoadBalancerSettings-ConsistentHashLB-http_header_name" class="oneof oneof-start">
-<td><code>httpHeaderName</code></td>
+<td><code><a href="#LoadBalancerSettings-ConsistentHashLB-http_header_name">httpHeaderName</a></code></td>
 <td><code>string (oneof)</code></td>
 <td>
 <p>Hash based on a specific HTTP header.</p>
@@ -1340,7 +1340,7 @@ <h2 id="LoadBalancerSettings-ConsistentHashLB">LoadBalancerSettings.ConsistentHa
 </td>
 </tr>
 <tr id="LoadBalancerSettings-ConsistentHashLB-http_cookie" class="oneof">
-<td><code>httpCookie</code></td>
+<td><code><a href="#LoadBalancerSettings-ConsistentHashLB-http_cookie">httpCookie</a></code></td>
 <td><code><a href="#LoadBalancerSettings-ConsistentHashLB-HTTPCookie">HTTPCookie (oneof)</a></code></td>
 <td>
 <p>Hash based on HTTP cookie.</p>
@@ -1351,7 +1351,7 @@ <h2 id="LoadBalancerSettings-ConsistentHashLB">LoadBalancerSettings.ConsistentHa
 </td>
 </tr>
 <tr id="LoadBalancerSettings-ConsistentHashLB-use_source_ip" class="oneof">
-<td><code>useSourceIp</code></td>
+<td><code><a href="#LoadBalancerSettings-ConsistentHashLB-use_source_ip">useSourceIp</a></code></td>
 <td><code>bool (oneof)</code></td>
 <td>
 <p>Hash based on the source IP address.
@@ -1363,7 +1363,7 @@ <h2 id="LoadBalancerSettings-ConsistentHashLB">LoadBalancerSettings.ConsistentHa
 </td>
 </tr>
 <tr id="LoadBalancerSettings-ConsistentHashLB-http_query_parameter_name" class="oneof">
-<td><code>httpQueryParameterName</code></td>
+<td><code><a href="#LoadBalancerSettings-ConsistentHashLB-http_query_parameter_name">httpQueryParameterName</a></code></td>
 <td><code>string (oneof)</code></td>
 <td>
 <p>Hash based on a specific HTTP query parameter.</p>
@@ -1374,7 +1374,7 @@ <h2 id="LoadBalancerSettings-ConsistentHashLB">LoadBalancerSettings.ConsistentHa
 </td>
 </tr>
 <tr id="LoadBalancerSettings-ConsistentHashLB-ring_hash" class="oneof oneof-start">
-<td><code>ringHash</code></td>
+<td><code><a href="#LoadBalancerSettings-ConsistentHashLB-ring_hash">ringHash</a></code></td>
 <td><code><a href="#LoadBalancerSettings-ConsistentHashLB-RingHash">RingHash (oneof)</a></code></td>
 <td>
 <p>The ring/modulo hash load balancer implements consistent hashing to backend hosts.</p>
@@ -1385,7 +1385,7 @@ <h2 id="LoadBalancerSettings-ConsistentHashLB">LoadBalancerSettings.ConsistentHa
 </td>
 </tr>
 <tr id="LoadBalancerSettings-ConsistentHashLB-maglev" class="oneof">
-<td><code>maglev</code></td>
+<td><code><a href="#LoadBalancerSettings-ConsistentHashLB-maglev">maglev</a></code></td>
 <td><code><a href="#LoadBalancerSettings-ConsistentHashLB-MagLev">MagLev (oneof)</a></code></td>
 <td>
 <p>The Maglev load balancer implements consistent hashing to backend hosts.</p>
@@ -1396,7 +1396,7 @@ <h2 id="LoadBalancerSettings-ConsistentHashLB">LoadBalancerSettings.ConsistentHa
 </td>
 </tr>
 <tr id="LoadBalancerSettings-ConsistentHashLB-minimum_ring_size" class="deprecated ">
-<td><code>minimumRingSize</code></td>
+<td><code><a href="#LoadBalancerSettings-ConsistentHashLB-minimum_ring_size">minimumRingSize</a></code></td>
 <td><code>uint64</code></td>
 <td>
 <p>Deprecated. Use RingHash instead.</p>
@@ -1422,7 +1422,7 @@ <h2 id="LoadBalancerSettings-ConsistentHashLB-RingHash">LoadBalancerSettings.Con
 </thead>
 <tbody>
 <tr id="LoadBalancerSettings-ConsistentHashLB-RingHash-minimum_ring_size">
-<td><code>minimumRingSize</code></td>
+<td><code><a href="#LoadBalancerSettings-ConsistentHashLB-RingHash-minimum_ring_size">minimumRingSize</a></code></td>
 <td><code>uint64</code></td>
 <td>
 <p>The minimum number of virtual nodes to use for the hash
@@ -1452,7 +1452,7 @@ <h2 id="LoadBalancerSettings-ConsistentHashLB-MagLev">LoadBalancerSettings.Consi
 </thead>
 <tbody>
 <tr id="LoadBalancerSettings-ConsistentHashLB-MagLev-table_size">
-<td><code>tableSize</code></td>
+<td><code><a href="#LoadBalancerSettings-ConsistentHashLB-MagLev-table_size">tableSize</a></code></td>
 <td><code>uint64</code></td>
 <td>
 <p>The table size for Maglev hashing. This helps in controlling the
@@ -1485,7 +1485,7 @@ <h2 id="LoadBalancerSettings-ConsistentHashLB-HTTPCookie">LoadBalancerSettings.C
 </thead>
 <tbody>
 <tr id="LoadBalancerSettings-ConsistentHashLB-HTTPCookie-name">
-<td><code>name</code></td>
+<td><code><a href="#LoadBalancerSettings-ConsistentHashLB-HTTPCookie-name">name</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Name of the cookie.</p>
@@ -1496,7 +1496,7 @@ <h2 id="LoadBalancerSettings-ConsistentHashLB-HTTPCookie">LoadBalancerSettings.C
 </td>
 </tr>
 <tr id="LoadBalancerSettings-ConsistentHashLB-HTTPCookie-path">
-<td><code>path</code></td>
+<td><code><a href="#LoadBalancerSettings-ConsistentHashLB-HTTPCookie-path">path</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Path to set for the cookie.</p>
@@ -1507,7 +1507,7 @@ <h2 id="LoadBalancerSettings-ConsistentHashLB-HTTPCookie">LoadBalancerSettings.C
 </td>
 </tr>
 <tr id="LoadBalancerSettings-ConsistentHashLB-HTTPCookie-ttl">
-<td><code>ttl</code></td>
+<td><code><a href="#LoadBalancerSettings-ConsistentHashLB-HTTPCookie-ttl">ttl</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#duration">Duration</a></code></td>
 <td>
 <p>Lifetime of the cookie. If specified, a cookie with the TTL will be
@@ -1537,7 +1537,7 @@ <h2 id="ConnectionPoolSettings-TCPSettings">ConnectionPoolSettings.TCPSettings</
 </thead>
 <tbody>
 <tr id="ConnectionPoolSettings-TCPSettings-max_connections">
-<td><code>maxConnections</code></td>
+<td><code><a href="#ConnectionPoolSettings-TCPSettings-max_connections">maxConnections</a></code></td>
 <td><code>int32</code></td>
 <td>
 <p>Maximum number of HTTP1 /TCP connections to a destination host. Default 2^32-1.</p>
@@ -1548,7 +1548,7 @@ <h2 id="ConnectionPoolSettings-TCPSettings">ConnectionPoolSettings.TCPSettings</
 </td>
 </tr>
 <tr id="ConnectionPoolSettings-TCPSettings-connect_timeout">
-<td><code>connectTimeout</code></td>
+<td><code><a href="#ConnectionPoolSettings-TCPSettings-connect_timeout">connectTimeout</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#duration">Duration</a></code></td>
 <td>
 <p>TCP connection timeout. format:
@@ -1560,7 +1560,7 @@ <h2 id="ConnectionPoolSettings-TCPSettings">ConnectionPoolSettings.TCPSettings</
 </td>
 </tr>
 <tr id="ConnectionPoolSettings-TCPSettings-tcp_keepalive">
-<td><code>tcpKeepalive</code></td>
+<td><code><a href="#ConnectionPoolSettings-TCPSettings-tcp_keepalive">tcpKeepalive</a></code></td>
 <td><code><a href="#ConnectionPoolSettings-TCPSettings-TcpKeepalive">TcpKeepalive</a></code></td>
 <td>
 <p>If set then set SO_KEEPALIVE on the socket to enable TCP Keepalives.</p>
@@ -1571,7 +1571,7 @@ <h2 id="ConnectionPoolSettings-TCPSettings">ConnectionPoolSettings.TCPSettings</
 </td>
 </tr>
 <tr id="ConnectionPoolSettings-TCPSettings-max_connection_duration">
-<td><code>maxConnectionDuration</code></td>
+<td><code><a href="#ConnectionPoolSettings-TCPSettings-max_connection_duration">maxConnectionDuration</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#duration">Duration</a></code></td>
 <td>
 <p>The maximum duration of a connection. The duration is defined as the period since a connection
@@ -1584,7 +1584,7 @@ <h2 id="ConnectionPoolSettings-TCPSettings">ConnectionPoolSettings.TCPSettings</
 </td>
 </tr>
 <tr id="ConnectionPoolSettings-TCPSettings-idle_timeout">
-<td><code>idleTimeout</code></td>
+<td><code><a href="#ConnectionPoolSettings-TCPSettings-idle_timeout">idleTimeout</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#duration">Duration</a></code></td>
 <td>
 <p>The idle timeout for TCP connections.
@@ -1619,7 +1619,7 @@ <h2 id="ConnectionPoolSettings-HTTPSettings">ConnectionPoolSettings.HTTPSettings
 </thead>
 <tbody>
 <tr id="ConnectionPoolSettings-HTTPSettings-http1_max_pending_requests">
-<td><code>http1MaxPendingRequests</code></td>
+<td><code><a href="#ConnectionPoolSettings-HTTPSettings-http1_max_pending_requests">http1MaxPendingRequests</a></code></td>
 <td><code>int32</code></td>
 <td>
 <p>Maximum number of requests that will be queued while waiting for
@@ -1634,7 +1634,7 @@ <h2 id="ConnectionPoolSettings-HTTPSettings">ConnectionPoolSettings.HTTPSettings
 </td>
 </tr>
 <tr id="ConnectionPoolSettings-HTTPSettings-http2_max_requests">
-<td><code>http2MaxRequests</code></td>
+<td><code><a href="#ConnectionPoolSettings-HTTPSettings-http2_max_requests">http2MaxRequests</a></code></td>
 <td><code>int32</code></td>
 <td>
 <p>Maximum number of active requests to a destination. Default 2^32-1.
@@ -1646,7 +1646,7 @@ <h2 id="ConnectionPoolSettings-HTTPSettings">ConnectionPoolSettings.HTTPSettings
 </td>
 </tr>
 <tr id="ConnectionPoolSettings-HTTPSettings-max_requests_per_connection">
-<td><code>maxRequestsPerConnection</code></td>
+<td><code><a href="#ConnectionPoolSettings-HTTPSettings-max_requests_per_connection">maxRequestsPerConnection</a></code></td>
 <td><code>int32</code></td>
 <td>
 <p>Maximum number of requests per connection to a backend. Setting this
@@ -1659,7 +1659,7 @@ <h2 id="ConnectionPoolSettings-HTTPSettings">ConnectionPoolSettings.HTTPSettings
 </td>
 </tr>
 <tr id="ConnectionPoolSettings-HTTPSettings-max_retries">
-<td><code>maxRetries</code></td>
+<td><code><a href="#ConnectionPoolSettings-HTTPSettings-max_retries">maxRetries</a></code></td>
 <td><code>int32</code></td>
 <td>
 <p>Maximum number of retries that can be outstanding to all hosts in a
@@ -1671,7 +1671,7 @@ <h2 id="ConnectionPoolSettings-HTTPSettings">ConnectionPoolSettings.HTTPSettings
 </td>
 </tr>
 <tr id="ConnectionPoolSettings-HTTPSettings-idle_timeout">
-<td><code>idleTimeout</code></td>
+<td><code><a href="#ConnectionPoolSettings-HTTPSettings-idle_timeout">idleTimeout</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#duration">Duration</a></code></td>
 <td>
 <p>The idle timeout for upstream connection pool connections. The idle timeout
@@ -1688,7 +1688,7 @@ <h2 id="ConnectionPoolSettings-HTTPSettings">ConnectionPoolSettings.HTTPSettings
 </td>
 </tr>
 <tr id="ConnectionPoolSettings-HTTPSettings-h2_upgrade_policy">
-<td><code>h2UpgradePolicy</code></td>
+<td><code><a href="#ConnectionPoolSettings-HTTPSettings-h2_upgrade_policy">h2UpgradePolicy</a></code></td>
 <td><code><a href="#ConnectionPoolSettings-HTTPSettings-H2UpgradePolicy">H2UpgradePolicy</a></code></td>
 <td>
 <p>Specify if http1.1 connection should be upgraded to http2 for the associated destination.</p>
@@ -1699,7 +1699,7 @@ <h2 id="ConnectionPoolSettings-HTTPSettings">ConnectionPoolSettings.HTTPSettings
 </td>
 </tr>
 <tr id="ConnectionPoolSettings-HTTPSettings-use_client_protocol">
-<td><code>useClientProtocol</code></td>
+<td><code><a href="#ConnectionPoolSettings-HTTPSettings-use_client_protocol">useClientProtocol</a></code></td>
 <td><code>bool</code></td>
 <td>
 <p>If set to true, client protocol will be preserved while initiating connection to backend.
@@ -1712,7 +1712,7 @@ <h2 id="ConnectionPoolSettings-HTTPSettings">ConnectionPoolSettings.HTTPSettings
 </td>
 </tr>
 <tr id="ConnectionPoolSettings-HTTPSettings-max_concurrent_streams">
-<td><code>maxConcurrentStreams</code></td>
+<td><code><a href="#ConnectionPoolSettings-HTTPSettings-max_concurrent_streams">maxConcurrentStreams</a></code></td>
 <td><code>int32</code></td>
 <td>
 <p>The maximum number of concurrent streams allowed for a peer on one HTTP/2 connection.
@@ -1741,7 +1741,7 @@ <h2 id="ConnectionPoolSettings-TCPSettings-TcpKeepalive">ConnectionPoolSettings.
 </thead>
 <tbody>
 <tr id="ConnectionPoolSettings-TCPSettings-TcpKeepalive-probes">
-<td><code>probes</code></td>
+<td><code><a href="#ConnectionPoolSettings-TCPSettings-TcpKeepalive-probes">probes</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>Maximum number of keepalive probes to send without response before
@@ -1754,7 +1754,7 @@ <h2 id="ConnectionPoolSettings-TCPSettings-TcpKeepalive">ConnectionPoolSettings.
 </td>
 </tr>
 <tr id="ConnectionPoolSettings-TCPSettings-TcpKeepalive-time">
-<td><code>time</code></td>
+<td><code><a href="#ConnectionPoolSettings-TCPSettings-TcpKeepalive-time">time</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#duration">Duration</a></code></td>
 <td>
 <p>The time duration a connection needs to be idle before keep-alive
@@ -1767,7 +1767,7 @@ <h2 id="ConnectionPoolSettings-TCPSettings-TcpKeepalive">ConnectionPoolSettings.
 </td>
 </tr>
 <tr id="ConnectionPoolSettings-TCPSettings-TcpKeepalive-interval">
-<td><code>interval</code></td>
+<td><code><a href="#ConnectionPoolSettings-TCPSettings-TcpKeepalive-interval">interval</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#duration">Duration</a></code></td>
 <td>
 <p>The time duration between keep-alive probes.
@@ -1803,7 +1803,7 @@ <h2 id="LocalityLoadBalancerSetting-Distribute">LocalityLoadBalancerSetting.Dist
 </thead>
 <tbody>
 <tr id="LocalityLoadBalancerSetting-Distribute-from">
-<td><code>from</code></td>
+<td><code><a href="#LocalityLoadBalancerSetting-Distribute-from">from</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Originating locality, &lsquo;/&rsquo; separated, e.g. &lsquo;region/zone/sub_zone&rsquo;.</p>
@@ -1814,7 +1814,7 @@ <h2 id="LocalityLoadBalancerSetting-Distribute">LocalityLoadBalancerSetting.Dist
 </td>
 </tr>
 <tr id="LocalityLoadBalancerSetting-Distribute-to">
-<td><code>to</code></td>
+<td><code><a href="#LocalityLoadBalancerSetting-Distribute-to">to</a></code></td>
 <td><code>map&lt;string,&nbsp;uint32&gt;</code></td>
 <td>
 <p>Map of upstream localities to traffic distribution weights. The sum of
@@ -1850,7 +1850,7 @@ <h2 id="LocalityLoadBalancerSetting-Failover">LocalityLoadBalancerSetting.Failov
 </thead>
 <tbody>
 <tr id="LocalityLoadBalancerSetting-Failover-from">
-<td><code>from</code></td>
+<td><code><a href="#LocalityLoadBalancerSetting-Failover-from">from</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Originating region.</p>
@@ -1861,7 +1861,7 @@ <h2 id="LocalityLoadBalancerSetting-Failover">LocalityLoadBalancerSetting.Failov
 </td>
 </tr>
 <tr id="LocalityLoadBalancerSetting-Failover-to">
-<td><code>to</code></td>
+<td><code><a href="#LocalityLoadBalancerSetting-Failover-to">to</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Destination region the traffic will fail over to when endpoints in
@@ -1891,7 +1891,7 @@ <h2 id="google-protobuf-UInt32Value">google.protobuf.UInt32Value</h2>
 </thead>
 <tbody>
 <tr id="google-protobuf-UInt32Value-value">
-<td><code>value</code></td>
+<td><code><a href="#google-protobuf-UInt32Value-value">value</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>The uint32 value.</p>
@@ -1915,14 +1915,14 @@ <h2 id="TrafficPolicy-ProxyProtocol-VERSION">TrafficPolicy.ProxyProtocol.VERSION
 </thead>
 <tbody>
 <tr id="TrafficPolicy-ProxyProtocol-VERSION-V1">
-<td><code>V1</code></td>
+<td><code><a href="#TrafficPolicy-ProxyProtocol-VERSION-V1">V1</a></code></td>
 <td>
 <p>⁣PROXY protocol version 1. Human readable format.</p>
 
 </td>
 </tr>
 <tr id="TrafficPolicy-ProxyProtocol-VERSION-V2">
-<td><code>V2</code></td>
+<td><code><a href="#TrafficPolicy-ProxyProtocol-VERSION-V2">V2</a></code></td>
 <td>
 <p>⁣PROXY protocol version 2. Binary format.</p>
 
@@ -1944,7 +1944,7 @@ <h2 id="LoadBalancerSettings-SimpleLB">LoadBalancerSettings.SimpleLB</h2>
 </thead>
 <tbody>
 <tr id="LoadBalancerSettings-SimpleLB-UNSPECIFIED">
-<td><code>UNSPECIFIED</code></td>
+<td><code><a href="#LoadBalancerSettings-SimpleLB-UNSPECIFIED">UNSPECIFIED</a></code></td>
 <td>
 <p>No load balancing algorithm has been specified by the user. Istio
 will select an appropriate default.</p>
@@ -1952,7 +1952,7 @@ <h2 id="LoadBalancerSettings-SimpleLB">LoadBalancerSettings.SimpleLB</h2>
 </td>
 </tr>
 <tr id="LoadBalancerSettings-SimpleLB-RANDOM">
-<td><code>RANDOM</code></td>
+<td><code><a href="#LoadBalancerSettings-SimpleLB-RANDOM">RANDOM</a></code></td>
 <td>
 <p>The random load balancer selects a random healthy host. The random
 load balancer generally performs better than round robin if no health
@@ -1961,7 +1961,7 @@ <h2 id="LoadBalancerSettings-SimpleLB">LoadBalancerSettings.SimpleLB</h2>
 </td>
 </tr>
 <tr id="LoadBalancerSettings-SimpleLB-PASSTHROUGH">
-<td><code>PASSTHROUGH</code></td>
+<td><code><a href="#LoadBalancerSettings-SimpleLB-PASSTHROUGH">PASSTHROUGH</a></code></td>
 <td>
 <p>This option will forward the connection to the original IP address
 requested by the caller without doing any form of load
@@ -1972,7 +1972,7 @@ <h2 id="LoadBalancerSettings-SimpleLB">LoadBalancerSettings.SimpleLB</h2>
 </td>
 </tr>
 <tr id="LoadBalancerSettings-SimpleLB-ROUND_ROBIN">
-<td><code>ROUND_ROBIN</code></td>
+<td><code><a href="#LoadBalancerSettings-SimpleLB-ROUND_ROBIN">ROUND_ROBIN</a></code></td>
 <td>
 <p>A basic round robin load balancing policy. This is generally unsafe
 for many scenarios (e.g. when endpoint weighting is used) as it can
@@ -1982,7 +1982,7 @@ <h2 id="LoadBalancerSettings-SimpleLB">LoadBalancerSettings.SimpleLB</h2>
 </td>
 </tr>
 <tr id="LoadBalancerSettings-SimpleLB-LEAST_REQUEST">
-<td><code>LEAST_REQUEST</code></td>
+<td><code><a href="#LoadBalancerSettings-SimpleLB-LEAST_REQUEST">LEAST_REQUEST</a></code></td>
 <td>
 <p>The least request load balancer spreads load across endpoints, favoring
 endpoints with the least outstanding requests. This is generally safer
@@ -1992,7 +1992,7 @@ <h2 id="LoadBalancerSettings-SimpleLB">LoadBalancerSettings.SimpleLB</h2>
 </td>
 </tr>
 <tr id="LoadBalancerSettings-SimpleLB-LEAST_CONN" class="deprecated ">
-<td><code>LEAST_CONN</code></td>
+<td><code><a href="#LoadBalancerSettings-SimpleLB-LEAST_CONN">LEAST_CONN</a></code></td>
 <td>
 <p>Deprecated. Use LEAST_REQUEST instead.</p>
 
@@ -2014,14 +2014,14 @@ <h2 id="ConnectionPoolSettings-HTTPSettings-H2UpgradePolicy">ConnectionPoolSetti
 </thead>
 <tbody>
 <tr id="ConnectionPoolSettings-HTTPSettings-H2UpgradePolicy-DEFAULT">
-<td><code>DEFAULT</code></td>
+<td><code><a href="#ConnectionPoolSettings-HTTPSettings-H2UpgradePolicy-DEFAULT">DEFAULT</a></code></td>
 <td>
 <p>Use the global default.</p>
 
 </td>
 </tr>
 <tr id="ConnectionPoolSettings-HTTPSettings-H2UpgradePolicy-DO_NOT_UPGRADE">
-<td><code>DO_NOT_UPGRADE</code></td>
+<td><code><a href="#ConnectionPoolSettings-HTTPSettings-H2UpgradePolicy-DO_NOT_UPGRADE">DO_NOT_UPGRADE</a></code></td>
 <td>
 <p>Do not upgrade the connection to http2.
 This opt-out option overrides the default.</p>
@@ -2029,7 +2029,7 @@ <h2 id="ConnectionPoolSettings-HTTPSettings-H2UpgradePolicy">ConnectionPoolSetti
 </td>
 </tr>
 <tr id="ConnectionPoolSettings-HTTPSettings-H2UpgradePolicy-UPGRADE">
-<td><code>UPGRADE</code></td>
+<td><code><a href="#ConnectionPoolSettings-HTTPSettings-H2UpgradePolicy-UPGRADE">UPGRADE</a></code></td>
 <td>
 <p>Upgrade the connection to http2.
 This opt-in option overrides the default.</p>
@@ -2052,21 +2052,21 @@ <h2 id="ClientTLSSettings-TLSmode">ClientTLSSettings.TLSmode</h2>
 </thead>
 <tbody>
 <tr id="ClientTLSSettings-TLSmode-DISABLE">
-<td><code>DISABLE</code></td>
+<td><code><a href="#ClientTLSSettings-TLSmode-DISABLE">DISABLE</a></code></td>
 <td>
 <p>Do not setup a TLS connection to the upstream endpoint.</p>
 
 </td>
 </tr>
 <tr id="ClientTLSSettings-TLSmode-SIMPLE">
-<td><code>SIMPLE</code></td>
+<td><code><a href="#ClientTLSSettings-TLSmode-SIMPLE">SIMPLE</a></code></td>
 <td>
 <p>Originate a TLS connection to the upstream endpoint.</p>
 
 </td>
 </tr>
 <tr id="ClientTLSSettings-TLSmode-MUTUAL">
-<td><code>MUTUAL</code></td>
+<td><code><a href="#ClientTLSSettings-TLSmode-MUTUAL">MUTUAL</a></code></td>
 <td>
 <p>Secure connections to the upstream using mutual TLS by presenting
 client certificates for authentication.</p>
@@ -2074,7 +2074,7 @@ <h2 id="ClientTLSSettings-TLSmode">ClientTLSSettings.TLSmode</h2>
 </td>
 </tr>
 <tr id="ClientTLSSettings-TLSmode-ISTIO_MUTUAL">
-<td><code>ISTIO_MUTUAL</code></td>
+<td><code><a href="#ClientTLSSettings-TLSmode-ISTIO_MUTUAL">ISTIO_MUTUAL</a></code></td>
 <td>
 <p>Secure connections to the upstream using mutual TLS by presenting
 client certificates for authentication.
diff --git a/networking/v1alpha3/envoy_filter.pb.html b/networking/v1alpha3/envoy_filter.pb.html
index 2abc80bef9..8008c6c708 100644
--- a/networking/v1alpha3/envoy_filter.pb.html
+++ b/networking/v1alpha3/envoy_filter.pb.html
@@ -368,7 +368,7 @@ <h2 id="EnvoyFilter">EnvoyFilter</h2>
 </thead>
 <tbody>
 <tr id="EnvoyFilter-workload_selector">
-<td><code>workloadSelector</code></td>
+<td><code><a href="#EnvoyFilter-workload_selector">workloadSelector</a></code></td>
 <td><code><a href="https://istio.io/docs/reference/config/networking/sidecar.html#WorkloadSelector">WorkloadSelector</a></code></td>
 <td>
 <p>Criteria used to select the specific set of pods/VMs on which
@@ -384,7 +384,7 @@ <h2 id="EnvoyFilter">EnvoyFilter</h2>
 </td>
 </tr>
 <tr id="EnvoyFilter-targetRefs">
-<td><code>targetRefs</code></td>
+<td><code><a href="#EnvoyFilter-targetRefs">targetRefs</a></code></td>
 <td><code><a href="https://istio.io/docs/reference/config/type/workload-selector.html#PolicyTargetReference">PolicyTargetReference[]</a></code></td>
 <td>
 <p>Optional. The targetRefs specifies a list of resources the policy should be
@@ -409,7 +409,7 @@ <h2 id="EnvoyFilter">EnvoyFilter</h2>
 </td>
 </tr>
 <tr id="EnvoyFilter-config_patches">
-<td><code>configPatches</code></td>
+<td><code><a href="#EnvoyFilter-config_patches">configPatches</a></code></td>
 <td><code><a href="#EnvoyFilter-EnvoyConfigObjectPatch">EnvoyConfigObjectPatch[]</a></code></td>
 <td>
 <p>One or more patches with match conditions.</p>
@@ -420,7 +420,7 @@ <h2 id="EnvoyFilter">EnvoyFilter</h2>
 </td>
 </tr>
 <tr id="EnvoyFilter-priority">
-<td><code>priority</code></td>
+<td><code><a href="#EnvoyFilter-priority">priority</a></code></td>
 <td><code>int32</code></td>
 <td>
 <p>Priority defines the order in which patch sets are applied within a context.
@@ -460,7 +460,7 @@ <h2 id="EnvoyFilter-ProxyMatch">EnvoyFilter.ProxyMatch</h2>
 </thead>
 <tbody>
 <tr id="EnvoyFilter-ProxyMatch-proxy_version">
-<td><code>proxyVersion</code></td>
+<td><code><a href="#EnvoyFilter-ProxyMatch-proxy_version">proxyVersion</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>A regular expression in golang regex format (RE2) that can be
@@ -478,7 +478,7 @@ <h2 id="EnvoyFilter-ProxyMatch">EnvoyFilter.ProxyMatch</h2>
 </td>
 </tr>
 <tr id="EnvoyFilter-ProxyMatch-metadata">
-<td><code>metadata</code></td>
+<td><code><a href="#EnvoyFilter-ProxyMatch-metadata">metadata</a></code></td>
 <td><code>map&lt;string,&nbsp;string&gt;</code></td>
 <td>
 <p>Match on the node metadata supplied by a proxy when connecting
@@ -512,7 +512,7 @@ <h2 id="EnvoyFilter-ClusterMatch">EnvoyFilter.ClusterMatch</h2>
 </thead>
 <tbody>
 <tr id="EnvoyFilter-ClusterMatch-port_number">
-<td><code>portNumber</code></td>
+<td><code><a href="#EnvoyFilter-ClusterMatch-port_number">portNumber</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>The service port for which this cluster was generated.  If
@@ -525,7 +525,7 @@ <h2 id="EnvoyFilter-ClusterMatch">EnvoyFilter.ClusterMatch</h2>
 </td>
 </tr>
 <tr id="EnvoyFilter-ClusterMatch-service">
-<td><code>service</code></td>
+<td><code><a href="#EnvoyFilter-ClusterMatch-service">service</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>The fully qualified service name for this cluster. If omitted,
@@ -540,7 +540,7 @@ <h2 id="EnvoyFilter-ClusterMatch">EnvoyFilter.ClusterMatch</h2>
 </td>
 </tr>
 <tr id="EnvoyFilter-ClusterMatch-subset">
-<td><code>subset</code></td>
+<td><code><a href="#EnvoyFilter-ClusterMatch-subset">subset</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>The subset associated with the service. If omitted, applies to
@@ -552,7 +552,7 @@ <h2 id="EnvoyFilter-ClusterMatch">EnvoyFilter.ClusterMatch</h2>
 </td>
 </tr>
 <tr id="EnvoyFilter-ClusterMatch-name">
-<td><code>name</code></td>
+<td><code><a href="#EnvoyFilter-ClusterMatch-name">name</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>The exact name of the cluster to match. To match a specific
@@ -585,7 +585,7 @@ <h2 id="EnvoyFilter-RouteConfigurationMatch">EnvoyFilter.RouteConfigurationMatch
 </thead>
 <tbody>
 <tr id="EnvoyFilter-RouteConfigurationMatch-port_number">
-<td><code>portNumber</code></td>
+<td><code><a href="#EnvoyFilter-RouteConfigurationMatch-port_number">portNumber</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>The service port number or gateway server port number for which
@@ -598,7 +598,7 @@ <h2 id="EnvoyFilter-RouteConfigurationMatch">EnvoyFilter.RouteConfigurationMatch
 </td>
 </tr>
 <tr id="EnvoyFilter-RouteConfigurationMatch-port_name">
-<td><code>portName</code></td>
+<td><code><a href="#EnvoyFilter-RouteConfigurationMatch-port_name">portName</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Applicable only for GATEWAY context. The gateway server port
@@ -610,7 +610,7 @@ <h2 id="EnvoyFilter-RouteConfigurationMatch">EnvoyFilter.RouteConfigurationMatch
 </td>
 </tr>
 <tr id="EnvoyFilter-RouteConfigurationMatch-gateway">
-<td><code>gateway</code></td>
+<td><code><a href="#EnvoyFilter-RouteConfigurationMatch-gateway">gateway</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>The Istio gateway config&rsquo;s namespace/name for which this route
@@ -626,7 +626,7 @@ <h2 id="EnvoyFilter-RouteConfigurationMatch">EnvoyFilter.RouteConfigurationMatch
 </td>
 </tr>
 <tr id="EnvoyFilter-RouteConfigurationMatch-vhost">
-<td><code>vhost</code></td>
+<td><code><a href="#EnvoyFilter-RouteConfigurationMatch-vhost">vhost</a></code></td>
 <td><code><a href="#EnvoyFilter-RouteConfigurationMatch-VirtualHostMatch">VirtualHostMatch</a></code></td>
 <td>
 <p>Match a specific virtual host in a route configuration and
@@ -638,7 +638,7 @@ <h2 id="EnvoyFilter-RouteConfigurationMatch">EnvoyFilter.RouteConfigurationMatch
 </td>
 </tr>
 <tr id="EnvoyFilter-RouteConfigurationMatch-name">
-<td><code>name</code></td>
+<td><code><a href="#EnvoyFilter-RouteConfigurationMatch-name">name</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Route configuration name to match on. Can be used to match a
@@ -670,7 +670,7 @@ <h2 id="EnvoyFilter-ListenerMatch">EnvoyFilter.ListenerMatch</h2>
 </thead>
 <tbody>
 <tr id="EnvoyFilter-ListenerMatch-port_number">
-<td><code>portNumber</code></td>
+<td><code><a href="#EnvoyFilter-ListenerMatch-port_number">portNumber</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>The service port/gateway port to which traffic is being
@@ -684,7 +684,7 @@ <h2 id="EnvoyFilter-ListenerMatch">EnvoyFilter.ListenerMatch</h2>
 </td>
 </tr>
 <tr id="EnvoyFilter-ListenerMatch-filter_chain">
-<td><code>filterChain</code></td>
+<td><code><a href="#EnvoyFilter-ListenerMatch-filter_chain">filterChain</a></code></td>
 <td><code><a href="#EnvoyFilter-ListenerMatch-FilterChainMatch">FilterChainMatch</a></code></td>
 <td>
 <p>Match a specific filter chain in a listener. If specified, the
@@ -698,7 +698,7 @@ <h2 id="EnvoyFilter-ListenerMatch">EnvoyFilter.ListenerMatch</h2>
 </td>
 </tr>
 <tr id="EnvoyFilter-ListenerMatch-listener_filter">
-<td><code>listenerFilter</code></td>
+<td><code><a href="#EnvoyFilter-ListenerMatch-listener_filter">listenerFilter</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Match a specific listener filter. If specified, the
@@ -710,7 +710,7 @@ <h2 id="EnvoyFilter-ListenerMatch">EnvoyFilter.ListenerMatch</h2>
 </td>
 </tr>
 <tr id="EnvoyFilter-ListenerMatch-name">
-<td><code>name</code></td>
+<td><code><a href="#EnvoyFilter-ListenerMatch-name">name</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Match a specific listener by its name. The listeners generated
@@ -739,7 +739,7 @@ <h2 id="EnvoyFilter-Patch">EnvoyFilter.Patch</h2>
 </thead>
 <tbody>
 <tr id="EnvoyFilter-Patch-operation">
-<td><code>operation</code></td>
+<td><code><a href="#EnvoyFilter-Patch-operation">operation</a></code></td>
 <td><code><a href="#EnvoyFilter-Patch-Operation">Operation</a></code></td>
 <td>
 <p>Determines how the patch should be applied.</p>
@@ -750,7 +750,7 @@ <h2 id="EnvoyFilter-Patch">EnvoyFilter.Patch</h2>
 </td>
 </tr>
 <tr id="EnvoyFilter-Patch-value">
-<td><code>value</code></td>
+<td><code><a href="#EnvoyFilter-Patch-value">value</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#struct">Struct</a></code></td>
 <td>
 <p>The JSON config of the object being patched. This will be merged using
@@ -762,7 +762,7 @@ <h2 id="EnvoyFilter-Patch">EnvoyFilter.Patch</h2>
 </td>
 </tr>
 <tr id="EnvoyFilter-Patch-filter_class">
-<td><code>filterClass</code></td>
+<td><code><a href="#EnvoyFilter-Patch-filter_class">filterClass</a></code></td>
 <td><code><a href="#EnvoyFilter-Patch-FilterClass">FilterClass</a></code></td>
 <td>
 <p>Determines the filter insertion order.</p>
@@ -791,7 +791,7 @@ <h2 id="EnvoyFilter-EnvoyConfigObjectMatch">EnvoyFilter.EnvoyConfigObjectMatch</
 </thead>
 <tbody>
 <tr id="EnvoyFilter-EnvoyConfigObjectMatch-context">
-<td><code>context</code></td>
+<td><code><a href="#EnvoyFilter-EnvoyConfigObjectMatch-context">context</a></code></td>
 <td><code><a href="#EnvoyFilter-PatchContext">PatchContext</a></code></td>
 <td>
 <p>The specific config generation context to match on. Istio Pilot
@@ -804,7 +804,7 @@ <h2 id="EnvoyFilter-EnvoyConfigObjectMatch">EnvoyFilter.EnvoyConfigObjectMatch</
 </td>
 </tr>
 <tr id="EnvoyFilter-EnvoyConfigObjectMatch-proxy">
-<td><code>proxy</code></td>
+<td><code><a href="#EnvoyFilter-EnvoyConfigObjectMatch-proxy">proxy</a></code></td>
 <td><code><a href="#EnvoyFilter-ProxyMatch">ProxyMatch</a></code></td>
 <td>
 <p>Match on properties associated with a proxy.</p>
@@ -815,7 +815,7 @@ <h2 id="EnvoyFilter-EnvoyConfigObjectMatch">EnvoyFilter.EnvoyConfigObjectMatch</
 </td>
 </tr>
 <tr id="EnvoyFilter-EnvoyConfigObjectMatch-listener" class="oneof oneof-start">
-<td><code>listener</code></td>
+<td><code><a href="#EnvoyFilter-EnvoyConfigObjectMatch-listener">listener</a></code></td>
 <td><code><a href="#EnvoyFilter-ListenerMatch">ListenerMatch (oneof)</a></code></td>
 <td>
 <p>Match on envoy listener attributes.</p>
@@ -826,7 +826,7 @@ <h2 id="EnvoyFilter-EnvoyConfigObjectMatch">EnvoyFilter.EnvoyConfigObjectMatch</
 </td>
 </tr>
 <tr id="EnvoyFilter-EnvoyConfigObjectMatch-route_configuration" class="oneof">
-<td><code>routeConfiguration</code></td>
+<td><code><a href="#EnvoyFilter-EnvoyConfigObjectMatch-route_configuration">routeConfiguration</a></code></td>
 <td><code><a href="#EnvoyFilter-RouteConfigurationMatch">RouteConfigurationMatch (oneof)</a></code></td>
 <td>
 <p>Match on envoy HTTP route configuration attributes.</p>
@@ -837,7 +837,7 @@ <h2 id="EnvoyFilter-EnvoyConfigObjectMatch">EnvoyFilter.EnvoyConfigObjectMatch</
 </td>
 </tr>
 <tr id="EnvoyFilter-EnvoyConfigObjectMatch-cluster" class="oneof">
-<td><code>cluster</code></td>
+<td><code><a href="#EnvoyFilter-EnvoyConfigObjectMatch-cluster">cluster</a></code></td>
 <td><code><a href="#EnvoyFilter-ClusterMatch">ClusterMatch (oneof)</a></code></td>
 <td>
 <p>Match on envoy cluster attributes.</p>
@@ -865,7 +865,7 @@ <h2 id="EnvoyFilter-EnvoyConfigObjectPatch">EnvoyFilter.EnvoyConfigObjectPatch</
 </thead>
 <tbody>
 <tr id="EnvoyFilter-EnvoyConfigObjectPatch-apply_to">
-<td><code>applyTo</code></td>
+<td><code><a href="#EnvoyFilter-EnvoyConfigObjectPatch-apply_to">applyTo</a></code></td>
 <td><code><a href="#EnvoyFilter-ApplyTo">ApplyTo</a></code></td>
 <td>
 <p>Specifies where in the Envoy configuration, the patch should be
@@ -884,7 +884,7 @@ <h2 id="EnvoyFilter-EnvoyConfigObjectPatch">EnvoyFilter.EnvoyConfigObjectPatch</
 </td>
 </tr>
 <tr id="EnvoyFilter-EnvoyConfigObjectPatch-match">
-<td><code>match</code></td>
+<td><code><a href="#EnvoyFilter-EnvoyConfigObjectPatch-match">match</a></code></td>
 <td><code><a href="#EnvoyFilter-EnvoyConfigObjectMatch">EnvoyConfigObjectMatch</a></code></td>
 <td>
 <p>Match on listener/route configuration/cluster.</p>
@@ -895,7 +895,7 @@ <h2 id="EnvoyFilter-EnvoyConfigObjectPatch">EnvoyFilter.EnvoyConfigObjectPatch</
 </td>
 </tr>
 <tr id="EnvoyFilter-EnvoyConfigObjectPatch-patch">
-<td><code>patch</code></td>
+<td><code><a href="#EnvoyFilter-EnvoyConfigObjectPatch-patch">patch</a></code></td>
 <td><code><a href="#EnvoyFilter-Patch">Patch</a></code></td>
 <td>
 <p>The patch to apply along with the operation.</p>
@@ -923,7 +923,7 @@ <h2 id="EnvoyFilter-RouteConfigurationMatch-RouteMatch">EnvoyFilter.RouteConfigu
 </thead>
 <tbody>
 <tr id="EnvoyFilter-RouteConfigurationMatch-RouteMatch-name">
-<td><code>name</code></td>
+<td><code><a href="#EnvoyFilter-RouteConfigurationMatch-RouteMatch-name">name</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>The Route objects generated by default are named as
@@ -937,7 +937,7 @@ <h2 id="EnvoyFilter-RouteConfigurationMatch-RouteMatch">EnvoyFilter.RouteConfigu
 </td>
 </tr>
 <tr id="EnvoyFilter-RouteConfigurationMatch-RouteMatch-action">
-<td><code>action</code></td>
+<td><code><a href="#EnvoyFilter-RouteConfigurationMatch-RouteMatch-action">action</a></code></td>
 <td><code><a href="#EnvoyFilter-RouteConfigurationMatch-RouteMatch-Action">Action</a></code></td>
 <td>
 <p>Match a route with specific action type.</p>
@@ -965,7 +965,7 @@ <h2 id="EnvoyFilter-RouteConfigurationMatch-VirtualHostMatch">EnvoyFilter.RouteC
 </thead>
 <tbody>
 <tr id="EnvoyFilter-RouteConfigurationMatch-VirtualHostMatch-name">
-<td><code>name</code></td>
+<td><code><a href="#EnvoyFilter-RouteConfigurationMatch-VirtualHostMatch-name">name</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>The VirtualHosts objects generated by Istio are named as
@@ -979,7 +979,7 @@ <h2 id="EnvoyFilter-RouteConfigurationMatch-VirtualHostMatch">EnvoyFilter.RouteC
 </td>
 </tr>
 <tr id="EnvoyFilter-RouteConfigurationMatch-VirtualHostMatch-route">
-<td><code>route</code></td>
+<td><code><a href="#EnvoyFilter-RouteConfigurationMatch-VirtualHostMatch-route">route</a></code></td>
 <td><code><a href="#EnvoyFilter-RouteConfigurationMatch-RouteMatch">RouteMatch</a></code></td>
 <td>
 <p>Match a specific route within the virtual host.</p>
@@ -1010,7 +1010,7 @@ <h2 id="EnvoyFilter-ListenerMatch-FilterChainMatch">EnvoyFilter.ListenerMatch.Fi
 </thead>
 <tbody>
 <tr id="EnvoyFilter-ListenerMatch-FilterChainMatch-name">
-<td><code>name</code></td>
+<td><code><a href="#EnvoyFilter-ListenerMatch-FilterChainMatch-name">name</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>The name assigned to the filter chain.</p>
@@ -1021,7 +1021,7 @@ <h2 id="EnvoyFilter-ListenerMatch-FilterChainMatch">EnvoyFilter.ListenerMatch.Fi
 </td>
 </tr>
 <tr id="EnvoyFilter-ListenerMatch-FilterChainMatch-sni">
-<td><code>sni</code></td>
+<td><code><a href="#EnvoyFilter-ListenerMatch-FilterChainMatch-sni">sni</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>The SNI value used by a filter chain&rsquo;s match condition.  This
@@ -1034,7 +1034,7 @@ <h2 id="EnvoyFilter-ListenerMatch-FilterChainMatch">EnvoyFilter.ListenerMatch.Fi
 </td>
 </tr>
 <tr id="EnvoyFilter-ListenerMatch-FilterChainMatch-transport_protocol">
-<td><code>transportProtocol</code></td>
+<td><code><a href="#EnvoyFilter-ListenerMatch-FilterChainMatch-transport_protocol">transportProtocol</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Applies only to <code>SIDECAR_INBOUND</code> context. If non-empty, a
@@ -1054,7 +1054,7 @@ <h2 id="EnvoyFilter-ListenerMatch-FilterChainMatch">EnvoyFilter.ListenerMatch.Fi
 </td>
 </tr>
 <tr id="EnvoyFilter-ListenerMatch-FilterChainMatch-application_protocols">
-<td><code>applicationProtocols</code></td>
+<td><code><a href="#EnvoyFilter-ListenerMatch-FilterChainMatch-application_protocols">applicationProtocols</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Applies only to sidecars. If non-empty, a comma separated set
@@ -1070,7 +1070,7 @@ <h2 id="EnvoyFilter-ListenerMatch-FilterChainMatch">EnvoyFilter.ListenerMatch.Fi
 </td>
 </tr>
 <tr id="EnvoyFilter-ListenerMatch-FilterChainMatch-filter">
-<td><code>filter</code></td>
+<td><code><a href="#EnvoyFilter-ListenerMatch-FilterChainMatch-filter">filter</a></code></td>
 <td><code><a href="#EnvoyFilter-ListenerMatch-FilterMatch">FilterMatch</a></code></td>
 <td>
 <p>The name of a specific filter to apply the patch to. Set this
@@ -1083,7 +1083,7 @@ <h2 id="EnvoyFilter-ListenerMatch-FilterChainMatch">EnvoyFilter.ListenerMatch.Fi
 </td>
 </tr>
 <tr id="EnvoyFilter-ListenerMatch-FilterChainMatch-destination_port">
-<td><code>destinationPort</code></td>
+<td><code><a href="#EnvoyFilter-ListenerMatch-FilterChainMatch-destination_port">destinationPort</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>The destination_port value used by a filter chain&rsquo;s match condition.
@@ -1112,7 +1112,7 @@ <h2 id="EnvoyFilter-ListenerMatch-FilterMatch">EnvoyFilter.ListenerMatch.FilterM
 </thead>
 <tbody>
 <tr id="EnvoyFilter-ListenerMatch-FilterMatch-name">
-<td><code>name</code></td>
+<td><code><a href="#EnvoyFilter-ListenerMatch-FilterMatch-name">name</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>The filter name to match on.
@@ -1125,7 +1125,7 @@ <h2 id="EnvoyFilter-ListenerMatch-FilterMatch">EnvoyFilter.ListenerMatch.FilterM
 </td>
 </tr>
 <tr id="EnvoyFilter-ListenerMatch-FilterMatch-sub_filter">
-<td><code>subFilter</code></td>
+<td><code><a href="#EnvoyFilter-ListenerMatch-FilterMatch-sub_filter">subFilter</a></code></td>
 <td><code><a href="#EnvoyFilter-ListenerMatch-SubFilterMatch">SubFilterMatch</a></code></td>
 <td>
 <p>The next level filter within this filter to match
@@ -1158,7 +1158,7 @@ <h2 id="EnvoyFilter-ListenerMatch-SubFilterMatch">EnvoyFilter.ListenerMatch.SubF
 </thead>
 <tbody>
 <tr id="EnvoyFilter-ListenerMatch-SubFilterMatch-name">
-<td><code>name</code></td>
+<td><code><a href="#EnvoyFilter-ListenerMatch-SubFilterMatch-name">name</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>The filter name to match on.</p>
@@ -1184,28 +1184,28 @@ <h2 id="EnvoyFilter-RouteConfigurationMatch-RouteMatch-Action">EnvoyFilter.Route
 </thead>
 <tbody>
 <tr id="EnvoyFilter-RouteConfigurationMatch-RouteMatch-Action-ANY">
-<td><code>ANY</code></td>
+<td><code><a href="#EnvoyFilter-RouteConfigurationMatch-RouteMatch-Action-ANY">ANY</a></code></td>
 <td>
 <p>All three route actions</p>
 
 </td>
 </tr>
 <tr id="EnvoyFilter-RouteConfigurationMatch-RouteMatch-Action-ROUTE">
-<td><code>ROUTE</code></td>
+<td><code><a href="#EnvoyFilter-RouteConfigurationMatch-RouteMatch-Action-ROUTE">ROUTE</a></code></td>
 <td>
 <p>Route traffic to a cluster / weighted clusters.</p>
 
 </td>
 </tr>
 <tr id="EnvoyFilter-RouteConfigurationMatch-RouteMatch-Action-REDIRECT">
-<td><code>REDIRECT</code></td>
+<td><code><a href="#EnvoyFilter-RouteConfigurationMatch-RouteMatch-Action-REDIRECT">REDIRECT</a></code></td>
 <td>
 <p>Redirect request.</p>
 
 </td>
 </tr>
 <tr id="EnvoyFilter-RouteConfigurationMatch-RouteMatch-Action-DIRECT_RESPONSE">
-<td><code>DIRECT_RESPONSE</code></td>
+<td><code><a href="#EnvoyFilter-RouteConfigurationMatch-RouteMatch-Action-DIRECT_RESPONSE">DIRECT_RESPONSE</a></code></td>
 <td>
 <p>directly respond to a request with specific payload.</p>
 
@@ -1228,12 +1228,12 @@ <h2 id="EnvoyFilter-Patch-Operation">EnvoyFilter.Patch.Operation</h2>
 </thead>
 <tbody>
 <tr id="EnvoyFilter-Patch-Operation-INVALID">
-<td><code>INVALID</code></td>
+<td><code><a href="#EnvoyFilter-Patch-Operation-INVALID">INVALID</a></code></td>
 <td>
 </td>
 </tr>
 <tr id="EnvoyFilter-Patch-Operation-MERGE">
-<td><code>MERGE</code></td>
+<td><code><a href="#EnvoyFilter-Patch-Operation-MERGE">MERGE</a></code></td>
 <td>
 <p>Merge the provided config with the generated config using
 proto merge semantics. If you are specifying config in its
@@ -1242,7 +1242,7 @@ <h2 id="EnvoyFilter-Patch-Operation">EnvoyFilter.Patch.Operation</h2>
 </td>
 </tr>
 <tr id="EnvoyFilter-Patch-Operation-ADD">
-<td><code>ADD</code></td>
+<td><code><a href="#EnvoyFilter-Patch-Operation-ADD">ADD</a></code></td>
 <td>
 <p>Add the provided config to an existing list (of listeners,
 clusters, virtual hosts, network filters, or http
@@ -1252,7 +1252,7 @@ <h2 id="EnvoyFilter-Patch-Operation">EnvoyFilter.Patch.Operation</h2>
 </td>
 </tr>
 <tr id="EnvoyFilter-Patch-Operation-REMOVE">
-<td><code>REMOVE</code></td>
+<td><code><a href="#EnvoyFilter-Patch-Operation-REMOVE">REMOVE</a></code></td>
 <td>
 <p>Remove the selected object from the list (of listeners,
 clusters, virtual hosts, network filters, routes, or http
@@ -1263,7 +1263,7 @@ <h2 id="EnvoyFilter-Patch-Operation">EnvoyFilter.Patch.Operation</h2>
 </td>
 </tr>
 <tr id="EnvoyFilter-Patch-Operation-INSERT_BEFORE">
-<td><code>INSERT_BEFORE</code></td>
+<td><code><a href="#EnvoyFilter-Patch-Operation-INSERT_BEFORE">INSERT_BEFORE</a></code></td>
 <td>
 <p>Insert operation on an array of named objects. This operation
 is typically useful only in the context of filters or routes,
@@ -1278,7 +1278,7 @@ <h2 id="EnvoyFilter-Patch-Operation">EnvoyFilter.Patch.Operation</h2>
 </td>
 </tr>
 <tr id="EnvoyFilter-Patch-Operation-INSERT_AFTER">
-<td><code>INSERT_AFTER</code></td>
+<td><code><a href="#EnvoyFilter-Patch-Operation-INSERT_AFTER">INSERT_AFTER</a></code></td>
 <td>
 <p>Insert operation on an array of named objects. This operation
 is typically useful only in the context of filters or routes,
@@ -1293,7 +1293,7 @@ <h2 id="EnvoyFilter-Patch-Operation">EnvoyFilter.Patch.Operation</h2>
 </td>
 </tr>
 <tr id="EnvoyFilter-Patch-Operation-INSERT_FIRST">
-<td><code>INSERT_FIRST</code></td>
+<td><code><a href="#EnvoyFilter-Patch-Operation-INSERT_FIRST">INSERT_FIRST</a></code></td>
 <td>
 <p>Insert operation on an array of named objects. This operation
 is typically useful only in the context of filters or routes,
@@ -1308,7 +1308,7 @@ <h2 id="EnvoyFilter-Patch-Operation">EnvoyFilter.Patch.Operation</h2>
 </td>
 </tr>
 <tr id="EnvoyFilter-Patch-Operation-REPLACE">
-<td><code>REPLACE</code></td>
+<td><code><a href="#EnvoyFilter-Patch-Operation-REPLACE">REPLACE</a></code></td>
 <td>
 <p>Replace contents of a named filter with new contents.
 <code>REPLACE</code> operation is only valid for <code>HTTP_FILTER</code> and
@@ -1341,7 +1341,7 @@ <h2 id="EnvoyFilter-Patch-FilterClass">EnvoyFilter.Patch.FilterClass</h2>
 </thead>
 <tbody>
 <tr id="EnvoyFilter-Patch-FilterClass-UNSPECIFIED">
-<td><code>UNSPECIFIED</code></td>
+<td><code><a href="#EnvoyFilter-Patch-FilterClass-UNSPECIFIED">UNSPECIFIED</a></code></td>
 <td>
 <p>Control plane decides where to insert the filter.
 Do not specify <code>FilterClass</code> if the filter is independent of others.</p>
@@ -1349,21 +1349,21 @@ <h2 id="EnvoyFilter-Patch-FilterClass">EnvoyFilter.Patch.FilterClass</h2>
 </td>
 </tr>
 <tr id="EnvoyFilter-Patch-FilterClass-AUTHN">
-<td><code>AUTHN</code></td>
+<td><code><a href="#EnvoyFilter-Patch-FilterClass-AUTHN">AUTHN</a></code></td>
 <td>
 <p>Insert filter after Istio authentication filters.</p>
 
 </td>
 </tr>
 <tr id="EnvoyFilter-Patch-FilterClass-AUTHZ">
-<td><code>AUTHZ</code></td>
+<td><code><a href="#EnvoyFilter-Patch-FilterClass-AUTHZ">AUTHZ</a></code></td>
 <td>
 <p>Insert filter after Istio authorization filters.</p>
 
 </td>
 </tr>
 <tr id="EnvoyFilter-Patch-FilterClass-STATS">
-<td><code>STATS</code></td>
+<td><code><a href="#EnvoyFilter-Patch-FilterClass-STATS">STATS</a></code></td>
 <td>
 <p>Insert filter before Istio stats filters.</p>
 
@@ -1385,26 +1385,26 @@ <h2 id="EnvoyFilter-ApplyTo">EnvoyFilter.ApplyTo</h2>
 </thead>
 <tbody>
 <tr id="EnvoyFilter-ApplyTo-INVALID">
-<td><code>INVALID</code></td>
+<td><code><a href="#EnvoyFilter-ApplyTo-INVALID">INVALID</a></code></td>
 <td>
 </td>
 </tr>
 <tr id="EnvoyFilter-ApplyTo-LISTENER">
-<td><code>LISTENER</code></td>
+<td><code><a href="#EnvoyFilter-ApplyTo-LISTENER">LISTENER</a></code></td>
 <td>
 <p>Applies the patch to the listener.</p>
 
 </td>
 </tr>
 <tr id="EnvoyFilter-ApplyTo-FILTER_CHAIN">
-<td><code>FILTER_CHAIN</code></td>
+<td><code><a href="#EnvoyFilter-ApplyTo-FILTER_CHAIN">FILTER_CHAIN</a></code></td>
 <td>
 <p>Applies the patch to the filter chain.</p>
 
 </td>
 </tr>
 <tr id="EnvoyFilter-ApplyTo-NETWORK_FILTER">
-<td><code>NETWORK_FILTER</code></td>
+<td><code><a href="#EnvoyFilter-ApplyTo-NETWORK_FILTER">NETWORK_FILTER</a></code></td>
 <td>
 <p>Applies the patch to the network filter chain, to modify an
 existing filter or add a new filter.</p>
@@ -1412,7 +1412,7 @@ <h2 id="EnvoyFilter-ApplyTo">EnvoyFilter.ApplyTo</h2>
 </td>
 </tr>
 <tr id="EnvoyFilter-ApplyTo-HTTP_FILTER">
-<td><code>HTTP_FILTER</code></td>
+<td><code><a href="#EnvoyFilter-ApplyTo-HTTP_FILTER">HTTP_FILTER</a></code></td>
 <td>
 <p>Applies the patch to the HTTP filter chain in the http
 connection manager, to modify an existing filter or add a new
@@ -1421,7 +1421,7 @@ <h2 id="EnvoyFilter-ApplyTo">EnvoyFilter.ApplyTo</h2>
 </td>
 </tr>
 <tr id="EnvoyFilter-ApplyTo-ROUTE_CONFIGURATION">
-<td><code>ROUTE_CONFIGURATION</code></td>
+<td><code><a href="#EnvoyFilter-ApplyTo-ROUTE_CONFIGURATION">ROUTE_CONFIGURATION</a></code></td>
 <td>
 <p>Applies the patch to the Route configuration (rds output)
 inside a HTTP connection manager. This does not apply to the
@@ -1431,14 +1431,14 @@ <h2 id="EnvoyFilter-ApplyTo">EnvoyFilter.ApplyTo</h2>
 </td>
 </tr>
 <tr id="EnvoyFilter-ApplyTo-VIRTUAL_HOST">
-<td><code>VIRTUAL_HOST</code></td>
+<td><code><a href="#EnvoyFilter-ApplyTo-VIRTUAL_HOST">VIRTUAL_HOST</a></code></td>
 <td>
 <p>Applies the patch to a virtual host inside a route configuration.</p>
 
 </td>
 </tr>
 <tr id="EnvoyFilter-ApplyTo-HTTP_ROUTE">
-<td><code>HTTP_ROUTE</code></td>
+<td><code><a href="#EnvoyFilter-ApplyTo-HTTP_ROUTE">HTTP_ROUTE</a></code></td>
 <td>
 <p>Applies the patch to a route object inside the matched virtual
 host in a route configuration.</p>
@@ -1446,14 +1446,14 @@ <h2 id="EnvoyFilter-ApplyTo">EnvoyFilter.ApplyTo</h2>
 </td>
 </tr>
 <tr id="EnvoyFilter-ApplyTo-CLUSTER">
-<td><code>CLUSTER</code></td>
+<td><code><a href="#EnvoyFilter-ApplyTo-CLUSTER">CLUSTER</a></code></td>
 <td>
 <p>Applies the patch to a cluster in a CDS output. Also used to add new clusters.</p>
 
 </td>
 </tr>
 <tr id="EnvoyFilter-ApplyTo-EXTENSION_CONFIG">
-<td><code>EXTENSION_CONFIG</code></td>
+<td><code><a href="#EnvoyFilter-ApplyTo-EXTENSION_CONFIG">EXTENSION_CONFIG</a></code></td>
 <td>
 <p>Applies the patch to or adds an extension config in ECDS output. Note that ECDS
 is only supported by HTTP filters.</p>
@@ -1461,14 +1461,14 @@ <h2 id="EnvoyFilter-ApplyTo">EnvoyFilter.ApplyTo</h2>
 </td>
 </tr>
 <tr id="EnvoyFilter-ApplyTo-BOOTSTRAP">
-<td><code>BOOTSTRAP</code></td>
+<td><code><a href="#EnvoyFilter-ApplyTo-BOOTSTRAP">BOOTSTRAP</a></code></td>
 <td>
 <p>DEPRECATED. Applies the patch to bootstrap configuration.</p>
 
 </td>
 </tr>
 <tr id="EnvoyFilter-ApplyTo-LISTENER_FILTER">
-<td><code>LISTENER_FILTER</code></td>
+<td><code><a href="#EnvoyFilter-ApplyTo-LISTENER_FILTER">LISTENER_FILTER</a></code></td>
 <td>
 <p>Applies the patch to the listener filter.</p>
 
@@ -1491,28 +1491,28 @@ <h2 id="EnvoyFilter-PatchContext">EnvoyFilter.PatchContext</h2>
 </thead>
 <tbody>
 <tr id="EnvoyFilter-PatchContext-ANY">
-<td><code>ANY</code></td>
+<td><code><a href="#EnvoyFilter-PatchContext-ANY">ANY</a></code></td>
 <td>
 <p>All listeners/routes/clusters in both sidecars and gateways.</p>
 
 </td>
 </tr>
 <tr id="EnvoyFilter-PatchContext-SIDECAR_INBOUND">
-<td><code>SIDECAR_INBOUND</code></td>
+<td><code><a href="#EnvoyFilter-PatchContext-SIDECAR_INBOUND">SIDECAR_INBOUND</a></code></td>
 <td>
 <p>Inbound listener/route/cluster in sidecar.</p>
 
 </td>
 </tr>
 <tr id="EnvoyFilter-PatchContext-SIDECAR_OUTBOUND">
-<td><code>SIDECAR_OUTBOUND</code></td>
+<td><code><a href="#EnvoyFilter-PatchContext-SIDECAR_OUTBOUND">SIDECAR_OUTBOUND</a></code></td>
 <td>
 <p>Outbound listener/route/cluster in sidecar.</p>
 
 </td>
 </tr>
 <tr id="EnvoyFilter-PatchContext-GATEWAY">
-<td><code>GATEWAY</code></td>
+<td><code><a href="#EnvoyFilter-PatchContext-GATEWAY">GATEWAY</a></code></td>
 <td>
 <p>Gateway listener/route/cluster.</p>
 
diff --git a/networking/v1alpha3/gateway.pb.html b/networking/v1alpha3/gateway.pb.html
index d63e31adc7..a797b2ad12 100644
--- a/networking/v1alpha3/gateway.pb.html
+++ b/networking/v1alpha3/gateway.pb.html
@@ -180,7 +180,7 @@ <h2 id="Gateway">Gateway</h2>
 </thead>
 <tbody>
 <tr id="Gateway-servers">
-<td><code>servers</code></td>
+<td><code><a href="#Gateway-servers">servers</a></code></td>
 <td><code><a href="#Server">Server[]</a></code></td>
 <td>
 <p>A list of server specifications.</p>
@@ -191,7 +191,7 @@ <h2 id="Gateway">Gateway</h2>
 </td>
 </tr>
 <tr id="Gateway-selector">
-<td><code>selector</code></td>
+<td><code><a href="#Gateway-selector">selector</a></code></td>
 <td><code>map&lt;string,&nbsp;string&gt;</code></td>
 <td>
 <p>One or more labels that indicate a specific set of pods/VMs
@@ -281,7 +281,7 @@ <h2 id="Server">Server</h2>
 </thead>
 <tbody>
 <tr id="Server-port">
-<td><code>port</code></td>
+<td><code><a href="#Server-port">port</a></code></td>
 <td><code><a href="#Port">Port</a></code></td>
 <td>
 <p>The Port on which the proxy should listen for incoming
@@ -293,7 +293,7 @@ <h2 id="Server">Server</h2>
 </td>
 </tr>
 <tr id="Server-bind">
-<td><code>bind</code></td>
+<td><code><a href="#Server-bind">bind</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>The ip or the Unix domain socket to which the listener should be bound
@@ -311,7 +311,7 @@ <h2 id="Server">Server</h2>
 </td>
 </tr>
 <tr id="Server-hosts">
-<td><code>hosts</code></td>
+<td><code><a href="#Server-hosts">hosts</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>One or more hosts exposed by this gateway.
@@ -347,7 +347,7 @@ <h2 id="Server">Server</h2>
 </td>
 </tr>
 <tr id="Server-tls">
-<td><code>tls</code></td>
+<td><code><a href="#Server-tls">tls</a></code></td>
 <td><code><a href="#ServerTLSSettings">ServerTLSSettings</a></code></td>
 <td>
 <p>Set of TLS related options that govern the server&rsquo;s behavior. Use
@@ -360,7 +360,7 @@ <h2 id="Server">Server</h2>
 </td>
 </tr>
 <tr id="Server-name">
-<td><code>name</code></td>
+<td><code><a href="#Server-name">name</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>An optional name of the server, when set must be unique across all servers.
@@ -390,7 +390,7 @@ <h2 id="Port">Port</h2>
 </thead>
 <tbody>
 <tr id="Port-number">
-<td><code>number</code></td>
+<td><code><a href="#Port-number">number</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>A valid non-negative integer port number.</p>
@@ -401,7 +401,7 @@ <h2 id="Port">Port</h2>
 </td>
 </tr>
 <tr id="Port-protocol">
-<td><code>protocol</code></td>
+<td><code><a href="#Port-protocol">protocol</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>The protocol exposed on the port.
@@ -415,7 +415,7 @@ <h2 id="Port">Port</h2>
 </td>
 </tr>
 <tr id="Port-name">
-<td><code>name</code></td>
+<td><code><a href="#Port-name">name</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Label assigned to the port.</p>
@@ -441,7 +441,7 @@ <h2 id="ServerTLSSettings">ServerTLSSettings</h2>
 </thead>
 <tbody>
 <tr id="ServerTLSSettings-https_redirect">
-<td><code>httpsRedirect</code></td>
+<td><code><a href="#ServerTLSSettings-https_redirect">httpsRedirect</a></code></td>
 <td><code>bool</code></td>
 <td>
 <p>If set to true, the load balancer will send a 301 redirect for
@@ -453,7 +453,7 @@ <h2 id="ServerTLSSettings">ServerTLSSettings</h2>
 </td>
 </tr>
 <tr id="ServerTLSSettings-mode">
-<td><code>mode</code></td>
+<td><code><a href="#ServerTLSSettings-mode">mode</a></code></td>
 <td><code><a href="#ServerTLSSettings-TLSmode">TLSmode</a></code></td>
 <td>
 <p>Optional: Indicates whether connections to this port should be
@@ -466,7 +466,7 @@ <h2 id="ServerTLSSettings">ServerTLSSettings</h2>
 </td>
 </tr>
 <tr id="ServerTLSSettings-server_certificate">
-<td><code>serverCertificate</code></td>
+<td><code><a href="#ServerTLSSettings-server_certificate">serverCertificate</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>REQUIRED if mode is <code>SIMPLE</code> or <code>MUTUAL</code>. The path to the file
@@ -478,7 +478,7 @@ <h2 id="ServerTLSSettings">ServerTLSSettings</h2>
 </td>
 </tr>
 <tr id="ServerTLSSettings-private_key">
-<td><code>privateKey</code></td>
+<td><code><a href="#ServerTLSSettings-private_key">privateKey</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>REQUIRED if mode is <code>SIMPLE</code> or <code>MUTUAL</code>. The path to the file
@@ -490,7 +490,7 @@ <h2 id="ServerTLSSettings">ServerTLSSettings</h2>
 </td>
 </tr>
 <tr id="ServerTLSSettings-ca_certificates">
-<td><code>caCertificates</code></td>
+<td><code><a href="#ServerTLSSettings-ca_certificates">caCertificates</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>REQUIRED if mode is <code>MUTUAL</code> or <code>OPTIONAL_MUTUAL</code>. The path to a file
@@ -503,7 +503,7 @@ <h2 id="ServerTLSSettings">ServerTLSSettings</h2>
 </td>
 </tr>
 <tr id="ServerTLSSettings-ca_crl">
-<td><code>caCrl</code></td>
+<td><code><a href="#ServerTLSSettings-ca_crl">caCrl</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>OPTIONAL: The path to the file containing the certificate revocation list (CRL)
@@ -518,7 +518,7 @@ <h2 id="ServerTLSSettings">ServerTLSSettings</h2>
 </td>
 </tr>
 <tr id="ServerTLSSettings-credential_name">
-<td><code>credentialName</code></td>
+<td><code><a href="#ServerTLSSettings-credential_name">credentialName</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>For gateways running on Kubernetes, the name of the secret that
@@ -540,7 +540,7 @@ <h2 id="ServerTLSSettings">ServerTLSSettings</h2>
 </td>
 </tr>
 <tr id="ServerTLSSettings-subject_alt_names">
-<td><code>subjectAltNames</code></td>
+<td><code><a href="#ServerTLSSettings-subject_alt_names">subjectAltNames</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>A list of alternate names to verify the subject identity in the
@@ -553,7 +553,7 @@ <h2 id="ServerTLSSettings">ServerTLSSettings</h2>
 </td>
 </tr>
 <tr id="ServerTLSSettings-verify_certificate_spki">
-<td><code>verifyCertificateSpki</code></td>
+<td><code><a href="#ServerTLSSettings-verify_certificate_spki">verifyCertificateSpki</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>An optional list of base64-encoded SHA-256 hashes of the SPKIs of
@@ -568,7 +568,7 @@ <h2 id="ServerTLSSettings">ServerTLSSettings</h2>
 </td>
 </tr>
 <tr id="ServerTLSSettings-verify_certificate_hash">
-<td><code>verifyCertificateHash</code></td>
+<td><code><a href="#ServerTLSSettings-verify_certificate_hash">verifyCertificateHash</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>An optional list of hex-encoded SHA-256 hashes of the
@@ -584,7 +584,7 @@ <h2 id="ServerTLSSettings">ServerTLSSettings</h2>
 </td>
 </tr>
 <tr id="ServerTLSSettings-min_protocol_version">
-<td><code>minProtocolVersion</code></td>
+<td><code><a href="#ServerTLSSettings-min_protocol_version">minProtocolVersion</a></code></td>
 <td><code><a href="#ServerTLSSettings-TLSProtocol">TLSProtocol</a></code></td>
 <td>
 <p>Optional: Minimum TLS protocol version. By default, it is <code>TLSV1_2</code>.
@@ -598,7 +598,7 @@ <h2 id="ServerTLSSettings">ServerTLSSettings</h2>
 </td>
 </tr>
 <tr id="ServerTLSSettings-max_protocol_version">
-<td><code>maxProtocolVersion</code></td>
+<td><code><a href="#ServerTLSSettings-max_protocol_version">maxProtocolVersion</a></code></td>
 <td><code><a href="#ServerTLSSettings-TLSProtocol">TLSProtocol</a></code></td>
 <td>
 <p>Optional: Maximum TLS protocol version.</p>
@@ -609,7 +609,7 @@ <h2 id="ServerTLSSettings">ServerTLSSettings</h2>
 </td>
 </tr>
 <tr id="ServerTLSSettings-cipher_suites">
-<td><code>cipherSuites</code></td>
+<td><code><a href="#ServerTLSSettings-cipher_suites">cipherSuites</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>Optional: If specified, only support the specified cipher list.
@@ -655,7 +655,7 @@ <h2 id="ServerTLSSettings-TLSmode">ServerTLSSettings.TLSmode</h2>
 </thead>
 <tbody>
 <tr id="ServerTLSSettings-TLSmode-PASSTHROUGH">
-<td><code>PASSTHROUGH</code></td>
+<td><code><a href="#ServerTLSSettings-TLSmode-PASSTHROUGH">PASSTHROUGH</a></code></td>
 <td>
 <p>The SNI string presented by the client will be used as the
 match criterion in a VirtualService TLS route to determine
@@ -664,7 +664,7 @@ <h2 id="ServerTLSSettings-TLSmode">ServerTLSSettings.TLSmode</h2>
 </td>
 </tr>
 <tr id="ServerTLSSettings-TLSmode-SIMPLE">
-<td><code>SIMPLE</code></td>
+<td><code><a href="#ServerTLSSettings-TLSmode-SIMPLE">SIMPLE</a></code></td>
 <td>
 <p>Secure connections with standard TLS semantics. In this mode
 client certificate is not requested during handshake.</p>
@@ -672,7 +672,7 @@ <h2 id="ServerTLSSettings-TLSmode">ServerTLSSettings.TLSmode</h2>
 </td>
 </tr>
 <tr id="ServerTLSSettings-TLSmode-MUTUAL">
-<td><code>MUTUAL</code></td>
+<td><code><a href="#ServerTLSSettings-TLSmode-MUTUAL">MUTUAL</a></code></td>
 <td>
 <p>Secure connections to the downstream using mutual TLS by
 presenting server certificates for authentication.
@@ -682,7 +682,7 @@ <h2 id="ServerTLSSettings-TLSmode">ServerTLSSettings.TLSmode</h2>
 </td>
 </tr>
 <tr id="ServerTLSSettings-TLSmode-AUTO_PASSTHROUGH">
-<td><code>AUTO_PASSTHROUGH</code></td>
+<td><code><a href="#ServerTLSSettings-TLSmode-AUTO_PASSTHROUGH">AUTO_PASSTHROUGH</a></code></td>
 <td>
 <p>Similar to the passthrough mode, except servers with this TLS
 mode do not require an associated VirtualService to map from
@@ -699,7 +699,7 @@ <h2 id="ServerTLSSettings-TLSmode">ServerTLSSettings.TLSmode</h2>
 </td>
 </tr>
 <tr id="ServerTLSSettings-TLSmode-ISTIO_MUTUAL">
-<td><code>ISTIO_MUTUAL</code></td>
+<td><code><a href="#ServerTLSSettings-TLSmode-ISTIO_MUTUAL">ISTIO_MUTUAL</a></code></td>
 <td>
 <p>Secure connections from the downstream using mutual TLS by
 presenting server certificates for authentication.  Compared
@@ -711,7 +711,7 @@ <h2 id="ServerTLSSettings-TLSmode">ServerTLSSettings.TLSmode</h2>
 </td>
 </tr>
 <tr id="ServerTLSSettings-TLSmode-OPTIONAL_MUTUAL">
-<td><code>OPTIONAL_MUTUAL</code></td>
+<td><code><a href="#ServerTLSSettings-TLSmode-OPTIONAL_MUTUAL">OPTIONAL_MUTUAL</a></code></td>
 <td>
 <p>Similar to MUTUAL mode, except that the client certificate
 is optional. Unlike SIMPLE mode, A client certificate will
@@ -738,35 +738,35 @@ <h2 id="ServerTLSSettings-TLSProtocol">ServerTLSSettings.TLSProtocol</h2>
 </thead>
 <tbody>
 <tr id="ServerTLSSettings-TLSProtocol-TLS_AUTO">
-<td><code>TLS_AUTO</code></td>
+<td><code><a href="#ServerTLSSettings-TLSProtocol-TLS_AUTO">TLS_AUTO</a></code></td>
 <td>
 <p>Automatically choose the optimal TLS version.</p>
 
 </td>
 </tr>
 <tr id="ServerTLSSettings-TLSProtocol-TLSV1_0">
-<td><code>TLSV1_0</code></td>
+<td><code><a href="#ServerTLSSettings-TLSProtocol-TLSV1_0">TLSV1_0</a></code></td>
 <td>
 <p>TLS version 1.0</p>
 
 </td>
 </tr>
 <tr id="ServerTLSSettings-TLSProtocol-TLSV1_1">
-<td><code>TLSV1_1</code></td>
+<td><code><a href="#ServerTLSSettings-TLSProtocol-TLSV1_1">TLSV1_1</a></code></td>
 <td>
 <p>TLS version 1.1</p>
 
 </td>
 </tr>
 <tr id="ServerTLSSettings-TLSProtocol-TLSV1_2">
-<td><code>TLSV1_2</code></td>
+<td><code><a href="#ServerTLSSettings-TLSProtocol-TLSV1_2">TLSV1_2</a></code></td>
 <td>
 <p>TLS version 1.2</p>
 
 </td>
 </tr>
 <tr id="ServerTLSSettings-TLSProtocol-TLSV1_3">
-<td><code>TLSV1_3</code></td>
+<td><code><a href="#ServerTLSSettings-TLSProtocol-TLSV1_3">TLSV1_3</a></code></td>
 <td>
 <p>TLS version 1.3</p>
 
diff --git a/networking/v1alpha3/service_entry.pb.html b/networking/v1alpha3/service_entry.pb.html
index 089ad89666..a5cc7f0782 100644
--- a/networking/v1alpha3/service_entry.pb.html
+++ b/networking/v1alpha3/service_entry.pb.html
@@ -356,7 +356,7 @@ <h2 id="ServiceEntry">ServiceEntry</h2>
 </thead>
 <tbody>
 <tr id="ServiceEntry-hosts">
-<td><code>hosts</code></td>
+<td><code><a href="#ServiceEntry-hosts">hosts</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>The hosts associated with the ServiceEntry. Could be a DNS
@@ -389,7 +389,7 @@ <h2 id="ServiceEntry">ServiceEntry</h2>
 </td>
 </tr>
 <tr id="ServiceEntry-addresses">
-<td><code>addresses</code></td>
+<td><code><a href="#ServiceEntry-addresses">addresses</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>The virtual IP addresses associated with the service. Could be CIDR
@@ -413,7 +413,7 @@ <h2 id="ServiceEntry">ServiceEntry</h2>
 </td>
 </tr>
 <tr id="ServiceEntry-ports">
-<td><code>ports</code></td>
+<td><code><a href="#ServiceEntry-ports">ports</a></code></td>
 <td><code><a href="#ServicePort">ServicePort[]</a></code></td>
 <td>
 <p>The ports associated with the external service. If the
@@ -426,7 +426,7 @@ <h2 id="ServiceEntry">ServiceEntry</h2>
 </td>
 </tr>
 <tr id="ServiceEntry-location">
-<td><code>location</code></td>
+<td><code><a href="#ServiceEntry-location">location</a></code></td>
 <td><code><a href="#ServiceEntry-Location">Location</a></code></td>
 <td>
 <p>Specify whether the service should be considered external to the mesh
@@ -438,7 +438,7 @@ <h2 id="ServiceEntry">ServiceEntry</h2>
 </td>
 </tr>
 <tr id="ServiceEntry-resolution">
-<td><code>resolution</code></td>
+<td><code><a href="#ServiceEntry-resolution">resolution</a></code></td>
 <td><code><a href="#ServiceEntry-Resolution">Resolution</a></code></td>
 <td>
 <p>Service resolution mode for the hosts. Care must be taken
@@ -452,7 +452,7 @@ <h2 id="ServiceEntry">ServiceEntry</h2>
 </td>
 </tr>
 <tr id="ServiceEntry-endpoints">
-<td><code>endpoints</code></td>
+<td><code><a href="#ServiceEntry-endpoints">endpoints</a></code></td>
 <td><code><a href="https://istio.io/docs/reference/config/networking/workload-entry.html#WorkloadEntry">WorkloadEntry[]</a></code></td>
 <td>
 <p>One or more endpoints associated with the service. Only one of
@@ -464,7 +464,7 @@ <h2 id="ServiceEntry">ServiceEntry</h2>
 </td>
 </tr>
 <tr id="ServiceEntry-workload_selector">
-<td><code>workloadSelector</code></td>
+<td><code><a href="#ServiceEntry-workload_selector">workloadSelector</a></code></td>
 <td><code><a href="https://istio.io/docs/reference/config/networking/sidecar.html#WorkloadSelector">WorkloadSelector</a></code></td>
 <td>
 <p>Applicable only for MESH_INTERNAL services. Only one of
@@ -480,7 +480,7 @@ <h2 id="ServiceEntry">ServiceEntry</h2>
 </td>
 </tr>
 <tr id="ServiceEntry-export_to">
-<td><code>exportTo</code></td>
+<td><code><a href="#ServiceEntry-export_to">exportTo</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>A list of namespaces to which this service is exported. Exporting a service
@@ -503,7 +503,7 @@ <h2 id="ServiceEntry">ServiceEntry</h2>
 </td>
 </tr>
 <tr id="ServiceEntry-subject_alt_names">
-<td><code>subjectAltNames</code></td>
+<td><code><a href="#ServiceEntry-subject_alt_names">subjectAltNames</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>If specified, the proxy will verify that the server certificate&rsquo;s
@@ -536,7 +536,7 @@ <h2 id="ServicePort">ServicePort</h2>
 </thead>
 <tbody>
 <tr id="ServicePort-number">
-<td><code>number</code></td>
+<td><code><a href="#ServicePort-number">number</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>A valid non-negative integer port number.</p>
@@ -547,7 +547,7 @@ <h2 id="ServicePort">ServicePort</h2>
 </td>
 </tr>
 <tr id="ServicePort-protocol">
-<td><code>protocol</code></td>
+<td><code><a href="#ServicePort-protocol">protocol</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>The protocol exposed on the port.
@@ -561,7 +561,7 @@ <h2 id="ServicePort">ServicePort</h2>
 </td>
 </tr>
 <tr id="ServicePort-name">
-<td><code>name</code></td>
+<td><code><a href="#ServicePort-name">name</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Label assigned to the port.</p>
@@ -572,7 +572,7 @@ <h2 id="ServicePort">ServicePort</h2>
 </td>
 </tr>
 <tr id="ServicePort-target_port">
-<td><code>targetPort</code></td>
+<td><code><a href="#ServicePort-target_port">targetPort</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>The port number on the endpoint where the traffic will be
@@ -599,7 +599,7 @@ <h2 id="ServiceEntryStatus">ServiceEntryStatus</h2>
 </thead>
 <tbody>
 <tr id="ServiceEntryStatus-conditions">
-<td><code>conditions</code></td>
+<td><code><a href="#ServiceEntryStatus-conditions">conditions</a></code></td>
 <td><code><a href="https://istio.io/docs/reference/config/meta/v1beta1/istio-status.html#IstioCondition">IstioCondition[]</a></code></td>
 <td>
 <p>Current service state of ServiceEntry.
@@ -611,7 +611,7 @@ <h2 id="ServiceEntryStatus">ServiceEntryStatus</h2>
 </td>
 </tr>
 <tr id="ServiceEntryStatus-validation_messages">
-<td><code>validationMessages</code></td>
+<td><code><a href="#ServiceEntryStatus-validation_messages">validationMessages</a></code></td>
 <td><code><a href="https://istio.io/docs/reference/config/istio.analysis.v1alpha1.html#AnalysisMessageBase">AnalysisMessageBase[]</a></code></td>
 <td>
 <p>Includes any errors or warnings detected by Istio&rsquo;s analyzers.</p>
@@ -622,7 +622,7 @@ <h2 id="ServiceEntryStatus">ServiceEntryStatus</h2>
 </td>
 </tr>
 <tr id="ServiceEntryStatus-observed_generation">
-<td><code>observedGeneration</code></td>
+<td><code><a href="#ServiceEntryStatus-observed_generation">observedGeneration</a></code></td>
 <td><code>int64</code></td>
 <td>
 <p>Resource Generation to which the Reconciled Condition refers.
@@ -635,7 +635,7 @@ <h2 id="ServiceEntryStatus">ServiceEntryStatus</h2>
 </td>
 </tr>
 <tr id="ServiceEntryStatus-addresses">
-<td><code>addresses</code></td>
+<td><code><a href="#ServiceEntryStatus-addresses">addresses</a></code></td>
 <td><code><a href="#ServiceEntryAddress">ServiceEntryAddress[]</a></code></td>
 <td>
 <p>List of addresses which were assigned to this ServiceEntry.</p>
@@ -663,7 +663,7 @@ <h2 id="ServiceEntryAddress">ServiceEntryAddress</h2>
 </thead>
 <tbody>
 <tr id="ServiceEntryAddress-value">
-<td><code>value</code></td>
+<td><code><a href="#ServiceEntryAddress-value">value</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Value is the address (192.168.0.2)</p>
@@ -674,7 +674,7 @@ <h2 id="ServiceEntryAddress">ServiceEntryAddress</h2>
 </td>
 </tr>
 <tr id="ServiceEntryAddress-host">
-<td><code>host</code></td>
+<td><code><a href="#ServiceEntryAddress-host">host</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Host is the name associated with this address</p>
@@ -705,7 +705,7 @@ <h2 id="ServiceEntry-Location">ServiceEntry.Location</h2>
 </thead>
 <tbody>
 <tr id="ServiceEntry-Location-MESH_EXTERNAL">
-<td><code>MESH_EXTERNAL</code></td>
+<td><code><a href="#ServiceEntry-Location-MESH_EXTERNAL">MESH_EXTERNAL</a></code></td>
 <td>
 <p>Signifies that the service is external to the mesh. Typically used
 to indicate external services consumed through APIs.</p>
@@ -713,7 +713,7 @@ <h2 id="ServiceEntry-Location">ServiceEntry.Location</h2>
 </td>
 </tr>
 <tr id="ServiceEntry-Location-MESH_INTERNAL">
-<td><code>MESH_INTERNAL</code></td>
+<td><code><a href="#ServiceEntry-Location-MESH_INTERNAL">MESH_INTERNAL</a></code></td>
 <td>
 <p>Signifies that the service is part of the mesh. Typically used to
 indicate services added explicitly as part of expanding the service
@@ -746,7 +746,7 @@ <h2 id="ServiceEntry-Resolution">ServiceEntry.Resolution</h2>
 </thead>
 <tbody>
 <tr id="ServiceEntry-Resolution-NONE">
-<td><code>NONE</code></td>
+<td><code><a href="#ServiceEntry-Resolution-NONE">NONE</a></code></td>
 <td>
 <p>Assume that incoming connections have already been resolved (to a
 specific destination IP address). Such connections are typically
@@ -758,7 +758,7 @@ <h2 id="ServiceEntry-Resolution">ServiceEntry.Resolution</h2>
 </td>
 </tr>
 <tr id="ServiceEntry-Resolution-STATIC">
-<td><code>STATIC</code></td>
+<td><code><a href="#ServiceEntry-Resolution-STATIC">STATIC</a></code></td>
 <td>
 <p>Use the static IP addresses specified in endpoints (see below) as the
 backing instances associated with the service.</p>
@@ -766,7 +766,7 @@ <h2 id="ServiceEntry-Resolution">ServiceEntry.Resolution</h2>
 </td>
 </tr>
 <tr id="ServiceEntry-Resolution-DNS">
-<td><code>DNS</code></td>
+<td><code><a href="#ServiceEntry-Resolution-DNS">DNS</a></code></td>
 <td>
 <p>Attempt to resolve the IP address by querying the ambient DNS,
 asynchronously. If no endpoints are specified, the proxy
@@ -779,7 +779,7 @@ <h2 id="ServiceEntry-Resolution">ServiceEntry.Resolution</h2>
 </td>
 </tr>
 <tr id="ServiceEntry-Resolution-DNS_ROUND_ROBIN">
-<td><code>DNS_ROUND_ROBIN</code></td>
+<td><code><a href="#ServiceEntry-Resolution-DNS_ROUND_ROBIN">DNS_ROUND_ROBIN</a></code></td>
 <td>
 <p>Attempt to resolve the IP address by querying the ambient DNS,
 asynchronously. Unlike <code>DNS</code>, <code>DNS_ROUND_ROBIN</code> only uses the
diff --git a/networking/v1alpha3/sidecar.pb.html b/networking/v1alpha3/sidecar.pb.html
index f43302e7ca..25f3ec343d 100644
--- a/networking/v1alpha3/sidecar.pb.html
+++ b/networking/v1alpha3/sidecar.pb.html
@@ -321,7 +321,7 @@ <h2 id="Sidecar">Sidecar</h2>
 </thead>
 <tbody>
 <tr id="Sidecar-workload_selector">
-<td><code>workloadSelector</code></td>
+<td><code><a href="#Sidecar-workload_selector">workloadSelector</a></code></td>
 <td><code><a href="#WorkloadSelector">WorkloadSelector</a></code></td>
 <td>
 <p>Criteria used to select the specific set of pods/VMs on which this
@@ -334,7 +334,7 @@ <h2 id="Sidecar">Sidecar</h2>
 </td>
 </tr>
 <tr id="Sidecar-ingress">
-<td><code>ingress</code></td>
+<td><code><a href="#Sidecar-ingress">ingress</a></code></td>
 <td><code><a href="#IstioIngressListener">IstioIngressListener[]</a></code></td>
 <td>
 <p>Ingress specifies the configuration of the sidecar for processing
@@ -350,7 +350,7 @@ <h2 id="Sidecar">Sidecar</h2>
 </td>
 </tr>
 <tr id="Sidecar-egress">
-<td><code>egress</code></td>
+<td><code><a href="#Sidecar-egress">egress</a></code></td>
 <td><code><a href="#IstioEgressListener">IstioEgressListener[]</a></code></td>
 <td>
 <p>Egress specifies the configuration of the sidecar for processing
@@ -364,7 +364,7 @@ <h2 id="Sidecar">Sidecar</h2>
 </td>
 </tr>
 <tr id="Sidecar-inbound_connection_pool">
-<td><code>inboundConnectionPool</code></td>
+<td><code><a href="#Sidecar-inbound_connection_pool">inboundConnectionPool</a></code></td>
 <td><code><a href="https://istio.io/docs/reference/config/networking/destination-rule.html#ConnectionPoolSettings">ConnectionPoolSettings</a></code></td>
 <td>
 <p>Settings controlling the volume of connections Envoy will accept from the network.
@@ -397,7 +397,7 @@ <h2 id="Sidecar">Sidecar</h2>
 </td>
 </tr>
 <tr id="Sidecar-outbound_traffic_policy">
-<td><code>outboundTrafficPolicy</code></td>
+<td><code><a href="#Sidecar-outbound_traffic_policy">outboundTrafficPolicy</a></code></td>
 <td><code><a href="#OutboundTrafficPolicy">OutboundTrafficPolicy</a></code></td>
 <td>
 <p>Set the default behavior of the sidecar for handling outbound
@@ -428,7 +428,7 @@ <h2 id="IstioIngressListener">IstioIngressListener</h2>
 </thead>
 <tbody>
 <tr id="IstioIngressListener-port">
-<td><code>port</code></td>
+<td><code><a href="#IstioIngressListener-port">port</a></code></td>
 <td><code><a href="#SidecarPort">SidecarPort</a></code></td>
 <td>
 <p>The port associated with the listener.</p>
@@ -439,7 +439,7 @@ <h2 id="IstioIngressListener">IstioIngressListener</h2>
 </td>
 </tr>
 <tr id="IstioIngressListener-bind">
-<td><code>bind</code></td>
+<td><code><a href="#IstioIngressListener-bind">bind</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>The IP(IPv4 or IPv6) to which the listener should be bound.
@@ -455,7 +455,7 @@ <h2 id="IstioIngressListener">IstioIngressListener</h2>
 </td>
 </tr>
 <tr id="IstioIngressListener-capture_mode">
-<td><code>captureMode</code></td>
+<td><code><a href="#IstioIngressListener-capture_mode">captureMode</a></code></td>
 <td><code><a href="#CaptureMode">CaptureMode</a></code></td>
 <td>
 <p>The captureMode option dictates how traffic to the listener is
@@ -467,7 +467,7 @@ <h2 id="IstioIngressListener">IstioIngressListener</h2>
 </td>
 </tr>
 <tr id="IstioIngressListener-default_endpoint">
-<td><code>defaultEndpoint</code></td>
+<td><code><a href="#IstioIngressListener-default_endpoint">defaultEndpoint</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>The IP endpoint or Unix domain socket to which
@@ -485,7 +485,7 @@ <h2 id="IstioIngressListener">IstioIngressListener</h2>
 </td>
 </tr>
 <tr id="IstioIngressListener-tls">
-<td><code>tls</code></td>
+<td><code><a href="#IstioIngressListener-tls">tls</a></code></td>
 <td><code><a href="https://istio.io/docs/reference/config/networking/gateway.html#ServerTLSSettings">ServerTLSSettings</a></code></td>
 <td>
 <p>Set of TLS related options that will enable TLS termination on the
@@ -498,7 +498,7 @@ <h2 id="IstioIngressListener">IstioIngressListener</h2>
 </td>
 </tr>
 <tr id="IstioIngressListener-connection_pool">
-<td><code>connectionPool</code></td>
+<td><code><a href="#IstioIngressListener-connection_pool">connectionPool</a></code></td>
 <td><code><a href="https://istio.io/docs/reference/config/networking/destination-rule.html#ConnectionPoolSettings">ConnectionPoolSettings</a></code></td>
 <td>
 <p>Settings controlling the volume of connections Envoy will accept from the network.
@@ -533,7 +533,7 @@ <h2 id="IstioEgressListener">IstioEgressListener</h2>
 </thead>
 <tbody>
 <tr id="IstioEgressListener-port">
-<td><code>port</code></td>
+<td><code><a href="#IstioEgressListener-port">port</a></code></td>
 <td><code><a href="#SidecarPort">SidecarPort</a></code></td>
 <td>
 <p>The port associated with the listener. If using Unix domain socket,
@@ -552,7 +552,7 @@ <h2 id="IstioEgressListener">IstioEgressListener</h2>
 </td>
 </tr>
 <tr id="IstioEgressListener-bind">
-<td><code>bind</code></td>
+<td><code><a href="#IstioEgressListener-bind">bind</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>The IP(IPv4 or IPv6) or the Unix domain socket to which the listener should be bound
@@ -569,7 +569,7 @@ <h2 id="IstioEgressListener">IstioEgressListener</h2>
 </td>
 </tr>
 <tr id="IstioEgressListener-capture_mode">
-<td><code>captureMode</code></td>
+<td><code><a href="#IstioEgressListener-capture_mode">captureMode</a></code></td>
 <td><code><a href="#CaptureMode">CaptureMode</a></code></td>
 <td>
 <p>When the bind address is an IP, the captureMode option dictates
@@ -582,7 +582,7 @@ <h2 id="IstioEgressListener">IstioEgressListener</h2>
 </td>
 </tr>
 <tr id="IstioEgressListener-hosts">
-<td><code>hosts</code></td>
+<td><code><a href="#IstioEgressListener-hosts">hosts</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>One or more service hosts exposed by the listener
@@ -641,7 +641,7 @@ <h2 id="WorkloadSelector">WorkloadSelector</h2>
 </thead>
 <tbody>
 <tr id="WorkloadSelector-labels">
-<td><code>labels</code></td>
+<td><code><a href="#WorkloadSelector-labels">labels</a></code></td>
 <td><code>map&lt;string,&nbsp;string&gt;</code></td>
 <td>
 <p>One or more labels that indicate a specific set of pods/VMs
@@ -673,7 +673,7 @@ <h2 id="OutboundTrafficPolicy">OutboundTrafficPolicy</h2>
 </thead>
 <tbody>
 <tr id="OutboundTrafficPolicy-mode">
-<td><code>mode</code></td>
+<td><code><a href="#OutboundTrafficPolicy-mode">mode</a></code></td>
 <td><code><a href="#OutboundTrafficPolicy-Mode">Mode</a></code></td>
 <td>
 </td>
@@ -699,7 +699,7 @@ <h2 id="SidecarPort">SidecarPort</h2>
 </thead>
 <tbody>
 <tr id="SidecarPort-number">
-<td><code>number</code></td>
+<td><code><a href="#SidecarPort-number">number</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>A valid non-negative integer port number.</p>
@@ -710,7 +710,7 @@ <h2 id="SidecarPort">SidecarPort</h2>
 </td>
 </tr>
 <tr id="SidecarPort-protocol">
-<td><code>protocol</code></td>
+<td><code><a href="#SidecarPort-protocol">protocol</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>The protocol exposed on the port.
@@ -724,7 +724,7 @@ <h2 id="SidecarPort">SidecarPort</h2>
 </td>
 </tr>
 <tr id="SidecarPort-name">
-<td><code>name</code></td>
+<td><code><a href="#SidecarPort-name">name</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Label assigned to the port.</p>
@@ -748,7 +748,7 @@ <h2 id="OutboundTrafficPolicy-Mode">OutboundTrafficPolicy.Mode</h2>
 </thead>
 <tbody>
 <tr id="OutboundTrafficPolicy-Mode-REGISTRY_ONLY">
-<td><code>REGISTRY_ONLY</code></td>
+<td><code><a href="#OutboundTrafficPolicy-Mode-REGISTRY_ONLY">REGISTRY_ONLY</a></code></td>
 <td>
 <p>In <code>REGISTRY_ONLY</code> mode, unknown outbound traffic will be dropped.
 Traffic destinations must be explicitly declared into the service registry through <code>ServiceEntry</code> configurations.</p>
@@ -759,7 +759,7 @@ <h2 id="OutboundTrafficPolicy-Mode">OutboundTrafficPolicy.Mode</h2>
 </td>
 </tr>
 <tr id="OutboundTrafficPolicy-Mode-ALLOW_ANY">
-<td><code>ALLOW_ANY</code></td>
+<td><code><a href="#OutboundTrafficPolicy-Mode-ALLOW_ANY">ALLOW_ANY</a></code></td>
 <td>
 <p>In <code>ALLOW_ANY</code> mode, any traffic to unknown destinations will be allowed.
 Unknown destination traffic will have limited functionality, however, such as reduced observability.
@@ -785,21 +785,21 @@ <h2 id="CaptureMode">CaptureMode</h2>
 </thead>
 <tbody>
 <tr id="CaptureMode-DEFAULT">
-<td><code>DEFAULT</code></td>
+<td><code><a href="#CaptureMode-DEFAULT">DEFAULT</a></code></td>
 <td>
 <p>The default capture mode defined by the environment.</p>
 
 </td>
 </tr>
 <tr id="CaptureMode-IPTABLES">
-<td><code>IPTABLES</code></td>
+<td><code><a href="#CaptureMode-IPTABLES">IPTABLES</a></code></td>
 <td>
 <p>Capture traffic using IPtables redirection.</p>
 
 </td>
 </tr>
 <tr id="CaptureMode-NONE">
-<td><code>NONE</code></td>
+<td><code><a href="#CaptureMode-NONE">NONE</a></code></td>
 <td>
 <p>No traffic capture. When used in an egress listener, the application is
 expected to explicitly communicate with the listener port or Unix
diff --git a/networking/v1alpha3/virtual_service.pb.html b/networking/v1alpha3/virtual_service.pb.html
index 8713ce247a..912f74a0c4 100644
--- a/networking/v1alpha3/virtual_service.pb.html
+++ b/networking/v1alpha3/virtual_service.pb.html
@@ -100,7 +100,7 @@ <h2 id="VirtualService">VirtualService</h2>
 </thead>
 <tbody>
 <tr id="VirtualService-hosts">
-<td><code>hosts</code></td>
+<td><code><a href="#VirtualService-hosts">hosts</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>The destination hosts to which traffic is being sent. Could
@@ -135,7 +135,7 @@ <h2 id="VirtualService">VirtualService</h2>
 </td>
 </tr>
 <tr id="VirtualService-gateways">
-<td><code>gateways</code></td>
+<td><code><a href="#VirtualService-gateways">gateways</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>The names of gateways and sidecars that should apply these routes.
@@ -158,7 +158,7 @@ <h2 id="VirtualService">VirtualService</h2>
 </td>
 </tr>
 <tr id="VirtualService-http">
-<td><code>http</code></td>
+<td><code><a href="#VirtualService-http">http</a></code></td>
 <td><code><a href="#HTTPRoute">HTTPRoute[]</a></code></td>
 <td>
 <p>An ordered list of route rules for HTTP traffic. HTTP routes will be
@@ -173,7 +173,7 @@ <h2 id="VirtualService">VirtualService</h2>
 </td>
 </tr>
 <tr id="VirtualService-tls">
-<td><code>tls</code></td>
+<td><code><a href="#VirtualService-tls">tls</a></code></td>
 <td><code><a href="#TLSRoute">TLSRoute[]</a></code></td>
 <td>
 <p>An ordered list of route rule for non-terminated TLS &amp; HTTPS
@@ -192,7 +192,7 @@ <h2 id="VirtualService">VirtualService</h2>
 </td>
 </tr>
 <tr id="VirtualService-tcp">
-<td><code>tcp</code></td>
+<td><code><a href="#VirtualService-tcp">tcp</a></code></td>
 <td><code><a href="#TCPRoute">TCPRoute[]</a></code></td>
 <td>
 <p>An ordered list of route rules for opaque TCP traffic. TCP routes will
@@ -205,7 +205,7 @@ <h2 id="VirtualService">VirtualService</h2>
 </td>
 </tr>
 <tr id="VirtualService-export_to">
-<td><code>exportTo</code></td>
+<td><code><a href="#VirtualService-export_to">exportTo</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>A list of namespaces to which this virtual service is exported. Exporting a
@@ -355,7 +355,7 @@ <h2 id="Destination">Destination</h2>
 </thead>
 <tbody>
 <tr id="Destination-host">
-<td><code>host</code></td>
+<td><code><a href="#Destination-host">host</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>The name of a service from the service registry. Service
@@ -378,7 +378,7 @@ <h2 id="Destination">Destination</h2>
 </td>
 </tr>
 <tr id="Destination-subset">
-<td><code>subset</code></td>
+<td><code><a href="#Destination-subset">subset</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>The name of a subset within the service. Applicable only to services
@@ -391,7 +391,7 @@ <h2 id="Destination">Destination</h2>
 </td>
 </tr>
 <tr id="Destination-port">
-<td><code>port</code></td>
+<td><code><a href="#Destination-port">port</a></code></td>
 <td><code><a href="#PortSelector">PortSelector</a></code></td>
 <td>
 <p>Specifies the port on the host that is being addressed. If a service
@@ -422,7 +422,7 @@ <h2 id="HTTPRoute">HTTPRoute</h2>
 </thead>
 <tbody>
 <tr id="HTTPRoute-name">
-<td><code>name</code></td>
+<td><code><a href="#HTTPRoute-name">name</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>The name assigned to the route for debugging purposes. The
@@ -436,7 +436,7 @@ <h2 id="HTTPRoute">HTTPRoute</h2>
 </td>
 </tr>
 <tr id="HTTPRoute-match">
-<td><code>match</code></td>
+<td><code><a href="#HTTPRoute-match">match</a></code></td>
 <td><code><a href="#HTTPMatchRequest">HTTPMatchRequest[]</a></code></td>
 <td>
 <p>Match conditions to be satisfied for the rule to be
@@ -450,7 +450,7 @@ <h2 id="HTTPRoute">HTTPRoute</h2>
 </td>
 </tr>
 <tr id="HTTPRoute-route">
-<td><code>route</code></td>
+<td><code><a href="#HTTPRoute-route">route</a></code></td>
 <td><code><a href="#HTTPRouteDestination">HTTPRouteDestination[]</a></code></td>
 <td>
 <p>A HTTP rule can either return a direct_response, redirect or forward (default) traffic.
@@ -464,7 +464,7 @@ <h2 id="HTTPRoute">HTTPRoute</h2>
 </td>
 </tr>
 <tr id="HTTPRoute-redirect">
-<td><code>redirect</code></td>
+<td><code><a href="#HTTPRoute-redirect">redirect</a></code></td>
 <td><code><a href="#HTTPRedirect">HTTPRedirect</a></code></td>
 <td>
 <p>A HTTP rule can either return a direct_response, redirect or forward (default) traffic.
@@ -478,7 +478,7 @@ <h2 id="HTTPRoute">HTTPRoute</h2>
 </td>
 </tr>
 <tr id="HTTPRoute-direct_response">
-<td><code>directResponse</code></td>
+<td><code><a href="#HTTPRoute-direct_response">directResponse</a></code></td>
 <td><code><a href="#HTTPDirectResponse">HTTPDirectResponse</a></code></td>
 <td>
 <p>A HTTP rule can either return a direct_response, redirect or forward (default) traffic.
@@ -492,7 +492,7 @@ <h2 id="HTTPRoute">HTTPRoute</h2>
 </td>
 </tr>
 <tr id="HTTPRoute-delegate">
-<td><code>delegate</code></td>
+<td><code><a href="#HTTPRoute-delegate">delegate</a></code></td>
 <td><code><a href="#Delegate">Delegate</a></code></td>
 <td>
 <p>Delegate is used to specify the particular VirtualService which
@@ -513,7 +513,7 @@ <h2 id="HTTPRoute">HTTPRoute</h2>
 </td>
 </tr>
 <tr id="HTTPRoute-rewrite">
-<td><code>rewrite</code></td>
+<td><code><a href="#HTTPRoute-rewrite">rewrite</a></code></td>
 <td><code><a href="#HTTPRewrite">HTTPRewrite</a></code></td>
 <td>
 <p>Rewrite HTTP URIs and Authority headers. Rewrite cannot be used with
@@ -525,7 +525,7 @@ <h2 id="HTTPRoute">HTTPRoute</h2>
 </td>
 </tr>
 <tr id="HTTPRoute-timeout">
-<td><code>timeout</code></td>
+<td><code><a href="#HTTPRoute-timeout">timeout</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#duration">Duration</a></code></td>
 <td>
 <p>Timeout for HTTP requests, default is disabled.</p>
@@ -536,7 +536,7 @@ <h2 id="HTTPRoute">HTTPRoute</h2>
 </td>
 </tr>
 <tr id="HTTPRoute-retries">
-<td><code>retries</code></td>
+<td><code><a href="#HTTPRoute-retries">retries</a></code></td>
 <td><code><a href="#HTTPRetry">HTTPRetry</a></code></td>
 <td>
 <p>Retry policy for HTTP requests.</p>
@@ -552,7 +552,7 @@ <h2 id="HTTPRoute">HTTPRoute</h2>
 </td>
 </tr>
 <tr id="HTTPRoute-fault">
-<td><code>fault</code></td>
+<td><code><a href="#HTTPRoute-fault">fault</a></code></td>
 <td><code><a href="#HTTPFaultInjection">HTTPFaultInjection</a></code></td>
 <td>
 <p>Fault injection policy to apply on HTTP traffic at the client side.
@@ -565,7 +565,7 @@ <h2 id="HTTPRoute">HTTPRoute</h2>
 </td>
 </tr>
 <tr id="HTTPRoute-mirror">
-<td><code>mirror</code></td>
+<td><code><a href="#HTTPRoute-mirror">mirror</a></code></td>
 <td><code><a href="#Destination">Destination</a></code></td>
 <td>
 <p>Mirror HTTP traffic to a another destination in addition to forwarding
@@ -581,7 +581,7 @@ <h2 id="HTTPRoute">HTTPRoute</h2>
 </td>
 </tr>
 <tr id="HTTPRoute-mirrors">
-<td><code>mirrors</code></td>
+<td><code><a href="#HTTPRoute-mirrors">mirrors</a></code></td>
 <td><code><a href="#HTTPMirrorPolicy">HTTPMirrorPolicy[]</a></code></td>
 <td>
 <p>Specifies the destinations to mirror HTTP traffic in addition
@@ -597,7 +597,7 @@ <h2 id="HTTPRoute">HTTPRoute</h2>
 </td>
 </tr>
 <tr id="HTTPRoute-mirror_percentage">
-<td><code>mirrorPercentage</code></td>
+<td><code><a href="#HTTPRoute-mirror_percentage">mirrorPercentage</a></code></td>
 <td><code><a href="#Percent">Percent</a></code></td>
 <td>
 <p>Percentage of the traffic to be mirrored by the <code>mirror</code> field.
@@ -610,7 +610,7 @@ <h2 id="HTTPRoute">HTTPRoute</h2>
 </td>
 </tr>
 <tr id="HTTPRoute-cors_policy">
-<td><code>corsPolicy</code></td>
+<td><code><a href="#HTTPRoute-cors_policy">corsPolicy</a></code></td>
 <td><code><a href="#CorsPolicy">CorsPolicy</a></code></td>
 <td>
 <p>Cross-Origin Resource Sharing policy (CORS). Refer to
@@ -623,7 +623,7 @@ <h2 id="HTTPRoute">HTTPRoute</h2>
 </td>
 </tr>
 <tr id="HTTPRoute-headers">
-<td><code>headers</code></td>
+<td><code><a href="#HTTPRoute-headers">headers</a></code></td>
 <td><code><a href="#Headers">Headers</a></code></td>
 <td>
 <p>Header manipulation rules</p>
@@ -704,7 +704,7 @@ <h2 id="Delegate">Delegate</h2>
 </thead>
 <tbody>
 <tr id="Delegate-name">
-<td><code>name</code></td>
+<td><code><a href="#Delegate-name">name</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Name specifies the name of the delegate VirtualService.</p>
@@ -715,7 +715,7 @@ <h2 id="Delegate">Delegate</h2>
 </td>
 </tr>
 <tr id="Delegate-namespace">
-<td><code>namespace</code></td>
+<td><code><a href="#Delegate-namespace">namespace</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Namespace specifies the namespace where the delegate VirtualService resides.
@@ -776,7 +776,7 @@ <h2 id="Headers">Headers</h2>
 </thead>
 <tbody>
 <tr id="Headers-request">
-<td><code>request</code></td>
+<td><code><a href="#Headers-request">request</a></code></td>
 <td><code><a href="#Headers-HeaderOperations">HeaderOperations</a></code></td>
 <td>
 <p>Header manipulation rules to apply before forwarding a request
@@ -788,7 +788,7 @@ <h2 id="Headers">Headers</h2>
 </td>
 </tr>
 <tr id="Headers-response">
-<td><code>response</code></td>
+<td><code><a href="#Headers-response">response</a></code></td>
 <td><code><a href="#Headers-HeaderOperations">HeaderOperations</a></code></td>
 <td>
 <p>Header manipulation rules to apply before returning a response
@@ -845,7 +845,7 @@ <h2 id="TLSRoute">TLSRoute</h2>
 </thead>
 <tbody>
 <tr id="TLSRoute-match">
-<td><code>match</code></td>
+<td><code><a href="#TLSRoute-match">match</a></code></td>
 <td><code><a href="#TLSMatchAttributes">TLSMatchAttributes[]</a></code></td>
 <td>
 <p>Match conditions to be satisfied for the rule to be
@@ -859,7 +859,7 @@ <h2 id="TLSRoute">TLSRoute</h2>
 </td>
 </tr>
 <tr id="TLSRoute-route">
-<td><code>route</code></td>
+<td><code><a href="#TLSRoute-route">route</a></code></td>
 <td><code><a href="#RouteDestination">RouteDestination[]</a></code></td>
 <td>
 <p>The destination to which the connection should be forwarded to.</p>
@@ -905,7 +905,7 @@ <h2 id="TCPRoute">TCPRoute</h2>
 </thead>
 <tbody>
 <tr id="TCPRoute-match">
-<td><code>match</code></td>
+<td><code><a href="#TCPRoute-match">match</a></code></td>
 <td><code><a href="#L4MatchAttributes">L4MatchAttributes[]</a></code></td>
 <td>
 <p>Match conditions to be satisfied for the rule to be
@@ -919,7 +919,7 @@ <h2 id="TCPRoute">TCPRoute</h2>
 </td>
 </tr>
 <tr id="TCPRoute-route">
-<td><code>route</code></td>
+<td><code><a href="#TCPRoute-route">route</a></code></td>
 <td><code><a href="#RouteDestination">RouteDestination[]</a></code></td>
 <td>
 <p>The destination to which the connection should be forwarded to.</p>
@@ -976,7 +976,7 @@ <h2 id="HTTPMatchRequest">HTTPMatchRequest</h2>
 </thead>
 <tbody>
 <tr id="HTTPMatchRequest-name">
-<td><code>name</code></td>
+<td><code><a href="#HTTPMatchRequest-name">name</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>The name assigned to a match. The match&rsquo;s name will be
@@ -989,7 +989,7 @@ <h2 id="HTTPMatchRequest">HTTPMatchRequest</h2>
 </td>
 </tr>
 <tr id="HTTPMatchRequest-uri">
-<td><code>uri</code></td>
+<td><code><a href="#HTTPMatchRequest-uri">uri</a></code></td>
 <td><code><a href="#StringMatch">StringMatch</a></code></td>
 <td>
 <p>URI to match
@@ -1014,7 +1014,7 @@ <h2 id="HTTPMatchRequest">HTTPMatchRequest</h2>
 </td>
 </tr>
 <tr id="HTTPMatchRequest-scheme">
-<td><code>scheme</code></td>
+<td><code><a href="#HTTPMatchRequest-scheme">scheme</a></code></td>
 <td><code><a href="#StringMatch">StringMatch</a></code></td>
 <td>
 <p>URI Scheme
@@ -1037,7 +1037,7 @@ <h2 id="HTTPMatchRequest">HTTPMatchRequest</h2>
 </td>
 </tr>
 <tr id="HTTPMatchRequest-method">
-<td><code>method</code></td>
+<td><code><a href="#HTTPMatchRequest-method">method</a></code></td>
 <td><code><a href="#StringMatch">StringMatch</a></code></td>
 <td>
 <p>HTTP Method
@@ -1060,7 +1060,7 @@ <h2 id="HTTPMatchRequest">HTTPMatchRequest</h2>
 </td>
 </tr>
 <tr id="HTTPMatchRequest-authority">
-<td><code>authority</code></td>
+<td><code><a href="#HTTPMatchRequest-authority">authority</a></code></td>
 <td><code><a href="#StringMatch">StringMatch</a></code></td>
 <td>
 <p>HTTP Authority
@@ -1083,7 +1083,7 @@ <h2 id="HTTPMatchRequest">HTTPMatchRequest</h2>
 </td>
 </tr>
 <tr id="HTTPMatchRequest-headers">
-<td><code>headers</code></td>
+<td><code><a href="#HTTPMatchRequest-headers">headers</a></code></td>
 <td><code>map&lt;string,&nbsp;<a href="#StringMatch">StringMatch</a>&gt;</code></td>
 <td>
 <p>The header keys must be lowercase and use hyphen as the separator,
@@ -1114,7 +1114,7 @@ <h2 id="HTTPMatchRequest">HTTPMatchRequest</h2>
 </td>
 </tr>
 <tr id="HTTPMatchRequest-port">
-<td><code>port</code></td>
+<td><code><a href="#HTTPMatchRequest-port">port</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>Specifies the ports on the host that is being addressed. Many services
@@ -1127,7 +1127,7 @@ <h2 id="HTTPMatchRequest">HTTPMatchRequest</h2>
 </td>
 </tr>
 <tr id="HTTPMatchRequest-source_labels">
-<td><code>sourceLabels</code></td>
+<td><code><a href="#HTTPMatchRequest-source_labels">sourceLabels</a></code></td>
 <td><code>map&lt;string,&nbsp;string&gt;</code></td>
 <td>
 <p>One or more labels that constrain the applicability of a rule to source (client) workloads
@@ -1141,7 +1141,7 @@ <h2 id="HTTPMatchRequest">HTTPMatchRequest</h2>
 </td>
 </tr>
 <tr id="HTTPMatchRequest-gateways">
-<td><code>gateways</code></td>
+<td><code><a href="#HTTPMatchRequest-gateways">gateways</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>Names of gateways where the rule should be applied. Gateway names
@@ -1154,7 +1154,7 @@ <h2 id="HTTPMatchRequest">HTTPMatchRequest</h2>
 </td>
 </tr>
 <tr id="HTTPMatchRequest-query_params">
-<td><code>queryParams</code></td>
+<td><code><a href="#HTTPMatchRequest-query_params">queryParams</a></code></td>
 <td><code>map&lt;string,&nbsp;<a href="#StringMatch">StringMatch</a>&gt;</code></td>
 <td>
 <p>Query parameters for matching.</p>
@@ -1185,7 +1185,7 @@ <h2 id="HTTPMatchRequest">HTTPMatchRequest</h2>
 </td>
 </tr>
 <tr id="HTTPMatchRequest-ignore_uri_case">
-<td><code>ignoreUriCase</code></td>
+<td><code><a href="#HTTPMatchRequest-ignore_uri_case">ignoreUriCase</a></code></td>
 <td><code>bool</code></td>
 <td>
 <p>Flag to specify whether the URI matching should be case-insensitive.</p>
@@ -1198,7 +1198,7 @@ <h2 id="HTTPMatchRequest">HTTPMatchRequest</h2>
 </td>
 </tr>
 <tr id="HTTPMatchRequest-without_headers">
-<td><code>withoutHeaders</code></td>
+<td><code><a href="#HTTPMatchRequest-without_headers">withoutHeaders</a></code></td>
 <td><code>map&lt;string,&nbsp;<a href="#StringMatch">StringMatch</a>&gt;</code></td>
 <td>
 <p>withoutHeader has the same syntax with the header, but has opposite meaning.
@@ -1210,7 +1210,7 @@ <h2 id="HTTPMatchRequest">HTTPMatchRequest</h2>
 </td>
 </tr>
 <tr id="HTTPMatchRequest-source_namespace">
-<td><code>sourceNamespace</code></td>
+<td><code><a href="#HTTPMatchRequest-source_namespace">sourceNamespace</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Source namespace constraining the applicability of a rule to workloads in that namespace.
@@ -1223,7 +1223,7 @@ <h2 id="HTTPMatchRequest">HTTPMatchRequest</h2>
 </td>
 </tr>
 <tr id="HTTPMatchRequest-stat_prefix">
-<td><code>statPrefix</code></td>
+<td><code><a href="#HTTPMatchRequest-stat_prefix">statPrefix</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>The human readable prefix to use when emitting statistics for this route.
@@ -1313,7 +1313,7 @@ <h2 id="HTTPRouteDestination">HTTPRouteDestination</h2>
 </thead>
 <tbody>
 <tr id="HTTPRouteDestination-destination">
-<td><code>destination</code></td>
+<td><code><a href="#HTTPRouteDestination-destination">destination</a></code></td>
 <td><code><a href="#Destination">Destination</a></code></td>
 <td>
 <p>Destination uniquely identifies the instances of a service
@@ -1325,7 +1325,7 @@ <h2 id="HTTPRouteDestination">HTTPRouteDestination</h2>
 </td>
 </tr>
 <tr id="HTTPRouteDestination-weight">
-<td><code>weight</code></td>
+<td><code><a href="#HTTPRouteDestination-weight">weight</a></code></td>
 <td><code>int32</code></td>
 <td>
 <p>Weight specifies the relative proportion of traffic to be forwarded to the destination. A destination will receive <code>weight/(sum of all weights)</code> requests.
@@ -1338,7 +1338,7 @@ <h2 id="HTTPRouteDestination">HTTPRouteDestination</h2>
 </td>
 </tr>
 <tr id="HTTPRouteDestination-headers">
-<td><code>headers</code></td>
+<td><code><a href="#HTTPRouteDestination-headers">headers</a></code></td>
 <td><code><a href="#Headers">Headers</a></code></td>
 <td>
 <p>Header manipulation rules</p>
@@ -1366,7 +1366,7 @@ <h2 id="RouteDestination">RouteDestination</h2>
 </thead>
 <tbody>
 <tr id="RouteDestination-destination">
-<td><code>destination</code></td>
+<td><code><a href="#RouteDestination-destination">destination</a></code></td>
 <td><code><a href="#Destination">Destination</a></code></td>
 <td>
 <p>Destination uniquely identifies the instances of a service
@@ -1378,7 +1378,7 @@ <h2 id="RouteDestination">RouteDestination</h2>
 </td>
 </tr>
 <tr id="RouteDestination-weight">
-<td><code>weight</code></td>
+<td><code><a href="#RouteDestination-weight">weight</a></code></td>
 <td><code>int32</code></td>
 <td>
 <p>Weight specifies the relative proportion of traffic to be forwarded to the destination. A destination will receive <code>weight/(sum of all weights)</code> requests.
@@ -1409,7 +1409,7 @@ <h2 id="L4MatchAttributes">L4MatchAttributes</h2>
 </thead>
 <tbody>
 <tr id="L4MatchAttributes-destination_subnets">
-<td><code>destinationSubnets</code></td>
+<td><code><a href="#L4MatchAttributes-destination_subnets">destinationSubnets</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>IPv4 or IPv6 ip addresses of destination with optional subnet.  E.g.,
@@ -1421,7 +1421,7 @@ <h2 id="L4MatchAttributes">L4MatchAttributes</h2>
 </td>
 </tr>
 <tr id="L4MatchAttributes-port">
-<td><code>port</code></td>
+<td><code><a href="#L4MatchAttributes-port">port</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>Specifies the port on the host that is being addressed. Many services
@@ -1434,7 +1434,7 @@ <h2 id="L4MatchAttributes">L4MatchAttributes</h2>
 </td>
 </tr>
 <tr id="L4MatchAttributes-source_labels">
-<td><code>sourceLabels</code></td>
+<td><code><a href="#L4MatchAttributes-source_labels">sourceLabels</a></code></td>
 <td><code>map&lt;string,&nbsp;string&gt;</code></td>
 <td>
 <p>One or more labels that constrain the applicability of a rule to
@@ -1448,7 +1448,7 @@ <h2 id="L4MatchAttributes">L4MatchAttributes</h2>
 </td>
 </tr>
 <tr id="L4MatchAttributes-gateways">
-<td><code>gateways</code></td>
+<td><code><a href="#L4MatchAttributes-gateways">gateways</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>Names of gateways where the rule should be applied. Gateway names
@@ -1461,7 +1461,7 @@ <h2 id="L4MatchAttributes">L4MatchAttributes</h2>
 </td>
 </tr>
 <tr id="L4MatchAttributes-source_namespace">
-<td><code>sourceNamespace</code></td>
+<td><code><a href="#L4MatchAttributes-source_namespace">sourceNamespace</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Source namespace constraining the applicability of a rule to workloads in that namespace.
@@ -1491,7 +1491,7 @@ <h2 id="TLSMatchAttributes">TLSMatchAttributes</h2>
 </thead>
 <tbody>
 <tr id="TLSMatchAttributes-sni_hosts">
-<td><code>sniHosts</code></td>
+<td><code><a href="#TLSMatchAttributes-sni_hosts">sniHosts</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>SNI (server name indicator) to match on. Wildcard prefixes
@@ -1505,7 +1505,7 @@ <h2 id="TLSMatchAttributes">TLSMatchAttributes</h2>
 </td>
 </tr>
 <tr id="TLSMatchAttributes-destination_subnets">
-<td><code>destinationSubnets</code></td>
+<td><code><a href="#TLSMatchAttributes-destination_subnets">destinationSubnets</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>IPv4 or IPv6 ip addresses of destination with optional subnet.  E.g.,
@@ -1517,7 +1517,7 @@ <h2 id="TLSMatchAttributes">TLSMatchAttributes</h2>
 </td>
 </tr>
 <tr id="TLSMatchAttributes-port">
-<td><code>port</code></td>
+<td><code><a href="#TLSMatchAttributes-port">port</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>Specifies the port on the host that is being addressed. Many services
@@ -1531,7 +1531,7 @@ <h2 id="TLSMatchAttributes">TLSMatchAttributes</h2>
 </td>
 </tr>
 <tr id="TLSMatchAttributes-source_labels">
-<td><code>sourceLabels</code></td>
+<td><code><a href="#TLSMatchAttributes-source_labels">sourceLabels</a></code></td>
 <td><code>map&lt;string,&nbsp;string&gt;</code></td>
 <td>
 <p>One or more labels that constrain the applicability of a rule to
@@ -1545,7 +1545,7 @@ <h2 id="TLSMatchAttributes">TLSMatchAttributes</h2>
 </td>
 </tr>
 <tr id="TLSMatchAttributes-gateways">
-<td><code>gateways</code></td>
+<td><code><a href="#TLSMatchAttributes-gateways">gateways</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>Names of gateways where the rule should be applied. Gateway names
@@ -1558,7 +1558,7 @@ <h2 id="TLSMatchAttributes">TLSMatchAttributes</h2>
 </td>
 </tr>
 <tr id="TLSMatchAttributes-source_namespace">
-<td><code>sourceNamespace</code></td>
+<td><code><a href="#TLSMatchAttributes-source_namespace">sourceNamespace</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Source namespace constraining the applicability of a rule to workloads in that namespace.
@@ -1608,7 +1608,7 @@ <h2 id="HTTPRedirect">HTTPRedirect</h2>
 </thead>
 <tbody>
 <tr id="HTTPRedirect-uri">
-<td><code>uri</code></td>
+<td><code><a href="#HTTPRedirect-uri">uri</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>On a redirect, overwrite the Path portion of the URL with this
@@ -1621,7 +1621,7 @@ <h2 id="HTTPRedirect">HTTPRedirect</h2>
 </td>
 </tr>
 <tr id="HTTPRedirect-authority">
-<td><code>authority</code></td>
+<td><code><a href="#HTTPRedirect-authority">authority</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>On a redirect, overwrite the Authority/Host portion of the URL with
@@ -1633,7 +1633,7 @@ <h2 id="HTTPRedirect">HTTPRedirect</h2>
 </td>
 </tr>
 <tr id="HTTPRedirect-port" class="oneof oneof-start">
-<td><code>port</code></td>
+<td><code><a href="#HTTPRedirect-port">port</a></code></td>
 <td><code>uint32 (oneof)</code></td>
 <td>
 <p>On a redirect, overwrite the port portion of the URL with this value.</p>
@@ -1644,7 +1644,7 @@ <h2 id="HTTPRedirect">HTTPRedirect</h2>
 </td>
 </tr>
 <tr id="HTTPRedirect-derive_port" class="oneof">
-<td><code>derivePort</code></td>
+<td><code><a href="#HTTPRedirect-derive_port">derivePort</a></code></td>
 <td><code><a href="#HTTPRedirect-RedirectPortSelection">RedirectPortSelection (oneof)</a></code></td>
 <td>
 <p>On a redirect, dynamically set the port:</p>
@@ -1659,7 +1659,7 @@ <h2 id="HTTPRedirect">HTTPRedirect</h2>
 </td>
 </tr>
 <tr id="HTTPRedirect-scheme">
-<td><code>scheme</code></td>
+<td><code><a href="#HTTPRedirect-scheme">scheme</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>On a redirect, overwrite the scheme portion of the URL with this value.
@@ -1673,7 +1673,7 @@ <h2 id="HTTPRedirect">HTTPRedirect</h2>
 </td>
 </tr>
 <tr id="HTTPRedirect-redirect_code">
-<td><code>redirectCode</code></td>
+<td><code><a href="#HTTPRedirect-redirect_code">redirectCode</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>On a redirect, Specifies the HTTP status code to use in the redirect
@@ -1764,7 +1764,7 @@ <h2 id="HTTPDirectResponse">HTTPDirectResponse</h2>
 </thead>
 <tbody>
 <tr id="HTTPDirectResponse-status">
-<td><code>status</code></td>
+<td><code><a href="#HTTPDirectResponse-status">status</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>Specifies the HTTP response status to be returned.</p>
@@ -1775,7 +1775,7 @@ <h2 id="HTTPDirectResponse">HTTPDirectResponse</h2>
 </td>
 </tr>
 <tr id="HTTPDirectResponse-body">
-<td><code>body</code></td>
+<td><code><a href="#HTTPDirectResponse-body">body</a></code></td>
 <td><code><a href="#HTTPBody">HTTPBody</a></code></td>
 <td>
 <p>Specifies the content of the response body. If this setting is omitted,
@@ -1802,7 +1802,7 @@ <h2 id="HTTPBody">HTTPBody</h2>
 </thead>
 <tbody>
 <tr id="HTTPBody-string" class="oneof oneof-start">
-<td><code>string</code></td>
+<td><code><a href="#HTTPBody-string">string</a></code></td>
 <td><code>string (oneof)</code></td>
 <td>
 <p>response body as a string</p>
@@ -1813,7 +1813,7 @@ <h2 id="HTTPBody">HTTPBody</h2>
 </td>
 </tr>
 <tr id="HTTPBody-bytes" class="oneof">
-<td><code>bytes</code></td>
+<td><code><a href="#HTTPBody-bytes">bytes</a></code></td>
 <td><code>bytes (oneof)</code></td>
 <td>
 <p>response body as base64 encoded bytes.</p>
@@ -1863,7 +1863,7 @@ <h2 id="HTTPRewrite">HTTPRewrite</h2>
 </thead>
 <tbody>
 <tr id="HTTPRewrite-uri">
-<td><code>uri</code></td>
+<td><code><a href="#HTTPRewrite-uri">uri</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>rewrite the path (or the prefix) portion of the URI with this
@@ -1876,7 +1876,7 @@ <h2 id="HTTPRewrite">HTTPRewrite</h2>
 </td>
 </tr>
 <tr id="HTTPRewrite-authority">
-<td><code>authority</code></td>
+<td><code><a href="#HTTPRewrite-authority">authority</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>rewrite the Authority/Host header with this value.</p>
@@ -1887,7 +1887,7 @@ <h2 id="HTTPRewrite">HTTPRewrite</h2>
 </td>
 </tr>
 <tr id="HTTPRewrite-uri_regex_rewrite">
-<td><code>uriRegexRewrite</code></td>
+<td><code><a href="#HTTPRewrite-uri_regex_rewrite">uriRegexRewrite</a></code></td>
 <td><code><a href="#RegexRewrite">RegexRewrite</a></code></td>
 <td>
 <p>rewrite the path portion of the URI with the specified regex.</p>
@@ -1913,7 +1913,7 @@ <h2 id="RegexRewrite">RegexRewrite</h2>
 </thead>
 <tbody>
 <tr id="RegexRewrite-match">
-<td><code>match</code></td>
+<td><code><a href="#RegexRewrite-match">match</a></code></td>
 <td><code>string</code></td>
 <td>
 <p><a href="https://github.com/google/re2/wiki/Syntax">RE2 style regex-based match</a>.</p>
@@ -1924,7 +1924,7 @@ <h2 id="RegexRewrite">RegexRewrite</h2>
 </td>
 </tr>
 <tr id="RegexRewrite-rewrite">
-<td><code>rewrite</code></td>
+<td><code><a href="#RegexRewrite-rewrite">rewrite</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>The string that should replace into matching portions of original URI.
@@ -1961,7 +1961,7 @@ <h2 id="StringMatch">StringMatch</h2>
 </thead>
 <tbody>
 <tr id="StringMatch-exact" class="oneof oneof-start">
-<td><code>exact</code></td>
+<td><code><a href="#StringMatch-exact">exact</a></code></td>
 <td><code>string (oneof)</code></td>
 <td>
 <p>exact string match</p>
@@ -1972,7 +1972,7 @@ <h2 id="StringMatch">StringMatch</h2>
 </td>
 </tr>
 <tr id="StringMatch-prefix" class="oneof">
-<td><code>prefix</code></td>
+<td><code><a href="#StringMatch-prefix">prefix</a></code></td>
 <td><code>string (oneof)</code></td>
 <td>
 <p>prefix-based match</p>
@@ -1983,7 +1983,7 @@ <h2 id="StringMatch">StringMatch</h2>
 </td>
 </tr>
 <tr id="StringMatch-regex" class="oneof">
-<td><code>regex</code></td>
+<td><code><a href="#StringMatch-regex">regex</a></code></td>
 <td><code>string (oneof)</code></td>
 <td>
 <p><a href="https://github.com/google/re2/wiki/Syntax">RE2 style regex-based match</a>.</p>
@@ -2033,7 +2033,7 @@ <h2 id="HTTPRetry">HTTPRetry</h2>
 </thead>
 <tbody>
 <tr id="HTTPRetry-attempts">
-<td><code>attempts</code></td>
+<td><code><a href="#HTTPRetry-attempts">attempts</a></code></td>
 <td><code>int32</code></td>
 <td>
 <p>Number of retries to be allowed for a given request. The interval
@@ -2049,7 +2049,7 @@ <h2 id="HTTPRetry">HTTPRetry</h2>
 </td>
 </tr>
 <tr id="HTTPRetry-per_try_timeout">
-<td><code>perTryTimeout</code></td>
+<td><code><a href="#HTTPRetry-per_try_timeout">perTryTimeout</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#duration">Duration</a></code></td>
 <td>
 <p>Timeout per attempt for a given request, including the initial call and any retries. Format: 1h/1m/1s/1ms. MUST BE &gt;=1ms.
@@ -2063,7 +2063,7 @@ <h2 id="HTTPRetry">HTTPRetry</h2>
 </td>
 </tr>
 <tr id="HTTPRetry-retry_on">
-<td><code>retryOn</code></td>
+<td><code><a href="#HTTPRetry-retry_on">retryOn</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Specifies the conditions under which retry takes place.
@@ -2082,7 +2082,7 @@ <h2 id="HTTPRetry">HTTPRetry</h2>
 </td>
 </tr>
 <tr id="HTTPRetry-retry_remote_localities">
-<td><code>retryRemoteLocalities</code></td>
+<td><code><a href="#HTTPRetry-retry_remote_localities">retryRemoteLocalities</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#boolvalue">BoolValue</a></code></td>
 <td>
 <p>Flag to specify whether the retries should retry to other localities.
@@ -2140,7 +2140,7 @@ <h2 id="CorsPolicy">CorsPolicy</h2>
 </thead>
 <tbody>
 <tr id="CorsPolicy-allow_origins">
-<td><code>allowOrigins</code></td>
+<td><code><a href="#CorsPolicy-allow_origins">allowOrigins</a></code></td>
 <td><code><a href="#StringMatch">StringMatch[]</a></code></td>
 <td>
 <p>String patterns that match allowed origins.
@@ -2153,7 +2153,7 @@ <h2 id="CorsPolicy">CorsPolicy</h2>
 </td>
 </tr>
 <tr id="CorsPolicy-allow_methods">
-<td><code>allowMethods</code></td>
+<td><code><a href="#CorsPolicy-allow_methods">allowMethods</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>List of HTTP methods allowed to access the resource. The content will
@@ -2165,7 +2165,7 @@ <h2 id="CorsPolicy">CorsPolicy</h2>
 </td>
 </tr>
 <tr id="CorsPolicy-allow_headers">
-<td><code>allowHeaders</code></td>
+<td><code><a href="#CorsPolicy-allow_headers">allowHeaders</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>List of HTTP headers that can be used when requesting the
@@ -2177,7 +2177,7 @@ <h2 id="CorsPolicy">CorsPolicy</h2>
 </td>
 </tr>
 <tr id="CorsPolicy-expose_headers">
-<td><code>exposeHeaders</code></td>
+<td><code><a href="#CorsPolicy-expose_headers">exposeHeaders</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>A list of HTTP headers that the browsers are allowed to
@@ -2189,7 +2189,7 @@ <h2 id="CorsPolicy">CorsPolicy</h2>
 </td>
 </tr>
 <tr id="CorsPolicy-max_age">
-<td><code>maxAge</code></td>
+<td><code><a href="#CorsPolicy-max_age">maxAge</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#duration">Duration</a></code></td>
 <td>
 <p>Specifies how long the results of a preflight request can be
@@ -2201,7 +2201,7 @@ <h2 id="CorsPolicy">CorsPolicy</h2>
 </td>
 </tr>
 <tr id="CorsPolicy-allow_credentials">
-<td><code>allowCredentials</code></td>
+<td><code><a href="#CorsPolicy-allow_credentials">allowCredentials</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#boolvalue">BoolValue</a></code></td>
 <td>
 <p>Indicates whether the caller is allowed to send the actual request
@@ -2214,7 +2214,7 @@ <h2 id="CorsPolicy">CorsPolicy</h2>
 </td>
 </tr>
 <tr id="CorsPolicy-unmatched_preflights">
-<td><code>unmatchedPreflights</code></td>
+<td><code><a href="#CorsPolicy-unmatched_preflights">unmatchedPreflights</a></code></td>
 <td><code><a href="#CorsPolicy-UnmatchedPreflights">UnmatchedPreflights</a></code></td>
 <td>
 <p>Indicates whether preflight requests not matching the configured
@@ -2250,7 +2250,7 @@ <h2 id="HTTPFaultInjection">HTTPFaultInjection</h2>
 </thead>
 <tbody>
 <tr id="HTTPFaultInjection-delay">
-<td><code>delay</code></td>
+<td><code><a href="#HTTPFaultInjection-delay">delay</a></code></td>
 <td><code><a href="#HTTPFaultInjection-Delay">Delay</a></code></td>
 <td>
 <p>Delay requests before forwarding, emulating various failures such as
@@ -2262,7 +2262,7 @@ <h2 id="HTTPFaultInjection">HTTPFaultInjection</h2>
 </td>
 </tr>
 <tr id="HTTPFaultInjection-abort">
-<td><code>abort</code></td>
+<td><code><a href="#HTTPFaultInjection-abort">abort</a></code></td>
 <td><code><a href="#HTTPFaultInjection-Abort">Abort</a></code></td>
 <td>
 <p>Abort Http request attempts and return error codes back to downstream
@@ -2296,7 +2296,7 @@ <h2 id="HTTPMirrorPolicy">HTTPMirrorPolicy</h2>
 </thead>
 <tbody>
 <tr id="HTTPMirrorPolicy-destination">
-<td><code>destination</code></td>
+<td><code><a href="#HTTPMirrorPolicy-destination">destination</a></code></td>
 <td><code><a href="#Destination">Destination</a></code></td>
 <td>
 <p>Destination specifies the target of the mirror operation.</p>
@@ -2307,7 +2307,7 @@ <h2 id="HTTPMirrorPolicy">HTTPMirrorPolicy</h2>
 </td>
 </tr>
 <tr id="HTTPMirrorPolicy-percentage">
-<td><code>percentage</code></td>
+<td><code><a href="#HTTPMirrorPolicy-percentage">percentage</a></code></td>
 <td><code><a href="#Percent">Percent</a></code></td>
 <td>
 <p>Percentage of the traffic to be mirrored by the <code>destination</code> field.
@@ -2338,7 +2338,7 @@ <h2 id="PortSelector">PortSelector</h2>
 </thead>
 <tbody>
 <tr id="PortSelector-number">
-<td><code>number</code></td>
+<td><code><a href="#PortSelector-number">number</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>Valid port number</p>
@@ -2366,7 +2366,7 @@ <h2 id="Percent">Percent</h2>
 </thead>
 <tbody>
 <tr id="Percent-value">
-<td><code>value</code></td>
+<td><code><a href="#Percent-value">value</a></code></td>
 <td><code>double</code></td>
 <td>
 </td>
@@ -2392,7 +2392,7 @@ <h2 id="Headers-HeaderOperations">Headers.HeaderOperations</h2>
 </thead>
 <tbody>
 <tr id="Headers-HeaderOperations-set">
-<td><code>set</code></td>
+<td><code><a href="#Headers-HeaderOperations-set">set</a></code></td>
 <td><code>map&lt;string,&nbsp;string&gt;</code></td>
 <td>
 <p>Overwrite the headers specified by key with the given values</p>
@@ -2403,7 +2403,7 @@ <h2 id="Headers-HeaderOperations">Headers.HeaderOperations</h2>
 </td>
 </tr>
 <tr id="Headers-HeaderOperations-add">
-<td><code>add</code></td>
+<td><code><a href="#Headers-HeaderOperations-add">add</a></code></td>
 <td><code>map&lt;string,&nbsp;string&gt;</code></td>
 <td>
 <p>Append the given values to the headers specified by keys
@@ -2415,7 +2415,7 @@ <h2 id="Headers-HeaderOperations">Headers.HeaderOperations</h2>
 </td>
 </tr>
 <tr id="Headers-HeaderOperations-remove">
-<td><code>remove</code></td>
+<td><code><a href="#Headers-HeaderOperations-remove">remove</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>Remove the specified headers</p>
@@ -2470,7 +2470,7 @@ <h2 id="HTTPFaultInjection-Delay">HTTPFaultInjection.Delay</h2>
 </thead>
 <tbody>
 <tr id="HTTPFaultInjection-Delay-fixed_delay" class="oneof oneof-start">
-<td><code>fixedDelay</code></td>
+<td><code><a href="#HTTPFaultInjection-Delay-fixed_delay">fixedDelay</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#duration">Duration (oneof)</a></code></td>
 <td>
 <p>Add a fixed delay before forwarding the request. Format:
@@ -2482,7 +2482,7 @@ <h2 id="HTTPFaultInjection-Delay">HTTPFaultInjection.Delay</h2>
 </td>
 </tr>
 <tr id="HTTPFaultInjection-Delay-percentage">
-<td><code>percentage</code></td>
+<td><code><a href="#HTTPFaultInjection-Delay-percentage">percentage</a></code></td>
 <td><code><a href="#Percent">Percent</a></code></td>
 <td>
 <p>Percentage of requests on which the delay will be injected.
@@ -2494,7 +2494,7 @@ <h2 id="HTTPFaultInjection-Delay">HTTPFaultInjection.Delay</h2>
 </td>
 </tr>
 <tr id="HTTPFaultInjection-Delay-percent" class="deprecated ">
-<td><code>percent</code></td>
+<td><code><a href="#HTTPFaultInjection-Delay-percent">percent</a></code></td>
 <td><code>int32</code></td>
 <td>
 <p>Percentage of requests on which the delay will be injected (0-100).
@@ -2548,7 +2548,7 @@ <h2 id="HTTPFaultInjection-Abort">HTTPFaultInjection.Abort</h2>
 </thead>
 <tbody>
 <tr id="HTTPFaultInjection-Abort-http_status" class="oneof oneof-start">
-<td><code>httpStatus</code></td>
+<td><code><a href="#HTTPFaultInjection-Abort-http_status">httpStatus</a></code></td>
 <td><code>int32 (oneof)</code></td>
 <td>
 <p>HTTP status code to use to abort the Http request.</p>
@@ -2559,7 +2559,7 @@ <h2 id="HTTPFaultInjection-Abort">HTTPFaultInjection.Abort</h2>
 </td>
 </tr>
 <tr id="HTTPFaultInjection-Abort-grpc_status" class="oneof">
-<td><code>grpcStatus</code></td>
+<td><code><a href="#HTTPFaultInjection-Abort-grpc_status">grpcStatus</a></code></td>
 <td><code>string (oneof)</code></td>
 <td>
 <p>GRPC status code to use to abort the request. The supported
@@ -2573,7 +2573,7 @@ <h2 id="HTTPFaultInjection-Abort">HTTPFaultInjection.Abort</h2>
 </td>
 </tr>
 <tr id="HTTPFaultInjection-Abort-percentage">
-<td><code>percentage</code></td>
+<td><code><a href="#HTTPFaultInjection-Abort-percentage">percentage</a></code></td>
 <td><code><a href="#Percent">Percent</a></code></td>
 <td>
 <p>Percentage of requests to be aborted with the error code provided.
@@ -2603,7 +2603,7 @@ <h2 id="google-protobuf-UInt32Value">google.protobuf.UInt32Value</h2>
 </thead>
 <tbody>
 <tr id="google-protobuf-UInt32Value-value">
-<td><code>value</code></td>
+<td><code><a href="#google-protobuf-UInt32Value-value">value</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>The uint32 value.</p>
@@ -2627,12 +2627,12 @@ <h2 id="HTTPRedirect-RedirectPortSelection">HTTPRedirect.RedirectPortSelection</
 </thead>
 <tbody>
 <tr id="HTTPRedirect-RedirectPortSelection-FROM_PROTOCOL_DEFAULT">
-<td><code>FROM_PROTOCOL_DEFAULT</code></td>
+<td><code><a href="#HTTPRedirect-RedirectPortSelection-FROM_PROTOCOL_DEFAULT">FROM_PROTOCOL_DEFAULT</a></code></td>
 <td>
 </td>
 </tr>
 <tr id="HTTPRedirect-RedirectPortSelection-FROM_REQUEST_PORT">
-<td><code>FROM_REQUEST_PORT</code></td>
+<td><code><a href="#HTTPRedirect-RedirectPortSelection-FROM_REQUEST_PORT">FROM_REQUEST_PORT</a></code></td>
 <td>
 </td>
 </tr>
@@ -2650,14 +2650,14 @@ <h2 id="CorsPolicy-UnmatchedPreflights">CorsPolicy.UnmatchedPreflights</h2>
 </thead>
 <tbody>
 <tr id="CorsPolicy-UnmatchedPreflights-UNSPECIFIED">
-<td><code>UNSPECIFIED</code></td>
+<td><code><a href="#CorsPolicy-UnmatchedPreflights-UNSPECIFIED">UNSPECIFIED</a></code></td>
 <td>
 <p>Default to FORWARD</p>
 
 </td>
 </tr>
 <tr id="CorsPolicy-UnmatchedPreflights-FORWARD">
-<td><code>FORWARD</code></td>
+<td><code><a href="#CorsPolicy-UnmatchedPreflights-FORWARD">FORWARD</a></code></td>
 <td>
 <p>Preflight requests not matching the configured allowed origin
 will be forwarded to the upstream.</p>
@@ -2665,7 +2665,7 @@ <h2 id="CorsPolicy-UnmatchedPreflights">CorsPolicy.UnmatchedPreflights</h2>
 </td>
 </tr>
 <tr id="CorsPolicy-UnmatchedPreflights-IGNORE">
-<td><code>IGNORE</code></td>
+<td><code><a href="#CorsPolicy-UnmatchedPreflights-IGNORE">IGNORE</a></code></td>
 <td>
 <p>Preflight requests not matching the configured allowed origin
 will not be forwarded to the upstream.</p>
diff --git a/networking/v1alpha3/workload_entry.pb.html b/networking/v1alpha3/workload_entry.pb.html
index d060278ed8..bcd16590e8 100644
--- a/networking/v1alpha3/workload_entry.pb.html
+++ b/networking/v1alpha3/workload_entry.pb.html
@@ -133,7 +133,7 @@ <h2 id="WorkloadEntry">WorkloadEntry</h2>
 </thead>
 <tbody>
 <tr id="WorkloadEntry-address">
-<td><code>address</code></td>
+<td><code><a href="#WorkloadEntry-address">address</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Address associated with the network endpoint without the
@@ -148,7 +148,7 @@ <h2 id="WorkloadEntry">WorkloadEntry</h2>
 </td>
 </tr>
 <tr id="WorkloadEntry-ports">
-<td><code>ports</code></td>
+<td><code><a href="#WorkloadEntry-ports">ports</a></code></td>
 <td><code>map&lt;string,&nbsp;uint32&gt;</code></td>
 <td>
 <p>Set of ports associated with the endpoint. If the port map is
@@ -170,7 +170,7 @@ <h2 id="WorkloadEntry">WorkloadEntry</h2>
 </td>
 </tr>
 <tr id="WorkloadEntry-labels">
-<td><code>labels</code></td>
+<td><code><a href="#WorkloadEntry-labels">labels</a></code></td>
 <td><code>map&lt;string,&nbsp;string&gt;</code></td>
 <td>
 <p>One or more labels associated with the endpoint.</p>
@@ -181,7 +181,7 @@ <h2 id="WorkloadEntry">WorkloadEntry</h2>
 </td>
 </tr>
 <tr id="WorkloadEntry-network">
-<td><code>network</code></td>
+<td><code><a href="#WorkloadEntry-network">network</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Network enables Istio to group endpoints resident in the same L3
@@ -199,7 +199,7 @@ <h2 id="WorkloadEntry">WorkloadEntry</h2>
 </td>
 </tr>
 <tr id="WorkloadEntry-locality">
-<td><code>locality</code></td>
+<td><code><a href="#WorkloadEntry-locality">locality</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>The locality associated with the endpoint. A locality corresponds
@@ -226,7 +226,7 @@ <h2 id="WorkloadEntry">WorkloadEntry</h2>
 </td>
 </tr>
 <tr id="WorkloadEntry-weight">
-<td><code>weight</code></td>
+<td><code><a href="#WorkloadEntry-weight">weight</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>The load balancing weight associated with the endpoint. Endpoints
@@ -238,7 +238,7 @@ <h2 id="WorkloadEntry">WorkloadEntry</h2>
 </td>
 </tr>
 <tr id="WorkloadEntry-service_account">
-<td><code>serviceAccount</code></td>
+<td><code><a href="#WorkloadEntry-service_account">serviceAccount</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>The service account associated with the workload if a sidecar
diff --git a/networking/v1alpha3/workload_group.pb.html b/networking/v1alpha3/workload_group.pb.html
index 24e29d1b84..e6b3336962 100644
--- a/networking/v1alpha3/workload_group.pb.html
+++ b/networking/v1alpha3/workload_group.pb.html
@@ -70,7 +70,7 @@ <h2 id="WorkloadGroup">WorkloadGroup</h2>
 </thead>
 <tbody>
 <tr id="WorkloadGroup-metadata">
-<td><code>metadata</code></td>
+<td><code><a href="#WorkloadGroup-metadata">metadata</a></code></td>
 <td><code><a href="#WorkloadGroup-ObjectMeta">ObjectMeta</a></code></td>
 <td>
 <p>Metadata that will be used for all corresponding <code>WorkloadEntries</code>.
@@ -82,7 +82,7 @@ <h2 id="WorkloadGroup">WorkloadGroup</h2>
 </td>
 </tr>
 <tr id="WorkloadGroup-template">
-<td><code>template</code></td>
+<td><code><a href="#WorkloadGroup-template">template</a></code></td>
 <td><code><a href="https://istio.io/docs/reference/config/networking/workload-entry.html#WorkloadEntry">WorkloadEntry</a></code></td>
 <td>
 <p>Template to be used for the generation of <code>WorkloadEntry</code> resources that belong to this <code>WorkloadGroup</code>.
@@ -97,7 +97,7 @@ <h2 id="WorkloadGroup">WorkloadGroup</h2>
 </td>
 </tr>
 <tr id="WorkloadGroup-probe">
-<td><code>probe</code></td>
+<td><code><a href="#WorkloadGroup-probe">probe</a></code></td>
 <td><code><a href="#ReadinessProbe">ReadinessProbe</a></code></td>
 <td>
 <p><code>ReadinessProbe</code> describes the configuration the user must provide for healthchecking on their workload.
@@ -124,7 +124,7 @@ <h2 id="ReadinessProbe">ReadinessProbe</h2>
 </thead>
 <tbody>
 <tr id="ReadinessProbe-initial_delay_seconds">
-<td><code>initialDelaySeconds</code></td>
+<td><code><a href="#ReadinessProbe-initial_delay_seconds">initialDelaySeconds</a></code></td>
 <td><code>int32</code></td>
 <td>
 <p>Number of seconds after the container has started before readiness probes are initiated.</p>
@@ -135,7 +135,7 @@ <h2 id="ReadinessProbe">ReadinessProbe</h2>
 </td>
 </tr>
 <tr id="ReadinessProbe-timeout_seconds">
-<td><code>timeoutSeconds</code></td>
+<td><code><a href="#ReadinessProbe-timeout_seconds">timeoutSeconds</a></code></td>
 <td><code>int32</code></td>
 <td>
 <p>Number of seconds after which the probe times out.
@@ -147,7 +147,7 @@ <h2 id="ReadinessProbe">ReadinessProbe</h2>
 </td>
 </tr>
 <tr id="ReadinessProbe-period_seconds">
-<td><code>periodSeconds</code></td>
+<td><code><a href="#ReadinessProbe-period_seconds">periodSeconds</a></code></td>
 <td><code>int32</code></td>
 <td>
 <p>How often (in seconds) to perform the probe.
@@ -159,7 +159,7 @@ <h2 id="ReadinessProbe">ReadinessProbe</h2>
 </td>
 </tr>
 <tr id="ReadinessProbe-success_threshold">
-<td><code>successThreshold</code></td>
+<td><code><a href="#ReadinessProbe-success_threshold">successThreshold</a></code></td>
 <td><code>int32</code></td>
 <td>
 <p>Minimum consecutive successes for the probe to be considered successful after having failed.
@@ -171,7 +171,7 @@ <h2 id="ReadinessProbe">ReadinessProbe</h2>
 </td>
 </tr>
 <tr id="ReadinessProbe-failure_threshold">
-<td><code>failureThreshold</code></td>
+<td><code><a href="#ReadinessProbe-failure_threshold">failureThreshold</a></code></td>
 <td><code>int32</code></td>
 <td>
 <p>Minimum consecutive failures for the probe to be considered failed after having succeeded.
@@ -183,7 +183,7 @@ <h2 id="ReadinessProbe">ReadinessProbe</h2>
 </td>
 </tr>
 <tr id="ReadinessProbe-http_get" class="oneof oneof-start">
-<td><code>httpGet</code></td>
+<td><code><a href="#ReadinessProbe-http_get">httpGet</a></code></td>
 <td><code><a href="#HTTPHealthCheckConfig">HTTPHealthCheckConfig (oneof)</a></code></td>
 <td>
 <p><code>httpGet</code> is performed to a given endpoint
@@ -195,7 +195,7 @@ <h2 id="ReadinessProbe">ReadinessProbe</h2>
 </td>
 </tr>
 <tr id="ReadinessProbe-tcp_socket" class="oneof">
-<td><code>tcpSocket</code></td>
+<td><code><a href="#ReadinessProbe-tcp_socket">tcpSocket</a></code></td>
 <td><code><a href="#TCPHealthCheckConfig">TCPHealthCheckConfig (oneof)</a></code></td>
 <td>
 <p>Health is determined by if the proxy is able to connect.</p>
@@ -206,7 +206,7 @@ <h2 id="ReadinessProbe">ReadinessProbe</h2>
 </td>
 </tr>
 <tr id="ReadinessProbe-exec" class="oneof">
-<td><code>exec</code></td>
+<td><code><a href="#ReadinessProbe-exec">exec</a></code></td>
 <td><code><a href="#ExecHealthCheckConfig">ExecHealthCheckConfig (oneof)</a></code></td>
 <td>
 <p>Health is determined by how the command that is executed exited.</p>
@@ -232,7 +232,7 @@ <h2 id="HTTPHealthCheckConfig">HTTPHealthCheckConfig</h2>
 </thead>
 <tbody>
 <tr id="HTTPHealthCheckConfig-path">
-<td><code>path</code></td>
+<td><code><a href="#HTTPHealthCheckConfig-path">path</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Path to access on the HTTP server.</p>
@@ -243,7 +243,7 @@ <h2 id="HTTPHealthCheckConfig">HTTPHealthCheckConfig</h2>
 </td>
 </tr>
 <tr id="HTTPHealthCheckConfig-port">
-<td><code>port</code></td>
+<td><code><a href="#HTTPHealthCheckConfig-port">port</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>Port on which the endpoint lives.</p>
@@ -254,7 +254,7 @@ <h2 id="HTTPHealthCheckConfig">HTTPHealthCheckConfig</h2>
 </td>
 </tr>
 <tr id="HTTPHealthCheckConfig-host">
-<td><code>host</code></td>
+<td><code><a href="#HTTPHealthCheckConfig-host">host</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Host name to connect to, defaults to the pod IP. You probably want to set
@@ -266,7 +266,7 @@ <h2 id="HTTPHealthCheckConfig">HTTPHealthCheckConfig</h2>
 </td>
 </tr>
 <tr id="HTTPHealthCheckConfig-scheme">
-<td><code>scheme</code></td>
+<td><code><a href="#HTTPHealthCheckConfig-scheme">scheme</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>HTTP or HTTPS, defaults to HTTP</p>
@@ -277,7 +277,7 @@ <h2 id="HTTPHealthCheckConfig">HTTPHealthCheckConfig</h2>
 </td>
 </tr>
 <tr id="HTTPHealthCheckConfig-http_headers">
-<td><code>httpHeaders</code></td>
+<td><code><a href="#HTTPHealthCheckConfig-http_headers">httpHeaders</a></code></td>
 <td><code><a href="#HTTPHeader">HTTPHeader[]</a></code></td>
 <td>
 <p>Headers the proxy will pass on to make the request.
@@ -304,7 +304,7 @@ <h2 id="HTTPHeader">HTTPHeader</h2>
 </thead>
 <tbody>
 <tr id="HTTPHeader-name">
-<td><code>name</code></td>
+<td><code><a href="#HTTPHeader-name">name</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>The header field name</p>
@@ -315,7 +315,7 @@ <h2 id="HTTPHeader">HTTPHeader</h2>
 </td>
 </tr>
 <tr id="HTTPHeader-value">
-<td><code>value</code></td>
+<td><code><a href="#HTTPHeader-value">value</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>The header field value</p>
@@ -341,7 +341,7 @@ <h2 id="TCPHealthCheckConfig">TCPHealthCheckConfig</h2>
 </thead>
 <tbody>
 <tr id="TCPHealthCheckConfig-host">
-<td><code>host</code></td>
+<td><code><a href="#TCPHealthCheckConfig-host">host</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Host to connect to, defaults to localhost</p>
@@ -352,7 +352,7 @@ <h2 id="TCPHealthCheckConfig">TCPHealthCheckConfig</h2>
 </td>
 </tr>
 <tr id="TCPHealthCheckConfig-port">
-<td><code>port</code></td>
+<td><code><a href="#TCPHealthCheckConfig-port">port</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>Port of host</p>
@@ -378,7 +378,7 @@ <h2 id="ExecHealthCheckConfig">ExecHealthCheckConfig</h2>
 </thead>
 <tbody>
 <tr id="ExecHealthCheckConfig-command">
-<td><code>command</code></td>
+<td><code><a href="#ExecHealthCheckConfig-command">command</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>Command to run. Exit status of 0 is treated as live/healthy and non-zero is unhealthy.</p>
@@ -407,7 +407,7 @@ <h2 id="WorkloadGroup-ObjectMeta">WorkloadGroup.ObjectMeta</h2>
 </thead>
 <tbody>
 <tr id="WorkloadGroup-ObjectMeta-labels">
-<td><code>labels</code></td>
+<td><code><a href="#WorkloadGroup-ObjectMeta-labels">labels</a></code></td>
 <td><code>map&lt;string,&nbsp;string&gt;</code></td>
 <td>
 <p>Labels to attach</p>
@@ -418,7 +418,7 @@ <h2 id="WorkloadGroup-ObjectMeta">WorkloadGroup.ObjectMeta</h2>
 </td>
 </tr>
 <tr id="WorkloadGroup-ObjectMeta-annotations">
-<td><code>annotations</code></td>
+<td><code><a href="#WorkloadGroup-ObjectMeta-annotations">annotations</a></code></td>
 <td><code>map&lt;string,&nbsp;string&gt;</code></td>
 <td>
 <p>Annotations to attach</p>
diff --git a/networking/v1beta1/proxy_config.pb.go b/networking/v1beta1/proxy_config.pb.go
index c0f9618061..74644c28f3 100644
--- a/networking/v1beta1/proxy_config.pb.go
+++ b/networking/v1beta1/proxy_config.pb.go
@@ -81,6 +81,17 @@
 //     imageType: debug
 // ```
 //
+// To preserve the header case for HTTP 1.x requests, set the `preserveCase` field on the `ProxyConfig` resource:
+// ```yaml
+// apiVersion: networking.istio.io/v1beta1
+// kind: ProxyConfig
+// metadata:
+//   name: my-ns-proxyconfig
+//   namespace: user-namespace
+// spec:
+//   preserveCase: true
+// ```
+//
 // If a `ProxyConfig` CR is defined that matches a workload it will merge with its `proxy.istio.io/config` annotation if present,
 // with the CR taking precedence over the annotation for overlapping fields. Similarly, if a mesh wide `ProxyConfig` CR is defined and
 // `meshConfig.DefaultConfig` is set, the two resources will be merged with the CR taking precedence for overlapping fields.
@@ -144,6 +155,16 @@ type ProxyConfig struct {
 	EnvironmentVariables map[string]string `protobuf:"bytes,3,rep,name=environment_variables,json=environmentVariables,proto3" json:"environment_variables,omitempty" protobuf_key:"bytes,1,opt,name=key,proto3" protobuf_val:"bytes,2,opt,name=value,proto3"`
 	// Specifies the details of the proxy image.
 	Image *ProxyImage `protobuf:"bytes,4,opt,name=image,proto3" json:"image,omitempty"`
+	// When true, the original case of HTTP/1.x headers will be preserved
+	// as they pass through the proxy, rather than normalizing them to lowercase.
+	// This field is particularly useful for applications that require case-sensitive
+	// headers for interoperability with downstream systems or APIs that expect specific
+	// casing.
+	// The preserve_case option only applies to HTTP/1.x traffic, as HTTP/2 requires all headers
+	// to be lowercase per the protocol specification. Envoy will ignore this field for HTTP/2
+	// requests and automatically normalize headers to lowercase, ensuring compliance with HTTP/2
+	// standards.
+	PreserveCase bool `protobuf:"varint,5,opt,name=preserve_case,json=preserveCase,proto3" json:"preserve_case,omitempty"`
 }
 
 func (x *ProxyConfig) Reset() {
@@ -204,6 +225,13 @@ func (x *ProxyConfig) GetImage() *ProxyImage {
 	return nil
 }
 
+func (x *ProxyConfig) GetPreserveCase() bool {
+	if x != nil {
+		return x.PreserveCase
+	}
+	return false
+}
+
 // The following values are used to construct proxy image url.
 // format: `${hub}/${image_name}/${tag}-${image_type}`,
 // example: `docker.io/istio/proxyv2:1.11.1` or `docker.io/istio/proxyv2:1.11.1-distroless`.
@@ -267,7 +295,7 @@ var file_networking_v1beta1_proxy_config_proto_rawDesc = []byte{
 	0x31, 0x1a, 0x1e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2f, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62,
 	0x75, 0x66, 0x2f, 0x77, 0x72, 0x61, 0x70, 0x70, 0x65, 0x72, 0x73, 0x2e, 0x70, 0x72, 0x6f, 0x74,
 	0x6f, 0x1a, 0x1b, 0x74, 0x79, 0x70, 0x65, 0x2f, 0x76, 0x31, 0x62, 0x65, 0x74, 0x61, 0x31, 0x2f,
-	0x73, 0x65, 0x6c, 0x65, 0x63, 0x74, 0x6f, 0x72, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x22, 0x89,
+	0x73, 0x65, 0x6c, 0x65, 0x63, 0x74, 0x6f, 0x72, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x22, 0xae,
 	0x03, 0x0a, 0x0b, 0x50, 0x72, 0x6f, 0x78, 0x79, 0x43, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x12, 0x40,
 	0x0a, 0x08, 0x73, 0x65, 0x6c, 0x65, 0x63, 0x74, 0x6f, 0x72, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b,
 	0x32, 0x24, 0x2e, 0x69, 0x73, 0x74, 0x69, 0x6f, 0x2e, 0x74, 0x79, 0x70, 0x65, 0x2e, 0x76, 0x31,
@@ -288,17 +316,19 @@ var file_networking_v1beta1_proxy_config_proto_rawDesc = []byte{
 	0x20, 0x01, 0x28, 0x0b, 0x32, 0x24, 0x2e, 0x69, 0x73, 0x74, 0x69, 0x6f, 0x2e, 0x6e, 0x65, 0x74,
 	0x77, 0x6f, 0x72, 0x6b, 0x69, 0x6e, 0x67, 0x2e, 0x76, 0x31, 0x62, 0x65, 0x74, 0x61, 0x31, 0x2e,
 	0x50, 0x72, 0x6f, 0x78, 0x79, 0x49, 0x6d, 0x61, 0x67, 0x65, 0x52, 0x05, 0x69, 0x6d, 0x61, 0x67,
-	0x65, 0x1a, 0x47, 0x0a, 0x19, 0x45, 0x6e, 0x76, 0x69, 0x72, 0x6f, 0x6e, 0x6d, 0x65, 0x6e, 0x74,
-	0x56, 0x61, 0x72, 0x69, 0x61, 0x62, 0x6c, 0x65, 0x73, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x12, 0x10,
-	0x0a, 0x03, 0x6b, 0x65, 0x79, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x03, 0x6b, 0x65, 0x79,
-	0x12, 0x14, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52,
-	0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x3a, 0x02, 0x38, 0x01, 0x22, 0x2b, 0x0a, 0x0a, 0x50, 0x72,
-	0x6f, 0x78, 0x79, 0x49, 0x6d, 0x61, 0x67, 0x65, 0x12, 0x1d, 0x0a, 0x0a, 0x69, 0x6d, 0x61, 0x67,
-	0x65, 0x5f, 0x74, 0x79, 0x70, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x09, 0x69, 0x6d,
-	0x61, 0x67, 0x65, 0x54, 0x79, 0x70, 0x65, 0x42, 0x21, 0x5a, 0x1f, 0x69, 0x73, 0x74, 0x69, 0x6f,
-	0x2e, 0x69, 0x6f, 0x2f, 0x61, 0x70, 0x69, 0x2f, 0x6e, 0x65, 0x74, 0x77, 0x6f, 0x72, 0x6b, 0x69,
-	0x6e, 0x67, 0x2f, 0x76, 0x31, 0x62, 0x65, 0x74, 0x61, 0x31, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74,
-	0x6f, 0x33,
+	0x65, 0x12, 0x23, 0x0a, 0x0d, 0x70, 0x72, 0x65, 0x73, 0x65, 0x72, 0x76, 0x65, 0x5f, 0x63, 0x61,
+	0x73, 0x65, 0x18, 0x05, 0x20, 0x01, 0x28, 0x08, 0x52, 0x0c, 0x70, 0x72, 0x65, 0x73, 0x65, 0x72,
+	0x76, 0x65, 0x43, 0x61, 0x73, 0x65, 0x1a, 0x47, 0x0a, 0x19, 0x45, 0x6e, 0x76, 0x69, 0x72, 0x6f,
+	0x6e, 0x6d, 0x65, 0x6e, 0x74, 0x56, 0x61, 0x72, 0x69, 0x61, 0x62, 0x6c, 0x65, 0x73, 0x45, 0x6e,
+	0x74, 0x72, 0x79, 0x12, 0x10, 0x0a, 0x03, 0x6b, 0x65, 0x79, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09,
+	0x52, 0x03, 0x6b, 0x65, 0x79, 0x12, 0x14, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x02,
+	0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x3a, 0x02, 0x38, 0x01, 0x22,
+	0x2b, 0x0a, 0x0a, 0x50, 0x72, 0x6f, 0x78, 0x79, 0x49, 0x6d, 0x61, 0x67, 0x65, 0x12, 0x1d, 0x0a,
+	0x0a, 0x69, 0x6d, 0x61, 0x67, 0x65, 0x5f, 0x74, 0x79, 0x70, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28,
+	0x09, 0x52, 0x09, 0x69, 0x6d, 0x61, 0x67, 0x65, 0x54, 0x79, 0x70, 0x65, 0x42, 0x21, 0x5a, 0x1f,
+	0x69, 0x73, 0x74, 0x69, 0x6f, 0x2e, 0x69, 0x6f, 0x2f, 0x61, 0x70, 0x69, 0x2f, 0x6e, 0x65, 0x74,
+	0x77, 0x6f, 0x72, 0x6b, 0x69, 0x6e, 0x67, 0x2f, 0x76, 0x31, 0x62, 0x65, 0x74, 0x61, 0x31, 0x62,
+	0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
 }
 
 var (
diff --git a/networking/v1beta1/proxy_config.pb.html b/networking/v1beta1/proxy_config.pb.html
index 353f56db73..3a24e04e09 100644
--- a/networking/v1beta1/proxy_config.pb.html
+++ b/networking/v1beta1/proxy_config.pb.html
@@ -51,6 +51,15 @@
   image:
     imageType: debug
 </code></pre>
+<p>To preserve the header case for HTTP 1.x requests, set the <code>preserveCase</code> field on the <code>ProxyConfig</code> resource:</p>
+<pre><code class="language-yaml">apiVersion: networking.istio.io/v1beta1
+kind: ProxyConfig
+metadata:
+  name: my-ns-proxyconfig
+  namespace: user-namespace
+spec:
+  preserveCase: true
+</code></pre>
 <p>If a <code>ProxyConfig</code> CR is defined that matches a workload it will merge with its <code>proxy.istio.io/config</code> annotation if present,
 with the CR taking precedence over the annotation for overlapping fields. Similarly, if a mesh wide <code>ProxyConfig</code> CR is defined and
 <code>meshConfig.DefaultConfig</code> is set, the two resources will be merged with the CR taking precedence for overlapping fields.</p>
@@ -70,7 +79,7 @@ <h2 id="ProxyConfig">ProxyConfig</h2>
 </thead>
 <tbody>
 <tr id="ProxyConfig-selector">
-<td><code>selector</code></td>
+<td><code><a href="#ProxyConfig-selector">selector</a></code></td>
 <td><code><a href="https://istio.io/docs/reference/config/type/workload-selector.html#WorkloadSelector">WorkloadSelector</a></code></td>
 <td>
 <p>Optional. Selectors specify the set of pods/VMs on which this <code>ProxyConfig</code> resource should be applied.
@@ -82,7 +91,7 @@ <h2 id="ProxyConfig">ProxyConfig</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-concurrency">
-<td><code>concurrency</code></td>
+<td><code><a href="#ProxyConfig-concurrency">concurrency</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#int32value">Int32Value</a></code></td>
 <td>
 <p>The number of worker threads to run.
@@ -95,7 +104,7 @@ <h2 id="ProxyConfig">ProxyConfig</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-environment_variables">
-<td><code>environmentVariables</code></td>
+<td><code><a href="#ProxyConfig-environment_variables">environmentVariables</a></code></td>
 <td><code>map&lt;string,&nbsp;string&gt;</code></td>
 <td>
 <p>Additional environment variables for the proxy.
@@ -107,11 +116,30 @@ <h2 id="ProxyConfig">ProxyConfig</h2>
 </td>
 </tr>
 <tr id="ProxyConfig-image">
-<td><code>image</code></td>
+<td><code><a href="#ProxyConfig-image">image</a></code></td>
 <td><code><a href="#ProxyImage">ProxyImage</a></code></td>
 <td>
 <p>Specifies the details of the proxy image.</p>
 
+</td>
+<td>
+No
+</td>
+</tr>
+<tr id="ProxyConfig-preserve_case">
+<td><code><a href="#ProxyConfig-preserve_case">preserveCase</a></code></td>
+<td><code>bool</code></td>
+<td>
+<p>When true, the original case of HTTP/1.x headers will be preserved
+as they pass through the proxy, rather than normalizing them to lowercase.
+This field is particularly useful for applications that require case-sensitive
+headers for interoperability with downstream systems or APIs that expect specific
+casing.
+The preserve_case option only applies to HTTP/1.x traffic, as HTTP/2 requires all headers
+to be lowercase per the protocol specification. Envoy will ignore this field for HTTP/2
+requests and automatically normalize headers to lowercase, ensuring compliance with HTTP/2
+standards.</p>
+
 </td>
 <td>
 No
@@ -138,7 +166,7 @@ <h2 id="ProxyImage">ProxyImage</h2>
 </thead>
 <tbody>
 <tr id="ProxyImage-image_type">
-<td><code>imageType</code></td>
+<td><code><a href="#ProxyImage-image_type">imageType</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>The image type of the image.
diff --git a/networking/v1beta1/proxy_config.proto b/networking/v1beta1/proxy_config.proto
index 6b6e5a8a0c..6dccafd7c3 100644
--- a/networking/v1beta1/proxy_config.proto
+++ b/networking/v1beta1/proxy_config.proto
@@ -80,6 +80,17 @@ import "type/v1beta1/selector.proto";
 //     imageType: debug
 // ```
 //
+// To preserve the header case for HTTP 1.x requests, set the `preserveCase` field on the `ProxyConfig` resource:
+// ```yaml
+// apiVersion: networking.istio.io/v1beta1
+// kind: ProxyConfig
+// metadata:
+//   name: my-ns-proxyconfig
+//   namespace: user-namespace
+// spec:
+//   preserveCase: true
+// ```
+//
 // If a `ProxyConfig` CR is defined that matches a workload it will merge with its `proxy.istio.io/config` annotation if present,
 // with the CR taking precedence over the annotation for overlapping fields. Similarly, if a mesh wide `ProxyConfig` CR is defined and
 // `meshConfig.DefaultConfig` is set, the two resources will be merged with the CR taking precedence for overlapping fields.
@@ -127,6 +138,17 @@ message ProxyConfig {
 
   // Specifies the details of the proxy image.
   ProxyImage image = 4;
+
+  // When true, the original case of HTTP/1.x headers will be preserved
+  // as they pass through the proxy, rather than normalizing them to lowercase.
+  // This field is particularly useful for applications that require case-sensitive 
+  // headers for interoperability with downstream systems or APIs that expect specific 
+  // casing.
+  // The preserve_case option only applies to HTTP/1.x traffic, as HTTP/2 requires all headers 
+  // to be lowercase per the protocol specification. Envoy will ignore this field for HTTP/2 
+  // requests and automatically normalize headers to lowercase, ensuring compliance with HTTP/2 
+  // standards. 
+  bool preserve_case = 5;
 }
 
 // The following values are used to construct proxy image url.
@@ -139,4 +161,4 @@ message ProxyImage {
   // Other values are allowed if those image types (example: centos) are published to the specified hub.
   // supported values: default, debug, distroless.
   string image_type = 1;
-}
+}
\ No newline at end of file
diff --git a/releasenotes/notes/preserve-header-case.yaml b/releasenotes/notes/preserve-header-case.yaml
new file mode 100644
index 0000000000..1b49a975bd
--- /dev/null
+++ b/releasenotes/notes/preserve-header-case.yaml
@@ -0,0 +1,8 @@
+apiVersion: release-notes/v2
+kind: feature
+area: traffic-management
+issue:
+  - https://github.com/istio/istio/issues/53680
+releaseNotes:
+  - |
+    **Added** a feature to preserve the original case of HTTP/1.x headers.
\ No newline at end of file
diff --git a/security/v1alpha1/ca.pb.html b/security/v1alpha1/ca.pb.html
index 4854efdfd5..93ed49648c 100644
--- a/security/v1alpha1/ca.pb.html
+++ b/security/v1alpha1/ca.pb.html
@@ -37,7 +37,7 @@ <h3 id="IstioCertificateRequest">IstioCertificateRequest</h3>
 </thead>
 <tbody>
 <tr id="IstioCertificateRequest-csr">
-<td><code>csr</code></td>
+<td><code><a href="#IstioCertificateRequest-csr">csr</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>PEM-encoded certificate request.
@@ -50,7 +50,7 @@ <h3 id="IstioCertificateRequest">IstioCertificateRequest</h3>
 </td>
 </tr>
 <tr id="IstioCertificateRequest-validity_duration">
-<td><code>validityDuration</code></td>
+<td><code><a href="#IstioCertificateRequest-validity_duration">validityDuration</a></code></td>
 <td><code>int64</code></td>
 <td>
 <p>Optional: requested certificate validity period, in seconds.</p>
@@ -78,7 +78,7 @@ <h3 id="IstioCertificateResponse">IstioCertificateResponse</h3>
 </thead>
 <tbody>
 <tr id="IstioCertificateResponse-cert_chain">
-<td><code>certChain</code></td>
+<td><code><a href="#IstioCertificateResponse-cert_chain">certChain</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>PEM-encoded certificate chain.
diff --git a/security/v1beta1/authorization_policy.pb.html b/security/v1beta1/authorization_policy.pb.html
index e72d57260c..555312211b 100644
--- a/security/v1beta1/authorization_policy.pb.html
+++ b/security/v1beta1/authorization_policy.pb.html
@@ -209,7 +209,7 @@ <h2 id="AuthorizationPolicy">AuthorizationPolicy</h2>
 </thead>
 <tbody>
 <tr id="AuthorizationPolicy-selector">
-<td><code>selector</code></td>
+<td><code><a href="#AuthorizationPolicy-selector">selector</a></code></td>
 <td><code><a href="https://istio.io/docs/reference/config/type/workload-selector.html#WorkloadSelector">WorkloadSelector</a></code></td>
 <td>
 <p>Optional. The selector decides where to apply the authorization policy. The selector will match with workloads
@@ -224,7 +224,7 @@ <h2 id="AuthorizationPolicy">AuthorizationPolicy</h2>
 </td>
 </tr>
 <tr id="AuthorizationPolicy-targetRefs">
-<td><code>targetRefs</code></td>
+<td><code><a href="#AuthorizationPolicy-targetRefs">targetRefs</a></code></td>
 <td><code><a href="https://istio.io/docs/reference/config/type/workload-selector.html#PolicyTargetReference">PolicyTargetReference[]</a></code></td>
 <td>
 <p>Optional. The targetRefs specifies a list of resources the policy should be
@@ -249,7 +249,7 @@ <h2 id="AuthorizationPolicy">AuthorizationPolicy</h2>
 </td>
 </tr>
 <tr id="AuthorizationPolicy-rules">
-<td><code>rules</code></td>
+<td><code><a href="#AuthorizationPolicy-rules">rules</a></code></td>
 <td><code><a href="#Rule">Rule[]</a></code></td>
 <td>
 <p>Optional. A list of rules to match the request. A match occurs when at least one rule matches the request.</p>
@@ -262,7 +262,7 @@ <h2 id="AuthorizationPolicy">AuthorizationPolicy</h2>
 </td>
 </tr>
 <tr id="AuthorizationPolicy-action">
-<td><code>action</code></td>
+<td><code><a href="#AuthorizationPolicy-action">action</a></code></td>
 <td><code><a href="#AuthorizationPolicy-Action">Action</a></code></td>
 <td>
 <p>Optional. The action to take if the request is matched with the rules. Default is ALLOW if not specified.</p>
@@ -273,7 +273,7 @@ <h2 id="AuthorizationPolicy">AuthorizationPolicy</h2>
 </td>
 </tr>
 <tr id="AuthorizationPolicy-provider" class="oneof oneof-start">
-<td><code>provider</code></td>
+<td><code><a href="#AuthorizationPolicy-provider">provider</a></code></td>
 <td><code><a href="#AuthorizationPolicy-ExtensionProvider">ExtensionProvider (oneof)</a></code></td>
 <td>
 <p>Specifies detailed configuration of the CUSTOM action. Must be used only with CUSTOM action.</p>
@@ -310,7 +310,7 @@ <h2 id="Rule">Rule</h2>
 </thead>
 <tbody>
 <tr id="Rule-from">
-<td><code>from</code></td>
+<td><code><a href="#Rule-from">from</a></code></td>
 <td><code><a href="#Rule-From">From[]</a></code></td>
 <td>
 <p>Optional. <code>from</code> specifies the source of a request.</p>
@@ -322,7 +322,7 @@ <h2 id="Rule">Rule</h2>
 </td>
 </tr>
 <tr id="Rule-to">
-<td><code>to</code></td>
+<td><code><a href="#Rule-to">to</a></code></td>
 <td><code><a href="#Rule-To">To[]</a></code></td>
 <td>
 <p>Optional. <code>to</code> specifies the operation of a request.</p>
@@ -334,7 +334,7 @@ <h2 id="Rule">Rule</h2>
 </td>
 </tr>
 <tr id="Rule-when">
-<td><code>when</code></td>
+<td><code><a href="#Rule-when">when</a></code></td>
 <td><code><a href="#Condition">Condition[]</a></code></td>
 <td>
 <p>Optional. <code>when</code> specifies a list of additional conditions of a request.</p>
@@ -370,7 +370,7 @@ <h2 id="Source">Source</h2>
 </thead>
 <tbody>
 <tr id="Source-principals">
-<td><code>principals</code></td>
+<td><code><a href="#Source-principals">principals</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>Optional. A list of peer identities derived from the peer certificate. The peer identity is in the format of
@@ -384,7 +384,7 @@ <h2 id="Source">Source</h2>
 </td>
 </tr>
 <tr id="Source-not_principals">
-<td><code>notPrincipals</code></td>
+<td><code><a href="#Source-not_principals">notPrincipals</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>Optional. A list of negative match of peer identities.</p>
@@ -395,7 +395,7 @@ <h2 id="Source">Source</h2>
 </td>
 </tr>
 <tr id="Source-request_principals">
-<td><code>requestPrincipals</code></td>
+<td><code><a href="#Source-request_principals">requestPrincipals</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>Optional. A list of request identities derived from the JWT. The request identity is in the format of
@@ -409,7 +409,7 @@ <h2 id="Source">Source</h2>
 </td>
 </tr>
 <tr id="Source-not_request_principals">
-<td><code>notRequestPrincipals</code></td>
+<td><code><a href="#Source-not_request_principals">notRequestPrincipals</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>Optional. A list of negative match of request identities.</p>
@@ -420,7 +420,7 @@ <h2 id="Source">Source</h2>
 </td>
 </tr>
 <tr id="Source-namespaces">
-<td><code>namespaces</code></td>
+<td><code><a href="#Source-namespaces">namespaces</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>Optional. A list of namespaces derived from the peer certificate.
@@ -433,7 +433,7 @@ <h2 id="Source">Source</h2>
 </td>
 </tr>
 <tr id="Source-not_namespaces">
-<td><code>notNamespaces</code></td>
+<td><code><a href="#Source-not_namespaces">notNamespaces</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>Optional. A list of negative match of namespaces.</p>
@@ -444,7 +444,7 @@ <h2 id="Source">Source</h2>
 </td>
 </tr>
 <tr id="Source-ip_blocks">
-<td><code>ipBlocks</code></td>
+<td><code><a href="#Source-ip_blocks">ipBlocks</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>Optional. A list of IP blocks, populated from the source address of the IP packet. Single IP (e.g. <code>203.0.113.4</code>) and
@@ -457,7 +457,7 @@ <h2 id="Source">Source</h2>
 </td>
 </tr>
 <tr id="Source-not_ip_blocks">
-<td><code>notIpBlocks</code></td>
+<td><code><a href="#Source-not_ip_blocks">notIpBlocks</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>Optional. A list of negative match of IP blocks.</p>
@@ -468,7 +468,7 @@ <h2 id="Source">Source</h2>
 </td>
 </tr>
 <tr id="Source-remote_ip_blocks">
-<td><code>remoteIpBlocks</code></td>
+<td><code><a href="#Source-remote_ip_blocks">remoteIpBlocks</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>Optional. A list of IP blocks, populated from <code>X-Forwarded-For</code> header or proxy protocol.
@@ -485,7 +485,7 @@ <h2 id="Source">Source</h2>
 </td>
 </tr>
 <tr id="Source-not_remote_ip_blocks">
-<td><code>notRemoteIpBlocks</code></td>
+<td><code><a href="#Source-not_remote_ip_blocks">notRemoteIpBlocks</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>Optional. A list of negative match of remote IP blocks.</p>
@@ -520,7 +520,7 @@ <h2 id="Operation">Operation</h2>
 </thead>
 <tbody>
 <tr id="Operation-hosts">
-<td><code>hosts</code></td>
+<td><code><a href="#Operation-hosts">hosts</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>Optional. A list of hosts as specified in the HTTP request. The match is case-insensitive.
@@ -534,7 +534,7 @@ <h2 id="Operation">Operation</h2>
 </td>
 </tr>
 <tr id="Operation-not_hosts">
-<td><code>notHosts</code></td>
+<td><code><a href="#Operation-not_hosts">notHosts</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>Optional. A list of negative match of hosts as specified in the HTTP request. The match is case-insensitive.</p>
@@ -545,7 +545,7 @@ <h2 id="Operation">Operation</h2>
 </td>
 </tr>
 <tr id="Operation-ports">
-<td><code>ports</code></td>
+<td><code><a href="#Operation-ports">ports</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>Optional. A list of ports as specified in the connection.</p>
@@ -557,7 +557,7 @@ <h2 id="Operation">Operation</h2>
 </td>
 </tr>
 <tr id="Operation-not_ports">
-<td><code>notPorts</code></td>
+<td><code><a href="#Operation-not_ports">notPorts</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>Optional. A list of negative match of ports as specified in the connection.</p>
@@ -568,7 +568,7 @@ <h2 id="Operation">Operation</h2>
 </td>
 </tr>
 <tr id="Operation-methods">
-<td><code>methods</code></td>
+<td><code><a href="#Operation-methods">methods</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>Optional. A list of methods as specified in the HTTP request.
@@ -581,7 +581,7 @@ <h2 id="Operation">Operation</h2>
 </td>
 </tr>
 <tr id="Operation-not_methods">
-<td><code>notMethods</code></td>
+<td><code><a href="#Operation-not_methods">notMethods</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>Optional. A list of negative match of methods as specified in the HTTP request.</p>
@@ -592,7 +592,7 @@ <h2 id="Operation">Operation</h2>
 </td>
 </tr>
 <tr id="Operation-paths">
-<td><code>paths</code></td>
+<td><code><a href="#Operation-paths">paths</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>Optional. A list of paths as specified in the HTTP request. See the <a href="https://istio.io/latest/docs/reference/config/security/normalization/">Authorization Policy Normalization</a>
@@ -622,7 +622,7 @@ <h2 id="Operation">Operation</h2>
 </td>
 </tr>
 <tr id="Operation-not_paths">
-<td><code>notPaths</code></td>
+<td><code><a href="#Operation-not_paths">notPaths</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>Optional. A list of negative match of paths.</p>
@@ -650,7 +650,7 @@ <h2 id="Condition">Condition</h2>
 </thead>
 <tbody>
 <tr id="Condition-key">
-<td><code>key</code></td>
+<td><code><a href="#Condition-key">key</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>The name of an Istio attribute.
@@ -662,7 +662,7 @@ <h2 id="Condition">Condition</h2>
 </td>
 </tr>
 <tr id="Condition-values">
-<td><code>values</code></td>
+<td><code><a href="#Condition-values">values</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>Optional. A list of allowed values for the attribute.
@@ -674,7 +674,7 @@ <h2 id="Condition">Condition</h2>
 </td>
 </tr>
 <tr id="Condition-not_values">
-<td><code>notValues</code></td>
+<td><code><a href="#Condition-not_values">notValues</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>Optional. A list of negative match of values for the attribute.
@@ -701,7 +701,7 @@ <h2 id="AuthorizationPolicy-ExtensionProvider">AuthorizationPolicy.ExtensionProv
 </thead>
 <tbody>
 <tr id="AuthorizationPolicy-ExtensionProvider-name">
-<td><code>name</code></td>
+<td><code><a href="#AuthorizationPolicy-ExtensionProvider-name">name</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Specifies the name of the extension provider. The list of available providers is defined in the MeshConfig.
@@ -730,7 +730,7 @@ <h2 id="Rule-From">Rule.From</h2>
 </thead>
 <tbody>
 <tr id="Rule-From-source">
-<td><code>source</code></td>
+<td><code><a href="#Rule-From-source">source</a></code></td>
 <td><code><a href="#Source">Source</a></code></td>
 <td>
 <p>Source specifies the source of a request.</p>
@@ -758,7 +758,7 @@ <h2 id="Rule-To">Rule.To</h2>
 </thead>
 <tbody>
 <tr id="Rule-To-operation">
-<td><code>operation</code></td>
+<td><code><a href="#Rule-To-operation">operation</a></code></td>
 <td><code><a href="#Operation">Operation</a></code></td>
 <td>
 <p>Operation specifies the operation of a request.</p>
@@ -784,28 +784,28 @@ <h2 id="AuthorizationPolicy-Action">AuthorizationPolicy.Action</h2>
 </thead>
 <tbody>
 <tr id="AuthorizationPolicy-Action-ALLOW">
-<td><code>ALLOW</code></td>
+<td><code><a href="#AuthorizationPolicy-Action-ALLOW">ALLOW</a></code></td>
 <td>
 <p>Allow a request only if it matches the rules. This is the default type.</p>
 
 </td>
 </tr>
 <tr id="AuthorizationPolicy-Action-DENY">
-<td><code>DENY</code></td>
+<td><code><a href="#AuthorizationPolicy-Action-DENY">DENY</a></code></td>
 <td>
 <p>Deny a request if it matches any of the rules.</p>
 
 </td>
 </tr>
 <tr id="AuthorizationPolicy-Action-AUDIT">
-<td><code>AUDIT</code></td>
+<td><code><a href="#AuthorizationPolicy-Action-AUDIT">AUDIT</a></code></td>
 <td>
 <p>Audit a request if it matches any of the rules.</p>
 
 </td>
 </tr>
 <tr id="AuthorizationPolicy-Action-CUSTOM">
-<td><code>CUSTOM</code></td>
+<td><code><a href="#AuthorizationPolicy-Action-CUSTOM">CUSTOM</a></code></td>
 <td>
 <p>The CUSTOM action allows an extension to handle the user request if the matching rules evaluate to true.
 The extension is evaluated independently and before the native ALLOW and DENY actions. When used together, A request
diff --git a/security/v1beta1/peer_authentication.pb.html b/security/v1beta1/peer_authentication.pb.html
index 7859bf03c7..7da31505e0 100644
--- a/security/v1beta1/peer_authentication.pb.html
+++ b/security/v1beta1/peer_authentication.pb.html
@@ -99,7 +99,7 @@ <h2 id="PeerAuthentication">PeerAuthentication</h2>
 </thead>
 <tbody>
 <tr id="PeerAuthentication-selector">
-<td><code>selector</code></td>
+<td><code><a href="#PeerAuthentication-selector">selector</a></code></td>
 <td><code><a href="https://istio.io/docs/reference/config/type/workload-selector.html#WorkloadSelector">WorkloadSelector</a></code></td>
 <td>
 <p>The selector determines the workloads to apply the PeerAuthentication on. The selector will match with workloads in the
@@ -113,7 +113,7 @@ <h2 id="PeerAuthentication">PeerAuthentication</h2>
 </td>
 </tr>
 <tr id="PeerAuthentication-mtls">
-<td><code>mtls</code></td>
+<td><code><a href="#PeerAuthentication-mtls">mtls</a></code></td>
 <td><code><a href="#PeerAuthentication-MutualTLS">MutualTLS</a></code></td>
 <td>
 <p>Mutual TLS settings for workload. If not defined, inherit from parent.</p>
@@ -124,7 +124,7 @@ <h2 id="PeerAuthentication">PeerAuthentication</h2>
 </td>
 </tr>
 <tr id="PeerAuthentication-port_level_mtls">
-<td><code>portLevelMtls</code></td>
+<td><code><a href="#PeerAuthentication-port_level_mtls">portLevelMtls</a></code></td>
 <td><code>map&lt;uint32,&nbsp;<a href="#PeerAuthentication-MutualTLS">MutualTLS</a>&gt;</code></td>
 <td>
 <p>Port specific mutual TLS settings. These only apply when a workload selector
@@ -154,7 +154,7 @@ <h2 id="PeerAuthentication-MutualTLS">PeerAuthentication.MutualTLS</h2>
 </thead>
 <tbody>
 <tr id="PeerAuthentication-MutualTLS-mode">
-<td><code>mode</code></td>
+<td><code><a href="#PeerAuthentication-MutualTLS-mode">mode</a></code></td>
 <td><code><a href="#PeerAuthentication-MutualTLS-Mode">Mode</a></code></td>
 <td>
 <p>Defines the mTLS mode used for peer authentication.</p>
@@ -178,28 +178,28 @@ <h2 id="PeerAuthentication-MutualTLS-Mode">PeerAuthentication.MutualTLS.Mode</h2
 </thead>
 <tbody>
 <tr id="PeerAuthentication-MutualTLS-Mode-UNSET">
-<td><code>UNSET</code></td>
+<td><code><a href="#PeerAuthentication-MutualTLS-Mode-UNSET">UNSET</a></code></td>
 <td>
 <p>Inherit from parent, if has one. Otherwise treated as <code>PERMISSIVE</code>.</p>
 
 </td>
 </tr>
 <tr id="PeerAuthentication-MutualTLS-Mode-DISABLE">
-<td><code>DISABLE</code></td>
+<td><code><a href="#PeerAuthentication-MutualTLS-Mode-DISABLE">DISABLE</a></code></td>
 <td>
 <p>Connection is not tunneled.</p>
 
 </td>
 </tr>
 <tr id="PeerAuthentication-MutualTLS-Mode-PERMISSIVE">
-<td><code>PERMISSIVE</code></td>
+<td><code><a href="#PeerAuthentication-MutualTLS-Mode-PERMISSIVE">PERMISSIVE</a></code></td>
 <td>
 <p>Connection can be either plaintext or mTLS tunnel.</p>
 
 </td>
 </tr>
 <tr id="PeerAuthentication-MutualTLS-Mode-STRICT">
-<td><code>STRICT</code></td>
+<td><code><a href="#PeerAuthentication-MutualTLS-Mode-STRICT">STRICT</a></code></td>
 <td>
 <p>Connection is an mTLS tunnel (TLS with client cert must be presented).</p>
 
diff --git a/security/v1beta1/request_authentication.pb.html b/security/v1beta1/request_authentication.pb.html
index e98e1f2ce0..a0b664c7cf 100644
--- a/security/v1beta1/request_authentication.pb.html
+++ b/security/v1beta1/request_authentication.pb.html
@@ -214,7 +214,7 @@ <h2 id="RequestAuthentication">RequestAuthentication</h2>
 </thead>
 <tbody>
 <tr id="RequestAuthentication-selector">
-<td><code>selector</code></td>
+<td><code><a href="#RequestAuthentication-selector">selector</a></code></td>
 <td><code><a href="https://istio.io/docs/reference/config/type/workload-selector.html#WorkloadSelector">WorkloadSelector</a></code></td>
 <td>
 <p>Optional. The selector decides where to apply the request authentication policy. The selector will match with workloads
@@ -229,7 +229,7 @@ <h2 id="RequestAuthentication">RequestAuthentication</h2>
 </td>
 </tr>
 <tr id="RequestAuthentication-targetRefs">
-<td><code>targetRefs</code></td>
+<td><code><a href="#RequestAuthentication-targetRefs">targetRefs</a></code></td>
 <td><code><a href="https://istio.io/docs/reference/config/type/workload-selector.html#PolicyTargetReference">PolicyTargetReference[]</a></code></td>
 <td>
 <p>Optional. The targetRefs specifies a list of resources the policy should be
@@ -254,7 +254,7 @@ <h2 id="RequestAuthentication">RequestAuthentication</h2>
 </td>
 </tr>
 <tr id="RequestAuthentication-jwt_rules">
-<td><code>jwtRules</code></td>
+<td><code><a href="#RequestAuthentication-jwt_rules">jwtRules</a></code></td>
 <td><code><a href="#JWTRule">JWTRule[]</a></code></td>
 <td>
 <p>Define the list of JWTs that can be validated at the selected workloads&rsquo; proxy. A valid token
@@ -308,7 +308,7 @@ <h2 id="JWTRule">JWTRule</h2>
 </thead>
 <tbody>
 <tr id="JWTRule-issuer">
-<td><code>issuer</code></td>
+<td><code><a href="#JWTRule-issuer">issuer</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Identifies the issuer that issued the JWT. See
@@ -323,7 +323,7 @@ <h2 id="JWTRule">JWTRule</h2>
 </td>
 </tr>
 <tr id="JWTRule-audiences">
-<td><code>audiences</code></td>
+<td><code><a href="#JWTRule-audiences">audiences</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>The list of JWT
@@ -343,7 +343,7 @@ <h2 id="JWTRule">JWTRule</h2>
 </td>
 </tr>
 <tr id="JWTRule-jwks_uri">
-<td><code>jwksUri</code></td>
+<td><code><a href="#JWTRule-jwks_uri">jwksUri</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>URL of the provider&rsquo;s public key set to validate signature of the
@@ -362,7 +362,7 @@ <h2 id="JWTRule">JWTRule</h2>
 </td>
 </tr>
 <tr id="JWTRule-jwks">
-<td><code>jwks</code></td>
+<td><code><a href="#JWTRule-jwks">jwks</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>JSON Web Key Set of public keys to validate signature of the JWT.
@@ -375,7 +375,7 @@ <h2 id="JWTRule">JWTRule</h2>
 </td>
 </tr>
 <tr id="JWTRule-from_headers">
-<td><code>fromHeaders</code></td>
+<td><code><a href="#JWTRule-from_headers">fromHeaders</a></code></td>
 <td><code><a href="#JWTHeader">JWTHeader[]</a></code></td>
 <td>
 <p>List of header locations from which JWT is expected. For example, below is the location spec
@@ -393,7 +393,7 @@ <h2 id="JWTRule">JWTRule</h2>
 </td>
 </tr>
 <tr id="JWTRule-from_params">
-<td><code>fromParams</code></td>
+<td><code><a href="#JWTRule-from_params">fromParams</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>List of query parameters from which JWT is expected. For example, if JWT is provided via query
@@ -410,7 +410,7 @@ <h2 id="JWTRule">JWTRule</h2>
 </td>
 </tr>
 <tr id="JWTRule-output_payload_to_header">
-<td><code>outputPayloadToHeader</code></td>
+<td><code><a href="#JWTRule-output_payload_to_header">outputPayloadToHeader</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>This field specifies the header name to output a successfully verified JWT payload to the
@@ -423,7 +423,7 @@ <h2 id="JWTRule">JWTRule</h2>
 </td>
 </tr>
 <tr id="JWTRule-from_cookies">
-<td><code>fromCookies</code></td>
+<td><code><a href="#JWTRule-from_cookies">fromCookies</a></code></td>
 <td><code>string[]</code></td>
 <td>
 <p>List of cookie names from which JWT is expected.	//
@@ -441,7 +441,7 @@ <h2 id="JWTRule">JWTRule</h2>
 </td>
 </tr>
 <tr id="JWTRule-forward_original_token">
-<td><code>forwardOriginalToken</code></td>
+<td><code><a href="#JWTRule-forward_original_token">forwardOriginalToken</a></code></td>
 <td><code>bool</code></td>
 <td>
 <p>If set to true, the original token will be kept for the upstream request. Default is false.</p>
@@ -452,7 +452,7 @@ <h2 id="JWTRule">JWTRule</h2>
 </td>
 </tr>
 <tr id="JWTRule-output_claim_to_headers">
-<td><code>outputClaimToHeaders</code></td>
+<td><code><a href="#JWTRule-output_claim_to_headers">outputClaimToHeaders</a></code></td>
 <td><code><a href="#ClaimToHeader">ClaimToHeader[]</a></code></td>
 <td>
 <p>This field specifies a list of operations to copy the claim to HTTP headers on a successfully verified token.
@@ -474,7 +474,7 @@ <h2 id="JWTRule">JWTRule</h2>
 </td>
 </tr>
 <tr id="JWTRule-timeout">
-<td><code>timeout</code></td>
+<td><code><a href="#JWTRule-timeout">timeout</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#duration">Duration</a></code></td>
 <td>
 <p>The maximum amount of time that the resolver, determined by the PILOT_JWT_ENABLE_REMOTE_JWKS environment variable,
@@ -503,7 +503,7 @@ <h2 id="JWTHeader">JWTHeader</h2>
 </thead>
 <tbody>
 <tr id="JWTHeader-name">
-<td><code>name</code></td>
+<td><code><a href="#JWTHeader-name">name</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>The HTTP header name.</p>
@@ -514,7 +514,7 @@ <h2 id="JWTHeader">JWTHeader</h2>
 </td>
 </tr>
 <tr id="JWTHeader-prefix">
-<td><code>prefix</code></td>
+<td><code><a href="#JWTHeader-prefix">prefix</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>The prefix that should be stripped before decoding the token.
@@ -544,7 +544,7 @@ <h2 id="ClaimToHeader">ClaimToHeader</h2>
 </thead>
 <tbody>
 <tr id="ClaimToHeader-header">
-<td><code>header</code></td>
+<td><code><a href="#ClaimToHeader-header">header</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>The name of the header to be created. The header will be overridden if it already exists in the request.</p>
@@ -555,7 +555,7 @@ <h2 id="ClaimToHeader">ClaimToHeader</h2>
 </td>
 </tr>
 <tr id="ClaimToHeader-claim">
-<td><code>claim</code></td>
+<td><code><a href="#ClaimToHeader-claim">claim</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>The name of the claim to be copied from. Only claim of type string/int/bool is supported.
diff --git a/telemetry/v1alpha1/telemetry.pb.html b/telemetry/v1alpha1/telemetry.pb.html
index 1f84f8f8ec..f78539abbf 100644
--- a/telemetry/v1alpha1/telemetry.pb.html
+++ b/telemetry/v1alpha1/telemetry.pb.html
@@ -204,7 +204,7 @@ <h2 id="Telemetry">Telemetry</h2>
 </thead>
 <tbody>
 <tr id="Telemetry-selector">
-<td><code>selector</code></td>
+<td><code><a href="#Telemetry-selector">selector</a></code></td>
 <td><code><a href="https://istio.io/docs/reference/config/type/workload-selector.html#WorkloadSelector">WorkloadSelector</a></code></td>
 <td>
 <p>Optional. The selector decides where to apply the policy.
@@ -218,7 +218,7 @@ <h2 id="Telemetry">Telemetry</h2>
 </td>
 </tr>
 <tr id="Telemetry-targetRefs">
-<td><code>targetRefs</code></td>
+<td><code><a href="#Telemetry-targetRefs">targetRefs</a></code></td>
 <td><code><a href="https://istio.io/docs/reference/config/type/workload-selector.html#PolicyTargetReference">PolicyTargetReference[]</a></code></td>
 <td>
 <p>Optional. The targetRefs specifies a list of resources the policy should be
@@ -243,7 +243,7 @@ <h2 id="Telemetry">Telemetry</h2>
 </td>
 </tr>
 <tr id="Telemetry-tracing">
-<td><code>tracing</code></td>
+<td><code><a href="#Telemetry-tracing">tracing</a></code></td>
 <td><code><a href="#Tracing">Tracing[]</a></code></td>
 <td>
 <p>Optional. Tracing configures the tracing behavior for all
@@ -255,7 +255,7 @@ <h2 id="Telemetry">Telemetry</h2>
 </td>
 </tr>
 <tr id="Telemetry-metrics">
-<td><code>metrics</code></td>
+<td><code><a href="#Telemetry-metrics">metrics</a></code></td>
 <td><code><a href="#Metrics">Metrics[]</a></code></td>
 <td>
 <p>Optional. Metrics configures the metrics behavior for all
@@ -267,7 +267,7 @@ <h2 id="Telemetry">Telemetry</h2>
 </td>
 </tr>
 <tr id="Telemetry-access_logging">
-<td><code>accessLogging</code></td>
+<td><code><a href="#Telemetry-access_logging">accessLogging</a></code></td>
 <td><code><a href="#AccessLogging">AccessLogging[]</a></code></td>
 <td>
 <p>Optional. Access logging configures the access logging behavior for all
@@ -303,7 +303,7 @@ <h2 id="Tracing">Tracing</h2>
 </thead>
 <tbody>
 <tr id="Tracing-match">
-<td><code>match</code></td>
+<td><code><a href="#Tracing-match">match</a></code></td>
 <td><code><a href="#Tracing-TracingSelector">TracingSelector</a></code></td>
 <td>
 <p>Allows tailoring of behavior to specific conditions.</p>
@@ -314,7 +314,7 @@ <h2 id="Tracing">Tracing</h2>
 </td>
 </tr>
 <tr id="Tracing-providers">
-<td><code>providers</code></td>
+<td><code><a href="#Tracing-providers">providers</a></code></td>
 <td><code><a href="#ProviderRef">ProviderRef[]</a></code></td>
 <td>
 <p>Optional. Name of provider(s) to use for span reporting. If a provider is
@@ -329,7 +329,7 @@ <h2 id="Tracing">Tracing</h2>
 </td>
 </tr>
 <tr id="Tracing-random_sampling_percentage">
-<td><code>randomSamplingPercentage</code></td>
+<td><code><a href="#Tracing-random_sampling_percentage">randomSamplingPercentage</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#doublevalue">DoubleValue</a></code></td>
 <td>
 <p>Controls the rate at which traffic will be selected for tracing if no
@@ -347,7 +347,7 @@ <h2 id="Tracing">Tracing</h2>
 </td>
 </tr>
 <tr id="Tracing-disable_span_reporting">
-<td><code>disableSpanReporting</code></td>
+<td><code><a href="#Tracing-disable_span_reporting">disableSpanReporting</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#boolvalue">BoolValue</a></code></td>
 <td>
 <p>Controls span reporting. If set to true, no spans will be reported for
@@ -360,7 +360,7 @@ <h2 id="Tracing">Tracing</h2>
 </td>
 </tr>
 <tr id="Tracing-custom_tags">
-<td><code>customTags</code></td>
+<td><code><a href="#Tracing-custom_tags">customTags</a></code></td>
 <td><code>map&lt;string,&nbsp;<a href="#Tracing-CustomTag">CustomTag</a>&gt;</code></td>
 <td>
 <p>Optional. Configures additional custom tags to the generated trace spans.</p>
@@ -371,7 +371,7 @@ <h2 id="Tracing">Tracing</h2>
 </td>
 </tr>
 <tr id="Tracing-enable_istio_tags">
-<td><code>enableIstioTags</code></td>
+<td><code><a href="#Tracing-enable_istio_tags">enableIstioTags</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#boolvalue">BoolValue</a></code></td>
 <td>
 <p>Determines whether or not trace spans generated by Envoy will include Istio specific tags.
@@ -401,7 +401,7 @@ <h2 id="ProviderRef">ProviderRef</h2>
 </thead>
 <tbody>
 <tr id="ProviderRef-name">
-<td><code>name</code></td>
+<td><code><a href="#ProviderRef-name">name</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Required. Name of Telemetry provider in <a href="https://istio.io/latest/docs/reference/config/istio.mesh.v1alpha1/#MeshConfig-ExtensionProvider">MeshConfig</a>.</p>
@@ -431,7 +431,7 @@ <h2 id="Metrics">Metrics</h2>
 </thead>
 <tbody>
 <tr id="Metrics-providers">
-<td><code>providers</code></td>
+<td><code><a href="#Metrics-providers">providers</a></code></td>
 <td><code><a href="#ProviderRef">ProviderRef[]</a></code></td>
 <td>
 <p>Optional. Name of providers to which this configuration should apply.
@@ -445,7 +445,7 @@ <h2 id="Metrics">Metrics</h2>
 </td>
 </tr>
 <tr id="Metrics-overrides">
-<td><code>overrides</code></td>
+<td><code><a href="#Metrics-overrides">overrides</a></code></td>
 <td><code><a href="#MetricsOverrides">MetricsOverrides[]</a></code></td>
 <td>
 <p>Optional. Ordered list of overrides to metrics generation behavior.</p>
@@ -468,7 +468,7 @@ <h2 id="Metrics">Metrics</h2>
 </td>
 </tr>
 <tr id="Metrics-reporting_interval">
-<td><code>reportingInterval</code></td>
+<td><code><a href="#Metrics-reporting_interval">reportingInterval</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#duration">Duration</a></code></td>
 <td>
 <p>Optional. Reporting interval allows configuration of the time between calls out to for metrics reporting.
@@ -499,7 +499,7 @@ <h2 id="MetricSelector">MetricSelector</h2>
 </thead>
 <tbody>
 <tr id="MetricSelector-metric" class="oneof oneof-start">
-<td><code>metric</code></td>
+<td><code><a href="#MetricSelector-metric">metric</a></code></td>
 <td><code><a href="#MetricSelector-IstioMetric">IstioMetric (oneof)</a></code></td>
 <td>
 <p>One of the well-known <a href="https://istio.io/latest/docs/reference/config/metrics/">Istio Standard Metrics</a>.</p>
@@ -510,7 +510,7 @@ <h2 id="MetricSelector">MetricSelector</h2>
 </td>
 </tr>
 <tr id="MetricSelector-custom_metric" class="oneof">
-<td><code>customMetric</code></td>
+<td><code><a href="#MetricSelector-custom_metric">customMetric</a></code></td>
 <td><code>string (oneof)</code></td>
 <td>
 <p>Allows free-form specification of a metric. No validation of custom
@@ -522,7 +522,7 @@ <h2 id="MetricSelector">MetricSelector</h2>
 </td>
 </tr>
 <tr id="MetricSelector-mode">
-<td><code>mode</code></td>
+<td><code><a href="#MetricSelector-mode">mode</a></code></td>
 <td><code><a href="#WorkloadMode">WorkloadMode</a></code></td>
 <td>
 <p>Controls which mode of metrics generation is selected: <code>CLIENT</code>, <code>SERVER</code>,
@@ -552,7 +552,7 @@ <h2 id="MetricsOverrides">MetricsOverrides</h2>
 </thead>
 <tbody>
 <tr id="MetricsOverrides-match">
-<td><code>match</code></td>
+<td><code><a href="#MetricsOverrides-match">match</a></code></td>
 <td><code><a href="#MetricSelector">MetricSelector</a></code></td>
 <td>
 <p>Match allows providing the scope of the override. It can be used to select
@@ -567,7 +567,7 @@ <h2 id="MetricsOverrides">MetricsOverrides</h2>
 </td>
 </tr>
 <tr id="MetricsOverrides-disabled">
-<td><code>disabled</code></td>
+<td><code><a href="#MetricsOverrides-disabled">disabled</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#boolvalue">BoolValue</a></code></td>
 <td>
 <p>Optional. Must explicitly set this to <code>true</code> to turn off metrics reporting
@@ -581,7 +581,7 @@ <h2 id="MetricsOverrides">MetricsOverrides</h2>
 </td>
 </tr>
 <tr id="MetricsOverrides-tag_overrides">
-<td><code>tagOverrides</code></td>
+<td><code><a href="#MetricsOverrides-tag_overrides">tagOverrides</a></code></td>
 <td><code>map&lt;string,&nbsp;<a href="#MetricsOverrides-TagOverride">TagOverride</a>&gt;</code></td>
 <td>
 <p>Optional. Collection of tag names and tag expressions to override in the
@@ -616,7 +616,7 @@ <h2 id="AccessLogging">AccessLogging</h2>
 </thead>
 <tbody>
 <tr id="AccessLogging-match">
-<td><code>match</code></td>
+<td><code><a href="#AccessLogging-match">match</a></code></td>
 <td><code><a href="#AccessLogging-LogSelector">LogSelector</a></code></td>
 <td>
 <p>Allows tailoring of logging behavior to specific conditions.</p>
@@ -627,7 +627,7 @@ <h2 id="AccessLogging">AccessLogging</h2>
 </td>
 </tr>
 <tr id="AccessLogging-providers">
-<td><code>providers</code></td>
+<td><code><a href="#AccessLogging-providers">providers</a></code></td>
 <td><code><a href="#ProviderRef">ProviderRef[]</a></code></td>
 <td>
 <p>Optional. Name of providers to which this configuration should apply.
@@ -640,7 +640,7 @@ <h2 id="AccessLogging">AccessLogging</h2>
 </td>
 </tr>
 <tr id="AccessLogging-disabled">
-<td><code>disabled</code></td>
+<td><code><a href="#AccessLogging-disabled">disabled</a></code></td>
 <td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#boolvalue">BoolValue</a></code></td>
 <td>
 <p>Controls logging. If set to true, no access logs will be generated for
@@ -655,7 +655,7 @@ <h2 id="AccessLogging">AccessLogging</h2>
 </td>
 </tr>
 <tr id="AccessLogging-filter">
-<td><code>filter</code></td>
+<td><code><a href="#AccessLogging-filter">filter</a></code></td>
 <td><code><a href="#AccessLogging-Filter">Filter</a></code></td>
 <td>
 <p>Optional. If specified, this filter will be used to select specific
@@ -685,7 +685,7 @@ <h2 id="Tracing-TracingSelector">Tracing.TracingSelector</h2>
 </thead>
 <tbody>
 <tr id="Tracing-TracingSelector-mode">
-<td><code>mode</code></td>
+<td><code><a href="#Tracing-TracingSelector-mode">mode</a></code></td>
 <td><code><a href="#WorkloadMode">WorkloadMode</a></code></td>
 <td>
 <p>This determines whether or not to apply the tracing configuration
@@ -719,7 +719,7 @@ <h2 id="Tracing-CustomTag">Tracing.CustomTag</h2>
 </thead>
 <tbody>
 <tr id="Tracing-CustomTag-literal" class="oneof oneof-start">
-<td><code>literal</code></td>
+<td><code><a href="#Tracing-CustomTag-literal">literal</a></code></td>
 <td><code><a href="#Tracing-Literal">Literal (oneof)</a></code></td>
 <td>
 <p>Literal adds the same, hard-coded value to each span.</p>
@@ -730,7 +730,7 @@ <h2 id="Tracing-CustomTag">Tracing.CustomTag</h2>
 </td>
 </tr>
 <tr id="Tracing-CustomTag-environment" class="oneof">
-<td><code>environment</code></td>
+<td><code><a href="#Tracing-CustomTag-environment">environment</a></code></td>
 <td><code><a href="#Tracing-Environment">Environment (oneof)</a></code></td>
 <td>
 <p>Environment adds the value of an environment variable to each span.</p>
@@ -741,7 +741,7 @@ <h2 id="Tracing-CustomTag">Tracing.CustomTag</h2>
 </td>
 </tr>
 <tr id="Tracing-CustomTag-header" class="oneof">
-<td><code>header</code></td>
+<td><code><a href="#Tracing-CustomTag-header">header</a></code></td>
 <td><code><a href="#Tracing-RequestHeader">RequestHeader (oneof)</a></code></td>
 <td>
 <p>RequestHeader adds the value of an header from the request to each
@@ -768,7 +768,7 @@ <h2 id="Tracing-Literal">Tracing.Literal</h2>
 </thead>
 <tbody>
 <tr id="Tracing-Literal-value">
-<td><code>value</code></td>
+<td><code><a href="#Tracing-Literal-value">value</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>The tag value to use.</p>
@@ -794,7 +794,7 @@ <h2 id="Tracing-Environment">Tracing.Environment</h2>
 </thead>
 <tbody>
 <tr id="Tracing-Environment-name">
-<td><code>name</code></td>
+<td><code><a href="#Tracing-Environment-name">name</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Name of the environment variable from which to extract the tag value.</p>
@@ -805,7 +805,7 @@ <h2 id="Tracing-Environment">Tracing.Environment</h2>
 </td>
 </tr>
 <tr id="Tracing-Environment-default_value">
-<td><code>defaultValue</code></td>
+<td><code><a href="#Tracing-Environment-default_value">defaultValue</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Optional. If the environment variable is not found, this value will be
@@ -832,7 +832,7 @@ <h2 id="Tracing-RequestHeader">Tracing.RequestHeader</h2>
 </thead>
 <tbody>
 <tr id="Tracing-RequestHeader-name">
-<td><code>name</code></td>
+<td><code><a href="#Tracing-RequestHeader-name">name</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Name of the header from which to extract the tag value.</p>
@@ -843,7 +843,7 @@ <h2 id="Tracing-RequestHeader">Tracing.RequestHeader</h2>
 </td>
 </tr>
 <tr id="Tracing-RequestHeader-default_value">
-<td><code>defaultValue</code></td>
+<td><code><a href="#Tracing-RequestHeader-default_value">defaultValue</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Optional. If the header is not found, this value will be
@@ -874,7 +874,7 @@ <h2 id="MetricsOverrides-TagOverride">MetricsOverrides.TagOverride</h2>
 </thead>
 <tbody>
 <tr id="MetricsOverrides-TagOverride-operation">
-<td><code>operation</code></td>
+<td><code><a href="#MetricsOverrides-TagOverride-operation">operation</a></code></td>
 <td><code><a href="#MetricsOverrides-TagOverride-Operation">Operation</a></code></td>
 <td>
 <p>Operation controls whether or not to update/add a tag, or to remove it.</p>
@@ -885,7 +885,7 @@ <h2 id="MetricsOverrides-TagOverride">MetricsOverrides.TagOverride</h2>
 </td>
 </tr>
 <tr id="MetricsOverrides-TagOverride-value">
-<td><code>value</code></td>
+<td><code><a href="#MetricsOverrides-TagOverride-value">value</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>Value is only considered if the operation is <code>UPSERT</code>.
@@ -925,7 +925,7 @@ <h2 id="AccessLogging-LogSelector">AccessLogging.LogSelector</h2>
 </thead>
 <tbody>
 <tr id="AccessLogging-LogSelector-mode">
-<td><code>mode</code></td>
+<td><code><a href="#AccessLogging-LogSelector-mode">mode</a></code></td>
 <td><code><a href="#WorkloadMode">WorkloadMode</a></code></td>
 <td>
 <p>This determines whether or not to apply the access logging configuration
@@ -954,7 +954,7 @@ <h2 id="AccessLogging-Filter">AccessLogging.Filter</h2>
 </thead>
 <tbody>
 <tr id="AccessLogging-Filter-expression">
-<td><code>expression</code></td>
+<td><code><a href="#AccessLogging-Filter-expression">expression</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>CEL expression for selecting when requests/connections should be logged.</p>
@@ -988,7 +988,7 @@ <h2 id="MetricSelector-IstioMetric">MetricSelector.IstioMetric</h2>
 </thead>
 <tbody>
 <tr id="MetricSelector-IstioMetric-ALL_METRICS">
-<td><code>ALL_METRICS</code></td>
+<td><code><a href="#MetricSelector-IstioMetric-ALL_METRICS">ALL_METRICS</a></code></td>
 <td>
 <p>Use of this enum indicates that the override should apply to all Istio
 default metrics.</p>
@@ -996,7 +996,7 @@ <h2 id="MetricSelector-IstioMetric">MetricSelector.IstioMetric</h2>
 </td>
 </tr>
 <tr id="MetricSelector-IstioMetric-REQUEST_COUNT">
-<td><code>REQUEST_COUNT</code></td>
+<td><code><a href="#MetricSelector-IstioMetric-REQUEST_COUNT">REQUEST_COUNT</a></code></td>
 <td>
 <p>Counter of requests to/from an application, generated for HTTP, HTTP/2,
 and GRPC traffic.</p>
@@ -1010,7 +1010,7 @@ <h2 id="MetricSelector-IstioMetric">MetricSelector.IstioMetric</h2>
 </td>
 </tr>
 <tr id="MetricSelector-IstioMetric-REQUEST_DURATION">
-<td><code>REQUEST_DURATION</code></td>
+<td><code><a href="#MetricSelector-IstioMetric-REQUEST_DURATION">REQUEST_DURATION</a></code></td>
 <td>
 <p>Histogram of request durations, generated for HTTP, HTTP/2, and GRPC
 traffic.</p>
@@ -1025,7 +1025,7 @@ <h2 id="MetricSelector-IstioMetric">MetricSelector.IstioMetric</h2>
 </td>
 </tr>
 <tr id="MetricSelector-IstioMetric-REQUEST_SIZE">
-<td><code>REQUEST_SIZE</code></td>
+<td><code><a href="#MetricSelector-IstioMetric-REQUEST_SIZE">REQUEST_SIZE</a></code></td>
 <td>
 <p>Histogram of request body sizes, generated for HTTP, HTTP/2, and GRPC
 traffic.</p>
@@ -1039,7 +1039,7 @@ <h2 id="MetricSelector-IstioMetric">MetricSelector.IstioMetric</h2>
 </td>
 </tr>
 <tr id="MetricSelector-IstioMetric-RESPONSE_SIZE">
-<td><code>RESPONSE_SIZE</code></td>
+<td><code><a href="#MetricSelector-IstioMetric-RESPONSE_SIZE">RESPONSE_SIZE</a></code></td>
 <td>
 <p>Histogram of response body sizes, generated for HTTP, HTTP/2, and GRPC
 traffic.</p>
@@ -1053,7 +1053,7 @@ <h2 id="MetricSelector-IstioMetric">MetricSelector.IstioMetric</h2>
 </td>
 </tr>
 <tr id="MetricSelector-IstioMetric-TCP_OPENED_CONNECTIONS">
-<td><code>TCP_OPENED_CONNECTIONS</code></td>
+<td><code><a href="#MetricSelector-IstioMetric-TCP_OPENED_CONNECTIONS">TCP_OPENED_CONNECTIONS</a></code></td>
 <td>
 <p>Counter of TCP connections opened over lifetime of workload.</p>
 <p>The Prometheus provider exports this metric as:
@@ -1067,7 +1067,7 @@ <h2 id="MetricSelector-IstioMetric">MetricSelector.IstioMetric</h2>
 </td>
 </tr>
 <tr id="MetricSelector-IstioMetric-TCP_CLOSED_CONNECTIONS">
-<td><code>TCP_CLOSED_CONNECTIONS</code></td>
+<td><code><a href="#MetricSelector-IstioMetric-TCP_CLOSED_CONNECTIONS">TCP_CLOSED_CONNECTIONS</a></code></td>
 <td>
 <p>Counter of TCP connections closed over lifetime of workload.</p>
 <p>The Prometheus provider exports this metric as:
@@ -1081,7 +1081,7 @@ <h2 id="MetricSelector-IstioMetric">MetricSelector.IstioMetric</h2>
 </td>
 </tr>
 <tr id="MetricSelector-IstioMetric-TCP_SENT_BYTES">
-<td><code>TCP_SENT_BYTES</code></td>
+<td><code><a href="#MetricSelector-IstioMetric-TCP_SENT_BYTES">TCP_SENT_BYTES</a></code></td>
 <td>
 <p>Counter of bytes sent during a response over a TCP connection.</p>
 <p>The Prometheus provider exports this metric as:
@@ -1095,7 +1095,7 @@ <h2 id="MetricSelector-IstioMetric">MetricSelector.IstioMetric</h2>
 </td>
 </tr>
 <tr id="MetricSelector-IstioMetric-TCP_RECEIVED_BYTES">
-<td><code>TCP_RECEIVED_BYTES</code></td>
+<td><code><a href="#MetricSelector-IstioMetric-TCP_RECEIVED_BYTES">TCP_RECEIVED_BYTES</a></code></td>
 <td>
 <p>Counter of bytes received during a request over a TCP connection.</p>
 <p>The Prometheus provider exports this metric as:
@@ -1109,7 +1109,7 @@ <h2 id="MetricSelector-IstioMetric">MetricSelector.IstioMetric</h2>
 </td>
 </tr>
 <tr id="MetricSelector-IstioMetric-GRPC_REQUEST_MESSAGES">
-<td><code>GRPC_REQUEST_MESSAGES</code></td>
+<td><code><a href="#MetricSelector-IstioMetric-GRPC_REQUEST_MESSAGES">GRPC_REQUEST_MESSAGES</a></code></td>
 <td>
 <p>Counter incremented for every gRPC messages sent from a client.</p>
 <p>The Prometheus provider exports this metric as:
@@ -1118,7 +1118,7 @@ <h2 id="MetricSelector-IstioMetric">MetricSelector.IstioMetric</h2>
 </td>
 </tr>
 <tr id="MetricSelector-IstioMetric-GRPC_RESPONSE_MESSAGES">
-<td><code>GRPC_RESPONSE_MESSAGES</code></td>
+<td><code><a href="#MetricSelector-IstioMetric-GRPC_RESPONSE_MESSAGES">GRPC_RESPONSE_MESSAGES</a></code></td>
 <td>
 <p>Counter incremented for every gRPC messages sent from a server.</p>
 <p>The Prometheus provider exports this metric as:
@@ -1140,7 +1140,7 @@ <h2 id="MetricsOverrides-TagOverride-Operation">MetricsOverrides.TagOverride.Ope
 </thead>
 <tbody>
 <tr id="MetricsOverrides-TagOverride-Operation-UPSERT">
-<td><code>UPSERT</code></td>
+<td><code><a href="#MetricsOverrides-TagOverride-Operation-UPSERT">UPSERT</a></code></td>
 <td>
 <p>Insert or Update the tag with the provided value expression. The
 <code>value</code> field MUST be specified if <code>UPSERT</code> is used as the operation.</p>
@@ -1148,7 +1148,7 @@ <h2 id="MetricsOverrides-TagOverride-Operation">MetricsOverrides.TagOverride.Ope
 </td>
 </tr>
 <tr id="MetricsOverrides-TagOverride-Operation-REMOVE">
-<td><code>REMOVE</code></td>
+<td><code><a href="#MetricsOverrides-TagOverride-Operation-REMOVE">REMOVE</a></code></td>
 <td>
 <p>Specifies that the tag should not be included in the metric when
 generated.</p>
@@ -1176,7 +1176,7 @@ <h2 id="WorkloadMode">WorkloadMode</h2>
 </thead>
 <tbody>
 <tr id="WorkloadMode-CLIENT_AND_SERVER">
-<td><code>CLIENT_AND_SERVER</code></td>
+<td><code><a href="#WorkloadMode-CLIENT_AND_SERVER">CLIENT_AND_SERVER</a></code></td>
 <td>
 <p>Selects for scenarios when the workload is either the
 source or destination of the network traffic.</p>
@@ -1184,7 +1184,7 @@ <h2 id="WorkloadMode">WorkloadMode</h2>
 </td>
 </tr>
 <tr id="WorkloadMode-CLIENT">
-<td><code>CLIENT</code></td>
+<td><code><a href="#WorkloadMode-CLIENT">CLIENT</a></code></td>
 <td>
 <p>Selects for scenarios when the workload is the
 source of the network traffic.</p>
@@ -1192,7 +1192,7 @@ <h2 id="WorkloadMode">WorkloadMode</h2>
 </td>
 </tr>
 <tr id="WorkloadMode-SERVER">
-<td><code>SERVER</code></td>
+<td><code><a href="#WorkloadMode-SERVER">SERVER</a></code></td>
 <td>
 <p>Selects for scenarios when the workload is the
 destination of the network traffic.</p>
diff --git a/type/v1beta1/selector.pb.html b/type/v1beta1/selector.pb.html
index 83377e6811..8c96cc3b5a 100644
--- a/type/v1beta1/selector.pb.html
+++ b/type/v1beta1/selector.pb.html
@@ -26,7 +26,7 @@ <h2 id="WorkloadSelector">WorkloadSelector</h2>
 </thead>
 <tbody>
 <tr id="WorkloadSelector-match_labels">
-<td><code>matchLabels</code></td>
+<td><code><a href="#WorkloadSelector-match_labels">matchLabels</a></code></td>
 <td><code>map&lt;string,&nbsp;string&gt;</code></td>
 <td>
 <p>One or more labels that indicate a specific set of pods/VMs
@@ -57,7 +57,7 @@ <h2 id="PortSelector">PortSelector</h2>
 </thead>
 <tbody>
 <tr id="PortSelector-number">
-<td><code>number</code></td>
+<td><code><a href="#PortSelector-number">number</a></code></td>
 <td><code>uint32</code></td>
 <td>
 <p>Port number</p>
@@ -112,7 +112,7 @@ <h2 id="PolicyTargetReference">PolicyTargetReference</h2>
 </thead>
 <tbody>
 <tr id="PolicyTargetReference-group">
-<td><code>group</code></td>
+<td><code><a href="#PolicyTargetReference-group">group</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>group is the group of the target resource.</p>
@@ -123,7 +123,7 @@ <h2 id="PolicyTargetReference">PolicyTargetReference</h2>
 </td>
 </tr>
 <tr id="PolicyTargetReference-kind">
-<td><code>kind</code></td>
+<td><code><a href="#PolicyTargetReference-kind">kind</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>kind is kind of the target resource.</p>
@@ -134,7 +134,7 @@ <h2 id="PolicyTargetReference">PolicyTargetReference</h2>
 </td>
 </tr>
 <tr id="PolicyTargetReference-name">
-<td><code>name</code></td>
+<td><code><a href="#PolicyTargetReference-name">name</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>name is the name of the target resource.</p>
@@ -145,7 +145,7 @@ <h2 id="PolicyTargetReference">PolicyTargetReference</h2>
 </td>
 </tr>
 <tr id="PolicyTargetReference-namespace">
-<td><code>namespace</code></td>
+<td><code><a href="#PolicyTargetReference-namespace">namespace</a></code></td>
 <td><code>string</code></td>
 <td>
 <p>namespace is the namespace of the referent. When unspecified, the local
@@ -177,14 +177,14 @@ <h2 id="WorkloadMode">WorkloadMode</h2>
 </thead>
 <tbody>
 <tr id="WorkloadMode-UNDEFINED">
-<td><code>UNDEFINED</code></td>
+<td><code><a href="#WorkloadMode-UNDEFINED">UNDEFINED</a></code></td>
 <td>
 <p>Default value, which will be interpreted by its own usage.</p>
 
 </td>
 </tr>
 <tr id="WorkloadMode-CLIENT">
-<td><code>CLIENT</code></td>
+<td><code><a href="#WorkloadMode-CLIENT">CLIENT</a></code></td>
 <td>
 <p>Selects for scenarios when the workload is the
 source of the network traffic. In addition,
@@ -193,7 +193,7 @@ <h2 id="WorkloadMode">WorkloadMode</h2>
 </td>
 </tr>
 <tr id="WorkloadMode-SERVER">
-<td><code>SERVER</code></td>
+<td><code><a href="#WorkloadMode-SERVER">SERVER</a></code></td>
 <td>
 <p>Selects for scenarios when the workload is the
 destination of the network traffic.</p>
@@ -201,7 +201,7 @@ <h2 id="WorkloadMode">WorkloadMode</h2>
 </td>
 </tr>
 <tr id="WorkloadMode-CLIENT_AND_SERVER">
-<td><code>CLIENT_AND_SERVER</code></td>
+<td><code><a href="#WorkloadMode-CLIENT_AND_SERVER">CLIENT_AND_SERVER</a></code></td>
 <td>
 <p>Selects for scenarios when the workload is either the
 source or destination of the network traffic.</p>