diff --git a/site/content/en/latest/api/extension_types.md b/site/content/en/latest/api/extension_types.md
index 2caf33acb4b..bc9bb9f0f13 100644
--- a/site/content/en/latest/api/extension_types.md
+++ b/site/content/en/latest/api/extension_types.md
@@ -39,9 +39,9 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `http/1.0` | HTTPProtocolVersion1_0 specifies that HTTP/1.0 should be negotiable with ALPN<br /> | 
-| `http/1.1` | HTTPProtocolVersion1_1 specifies that HTTP/1.1 should be negotiable with ALPN<br /> | 
-| `h2` | HTTPProtocolVersion2 specifies that HTTP/2 should be negotiable with ALPN<br /> | 
+| `http/1.0` | HTTPProtocolVersion1_0 specifies that HTTP/1.0 should be negotiable with ALPN<br /> |
+| `http/1.1` | HTTPProtocolVersion1_1 specifies that HTTP/1.1 should be negotiable with ALPN<br /> |
+| `h2` | HTTPProtocolVersion2 specifies that HTTP/2 should be negotiable with ALPN<br /> |
 
 
 #### ALSEnvoyProxyAccessLog
@@ -78,8 +78,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `HTTP` | ALSEnvoyProxyAccessLogTypeHTTP defines the HTTP access log type and will populate StreamAccessLogsMessage.http_logs.<br /> | 
-| `TCP` | ALSEnvoyProxyAccessLogTypeTCP defines the TCP access log type and will populate StreamAccessLogsMessage.tcp_logs.<br /> | 
+| `HTTP` | ALSEnvoyProxyAccessLogTypeHTTP defines the HTTP access log type and will populate StreamAccessLogsMessage.http_logs.<br /> |
+| `TCP` | ALSEnvoyProxyAccessLogTypeTCP defines the TCP access log type and will populate StreamAccessLogsMessage.tcp_logs.<br /> |
 
 
 #### ALSEnvoyProxyHTTPAccessLogConfig
@@ -163,8 +163,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Text` | ActiveHealthCheckPayloadTypeText defines the Text type payload.<br /> | 
-| `Binary` | ActiveHealthCheckPayloadTypeBinary defines the Binary type payload.<br /> | 
+| `Text` | ActiveHealthCheckPayloadTypeText defines the Text type payload.<br /> |
+| `Binary` | ActiveHealthCheckPayloadTypeBinary defines the Binary type payload.<br /> |
 
 
 #### ActiveHealthCheckerType
@@ -178,9 +178,9 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `HTTP` | ActiveHealthCheckerTypeHTTP defines the HTTP type of health checking.<br /> | 
-| `TCP` | ActiveHealthCheckerTypeTCP defines the TCP type of health checking.<br /> | 
-| `GRPC` | ActiveHealthCheckerTypeGRPC defines the GRPC type of health checking.<br /> | 
+| `HTTP` | ActiveHealthCheckerTypeHTTP defines the HTTP type of health checking.<br /> |
+| `TCP` | ActiveHealthCheckerTypeTCP defines the TCP type of health checking.<br /> |
+| `GRPC` | ActiveHealthCheckerTypeGRPC defines the GRPC type of health checking.<br /> |
 
 
 #### AppProtocolType
@@ -194,9 +194,9 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `gateway.envoyproxy.io/h2c` | AppProtocolTypeH2C defines the HTTP/2 application protocol.<br /> | 
-| `gateway.envoyproxy.io/ws` | AppProtocolTypeWS defines the WebSocket over HTTP protocol.<br /> | 
-| `gateway.envoyproxy.io/wss` | AppProtocolTypeWSS defines the WebSocket over HTTPS protocol.<br /> | 
+| `gateway.envoyproxy.io/h2c` | AppProtocolTypeH2C defines the HTTP/2 application protocol.<br /> |
+| `gateway.envoyproxy.io/ws` | AppProtocolTypeWS defines the WebSocket over HTTP protocol.<br /> |
+| `gateway.envoyproxy.io/wss` | AppProtocolTypeWSS defines the WebSocket over HTTPS protocol.<br /> |
 
 
 #### Authorization
@@ -229,8 +229,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Allow` | AuthorizationActionAllow is the action to allow the request.<br /> | 
-| `Deny` | AuthorizationActionDeny is the action to deny the request.<br /> | 
+| `Allow` | AuthorizationActionAllow is the action to allow the request.<br /> |
+| `Deny` | AuthorizationActionDeny is the action to deny the request.<br /> |
 
 
 #### AuthorizationRule
@@ -511,9 +511,9 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Merge` | Merge merges the provided bootstrap with the default one. The provided bootstrap can add or override a value<br />within a map, or add a new value to a list.<br />Please note that the provided bootstrap can't override a value within a list.<br /> | 
-| `Replace` | Replace replaces the default bootstrap with the provided one.<br /> | 
-| `JSONPatch` | JSONPatch applies the provided JSONPatches to the default bootstrap.<br /> | 
+| `Merge` | Merge merges the provided bootstrap with the default one. The provided bootstrap can add or override a value<br />within a map, or add a new value to a list.<br />Please note that the provided bootstrap can't override a value within a list.<br /> |
+| `Replace` | Replace replaces the default bootstrap with the provided one.<br /> |
+| `JSONPatch` | JSONPatch applies the provided JSONPatches to the default bootstrap.<br /> |
 
 
 #### BrotliCompressor
@@ -787,8 +787,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Gzip` |  | 
-| `Brotli` |  | 
+| `Gzip` |  |
+| `Brotli` |  |
 
 
 #### ConnectionLimit
@@ -835,9 +835,9 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `SourceIP` | SourceIPConsistentHashType hashes based on the source IP address.<br /> | 
-| `Header` | HeaderConsistentHashType hashes based on a request header.<br /> | 
-| `Cookie` | CookieConsistentHashType hashes based on a cookie.<br /> | 
+| `SourceIP` | SourceIPConsistentHashType hashes based on the source IP address.<br /> |
+| `Header` | HeaderConsistentHashType hashes based on a request header.<br /> |
+| `Cookie` | CookieConsistentHashType hashes based on a cookie.<br /> |
 
 
 #### Cookie
@@ -950,9 +950,9 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Literal` | CustomTagTypeLiteral adds hard-coded value to each span.<br /> | 
-| `Environment` | CustomTagTypeEnvironment adds value from environment variable to each span.<br /> | 
-| `RequestHeader` | CustomTagTypeRequestHeader adds value from request header to each span.<br /> | 
+| `Literal` | CustomTagTypeLiteral adds hard-coded value to each span.<br /> |
+| `Environment` | CustomTagTypeEnvironment adds value from environment variable to each span.<br /> |
+| `RequestHeader` | CustomTagTypeRequestHeader adds value from request header to each span.<br /> |
 
 
 #### DNS
@@ -1032,23 +1032,23 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `envoy.filters.http.health_check` | EnvoyFilterHealthCheck defines the Envoy HTTP health check filter.<br /> | 
-| `envoy.filters.http.fault` | EnvoyFilterFault defines the Envoy HTTP fault filter.<br /> | 
-| `envoy.filters.http.cors` | EnvoyFilterCORS defines the Envoy HTTP CORS filter.<br /> | 
-| `envoy.filters.http.ext_authz` | EnvoyFilterExtAuthz defines the Envoy HTTP external authorization filter.<br /> | 
-| `envoy.filters.http.api_key_auth` | EnvoyFilterAPIKeyAuth defines the Envoy HTTP api key authentication filter.<br /> | 
-| `envoy.filters.http.basic_auth` | EnvoyFilterBasicAuth defines the Envoy HTTP basic authentication filter.<br /> | 
-| `envoy.filters.http.oauth2` | EnvoyFilterOAuth2 defines the Envoy HTTP OAuth2 filter.<br /> | 
-| `envoy.filters.http.jwt_authn` | EnvoyFilterJWTAuthn defines the Envoy HTTP JWT authentication filter.<br /> | 
-| `envoy.filters.http.stateful_session` | EnvoyFilterSessionPersistence defines the Envoy HTTP session persistence filter.<br /> | 
-| `envoy.filters.http.ext_proc` | EnvoyFilterExtProc defines the Envoy HTTP external process filter.<br /> | 
-| `envoy.filters.http.wasm` | EnvoyFilterWasm defines the Envoy HTTP WebAssembly filter.<br /> | 
-| `envoy.filters.http.rbac` | EnvoyFilterRBAC defines the Envoy RBAC filter.<br /> | 
-| `envoy.filters.http.local_ratelimit` | EnvoyFilterLocalRateLimit defines the Envoy HTTP local rate limit filter.<br /> | 
-| `envoy.filters.http.ratelimit` | EnvoyFilterRateLimit defines the Envoy HTTP rate limit filter.<br /> | 
-| `envoy.filters.http.custom_response` | EnvoyFilterCustomResponse defines the Envoy HTTP custom response filter.<br /> | 
-| `envoy.filters.http.compressor` | EnvoyFilterCompressor defines the Envoy HTTP compressor filter.<br /> | 
-| `envoy.filters.http.router` | EnvoyFilterRouter defines the Envoy HTTP router filter.<br /> | 
+| `envoy.filters.http.health_check` | EnvoyFilterHealthCheck defines the Envoy HTTP health check filter.<br /> |
+| `envoy.filters.http.fault` | EnvoyFilterFault defines the Envoy HTTP fault filter.<br /> |
+| `envoy.filters.http.cors` | EnvoyFilterCORS defines the Envoy HTTP CORS filter.<br /> |
+| `envoy.filters.http.ext_authz` | EnvoyFilterExtAuthz defines the Envoy HTTP external authorization filter.<br /> |
+| `envoy.filters.http.api_key_auth` | EnvoyFilterAPIKeyAuth defines the Envoy HTTP api key authentication filter.<br /> |
+| `envoy.filters.http.basic_auth` | EnvoyFilterBasicAuth defines the Envoy HTTP basic authentication filter.<br /> |
+| `envoy.filters.http.oauth2` | EnvoyFilterOAuth2 defines the Envoy HTTP OAuth2 filter.<br /> |
+| `envoy.filters.http.jwt_authn` | EnvoyFilterJWTAuthn defines the Envoy HTTP JWT authentication filter.<br /> |
+| `envoy.filters.http.stateful_session` | EnvoyFilterSessionPersistence defines the Envoy HTTP session persistence filter.<br /> |
+| `envoy.filters.http.ext_proc` | EnvoyFilterExtProc defines the Envoy HTTP external process filter.<br /> |
+| `envoy.filters.http.wasm` | EnvoyFilterWasm defines the Envoy HTTP WebAssembly filter.<br /> |
+| `envoy.filters.http.rbac` | EnvoyFilterRBAC defines the Envoy RBAC filter.<br /> |
+| `envoy.filters.http.local_ratelimit` | EnvoyFilterLocalRateLimit defines the Envoy HTTP local rate limit filter.<br /> |
+| `envoy.filters.http.ratelimit` | EnvoyFilterRateLimit defines the Envoy HTTP rate limit filter.<br /> |
+| `envoy.filters.http.custom_response` | EnvoyFilterCustomResponse defines the Envoy HTTP custom response filter.<br /> |
+| `envoy.filters.http.compressor` | EnvoyFilterCompressor defines the Envoy HTTP compressor filter.<br /> |
+| `envoy.filters.http.router` | EnvoyFilterRouter defines the Envoy HTTP router filter.<br /> |
 
 
 #### EnvoyGateway
@@ -1189,13 +1189,13 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `default` | LogComponentGatewayDefault defines the "default"-wide logging component. When specified,<br />all other logging components are ignored.<br /> | 
-| `provider` | LogComponentProviderRunner defines the "provider" runner component.<br /> | 
-| `gateway-api` | LogComponentGatewayAPIRunner defines the "gateway-api" runner component.<br /> | 
-| `xds-translator` | LogComponentXdsTranslatorRunner defines the "xds-translator" runner component.<br /> | 
-| `xds-server` | LogComponentXdsServerRunner defines the "xds-server" runner component.<br /> | 
-| `infrastructure` | LogComponentInfrastructureRunner defines the "infrastructure" runner component.<br /> | 
-| `global-ratelimit` | LogComponentGlobalRateLimitRunner defines the "global-ratelimit" runner component.<br /> | 
+| `default` | LogComponentGatewayDefault defines the "default"-wide logging component. When specified,<br />all other logging components are ignored.<br /> |
+| `provider` | LogComponentProviderRunner defines the "provider" runner component.<br /> |
+| `gateway-api` | LogComponentGatewayAPIRunner defines the "gateway-api" runner component.<br /> |
+| `xds-translator` | LogComponentXdsTranslatorRunner defines the "xds-translator" runner component.<br /> |
+| `xds-server` | LogComponentXdsServerRunner defines the "xds-server" runner component.<br /> |
+| `infrastructure` | LogComponentInfrastructureRunner defines the "infrastructure" runner component.<br /> |
+| `global-ratelimit` | LogComponentGlobalRateLimitRunner defines the "global-ratelimit" runner component.<br /> |
 
 
 #### EnvoyGatewayLogging
@@ -1408,7 +1408,7 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `JSONPatch` | JSONPatchEnvoyPatchType allows the user to patch the generated xDS resources using JSONPatch semantics.<br />For more details on the semantics, please refer to https://datatracker.ietf.org/doc/html/rfc6902<br /> | 
+| `JSONPatch` | JSONPatchEnvoyPatchType allows the user to patch the generated xDS resources using JSONPatch semantics.<br />For more details on the semantics, please refer to https://datatracker.ietf.org/doc/html/rfc6902<br /> |
 
 
 #### EnvoyProxy
@@ -1512,10 +1512,10 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `type.googleapis.com/envoy.config.listener.v3.Listener` | ListenerEnvoyResourceType defines the Type URL of the Listener resource<br /> | 
-| `type.googleapis.com/envoy.config.route.v3.RouteConfiguration` | RouteConfigurationEnvoyResourceType defines the Type URL of the RouteConfiguration resource<br /> | 
-| `type.googleapis.com/envoy.config.cluster.v3.Cluster` | ClusterEnvoyResourceType defines the Type URL of the Cluster resource<br /> | 
-| `type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment` | ClusterLoadAssignmentEnvoyResourceType defines the Type URL of the ClusterLoadAssignment resource<br /> | 
+| `type.googleapis.com/envoy.config.listener.v3.Listener` | ListenerEnvoyResourceType defines the Type URL of the Listener resource<br /> |
+| `type.googleapis.com/envoy.config.route.v3.RouteConfiguration` | RouteConfigurationEnvoyResourceType defines the Type URL of the RouteConfiguration resource<br /> |
+| `type.googleapis.com/envoy.config.cluster.v3.Cluster` | ClusterEnvoyResourceType defines the Type URL of the Cluster resource<br /> |
+| `type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment` | ClusterLoadAssignmentEnvoyResourceType defines the Type URL of the ClusterLoadAssignment resource<br /> |
 
 
 #### ExtAuth
@@ -1568,9 +1568,9 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Streamed` | StreamedExtProcBodyProcessingMode will stream the body to the server in pieces as they arrive at the proxy.<br /> | 
-| `Buffered` | BufferedExtProcBodyProcessingMode will buffer the message body in memory and send the entire body at once. If the body exceeds the configured buffer limit, then the downstream system will receive an error.<br /> | 
-| `BufferedPartial` | BufferedPartialExtBodyHeaderProcessingMode will buffer the message body in memory and send the entire body in one chunk. If the body exceeds the configured buffer limit, then the body contents up to the buffer limit will be sent.<br /> | 
+| `Streamed` | StreamedExtProcBodyProcessingMode will stream the body to the server in pieces as they arrive at the proxy.<br /> |
+| `Buffered` | BufferedExtProcBodyProcessingMode will buffer the message body in memory and send the entire body at once. If the body exceeds the configured buffer limit, then the downstream system will receive an error.<br /> |
+| `BufferedPartial` | BufferedPartialExtBodyHeaderProcessingMode will buffer the message body in memory and send the entire body in one chunk. If the body exceeds the configured buffer limit, then the body contents up to the buffer limit will be sent.<br /> |
 
 
 #### ExtProcMetadata
@@ -1860,7 +1860,6 @@ _Appears in:_
 | Field | Type | Required | Default | Description |
 | ---   | ---  | ---      | ---     | ---         |
 | `rules` | _[RateLimitRule](#ratelimitrule) array_ |  true  |  | Rules are a list of RateLimit selectors and limits. Each rule and its<br />associated limit is applied in a mutually exclusive way. If a request<br />matches multiple rules, each of their associated limits get applied, so a<br />single request might increase the rate limit counters for multiple rules<br />if selected. The rate limit service will return a logical OR of the individual<br />rate limit decisions of all matching rules. For example, if a request<br />matches two rules, one rate limited and one not, the final decision will be<br />to rate limit the request. |
-| `shared` | _boolean_ |  false  | false | Shared determines whether the rate limit rules apply across all the policy targets.<br />If set to true, the rule is treated as a common bucket and is shared across all policy targets (xRoutes).<br />Must have targetRef set to Gateway<br />Default: false. |
 
 
 #### GroupVersionKind
@@ -2045,8 +2044,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Header` | HeaderHTTPHostnameModifier indicates that the Host header value would be replaced with the value of the header specified in header.<br />https://www.envoyproxy.io/docs/envoy/latest/api-v3/config/route/v3/route_components.proto#envoy-v3-api-field-config-route-v3-routeaction-host-rewrite-header<br /> | 
-| `Backend` | BackendHTTPHostnameModifier indicates that the Host header value would be replaced by the DNS name of the backend if it exists.<br />https://www.envoyproxy.io/docs/envoy/latest/api-v3/config/route/v3/route_components.proto#envoy-v3-api-field-config-route-v3-routeaction-auto-host-rewrite<br /> | 
+| `Header` | HeaderHTTPHostnameModifier indicates that the Host header value would be replaced with the value of the header specified in header.<br />https://www.envoyproxy.io/docs/envoy/latest/api-v3/config/route/v3/route_components.proto#envoy-v3-api-field-config-route-v3-routeaction-host-rewrite-header<br /> |
+| `Backend` | BackendHTTPHostnameModifier indicates that the Host header value would be replaced by the DNS name of the backend if it exists.<br />https://www.envoyproxy.io/docs/envoy/latest/api-v3/config/route/v3/route_components.proto#envoy-v3-api-field-config-route-v3-routeaction-auto-host-rewrite<br /> |
 
 
 #### HTTPPathModifier
@@ -2075,7 +2074,7 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `ReplaceRegexMatch` | RegexHTTPPathModifier This type of modifier indicates that the portions of the path that match the specified<br /> regex would be substituted with the specified substitution value<br />https://www.envoyproxy.io/docs/envoy/latest/api-v3/type/matcher/v3/regex.proto#type-matcher-v3-regexmatchandsubstitute<br /> | 
+| `ReplaceRegexMatch` | RegexHTTPPathModifier This type of modifier indicates that the portions of the path that match the specified<br /> regex would be substituted with the specified substitution value<br />https://www.envoyproxy.io/docs/envoy/latest/api-v3/type/matcher/v3/regex.proto#type-matcher-v3-regexmatchandsubstitute<br /> |
 
 
 #### HTTPRouteFilter
@@ -2212,9 +2211,9 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Exact` | HeaderMatchExact matches the exact value of the Value field against the value of<br />the specified HTTP Header.<br /> | 
-| `RegularExpression` | HeaderMatchRegularExpression matches a regular expression against the value of the<br />specified HTTP Header. The regex string must adhere to the syntax documented in<br />https://github.com/google/re2/wiki/Syntax.<br /> | 
-| `Distinct` | HeaderMatchDistinct matches any and all possible unique values encountered in the<br />specified HTTP Header. Note that each unique value will receive its own rate limit<br />bucket.<br />Note: This is only supported for Global Rate Limits.<br /> | 
+| `Exact` | HeaderMatchExact matches the exact value of the Value field against the value of<br />the specified HTTP Header.<br /> |
+| `RegularExpression` | HeaderMatchRegularExpression matches a regular expression against the value of the<br />specified HTTP Header. The regex string must adhere to the syntax documented in<br />https://github.com/google/re2/wiki/Syntax.<br /> |
+| `Distinct` | HeaderMatchDistinct matches any and all possible unique values encountered in the<br />specified HTTP Header. Note that each unique value will receive its own rate limit<br />bucket.<br />Note: This is only supported for Global Rate Limits.<br /> |
 
 
 #### HeaderSettings
@@ -2296,9 +2295,9 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `IPv4` | IPv4 defines the IPv4 family.<br /> | 
-| `IPv6` | IPv6 defines the IPv6 family.<br /> | 
-| `DualStack` | DualStack defines the dual-stack family.<br />When set to DualStack, Envoy proxy will listen on both IPv4 and IPv6 addresses<br />for incoming client traffic, enabling support for both IP protocol versions.<br /> | 
+| `IPv4` | IPv4 defines the IPv4 family.<br /> |
+| `IPv6` | IPv6 defines the IPv6 family.<br /> |
+| `DualStack` | DualStack defines the dual-stack family.<br />When set to DualStack, Envoy proxy will listen on both IPv4 and IPv6 addresses<br />for incoming client traffic, enabling support for both IP protocol versions.<br /> |
 
 
 #### ImagePullPolicy
@@ -2312,8 +2311,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `IfNotPresent` | ImagePullPolicyIfNotPresent will only pull the image if it does not already exist in the EG cache.<br /> | 
-| `Always` | ImagePullPolicyAlways will pull the image when the EnvoyExtension resource version changes.<br />Note: EG does not update the Wasm module every time an Envoy proxy requests the Wasm module.<br /> | 
+| `IfNotPresent` | ImagePullPolicyIfNotPresent will only pull the image if it does not already exist in the EG cache.<br /> |
+| `Always` | ImagePullPolicyAlways will pull the image when the EnvoyExtension resource version changes.<br />Note: EG does not update the Wasm module every time an Envoy proxy requests the Wasm module.<br /> |
 
 
 #### ImageWasmCodeSource
@@ -2343,7 +2342,7 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Host` | InfrastructureProviderTypeHost defines the "Host" provider.<br /> | 
+| `Host` | InfrastructureProviderTypeHost defines the "Host" provider.<br /> |
 
 
 #### InvalidMessageAction
@@ -2357,8 +2356,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `TerminateConnection` |  | 
-| `TerminateStream` |  | 
+| `TerminateConnection` |  |
+| `TerminateStream` |  |
 
 
 #### JSONPatchOperation
@@ -2434,8 +2433,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `String` |  | 
-| `StringArray` |  | 
+| `String` |  |
+| `StringArray` |  |
 
 
 #### JWTExtractor
@@ -2795,10 +2794,10 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `ConsistentHash` | ConsistentHashLoadBalancerType load balancer policy.<br /> | 
-| `LeastRequest` | LeastRequestLoadBalancerType load balancer policy.<br /> | 
-| `Random` | RandomLoadBalancerType load balancer policy.<br /> | 
-| `RoundRobin` | RoundRobinLoadBalancerType load balancer policy.<br /> | 
+| `ConsistentHash` | ConsistentHashLoadBalancerType load balancer policy.<br /> |
+| `LeastRequest` | LeastRequestLoadBalancerType load balancer policy.<br /> |
+| `Random` | RandomLoadBalancerType load balancer policy.<br /> |
+| `RoundRobin` | RoundRobinLoadBalancerType load balancer policy.<br /> |
 
 
 #### LocalRateLimit
@@ -2827,10 +2826,10 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `debug` | LogLevelDebug defines the "debug" logging level.<br /> | 
-| `info` | LogLevelInfo defines the "Info" logging level.<br /> | 
-| `warn` | LogLevelWarn defines the "Warn" logging level.<br /> | 
-| `error` | LogLevelError defines the "Error" logging level.<br /> | 
+| `debug` | LogLevelDebug defines the "debug" logging level.<br /> |
+| `info` | LogLevelInfo defines the "Info" logging level.<br /> |
+| `warn` | LogLevelWarn defines the "Warn" logging level.<br /> |
+| `error` | LogLevelError defines the "Error" logging level.<br /> |
 
 
 #### Lua
@@ -2861,8 +2860,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Inline` | LuaValueTypeInline defines the "Inline" Lua type.<br /> | 
-| `ValueRef` | LuaValueTypeValueRef defines the "ValueRef" Lua type.<br /> | 
+| `Inline` | LuaValueTypeInline defines the "Inline" Lua type.<br /> |
+| `ValueRef` | LuaValueTypeValueRef defines the "ValueRef" Lua type.<br /> |
 
 
 #### MergeType
@@ -2876,8 +2875,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `StrategicMerge` | StrategicMerge indicates a strategic merge patch type<br /> | 
-| `JSONMerge` | JSONMerge indicates a JSON merge patch type<br /> | 
+| `StrategicMerge` | StrategicMerge indicates a strategic merge patch type<br /> |
+| `JSONMerge` | JSONMerge indicates a JSON merge patch type<br /> |
 
 
 #### MetricSinkType
@@ -2892,7 +2891,7 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `OpenTelemetry` |  | 
+| `OpenTelemetry` |  |
 
 
 #### OIDC
@@ -3031,10 +3030,10 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `KeepUnchanged` | KeepUnchangedAction keeps escaped slashes as they arrive without changes<br /> | 
-| `RejectRequest` | RejectRequestAction rejects client requests containing escaped slashes<br />with a 400 status. gRPC requests will be rejected with the INTERNAL (13)<br />error code.<br />The "httpN.downstream_rq_failed_path_normalization" counter is incremented<br />for each rejected request.<br /> | 
-| `UnescapeAndRedirect` | UnescapeAndRedirect unescapes %2F and %5C sequences and redirects to the new path<br />if these sequences were present.<br />Redirect occurs after path normalization and merge slashes transformations if<br />they were configured. gRPC requests will be rejected with the INTERNAL (13)<br />error code.<br />This option minimizes possibility of path confusion exploits by forcing request<br />with unescaped slashes to traverse all parties: downstream client, intermediate<br />proxies, Envoy and upstream server.<br />The “httpN.downstream_rq_redirected_with_normalized_path” counter is incremented<br />for each redirected request.<br /> | 
-| `UnescapeAndForward` | UnescapeAndForward unescapes %2F and %5C sequences and forwards the request.<br />Note: this option should not be enabled if intermediaries perform path based access<br />control as it may lead to path confusion vulnerabilities.<br /> | 
+| `KeepUnchanged` | KeepUnchangedAction keeps escaped slashes as they arrive without changes<br /> |
+| `RejectRequest` | RejectRequestAction rejects client requests containing escaped slashes<br />with a 400 status. gRPC requests will be rejected with the INTERNAL (13)<br />error code.<br />The "httpN.downstream_rq_failed_path_normalization" counter is incremented<br />for each rejected request.<br /> |
+| `UnescapeAndRedirect` | UnescapeAndRedirect unescapes %2F and %5C sequences and redirects to the new path<br />if these sequences were present.<br />Redirect occurs after path normalization and merge slashes transformations if<br />they were configured. gRPC requests will be rejected with the INTERNAL (13)<br />error code.<br />This option minimizes possibility of path confusion exploits by forcing request<br />with unescaped slashes to traverse all parties: downstream client, intermediate<br />proxies, Envoy and upstream server.<br />The “httpN.downstream_rq_redirected_with_normalized_path” counter is incremented<br />for each redirected request.<br /> |
+| `UnescapeAndForward` | UnescapeAndForward unescapes %2F and %5C sequences and forwards the request.<br />Note: this option should not be enabled if intermediaries perform path based access<br />control as it may lead to path confusion vulnerabilities.<br /> |
 
 
 #### PathSettings
@@ -3129,8 +3128,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Kubernetes` | ProviderTypeKubernetes defines the "Kubernetes" provider.<br /> | 
-| `Custom` | ProviderTypeCustom defines the "Custom" provider.<br /> | 
+| `Kubernetes` | ProviderTypeKubernetes defines the "Kubernetes" provider.<br /> |
+| `Custom` | ProviderTypeCustom defines the "Custom" provider.<br /> |
 
 
 #### ProxyAccessLog
@@ -3176,8 +3175,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Text` | ProxyAccessLogFormatTypeText defines the text accesslog format.<br /> | 
-| `JSON` | ProxyAccessLogFormatTypeJSON defines the JSON accesslog format.<br /> | 
+| `Text` | ProxyAccessLogFormatTypeText defines the text accesslog format.<br /> |
+| `JSON` | ProxyAccessLogFormatTypeJSON defines the JSON accesslog format.<br /> |
 
 
 #### ProxyAccessLogSetting
@@ -3225,9 +3224,9 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `ALS` | ProxyAccessLogSinkTypeALS defines the gRPC Access Log Service (ALS) sink.<br />The service must implement the Envoy gRPC Access Log Service streaming API:<br />https://www.envoyproxy.io/docs/envoy/latest/api-v3/service/accesslog/v3/als.proto<br /> | 
-| `File` | ProxyAccessLogSinkTypeFile defines the file accesslog sink.<br /> | 
-| `OpenTelemetry` | ProxyAccessLogSinkTypeOpenTelemetry defines the OpenTelemetry accesslog sink.<br />When the provider is Kubernetes, EnvoyGateway always sends `k8s.namespace.name`<br />and `k8s.pod.name` as additional attributes.<br /> | 
+| `ALS` | ProxyAccessLogSinkTypeALS defines the gRPC Access Log Service (ALS) sink.<br />The service must implement the Envoy gRPC Access Log Service streaming API:<br />https://www.envoyproxy.io/docs/envoy/latest/api-v3/service/accesslog/v3/als.proto<br /> |
+| `File` | ProxyAccessLogSinkTypeFile defines the file accesslog sink.<br /> |
+| `OpenTelemetry` | ProxyAccessLogSinkTypeOpenTelemetry defines the OpenTelemetry accesslog sink.<br />When the provider is Kubernetes, EnvoyGateway always sends `k8s.namespace.name`<br />and `k8s.pod.name` as additional attributes.<br /> |
 
 
 #### ProxyAccessLogType
@@ -3241,8 +3240,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Listener` | ProxyAccessLogTypeListener defines the accesslog for Listeners.<br />https://www.envoyproxy.io/docs/envoy/latest/api-v3/config/listener/v3/listener.proto#envoy-v3-api-field-config-listener-v3-listener-access-log<br /> | 
-| `Route` | ProxyAccessLogTypeRoute defines the accesslog for HTTP, GRPC, UDP and TCP Routes.<br />https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/udp/udp_proxy/v3/udp_proxy.proto#envoy-v3-api-field-extensions-filters-udp-udp-proxy-v3-udpproxyconfig-access-log<br />https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/network/tcp_proxy/v3/tcp_proxy.proto#envoy-v3-api-field-extensions-filters-network-tcp-proxy-v3-tcpproxy-access-log<br />https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/network/http_connection_manager/v3/http_connection_manager.proto#envoy-v3-api-field-extensions-filters-network-http-connection-manager-v3-httpconnectionmanager-access-log<br /> | 
+| `Listener` | ProxyAccessLogTypeListener defines the accesslog for Listeners.<br />https://www.envoyproxy.io/docs/envoy/latest/api-v3/config/listener/v3/listener.proto#envoy-v3-api-field-config-listener-v3-listener-access-log<br /> |
+| `Route` | ProxyAccessLogTypeRoute defines the accesslog for HTTP, GRPC, UDP and TCP Routes.<br />https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/udp/udp_proxy/v3/udp_proxy.proto#envoy-v3-api-field-extensions-filters-udp-udp-proxy-v3-udpproxyconfig-access-log<br />https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/network/tcp_proxy/v3/tcp_proxy.proto#envoy-v3-api-field-extensions-filters-network-tcp-proxy-v3-tcpproxy-access-log<br />https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/network/http_connection_manager/v3/http_connection_manager.proto#envoy-v3-api-field-extensions-filters-network-http-connection-manager-v3-httpconnectionmanager-access-log<br /> |
 
 
 #### ProxyBootstrap
@@ -3272,16 +3271,16 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `default` | LogComponentDefault defines the default logging component.<br />See more details: https://www.envoyproxy.io/docs/envoy/latest/operations/cli#cmdoption-l<br /> | 
-| `upstream` | LogComponentUpstream defines the "upstream" logging component.<br /> | 
-| `http` | LogComponentHTTP defines the "http" logging component.<br /> | 
-| `connection` | LogComponentConnection defines the "connection" logging component.<br /> | 
-| `admin` | LogComponentAdmin defines the "admin" logging component.<br /> | 
-| `client` | LogComponentClient defines the "client" logging component.<br /> | 
-| `filter` | LogComponentFilter defines the "filter" logging component.<br /> | 
-| `main` | LogComponentMain defines the "main" logging component.<br /> | 
-| `router` | LogComponentRouter defines the "router" logging component.<br /> | 
-| `runtime` | LogComponentRuntime defines the "runtime" logging component.<br /> | 
+| `default` | LogComponentDefault defines the default logging component.<br />See more details: https://www.envoyproxy.io/docs/envoy/latest/operations/cli#cmdoption-l<br /> |
+| `upstream` | LogComponentUpstream defines the "upstream" logging component.<br /> |
+| `http` | LogComponentHTTP defines the "http" logging component.<br /> |
+| `connection` | LogComponentConnection defines the "connection" logging component.<br /> |
+| `admin` | LogComponentAdmin defines the "admin" logging component.<br /> |
+| `client` | LogComponentClient defines the "client" logging component.<br /> |
+| `filter` | LogComponentFilter defines the "filter" logging component.<br /> |
+| `main` | LogComponentMain defines the "main" logging component.<br /> |
+| `router` | LogComponentRouter defines the "router" logging component.<br /> |
+| `runtime` | LogComponentRuntime defines the "runtime" logging component.<br /> |
 
 
 #### ProxyLogging
@@ -3393,8 +3392,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `V1` | ProxyProtocolVersionV1 is the PROXY protocol version 1 (human readable format).<br /> | 
-| `V2` | ProxyProtocolVersionV2 is the PROXY protocol version 2 (binary format).<br /> | 
+| `V1` | ProxyProtocolVersionV1 is the PROXY protocol version 1 (human readable format).<br /> |
+| `V2` | ProxyProtocolVersionV2 is the PROXY protocol version 2 (binary format).<br /> |
 
 
 #### ProxyTelemetry
@@ -3476,8 +3475,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Number` | RateLimitCostFromNumber specifies the rate limit cost to be a fixed number.<br /> | 
-| `Metadata` | RateLimitCostFromMetadata specifies the rate limit cost to be retrieved from the per-request dynamic metadata.<br /> | 
+| `Number` | RateLimitCostFromNumber specifies the rate limit cost to be a fixed number.<br /> |
+| `Metadata` | RateLimitCostFromMetadata specifies the rate limit cost to be retrieved from the per-request dynamic metadata.<br /> |
 
 
 #### RateLimitCostMetadata
@@ -3539,7 +3538,7 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Redis` | RedisBackendType uses a redis database for the rate limit service.<br /> | 
+| `Redis` | RedisBackendType uses a redis database for the rate limit service.<br /> |
 
 
 #### RateLimitMetrics
@@ -3703,8 +3702,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Global` | GlobalRateLimitType allows the rate limits to be applied across all Envoy<br />proxy instances.<br /> | 
-| `Local` | LocalRateLimitType allows the rate limits to be applied on a per Envoy<br />proxy instance basis.<br /> | 
+| `Global` | GlobalRateLimitType allows the rate limits to be applied across all Envoy<br />proxy instances.<br /> |
+| `Local` | LocalRateLimitType allows the rate limits to be applied on a per Envoy<br />proxy instance basis.<br /> |
 
 
 #### RateLimitUnit
@@ -3719,10 +3718,10 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Second` | RateLimitUnitSecond specifies the rate limit interval to be 1 second.<br /> | 
-| `Minute` | RateLimitUnitMinute specifies the rate limit interval to be 1 minute.<br /> | 
-| `Hour` | RateLimitUnitHour specifies the rate limit interval to be 1 hour.<br /> | 
-| `Day` | RateLimitUnitDay specifies the rate limit interval to be 1 day.<br /> | 
+| `Second` | RateLimitUnitSecond specifies the rate limit interval to be 1 second.<br /> |
+| `Minute` | RateLimitUnitMinute specifies the rate limit interval to be 1 minute.<br /> |
+| `Hour` | RateLimitUnitHour specifies the rate limit interval to be 1 hour.<br /> |
+| `Day` | RateLimitUnitDay specifies the rate limit interval to be 1 day.<br /> |
 
 
 #### RateLimitValue
@@ -3812,7 +3811,7 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `File` | ResourceProviderTypeFile defines the "File" provider.<br /> | 
+| `File` | ResourceProviderTypeFile defines the "File" provider.<br /> |
 
 
 #### ResponseOverride
@@ -3841,8 +3840,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Inline` | ResponseValueTypeInline defines the "Inline" response body type.<br /> | 
-| `ValueRef` | ResponseValueTypeValueRef defines the "ValueRef" response body type.<br /> | 
+| `Inline` | ResponseValueTypeInline defines the "Inline" response body type.<br /> |
+| `ValueRef` | ResponseValueTypeValueRef defines the "ValueRef" response body type.<br /> |
 
 
 #### Retry
@@ -3888,8 +3887,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Service` | ServiceRoutingType is the RoutingType for Service Cluster IP routing.<br /> | 
-| `Endpoint` | EndpointRoutingType is the RoutingType for Endpoint routing.<br /> | 
+| `Service` | ServiceRoutingType is the RoutingType for Service Cluster IP routing.<br /> |
+| `Endpoint` | EndpointRoutingType is the RoutingType for Endpoint routing.<br /> |
 
 
 #### SecurityPolicy
@@ -3946,8 +3945,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Cluster` | ServiceExternalTrafficPolicyCluster routes traffic to all endpoints.<br /> | 
-| `Local` | ServiceExternalTrafficPolicyLocal preserves the source IP of the traffic by<br />routing only to endpoints on the same node as the traffic was received on<br />(dropping the traffic if there are no local endpoints).<br /> | 
+| `Cluster` | ServiceExternalTrafficPolicyCluster routes traffic to all endpoints.<br /> |
+| `Local` | ServiceExternalTrafficPolicyLocal preserves the source IP of the traffic by<br />routing only to endpoints on the same node as the traffic was received on<br />(dropping the traffic if there are no local endpoints).<br /> |
 
 
 #### ServiceType
@@ -3961,9 +3960,9 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `ClusterIP` | ServiceTypeClusterIP means a service will only be accessible inside the<br />cluster, via the cluster IP.<br /> | 
-| `LoadBalancer` | ServiceTypeLoadBalancer means a service will be exposed via an<br />external load balancer (if the cloud provider supports it).<br /> | 
-| `NodePort` | ServiceTypeNodePort means a service will be exposed on each Kubernetes Node<br />at a static Port, common across all Nodes.<br /> | 
+| `ClusterIP` | ServiceTypeClusterIP means a service will only be accessible inside the<br />cluster, via the cluster IP.<br /> |
+| `LoadBalancer` | ServiceTypeLoadBalancer means a service will be exposed via an<br />external load balancer (if the cloud provider supports it).<br /> |
+| `NodePort` | ServiceTypeNodePort means a service will be exposed on each Kubernetes Node<br />at a static Port, common across all Nodes.<br /> |
 
 
 #### Session
@@ -4064,8 +4063,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Exact` | SourceMatchExact All IP Addresses within the specified Source IP CIDR are treated as a single client selector<br />and share the same rate limit bucket.<br /> | 
-| `Distinct` | SourceMatchDistinct Each IP Address within the specified Source IP CIDR is treated as a distinct client selector<br />and uses a separate rate limit bucket/counter.<br />Note: This is only supported for Global Rate Limits.<br /> | 
+| `Exact` | SourceMatchExact All IP Addresses within the specified Source IP CIDR are treated as a single client selector<br />and share the same rate limit bucket.<br /> |
+| `Distinct` | SourceMatchDistinct Each IP Address within the specified Source IP CIDR is treated as a distinct client selector<br />and uses a separate rate limit bucket/counter.<br />Note: This is only supported for Global Rate Limits.<br /> |
 
 
 #### StatefulTLSSessionResumption
@@ -4141,8 +4140,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Value` | StatusCodeValueTypeValue defines the "Value" status code match type.<br /> | 
-| `Range` | StatusCodeValueTypeRange defines the "Range" status code match type.<br /> | 
+| `Value` | StatusCodeValueTypeValue defines the "Value" status code match type.<br /> |
+| `Range` | StatusCodeValueTypeRange defines the "Range" status code match type.<br /> |
 
 
 #### StringMatch
@@ -4174,10 +4173,10 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Exact` | StringMatchExact :the input string must match exactly the match value.<br /> | 
-| `Prefix` | StringMatchPrefix :the input string must start with the match value.<br /> | 
-| `Suffix` | StringMatchSuffix :the input string must end with the match value.<br /> | 
-| `RegularExpression` | StringMatchRegularExpression :The input string must match the regular expression<br />specified in the match value.<br />The regex string must adhere to the syntax documented in<br />https://github.com/google/re2/wiki/Syntax.<br /> | 
+| `Exact` | StringMatchExact :the input string must match exactly the match value.<br /> |
+| `Prefix` | StringMatchPrefix :the input string must start with the match value.<br /> |
+| `Suffix` | StringMatchSuffix :the input string must end with the match value.<br /> |
+| `RegularExpression` | StringMatchRegularExpression :The input string must match the regular expression<br />specified in the match value.<br />The regex string must adhere to the syntax documented in<br />https://github.com/google/re2/wiki/Syntax.<br /> |
 
 
 #### TCPActiveHealthChecker
@@ -4274,11 +4273,11 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Auto` | TLSAuto allows Envoy to choose the optimal TLS Version<br /> | 
-| `1.0` | TLS1.0 specifies TLS version 1.0<br /> | 
-| `1.1` | TLS1.1 specifies TLS version 1.1<br /> | 
-| `1.2` | TLSv1.2 specifies TLS version 1.2<br /> | 
-| `1.3` | TLSv1.3 specifies TLS version 1.3<br /> | 
+| `Auto` | TLSAuto allows Envoy to choose the optimal TLS Version<br /> |
+| `1.0` | TLS1.0 specifies TLS version 1.0<br /> |
+| `1.1` | TLS1.1 specifies TLS version 1.1<br /> |
+| `1.2` | TLSv1.2 specifies TLS version 1.2<br /> |
+| `1.3` | TLSv1.3 specifies TLS version 1.3<br /> |
 
 
 #### TargetSelector
@@ -4348,10 +4347,10 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `OpenTelemetry` |  | 
-| `OpenTelemetry` |  | 
-| `Zipkin` |  | 
-| `Datadog` |  | 
+| `OpenTelemetry` |  |
+| `OpenTelemetry` |  |
+| `Zipkin` |  |
+| `Datadog` |  |
 
 
 #### TriggerEnum
@@ -4365,18 +4364,18 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `5xx` | The upstream server responds with any 5xx response code, or does not respond at all (disconnect/reset/read timeout).<br />Includes connect-failure and refused-stream.<br /> | 
-| `gateway-error` | The response is a gateway error (502,503 or 504).<br /> | 
-| `reset` | The upstream server does not respond at all (disconnect/reset/read timeout.)<br /> | 
-| `connect-failure` | Connection failure to the upstream server (connect timeout, etc.). (Included in *5xx*)<br /> | 
-| `retriable-4xx` | The upstream server responds with a retriable 4xx response code.<br />Currently, the only response code in this category is 409.<br /> | 
-| `refused-stream` | The upstream server resets the stream with a REFUSED_STREAM error code.<br /> | 
-| `retriable-status-codes` | The upstream server responds with any response code matching one defined in the RetriableStatusCodes.<br /> | 
-| `cancelled` | The gRPC status code in the response headers is “cancelled”.<br /> | 
-| `deadline-exceeded` | The gRPC status code in the response headers is “deadline-exceeded”.<br /> | 
-| `internal` | The gRPC status code in the response headers is “internal”.<br /> | 
-| `resource-exhausted` | The gRPC status code in the response headers is “resource-exhausted”.<br /> | 
-| `unavailable` | The gRPC status code in the response headers is “unavailable”.<br /> | 
+| `5xx` | The upstream server responds with any 5xx response code, or does not respond at all (disconnect/reset/read timeout).<br />Includes connect-failure and refused-stream.<br /> |
+| `gateway-error` | The response is a gateway error (502,503 or 504).<br /> |
+| `reset` | The upstream server does not respond at all (disconnect/reset/read timeout.)<br /> |
+| `connect-failure` | Connection failure to the upstream server (connect timeout, etc.). (Included in *5xx*)<br /> |
+| `retriable-4xx` | The upstream server responds with a retriable 4xx response code.<br />Currently, the only response code in this category is 409.<br /> |
+| `refused-stream` | The upstream server resets the stream with a REFUSED_STREAM error code.<br /> |
+| `retriable-status-codes` | The upstream server responds with any response code matching one defined in the RetriableStatusCodes.<br /> |
+| `cancelled` | The gRPC status code in the response headers is “cancelled”.<br /> |
+| `deadline-exceeded` | The gRPC status code in the response headers is “deadline-exceeded”.<br /> |
+| `internal` | The gRPC status code in the response headers is “internal”.<br /> |
+| `resource-exhausted` | The gRPC status code in the response headers is “resource-exhausted”.<br /> |
+| `unavailable` | The gRPC status code in the response headers is “unavailable”.<br /> |
 
 
 #### UnixSocket
@@ -4446,8 +4445,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `HTTP` | HTTPWasmCodeSourceType allows the user to specify the Wasm code in an HTTP URL.<br /> | 
-| `Image` | ImageWasmCodeSourceType allows the user to specify the Wasm code in an OCI image.<br /> | 
+| `HTTP` | HTTPWasmCodeSourceType allows the user to specify the Wasm code in an HTTP URL.<br /> |
+| `Image` | ImageWasmCodeSourceType allows the user to specify the Wasm code in an OCI image.<br /> |
 
 
 #### WasmEnv
@@ -4476,9 +4475,9 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Allow` | WithUnderscoresActionAllow allows headers with underscores to be passed through.<br /> | 
-| `RejectRequest` | WithUnderscoresActionRejectRequest rejects the client request. HTTP/1 requests are rejected with<br />the 400 status. HTTP/2 requests end with the stream reset.<br /> | 
-| `DropHeader` | WithUnderscoresActionDropHeader drops the client header with name containing underscores. The header<br />is dropped before the filter chain is invoked and as such filters will not see<br />dropped headers.<br /> | 
+| `Allow` | WithUnderscoresActionAllow allows headers with underscores to be passed through.<br /> |
+| `RejectRequest` | WithUnderscoresActionRejectRequest rejects the client request. HTTP/1 requests are rejected with<br />the 400 status. HTTP/2 requests end with the stream reset.<br /> |
+| `DropHeader` | WithUnderscoresActionDropHeader drops the client header with name containing underscores. The header<br />is dropped before the filter chain is invoked and as such filters will not see<br />dropped headers.<br /> |
 
 
 #### XDSTranslatorHook
@@ -4493,10 +4492,10 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `VirtualHost` |  | 
-| `Route` |  | 
-| `HTTPListener` |  | 
-| `Translation` |  | 
+| `VirtualHost` |  |
+| `Route` |  |
+| `HTTPListener` |  |
+| `Translation` |  |
 
 
 #### XDSTranslatorHooks
@@ -4525,11 +4524,11 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Subject` | XFCCCertDataSubject is the Subject field of the current client certificate.<br /> | 
-| `Cert` | XFCCCertDataCert is the entire client certificate in URL encoded PEM format.<br /> | 
-| `Chain` | XFCCCertDataChain is the entire client certificate chain (including the leaf certificate) in URL encoded PEM format.<br /> | 
-| `DNS` | XFCCCertDataDNS is the DNS type Subject Alternative Name field of the current client certificate.<br /> | 
-| `URI` | XFCCCertDataURI is the URI type Subject Alternative Name field of the current client certificate.<br /> | 
+| `Subject` | XFCCCertDataSubject is the Subject field of the current client certificate.<br /> |
+| `Cert` | XFCCCertDataCert is the entire client certificate in URL encoded PEM format.<br /> |
+| `Chain` | XFCCCertDataChain is the entire client certificate chain (including the leaf certificate) in URL encoded PEM format.<br /> |
+| `DNS` | XFCCCertDataDNS is the DNS type Subject Alternative Name field of the current client certificate.<br /> |
+| `URI` | XFCCCertDataURI is the URI type Subject Alternative Name field of the current client certificate.<br /> |
 
 
 #### XFCCForwardMode
@@ -4543,11 +4542,11 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Sanitize` | XFCCForwardModeSanitize removes the XFCC header from the request. This is the default mode.<br /> | 
-| `ForwardOnly` | XFCCForwardModeForwardOnly forwards the XFCC header in the request if the client connection is mTLS.<br /> | 
-| `AppendForward` | XFCCForwardModeAppendForward appends the client certificate information to the request’s XFCC header and forward it if the client connection is mTLS.<br /> | 
-| `SanitizeSet` | XFCCForwardModeSanitizeSet resets the XFCC header with the client certificate information and forward it if the client connection is mTLS.<br />The existing certificate information in the XFCC header is removed.<br /> | 
-| `AlwaysForwardOnly` | XFCCForwardModeAlwaysForwardOnly always forwards the XFCC header in the request, regardless of whether the client connection is mTLS.<br /> | 
+| `Sanitize` | XFCCForwardModeSanitize removes the XFCC header from the request. This is the default mode.<br /> |
+| `ForwardOnly` | XFCCForwardModeForwardOnly forwards the XFCC header in the request if the client connection is mTLS.<br /> |
+| `AppendForward` | XFCCForwardModeAppendForward appends the client certificate information to the request’s XFCC header and forward it if the client connection is mTLS.<br /> |
+| `SanitizeSet` | XFCCForwardModeSanitizeSet resets the XFCC header with the client certificate information and forward it if the client connection is mTLS.<br />The existing certificate information in the XFCC header is removed.<br /> |
+| `AlwaysForwardOnly` | XFCCForwardModeAlwaysForwardOnly always forwards the XFCC header in the request, regardless of whether the client connection is mTLS.<br /> |
 
 
 #### XForwardedClientCert
diff --git a/site/content/zh/latest/api/extension_types.md b/site/content/zh/latest/api/extension_types.md
index 2caf33acb4b..bc9bb9f0f13 100644
--- a/site/content/zh/latest/api/extension_types.md
+++ b/site/content/zh/latest/api/extension_types.md
@@ -39,9 +39,9 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `http/1.0` | HTTPProtocolVersion1_0 specifies that HTTP/1.0 should be negotiable with ALPN<br /> | 
-| `http/1.1` | HTTPProtocolVersion1_1 specifies that HTTP/1.1 should be negotiable with ALPN<br /> | 
-| `h2` | HTTPProtocolVersion2 specifies that HTTP/2 should be negotiable with ALPN<br /> | 
+| `http/1.0` | HTTPProtocolVersion1_0 specifies that HTTP/1.0 should be negotiable with ALPN<br /> |
+| `http/1.1` | HTTPProtocolVersion1_1 specifies that HTTP/1.1 should be negotiable with ALPN<br /> |
+| `h2` | HTTPProtocolVersion2 specifies that HTTP/2 should be negotiable with ALPN<br /> |
 
 
 #### ALSEnvoyProxyAccessLog
@@ -78,8 +78,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `HTTP` | ALSEnvoyProxyAccessLogTypeHTTP defines the HTTP access log type and will populate StreamAccessLogsMessage.http_logs.<br /> | 
-| `TCP` | ALSEnvoyProxyAccessLogTypeTCP defines the TCP access log type and will populate StreamAccessLogsMessage.tcp_logs.<br /> | 
+| `HTTP` | ALSEnvoyProxyAccessLogTypeHTTP defines the HTTP access log type and will populate StreamAccessLogsMessage.http_logs.<br /> |
+| `TCP` | ALSEnvoyProxyAccessLogTypeTCP defines the TCP access log type and will populate StreamAccessLogsMessage.tcp_logs.<br /> |
 
 
 #### ALSEnvoyProxyHTTPAccessLogConfig
@@ -163,8 +163,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Text` | ActiveHealthCheckPayloadTypeText defines the Text type payload.<br /> | 
-| `Binary` | ActiveHealthCheckPayloadTypeBinary defines the Binary type payload.<br /> | 
+| `Text` | ActiveHealthCheckPayloadTypeText defines the Text type payload.<br /> |
+| `Binary` | ActiveHealthCheckPayloadTypeBinary defines the Binary type payload.<br /> |
 
 
 #### ActiveHealthCheckerType
@@ -178,9 +178,9 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `HTTP` | ActiveHealthCheckerTypeHTTP defines the HTTP type of health checking.<br /> | 
-| `TCP` | ActiveHealthCheckerTypeTCP defines the TCP type of health checking.<br /> | 
-| `GRPC` | ActiveHealthCheckerTypeGRPC defines the GRPC type of health checking.<br /> | 
+| `HTTP` | ActiveHealthCheckerTypeHTTP defines the HTTP type of health checking.<br /> |
+| `TCP` | ActiveHealthCheckerTypeTCP defines the TCP type of health checking.<br /> |
+| `GRPC` | ActiveHealthCheckerTypeGRPC defines the GRPC type of health checking.<br /> |
 
 
 #### AppProtocolType
@@ -194,9 +194,9 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `gateway.envoyproxy.io/h2c` | AppProtocolTypeH2C defines the HTTP/2 application protocol.<br /> | 
-| `gateway.envoyproxy.io/ws` | AppProtocolTypeWS defines the WebSocket over HTTP protocol.<br /> | 
-| `gateway.envoyproxy.io/wss` | AppProtocolTypeWSS defines the WebSocket over HTTPS protocol.<br /> | 
+| `gateway.envoyproxy.io/h2c` | AppProtocolTypeH2C defines the HTTP/2 application protocol.<br /> |
+| `gateway.envoyproxy.io/ws` | AppProtocolTypeWS defines the WebSocket over HTTP protocol.<br /> |
+| `gateway.envoyproxy.io/wss` | AppProtocolTypeWSS defines the WebSocket over HTTPS protocol.<br /> |
 
 
 #### Authorization
@@ -229,8 +229,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Allow` | AuthorizationActionAllow is the action to allow the request.<br /> | 
-| `Deny` | AuthorizationActionDeny is the action to deny the request.<br /> | 
+| `Allow` | AuthorizationActionAllow is the action to allow the request.<br /> |
+| `Deny` | AuthorizationActionDeny is the action to deny the request.<br /> |
 
 
 #### AuthorizationRule
@@ -511,9 +511,9 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Merge` | Merge merges the provided bootstrap with the default one. The provided bootstrap can add or override a value<br />within a map, or add a new value to a list.<br />Please note that the provided bootstrap can't override a value within a list.<br /> | 
-| `Replace` | Replace replaces the default bootstrap with the provided one.<br /> | 
-| `JSONPatch` | JSONPatch applies the provided JSONPatches to the default bootstrap.<br /> | 
+| `Merge` | Merge merges the provided bootstrap with the default one. The provided bootstrap can add or override a value<br />within a map, or add a new value to a list.<br />Please note that the provided bootstrap can't override a value within a list.<br /> |
+| `Replace` | Replace replaces the default bootstrap with the provided one.<br /> |
+| `JSONPatch` | JSONPatch applies the provided JSONPatches to the default bootstrap.<br /> |
 
 
 #### BrotliCompressor
@@ -787,8 +787,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Gzip` |  | 
-| `Brotli` |  | 
+| `Gzip` |  |
+| `Brotli` |  |
 
 
 #### ConnectionLimit
@@ -835,9 +835,9 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `SourceIP` | SourceIPConsistentHashType hashes based on the source IP address.<br /> | 
-| `Header` | HeaderConsistentHashType hashes based on a request header.<br /> | 
-| `Cookie` | CookieConsistentHashType hashes based on a cookie.<br /> | 
+| `SourceIP` | SourceIPConsistentHashType hashes based on the source IP address.<br /> |
+| `Header` | HeaderConsistentHashType hashes based on a request header.<br /> |
+| `Cookie` | CookieConsistentHashType hashes based on a cookie.<br /> |
 
 
 #### Cookie
@@ -950,9 +950,9 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Literal` | CustomTagTypeLiteral adds hard-coded value to each span.<br /> | 
-| `Environment` | CustomTagTypeEnvironment adds value from environment variable to each span.<br /> | 
-| `RequestHeader` | CustomTagTypeRequestHeader adds value from request header to each span.<br /> | 
+| `Literal` | CustomTagTypeLiteral adds hard-coded value to each span.<br /> |
+| `Environment` | CustomTagTypeEnvironment adds value from environment variable to each span.<br /> |
+| `RequestHeader` | CustomTagTypeRequestHeader adds value from request header to each span.<br /> |
 
 
 #### DNS
@@ -1032,23 +1032,23 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `envoy.filters.http.health_check` | EnvoyFilterHealthCheck defines the Envoy HTTP health check filter.<br /> | 
-| `envoy.filters.http.fault` | EnvoyFilterFault defines the Envoy HTTP fault filter.<br /> | 
-| `envoy.filters.http.cors` | EnvoyFilterCORS defines the Envoy HTTP CORS filter.<br /> | 
-| `envoy.filters.http.ext_authz` | EnvoyFilterExtAuthz defines the Envoy HTTP external authorization filter.<br /> | 
-| `envoy.filters.http.api_key_auth` | EnvoyFilterAPIKeyAuth defines the Envoy HTTP api key authentication filter.<br /> | 
-| `envoy.filters.http.basic_auth` | EnvoyFilterBasicAuth defines the Envoy HTTP basic authentication filter.<br /> | 
-| `envoy.filters.http.oauth2` | EnvoyFilterOAuth2 defines the Envoy HTTP OAuth2 filter.<br /> | 
-| `envoy.filters.http.jwt_authn` | EnvoyFilterJWTAuthn defines the Envoy HTTP JWT authentication filter.<br /> | 
-| `envoy.filters.http.stateful_session` | EnvoyFilterSessionPersistence defines the Envoy HTTP session persistence filter.<br /> | 
-| `envoy.filters.http.ext_proc` | EnvoyFilterExtProc defines the Envoy HTTP external process filter.<br /> | 
-| `envoy.filters.http.wasm` | EnvoyFilterWasm defines the Envoy HTTP WebAssembly filter.<br /> | 
-| `envoy.filters.http.rbac` | EnvoyFilterRBAC defines the Envoy RBAC filter.<br /> | 
-| `envoy.filters.http.local_ratelimit` | EnvoyFilterLocalRateLimit defines the Envoy HTTP local rate limit filter.<br /> | 
-| `envoy.filters.http.ratelimit` | EnvoyFilterRateLimit defines the Envoy HTTP rate limit filter.<br /> | 
-| `envoy.filters.http.custom_response` | EnvoyFilterCustomResponse defines the Envoy HTTP custom response filter.<br /> | 
-| `envoy.filters.http.compressor` | EnvoyFilterCompressor defines the Envoy HTTP compressor filter.<br /> | 
-| `envoy.filters.http.router` | EnvoyFilterRouter defines the Envoy HTTP router filter.<br /> | 
+| `envoy.filters.http.health_check` | EnvoyFilterHealthCheck defines the Envoy HTTP health check filter.<br /> |
+| `envoy.filters.http.fault` | EnvoyFilterFault defines the Envoy HTTP fault filter.<br /> |
+| `envoy.filters.http.cors` | EnvoyFilterCORS defines the Envoy HTTP CORS filter.<br /> |
+| `envoy.filters.http.ext_authz` | EnvoyFilterExtAuthz defines the Envoy HTTP external authorization filter.<br /> |
+| `envoy.filters.http.api_key_auth` | EnvoyFilterAPIKeyAuth defines the Envoy HTTP api key authentication filter.<br /> |
+| `envoy.filters.http.basic_auth` | EnvoyFilterBasicAuth defines the Envoy HTTP basic authentication filter.<br /> |
+| `envoy.filters.http.oauth2` | EnvoyFilterOAuth2 defines the Envoy HTTP OAuth2 filter.<br /> |
+| `envoy.filters.http.jwt_authn` | EnvoyFilterJWTAuthn defines the Envoy HTTP JWT authentication filter.<br /> |
+| `envoy.filters.http.stateful_session` | EnvoyFilterSessionPersistence defines the Envoy HTTP session persistence filter.<br /> |
+| `envoy.filters.http.ext_proc` | EnvoyFilterExtProc defines the Envoy HTTP external process filter.<br /> |
+| `envoy.filters.http.wasm` | EnvoyFilterWasm defines the Envoy HTTP WebAssembly filter.<br /> |
+| `envoy.filters.http.rbac` | EnvoyFilterRBAC defines the Envoy RBAC filter.<br /> |
+| `envoy.filters.http.local_ratelimit` | EnvoyFilterLocalRateLimit defines the Envoy HTTP local rate limit filter.<br /> |
+| `envoy.filters.http.ratelimit` | EnvoyFilterRateLimit defines the Envoy HTTP rate limit filter.<br /> |
+| `envoy.filters.http.custom_response` | EnvoyFilterCustomResponse defines the Envoy HTTP custom response filter.<br /> |
+| `envoy.filters.http.compressor` | EnvoyFilterCompressor defines the Envoy HTTP compressor filter.<br /> |
+| `envoy.filters.http.router` | EnvoyFilterRouter defines the Envoy HTTP router filter.<br /> |
 
 
 #### EnvoyGateway
@@ -1189,13 +1189,13 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `default` | LogComponentGatewayDefault defines the "default"-wide logging component. When specified,<br />all other logging components are ignored.<br /> | 
-| `provider` | LogComponentProviderRunner defines the "provider" runner component.<br /> | 
-| `gateway-api` | LogComponentGatewayAPIRunner defines the "gateway-api" runner component.<br /> | 
-| `xds-translator` | LogComponentXdsTranslatorRunner defines the "xds-translator" runner component.<br /> | 
-| `xds-server` | LogComponentXdsServerRunner defines the "xds-server" runner component.<br /> | 
-| `infrastructure` | LogComponentInfrastructureRunner defines the "infrastructure" runner component.<br /> | 
-| `global-ratelimit` | LogComponentGlobalRateLimitRunner defines the "global-ratelimit" runner component.<br /> | 
+| `default` | LogComponentGatewayDefault defines the "default"-wide logging component. When specified,<br />all other logging components are ignored.<br /> |
+| `provider` | LogComponentProviderRunner defines the "provider" runner component.<br /> |
+| `gateway-api` | LogComponentGatewayAPIRunner defines the "gateway-api" runner component.<br /> |
+| `xds-translator` | LogComponentXdsTranslatorRunner defines the "xds-translator" runner component.<br /> |
+| `xds-server` | LogComponentXdsServerRunner defines the "xds-server" runner component.<br /> |
+| `infrastructure` | LogComponentInfrastructureRunner defines the "infrastructure" runner component.<br /> |
+| `global-ratelimit` | LogComponentGlobalRateLimitRunner defines the "global-ratelimit" runner component.<br /> |
 
 
 #### EnvoyGatewayLogging
@@ -1408,7 +1408,7 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `JSONPatch` | JSONPatchEnvoyPatchType allows the user to patch the generated xDS resources using JSONPatch semantics.<br />For more details on the semantics, please refer to https://datatracker.ietf.org/doc/html/rfc6902<br /> | 
+| `JSONPatch` | JSONPatchEnvoyPatchType allows the user to patch the generated xDS resources using JSONPatch semantics.<br />For more details on the semantics, please refer to https://datatracker.ietf.org/doc/html/rfc6902<br /> |
 
 
 #### EnvoyProxy
@@ -1512,10 +1512,10 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `type.googleapis.com/envoy.config.listener.v3.Listener` | ListenerEnvoyResourceType defines the Type URL of the Listener resource<br /> | 
-| `type.googleapis.com/envoy.config.route.v3.RouteConfiguration` | RouteConfigurationEnvoyResourceType defines the Type URL of the RouteConfiguration resource<br /> | 
-| `type.googleapis.com/envoy.config.cluster.v3.Cluster` | ClusterEnvoyResourceType defines the Type URL of the Cluster resource<br /> | 
-| `type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment` | ClusterLoadAssignmentEnvoyResourceType defines the Type URL of the ClusterLoadAssignment resource<br /> | 
+| `type.googleapis.com/envoy.config.listener.v3.Listener` | ListenerEnvoyResourceType defines the Type URL of the Listener resource<br /> |
+| `type.googleapis.com/envoy.config.route.v3.RouteConfiguration` | RouteConfigurationEnvoyResourceType defines the Type URL of the RouteConfiguration resource<br /> |
+| `type.googleapis.com/envoy.config.cluster.v3.Cluster` | ClusterEnvoyResourceType defines the Type URL of the Cluster resource<br /> |
+| `type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment` | ClusterLoadAssignmentEnvoyResourceType defines the Type URL of the ClusterLoadAssignment resource<br /> |
 
 
 #### ExtAuth
@@ -1568,9 +1568,9 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Streamed` | StreamedExtProcBodyProcessingMode will stream the body to the server in pieces as they arrive at the proxy.<br /> | 
-| `Buffered` | BufferedExtProcBodyProcessingMode will buffer the message body in memory and send the entire body at once. If the body exceeds the configured buffer limit, then the downstream system will receive an error.<br /> | 
-| `BufferedPartial` | BufferedPartialExtBodyHeaderProcessingMode will buffer the message body in memory and send the entire body in one chunk. If the body exceeds the configured buffer limit, then the body contents up to the buffer limit will be sent.<br /> | 
+| `Streamed` | StreamedExtProcBodyProcessingMode will stream the body to the server in pieces as they arrive at the proxy.<br /> |
+| `Buffered` | BufferedExtProcBodyProcessingMode will buffer the message body in memory and send the entire body at once. If the body exceeds the configured buffer limit, then the downstream system will receive an error.<br /> |
+| `BufferedPartial` | BufferedPartialExtBodyHeaderProcessingMode will buffer the message body in memory and send the entire body in one chunk. If the body exceeds the configured buffer limit, then the body contents up to the buffer limit will be sent.<br /> |
 
 
 #### ExtProcMetadata
@@ -1860,7 +1860,6 @@ _Appears in:_
 | Field | Type | Required | Default | Description |
 | ---   | ---  | ---      | ---     | ---         |
 | `rules` | _[RateLimitRule](#ratelimitrule) array_ |  true  |  | Rules are a list of RateLimit selectors and limits. Each rule and its<br />associated limit is applied in a mutually exclusive way. If a request<br />matches multiple rules, each of their associated limits get applied, so a<br />single request might increase the rate limit counters for multiple rules<br />if selected. The rate limit service will return a logical OR of the individual<br />rate limit decisions of all matching rules. For example, if a request<br />matches two rules, one rate limited and one not, the final decision will be<br />to rate limit the request. |
-| `shared` | _boolean_ |  false  | false | Shared determines whether the rate limit rules apply across all the policy targets.<br />If set to true, the rule is treated as a common bucket and is shared across all policy targets (xRoutes).<br />Must have targetRef set to Gateway<br />Default: false. |
 
 
 #### GroupVersionKind
@@ -2045,8 +2044,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Header` | HeaderHTTPHostnameModifier indicates that the Host header value would be replaced with the value of the header specified in header.<br />https://www.envoyproxy.io/docs/envoy/latest/api-v3/config/route/v3/route_components.proto#envoy-v3-api-field-config-route-v3-routeaction-host-rewrite-header<br /> | 
-| `Backend` | BackendHTTPHostnameModifier indicates that the Host header value would be replaced by the DNS name of the backend if it exists.<br />https://www.envoyproxy.io/docs/envoy/latest/api-v3/config/route/v3/route_components.proto#envoy-v3-api-field-config-route-v3-routeaction-auto-host-rewrite<br /> | 
+| `Header` | HeaderHTTPHostnameModifier indicates that the Host header value would be replaced with the value of the header specified in header.<br />https://www.envoyproxy.io/docs/envoy/latest/api-v3/config/route/v3/route_components.proto#envoy-v3-api-field-config-route-v3-routeaction-host-rewrite-header<br /> |
+| `Backend` | BackendHTTPHostnameModifier indicates that the Host header value would be replaced by the DNS name of the backend if it exists.<br />https://www.envoyproxy.io/docs/envoy/latest/api-v3/config/route/v3/route_components.proto#envoy-v3-api-field-config-route-v3-routeaction-auto-host-rewrite<br /> |
 
 
 #### HTTPPathModifier
@@ -2075,7 +2074,7 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `ReplaceRegexMatch` | RegexHTTPPathModifier This type of modifier indicates that the portions of the path that match the specified<br /> regex would be substituted with the specified substitution value<br />https://www.envoyproxy.io/docs/envoy/latest/api-v3/type/matcher/v3/regex.proto#type-matcher-v3-regexmatchandsubstitute<br /> | 
+| `ReplaceRegexMatch` | RegexHTTPPathModifier This type of modifier indicates that the portions of the path that match the specified<br /> regex would be substituted with the specified substitution value<br />https://www.envoyproxy.io/docs/envoy/latest/api-v3/type/matcher/v3/regex.proto#type-matcher-v3-regexmatchandsubstitute<br /> |
 
 
 #### HTTPRouteFilter
@@ -2212,9 +2211,9 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Exact` | HeaderMatchExact matches the exact value of the Value field against the value of<br />the specified HTTP Header.<br /> | 
-| `RegularExpression` | HeaderMatchRegularExpression matches a regular expression against the value of the<br />specified HTTP Header. The regex string must adhere to the syntax documented in<br />https://github.com/google/re2/wiki/Syntax.<br /> | 
-| `Distinct` | HeaderMatchDistinct matches any and all possible unique values encountered in the<br />specified HTTP Header. Note that each unique value will receive its own rate limit<br />bucket.<br />Note: This is only supported for Global Rate Limits.<br /> | 
+| `Exact` | HeaderMatchExact matches the exact value of the Value field against the value of<br />the specified HTTP Header.<br /> |
+| `RegularExpression` | HeaderMatchRegularExpression matches a regular expression against the value of the<br />specified HTTP Header. The regex string must adhere to the syntax documented in<br />https://github.com/google/re2/wiki/Syntax.<br /> |
+| `Distinct` | HeaderMatchDistinct matches any and all possible unique values encountered in the<br />specified HTTP Header. Note that each unique value will receive its own rate limit<br />bucket.<br />Note: This is only supported for Global Rate Limits.<br /> |
 
 
 #### HeaderSettings
@@ -2296,9 +2295,9 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `IPv4` | IPv4 defines the IPv4 family.<br /> | 
-| `IPv6` | IPv6 defines the IPv6 family.<br /> | 
-| `DualStack` | DualStack defines the dual-stack family.<br />When set to DualStack, Envoy proxy will listen on both IPv4 and IPv6 addresses<br />for incoming client traffic, enabling support for both IP protocol versions.<br /> | 
+| `IPv4` | IPv4 defines the IPv4 family.<br /> |
+| `IPv6` | IPv6 defines the IPv6 family.<br /> |
+| `DualStack` | DualStack defines the dual-stack family.<br />When set to DualStack, Envoy proxy will listen on both IPv4 and IPv6 addresses<br />for incoming client traffic, enabling support for both IP protocol versions.<br /> |
 
 
 #### ImagePullPolicy
@@ -2312,8 +2311,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `IfNotPresent` | ImagePullPolicyIfNotPresent will only pull the image if it does not already exist in the EG cache.<br /> | 
-| `Always` | ImagePullPolicyAlways will pull the image when the EnvoyExtension resource version changes.<br />Note: EG does not update the Wasm module every time an Envoy proxy requests the Wasm module.<br /> | 
+| `IfNotPresent` | ImagePullPolicyIfNotPresent will only pull the image if it does not already exist in the EG cache.<br /> |
+| `Always` | ImagePullPolicyAlways will pull the image when the EnvoyExtension resource version changes.<br />Note: EG does not update the Wasm module every time an Envoy proxy requests the Wasm module.<br /> |
 
 
 #### ImageWasmCodeSource
@@ -2343,7 +2342,7 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Host` | InfrastructureProviderTypeHost defines the "Host" provider.<br /> | 
+| `Host` | InfrastructureProviderTypeHost defines the "Host" provider.<br /> |
 
 
 #### InvalidMessageAction
@@ -2357,8 +2356,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `TerminateConnection` |  | 
-| `TerminateStream` |  | 
+| `TerminateConnection` |  |
+| `TerminateStream` |  |
 
 
 #### JSONPatchOperation
@@ -2434,8 +2433,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `String` |  | 
-| `StringArray` |  | 
+| `String` |  |
+| `StringArray` |  |
 
 
 #### JWTExtractor
@@ -2795,10 +2794,10 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `ConsistentHash` | ConsistentHashLoadBalancerType load balancer policy.<br /> | 
-| `LeastRequest` | LeastRequestLoadBalancerType load balancer policy.<br /> | 
-| `Random` | RandomLoadBalancerType load balancer policy.<br /> | 
-| `RoundRobin` | RoundRobinLoadBalancerType load balancer policy.<br /> | 
+| `ConsistentHash` | ConsistentHashLoadBalancerType load balancer policy.<br /> |
+| `LeastRequest` | LeastRequestLoadBalancerType load balancer policy.<br /> |
+| `Random` | RandomLoadBalancerType load balancer policy.<br /> |
+| `RoundRobin` | RoundRobinLoadBalancerType load balancer policy.<br /> |
 
 
 #### LocalRateLimit
@@ -2827,10 +2826,10 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `debug` | LogLevelDebug defines the "debug" logging level.<br /> | 
-| `info` | LogLevelInfo defines the "Info" logging level.<br /> | 
-| `warn` | LogLevelWarn defines the "Warn" logging level.<br /> | 
-| `error` | LogLevelError defines the "Error" logging level.<br /> | 
+| `debug` | LogLevelDebug defines the "debug" logging level.<br /> |
+| `info` | LogLevelInfo defines the "Info" logging level.<br /> |
+| `warn` | LogLevelWarn defines the "Warn" logging level.<br /> |
+| `error` | LogLevelError defines the "Error" logging level.<br /> |
 
 
 #### Lua
@@ -2861,8 +2860,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Inline` | LuaValueTypeInline defines the "Inline" Lua type.<br /> | 
-| `ValueRef` | LuaValueTypeValueRef defines the "ValueRef" Lua type.<br /> | 
+| `Inline` | LuaValueTypeInline defines the "Inline" Lua type.<br /> |
+| `ValueRef` | LuaValueTypeValueRef defines the "ValueRef" Lua type.<br /> |
 
 
 #### MergeType
@@ -2876,8 +2875,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `StrategicMerge` | StrategicMerge indicates a strategic merge patch type<br /> | 
-| `JSONMerge` | JSONMerge indicates a JSON merge patch type<br /> | 
+| `StrategicMerge` | StrategicMerge indicates a strategic merge patch type<br /> |
+| `JSONMerge` | JSONMerge indicates a JSON merge patch type<br /> |
 
 
 #### MetricSinkType
@@ -2892,7 +2891,7 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `OpenTelemetry` |  | 
+| `OpenTelemetry` |  |
 
 
 #### OIDC
@@ -3031,10 +3030,10 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `KeepUnchanged` | KeepUnchangedAction keeps escaped slashes as they arrive without changes<br /> | 
-| `RejectRequest` | RejectRequestAction rejects client requests containing escaped slashes<br />with a 400 status. gRPC requests will be rejected with the INTERNAL (13)<br />error code.<br />The "httpN.downstream_rq_failed_path_normalization" counter is incremented<br />for each rejected request.<br /> | 
-| `UnescapeAndRedirect` | UnescapeAndRedirect unescapes %2F and %5C sequences and redirects to the new path<br />if these sequences were present.<br />Redirect occurs after path normalization and merge slashes transformations if<br />they were configured. gRPC requests will be rejected with the INTERNAL (13)<br />error code.<br />This option minimizes possibility of path confusion exploits by forcing request<br />with unescaped slashes to traverse all parties: downstream client, intermediate<br />proxies, Envoy and upstream server.<br />The “httpN.downstream_rq_redirected_with_normalized_path” counter is incremented<br />for each redirected request.<br /> | 
-| `UnescapeAndForward` | UnescapeAndForward unescapes %2F and %5C sequences and forwards the request.<br />Note: this option should not be enabled if intermediaries perform path based access<br />control as it may lead to path confusion vulnerabilities.<br /> | 
+| `KeepUnchanged` | KeepUnchangedAction keeps escaped slashes as they arrive without changes<br /> |
+| `RejectRequest` | RejectRequestAction rejects client requests containing escaped slashes<br />with a 400 status. gRPC requests will be rejected with the INTERNAL (13)<br />error code.<br />The "httpN.downstream_rq_failed_path_normalization" counter is incremented<br />for each rejected request.<br /> |
+| `UnescapeAndRedirect` | UnescapeAndRedirect unescapes %2F and %5C sequences and redirects to the new path<br />if these sequences were present.<br />Redirect occurs after path normalization and merge slashes transformations if<br />they were configured. gRPC requests will be rejected with the INTERNAL (13)<br />error code.<br />This option minimizes possibility of path confusion exploits by forcing request<br />with unescaped slashes to traverse all parties: downstream client, intermediate<br />proxies, Envoy and upstream server.<br />The “httpN.downstream_rq_redirected_with_normalized_path” counter is incremented<br />for each redirected request.<br /> |
+| `UnescapeAndForward` | UnescapeAndForward unescapes %2F and %5C sequences and forwards the request.<br />Note: this option should not be enabled if intermediaries perform path based access<br />control as it may lead to path confusion vulnerabilities.<br /> |
 
 
 #### PathSettings
@@ -3129,8 +3128,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Kubernetes` | ProviderTypeKubernetes defines the "Kubernetes" provider.<br /> | 
-| `Custom` | ProviderTypeCustom defines the "Custom" provider.<br /> | 
+| `Kubernetes` | ProviderTypeKubernetes defines the "Kubernetes" provider.<br /> |
+| `Custom` | ProviderTypeCustom defines the "Custom" provider.<br /> |
 
 
 #### ProxyAccessLog
@@ -3176,8 +3175,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Text` | ProxyAccessLogFormatTypeText defines the text accesslog format.<br /> | 
-| `JSON` | ProxyAccessLogFormatTypeJSON defines the JSON accesslog format.<br /> | 
+| `Text` | ProxyAccessLogFormatTypeText defines the text accesslog format.<br /> |
+| `JSON` | ProxyAccessLogFormatTypeJSON defines the JSON accesslog format.<br /> |
 
 
 #### ProxyAccessLogSetting
@@ -3225,9 +3224,9 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `ALS` | ProxyAccessLogSinkTypeALS defines the gRPC Access Log Service (ALS) sink.<br />The service must implement the Envoy gRPC Access Log Service streaming API:<br />https://www.envoyproxy.io/docs/envoy/latest/api-v3/service/accesslog/v3/als.proto<br /> | 
-| `File` | ProxyAccessLogSinkTypeFile defines the file accesslog sink.<br /> | 
-| `OpenTelemetry` | ProxyAccessLogSinkTypeOpenTelemetry defines the OpenTelemetry accesslog sink.<br />When the provider is Kubernetes, EnvoyGateway always sends `k8s.namespace.name`<br />and `k8s.pod.name` as additional attributes.<br /> | 
+| `ALS` | ProxyAccessLogSinkTypeALS defines the gRPC Access Log Service (ALS) sink.<br />The service must implement the Envoy gRPC Access Log Service streaming API:<br />https://www.envoyproxy.io/docs/envoy/latest/api-v3/service/accesslog/v3/als.proto<br /> |
+| `File` | ProxyAccessLogSinkTypeFile defines the file accesslog sink.<br /> |
+| `OpenTelemetry` | ProxyAccessLogSinkTypeOpenTelemetry defines the OpenTelemetry accesslog sink.<br />When the provider is Kubernetes, EnvoyGateway always sends `k8s.namespace.name`<br />and `k8s.pod.name` as additional attributes.<br /> |
 
 
 #### ProxyAccessLogType
@@ -3241,8 +3240,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Listener` | ProxyAccessLogTypeListener defines the accesslog for Listeners.<br />https://www.envoyproxy.io/docs/envoy/latest/api-v3/config/listener/v3/listener.proto#envoy-v3-api-field-config-listener-v3-listener-access-log<br /> | 
-| `Route` | ProxyAccessLogTypeRoute defines the accesslog for HTTP, GRPC, UDP and TCP Routes.<br />https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/udp/udp_proxy/v3/udp_proxy.proto#envoy-v3-api-field-extensions-filters-udp-udp-proxy-v3-udpproxyconfig-access-log<br />https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/network/tcp_proxy/v3/tcp_proxy.proto#envoy-v3-api-field-extensions-filters-network-tcp-proxy-v3-tcpproxy-access-log<br />https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/network/http_connection_manager/v3/http_connection_manager.proto#envoy-v3-api-field-extensions-filters-network-http-connection-manager-v3-httpconnectionmanager-access-log<br /> | 
+| `Listener` | ProxyAccessLogTypeListener defines the accesslog for Listeners.<br />https://www.envoyproxy.io/docs/envoy/latest/api-v3/config/listener/v3/listener.proto#envoy-v3-api-field-config-listener-v3-listener-access-log<br /> |
+| `Route` | ProxyAccessLogTypeRoute defines the accesslog for HTTP, GRPC, UDP and TCP Routes.<br />https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/udp/udp_proxy/v3/udp_proxy.proto#envoy-v3-api-field-extensions-filters-udp-udp-proxy-v3-udpproxyconfig-access-log<br />https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/network/tcp_proxy/v3/tcp_proxy.proto#envoy-v3-api-field-extensions-filters-network-tcp-proxy-v3-tcpproxy-access-log<br />https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/network/http_connection_manager/v3/http_connection_manager.proto#envoy-v3-api-field-extensions-filters-network-http-connection-manager-v3-httpconnectionmanager-access-log<br /> |
 
 
 #### ProxyBootstrap
@@ -3272,16 +3271,16 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `default` | LogComponentDefault defines the default logging component.<br />See more details: https://www.envoyproxy.io/docs/envoy/latest/operations/cli#cmdoption-l<br /> | 
-| `upstream` | LogComponentUpstream defines the "upstream" logging component.<br /> | 
-| `http` | LogComponentHTTP defines the "http" logging component.<br /> | 
-| `connection` | LogComponentConnection defines the "connection" logging component.<br /> | 
-| `admin` | LogComponentAdmin defines the "admin" logging component.<br /> | 
-| `client` | LogComponentClient defines the "client" logging component.<br /> | 
-| `filter` | LogComponentFilter defines the "filter" logging component.<br /> | 
-| `main` | LogComponentMain defines the "main" logging component.<br /> | 
-| `router` | LogComponentRouter defines the "router" logging component.<br /> | 
-| `runtime` | LogComponentRuntime defines the "runtime" logging component.<br /> | 
+| `default` | LogComponentDefault defines the default logging component.<br />See more details: https://www.envoyproxy.io/docs/envoy/latest/operations/cli#cmdoption-l<br /> |
+| `upstream` | LogComponentUpstream defines the "upstream" logging component.<br /> |
+| `http` | LogComponentHTTP defines the "http" logging component.<br /> |
+| `connection` | LogComponentConnection defines the "connection" logging component.<br /> |
+| `admin` | LogComponentAdmin defines the "admin" logging component.<br /> |
+| `client` | LogComponentClient defines the "client" logging component.<br /> |
+| `filter` | LogComponentFilter defines the "filter" logging component.<br /> |
+| `main` | LogComponentMain defines the "main" logging component.<br /> |
+| `router` | LogComponentRouter defines the "router" logging component.<br /> |
+| `runtime` | LogComponentRuntime defines the "runtime" logging component.<br /> |
 
 
 #### ProxyLogging
@@ -3393,8 +3392,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `V1` | ProxyProtocolVersionV1 is the PROXY protocol version 1 (human readable format).<br /> | 
-| `V2` | ProxyProtocolVersionV2 is the PROXY protocol version 2 (binary format).<br /> | 
+| `V1` | ProxyProtocolVersionV1 is the PROXY protocol version 1 (human readable format).<br /> |
+| `V2` | ProxyProtocolVersionV2 is the PROXY protocol version 2 (binary format).<br /> |
 
 
 #### ProxyTelemetry
@@ -3476,8 +3475,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Number` | RateLimitCostFromNumber specifies the rate limit cost to be a fixed number.<br /> | 
-| `Metadata` | RateLimitCostFromMetadata specifies the rate limit cost to be retrieved from the per-request dynamic metadata.<br /> | 
+| `Number` | RateLimitCostFromNumber specifies the rate limit cost to be a fixed number.<br /> |
+| `Metadata` | RateLimitCostFromMetadata specifies the rate limit cost to be retrieved from the per-request dynamic metadata.<br /> |
 
 
 #### RateLimitCostMetadata
@@ -3539,7 +3538,7 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Redis` | RedisBackendType uses a redis database for the rate limit service.<br /> | 
+| `Redis` | RedisBackendType uses a redis database for the rate limit service.<br /> |
 
 
 #### RateLimitMetrics
@@ -3703,8 +3702,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Global` | GlobalRateLimitType allows the rate limits to be applied across all Envoy<br />proxy instances.<br /> | 
-| `Local` | LocalRateLimitType allows the rate limits to be applied on a per Envoy<br />proxy instance basis.<br /> | 
+| `Global` | GlobalRateLimitType allows the rate limits to be applied across all Envoy<br />proxy instances.<br /> |
+| `Local` | LocalRateLimitType allows the rate limits to be applied on a per Envoy<br />proxy instance basis.<br /> |
 
 
 #### RateLimitUnit
@@ -3719,10 +3718,10 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Second` | RateLimitUnitSecond specifies the rate limit interval to be 1 second.<br /> | 
-| `Minute` | RateLimitUnitMinute specifies the rate limit interval to be 1 minute.<br /> | 
-| `Hour` | RateLimitUnitHour specifies the rate limit interval to be 1 hour.<br /> | 
-| `Day` | RateLimitUnitDay specifies the rate limit interval to be 1 day.<br /> | 
+| `Second` | RateLimitUnitSecond specifies the rate limit interval to be 1 second.<br /> |
+| `Minute` | RateLimitUnitMinute specifies the rate limit interval to be 1 minute.<br /> |
+| `Hour` | RateLimitUnitHour specifies the rate limit interval to be 1 hour.<br /> |
+| `Day` | RateLimitUnitDay specifies the rate limit interval to be 1 day.<br /> |
 
 
 #### RateLimitValue
@@ -3812,7 +3811,7 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `File` | ResourceProviderTypeFile defines the "File" provider.<br /> | 
+| `File` | ResourceProviderTypeFile defines the "File" provider.<br /> |
 
 
 #### ResponseOverride
@@ -3841,8 +3840,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Inline` | ResponseValueTypeInline defines the "Inline" response body type.<br /> | 
-| `ValueRef` | ResponseValueTypeValueRef defines the "ValueRef" response body type.<br /> | 
+| `Inline` | ResponseValueTypeInline defines the "Inline" response body type.<br /> |
+| `ValueRef` | ResponseValueTypeValueRef defines the "ValueRef" response body type.<br /> |
 
 
 #### Retry
@@ -3888,8 +3887,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Service` | ServiceRoutingType is the RoutingType for Service Cluster IP routing.<br /> | 
-| `Endpoint` | EndpointRoutingType is the RoutingType for Endpoint routing.<br /> | 
+| `Service` | ServiceRoutingType is the RoutingType for Service Cluster IP routing.<br /> |
+| `Endpoint` | EndpointRoutingType is the RoutingType for Endpoint routing.<br /> |
 
 
 #### SecurityPolicy
@@ -3946,8 +3945,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Cluster` | ServiceExternalTrafficPolicyCluster routes traffic to all endpoints.<br /> | 
-| `Local` | ServiceExternalTrafficPolicyLocal preserves the source IP of the traffic by<br />routing only to endpoints on the same node as the traffic was received on<br />(dropping the traffic if there are no local endpoints).<br /> | 
+| `Cluster` | ServiceExternalTrafficPolicyCluster routes traffic to all endpoints.<br /> |
+| `Local` | ServiceExternalTrafficPolicyLocal preserves the source IP of the traffic by<br />routing only to endpoints on the same node as the traffic was received on<br />(dropping the traffic if there are no local endpoints).<br /> |
 
 
 #### ServiceType
@@ -3961,9 +3960,9 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `ClusterIP` | ServiceTypeClusterIP means a service will only be accessible inside the<br />cluster, via the cluster IP.<br /> | 
-| `LoadBalancer` | ServiceTypeLoadBalancer means a service will be exposed via an<br />external load balancer (if the cloud provider supports it).<br /> | 
-| `NodePort` | ServiceTypeNodePort means a service will be exposed on each Kubernetes Node<br />at a static Port, common across all Nodes.<br /> | 
+| `ClusterIP` | ServiceTypeClusterIP means a service will only be accessible inside the<br />cluster, via the cluster IP.<br /> |
+| `LoadBalancer` | ServiceTypeLoadBalancer means a service will be exposed via an<br />external load balancer (if the cloud provider supports it).<br /> |
+| `NodePort` | ServiceTypeNodePort means a service will be exposed on each Kubernetes Node<br />at a static Port, common across all Nodes.<br /> |
 
 
 #### Session
@@ -4064,8 +4063,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Exact` | SourceMatchExact All IP Addresses within the specified Source IP CIDR are treated as a single client selector<br />and share the same rate limit bucket.<br /> | 
-| `Distinct` | SourceMatchDistinct Each IP Address within the specified Source IP CIDR is treated as a distinct client selector<br />and uses a separate rate limit bucket/counter.<br />Note: This is only supported for Global Rate Limits.<br /> | 
+| `Exact` | SourceMatchExact All IP Addresses within the specified Source IP CIDR are treated as a single client selector<br />and share the same rate limit bucket.<br /> |
+| `Distinct` | SourceMatchDistinct Each IP Address within the specified Source IP CIDR is treated as a distinct client selector<br />and uses a separate rate limit bucket/counter.<br />Note: This is only supported for Global Rate Limits.<br /> |
 
 
 #### StatefulTLSSessionResumption
@@ -4141,8 +4140,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Value` | StatusCodeValueTypeValue defines the "Value" status code match type.<br /> | 
-| `Range` | StatusCodeValueTypeRange defines the "Range" status code match type.<br /> | 
+| `Value` | StatusCodeValueTypeValue defines the "Value" status code match type.<br /> |
+| `Range` | StatusCodeValueTypeRange defines the "Range" status code match type.<br /> |
 
 
 #### StringMatch
@@ -4174,10 +4173,10 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Exact` | StringMatchExact :the input string must match exactly the match value.<br /> | 
-| `Prefix` | StringMatchPrefix :the input string must start with the match value.<br /> | 
-| `Suffix` | StringMatchSuffix :the input string must end with the match value.<br /> | 
-| `RegularExpression` | StringMatchRegularExpression :The input string must match the regular expression<br />specified in the match value.<br />The regex string must adhere to the syntax documented in<br />https://github.com/google/re2/wiki/Syntax.<br /> | 
+| `Exact` | StringMatchExact :the input string must match exactly the match value.<br /> |
+| `Prefix` | StringMatchPrefix :the input string must start with the match value.<br /> |
+| `Suffix` | StringMatchSuffix :the input string must end with the match value.<br /> |
+| `RegularExpression` | StringMatchRegularExpression :The input string must match the regular expression<br />specified in the match value.<br />The regex string must adhere to the syntax documented in<br />https://github.com/google/re2/wiki/Syntax.<br /> |
 
 
 #### TCPActiveHealthChecker
@@ -4274,11 +4273,11 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Auto` | TLSAuto allows Envoy to choose the optimal TLS Version<br /> | 
-| `1.0` | TLS1.0 specifies TLS version 1.0<br /> | 
-| `1.1` | TLS1.1 specifies TLS version 1.1<br /> | 
-| `1.2` | TLSv1.2 specifies TLS version 1.2<br /> | 
-| `1.3` | TLSv1.3 specifies TLS version 1.3<br /> | 
+| `Auto` | TLSAuto allows Envoy to choose the optimal TLS Version<br /> |
+| `1.0` | TLS1.0 specifies TLS version 1.0<br /> |
+| `1.1` | TLS1.1 specifies TLS version 1.1<br /> |
+| `1.2` | TLSv1.2 specifies TLS version 1.2<br /> |
+| `1.3` | TLSv1.3 specifies TLS version 1.3<br /> |
 
 
 #### TargetSelector
@@ -4348,10 +4347,10 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `OpenTelemetry` |  | 
-| `OpenTelemetry` |  | 
-| `Zipkin` |  | 
-| `Datadog` |  | 
+| `OpenTelemetry` |  |
+| `OpenTelemetry` |  |
+| `Zipkin` |  |
+| `Datadog` |  |
 
 
 #### TriggerEnum
@@ -4365,18 +4364,18 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `5xx` | The upstream server responds with any 5xx response code, or does not respond at all (disconnect/reset/read timeout).<br />Includes connect-failure and refused-stream.<br /> | 
-| `gateway-error` | The response is a gateway error (502,503 or 504).<br /> | 
-| `reset` | The upstream server does not respond at all (disconnect/reset/read timeout.)<br /> | 
-| `connect-failure` | Connection failure to the upstream server (connect timeout, etc.). (Included in *5xx*)<br /> | 
-| `retriable-4xx` | The upstream server responds with a retriable 4xx response code.<br />Currently, the only response code in this category is 409.<br /> | 
-| `refused-stream` | The upstream server resets the stream with a REFUSED_STREAM error code.<br /> | 
-| `retriable-status-codes` | The upstream server responds with any response code matching one defined in the RetriableStatusCodes.<br /> | 
-| `cancelled` | The gRPC status code in the response headers is “cancelled”.<br /> | 
-| `deadline-exceeded` | The gRPC status code in the response headers is “deadline-exceeded”.<br /> | 
-| `internal` | The gRPC status code in the response headers is “internal”.<br /> | 
-| `resource-exhausted` | The gRPC status code in the response headers is “resource-exhausted”.<br /> | 
-| `unavailable` | The gRPC status code in the response headers is “unavailable”.<br /> | 
+| `5xx` | The upstream server responds with any 5xx response code, or does not respond at all (disconnect/reset/read timeout).<br />Includes connect-failure and refused-stream.<br /> |
+| `gateway-error` | The response is a gateway error (502,503 or 504).<br /> |
+| `reset` | The upstream server does not respond at all (disconnect/reset/read timeout.)<br /> |
+| `connect-failure` | Connection failure to the upstream server (connect timeout, etc.). (Included in *5xx*)<br /> |
+| `retriable-4xx` | The upstream server responds with a retriable 4xx response code.<br />Currently, the only response code in this category is 409.<br /> |
+| `refused-stream` | The upstream server resets the stream with a REFUSED_STREAM error code.<br /> |
+| `retriable-status-codes` | The upstream server responds with any response code matching one defined in the RetriableStatusCodes.<br /> |
+| `cancelled` | The gRPC status code in the response headers is “cancelled”.<br /> |
+| `deadline-exceeded` | The gRPC status code in the response headers is “deadline-exceeded”.<br /> |
+| `internal` | The gRPC status code in the response headers is “internal”.<br /> |
+| `resource-exhausted` | The gRPC status code in the response headers is “resource-exhausted”.<br /> |
+| `unavailable` | The gRPC status code in the response headers is “unavailable”.<br /> |
 
 
 #### UnixSocket
@@ -4446,8 +4445,8 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `HTTP` | HTTPWasmCodeSourceType allows the user to specify the Wasm code in an HTTP URL.<br /> | 
-| `Image` | ImageWasmCodeSourceType allows the user to specify the Wasm code in an OCI image.<br /> | 
+| `HTTP` | HTTPWasmCodeSourceType allows the user to specify the Wasm code in an HTTP URL.<br /> |
+| `Image` | ImageWasmCodeSourceType allows the user to specify the Wasm code in an OCI image.<br /> |
 
 
 #### WasmEnv
@@ -4476,9 +4475,9 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Allow` | WithUnderscoresActionAllow allows headers with underscores to be passed through.<br /> | 
-| `RejectRequest` | WithUnderscoresActionRejectRequest rejects the client request. HTTP/1 requests are rejected with<br />the 400 status. HTTP/2 requests end with the stream reset.<br /> | 
-| `DropHeader` | WithUnderscoresActionDropHeader drops the client header with name containing underscores. The header<br />is dropped before the filter chain is invoked and as such filters will not see<br />dropped headers.<br /> | 
+| `Allow` | WithUnderscoresActionAllow allows headers with underscores to be passed through.<br /> |
+| `RejectRequest` | WithUnderscoresActionRejectRequest rejects the client request. HTTP/1 requests are rejected with<br />the 400 status. HTTP/2 requests end with the stream reset.<br /> |
+| `DropHeader` | WithUnderscoresActionDropHeader drops the client header with name containing underscores. The header<br />is dropped before the filter chain is invoked and as such filters will not see<br />dropped headers.<br /> |
 
 
 #### XDSTranslatorHook
@@ -4493,10 +4492,10 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `VirtualHost` |  | 
-| `Route` |  | 
-| `HTTPListener` |  | 
-| `Translation` |  | 
+| `VirtualHost` |  |
+| `Route` |  |
+| `HTTPListener` |  |
+| `Translation` |  |
 
 
 #### XDSTranslatorHooks
@@ -4525,11 +4524,11 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Subject` | XFCCCertDataSubject is the Subject field of the current client certificate.<br /> | 
-| `Cert` | XFCCCertDataCert is the entire client certificate in URL encoded PEM format.<br /> | 
-| `Chain` | XFCCCertDataChain is the entire client certificate chain (including the leaf certificate) in URL encoded PEM format.<br /> | 
-| `DNS` | XFCCCertDataDNS is the DNS type Subject Alternative Name field of the current client certificate.<br /> | 
-| `URI` | XFCCCertDataURI is the URI type Subject Alternative Name field of the current client certificate.<br /> | 
+| `Subject` | XFCCCertDataSubject is the Subject field of the current client certificate.<br /> |
+| `Cert` | XFCCCertDataCert is the entire client certificate in URL encoded PEM format.<br /> |
+| `Chain` | XFCCCertDataChain is the entire client certificate chain (including the leaf certificate) in URL encoded PEM format.<br /> |
+| `DNS` | XFCCCertDataDNS is the DNS type Subject Alternative Name field of the current client certificate.<br /> |
+| `URI` | XFCCCertDataURI is the URI type Subject Alternative Name field of the current client certificate.<br /> |
 
 
 #### XFCCForwardMode
@@ -4543,11 +4542,11 @@ _Appears in:_
 
 | Value | Description |
 | ----- | ----------- |
-| `Sanitize` | XFCCForwardModeSanitize removes the XFCC header from the request. This is the default mode.<br /> | 
-| `ForwardOnly` | XFCCForwardModeForwardOnly forwards the XFCC header in the request if the client connection is mTLS.<br /> | 
-| `AppendForward` | XFCCForwardModeAppendForward appends the client certificate information to the request’s XFCC header and forward it if the client connection is mTLS.<br /> | 
-| `SanitizeSet` | XFCCForwardModeSanitizeSet resets the XFCC header with the client certificate information and forward it if the client connection is mTLS.<br />The existing certificate information in the XFCC header is removed.<br /> | 
-| `AlwaysForwardOnly` | XFCCForwardModeAlwaysForwardOnly always forwards the XFCC header in the request, regardless of whether the client connection is mTLS.<br /> | 
+| `Sanitize` | XFCCForwardModeSanitize removes the XFCC header from the request. This is the default mode.<br /> |
+| `ForwardOnly` | XFCCForwardModeForwardOnly forwards the XFCC header in the request if the client connection is mTLS.<br /> |
+| `AppendForward` | XFCCForwardModeAppendForward appends the client certificate information to the request’s XFCC header and forward it if the client connection is mTLS.<br /> |
+| `SanitizeSet` | XFCCForwardModeSanitizeSet resets the XFCC header with the client certificate information and forward it if the client connection is mTLS.<br />The existing certificate information in the XFCC header is removed.<br /> |
+| `AlwaysForwardOnly` | XFCCForwardModeAlwaysForwardOnly always forwards the XFCC header in the request, regardless of whether the client connection is mTLS.<br /> |
 
 
 #### XForwardedClientCert