diff --git a/go/destination/destination.pb.go b/go/destination/destination.pb.go
index 11ae0d8cd..d7fc1040f 100644
--- a/go/destination/destination.pb.go
+++ b/go/destination/destination.pb.go
@@ -1,6 +1,6 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.34.2
+// 	protoc-gen-go v1.35.1
 // 	protoc        v3.12.4
 // source: destination.proto
 
@@ -41,11 +41,9 @@ type GetDestination struct {
 
 func (x *GetDestination) Reset() {
 	*x = GetDestination{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_destination_proto_msgTypes[0]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_destination_proto_msgTypes[0]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *GetDestination) String() string {
@@ -56,7 +54,7 @@ func (*GetDestination) ProtoMessage() {}
 
 func (x *GetDestination) ProtoReflect() protoreflect.Message {
 	mi := &file_destination_proto_msgTypes[0]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -107,11 +105,9 @@ type Update struct {
 
 func (x *Update) Reset() {
 	*x = Update{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_destination_proto_msgTypes[1]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_destination_proto_msgTypes[1]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *Update) String() string {
@@ -122,7 +118,7 @@ func (*Update) ProtoMessage() {}
 
 func (x *Update) ProtoReflect() protoreflect.Message {
 	mi := &file_destination_proto_msgTypes[1]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -205,11 +201,9 @@ type AddrSet struct {
 
 func (x *AddrSet) Reset() {
 	*x = AddrSet{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_destination_proto_msgTypes[2]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_destination_proto_msgTypes[2]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *AddrSet) String() string {
@@ -220,7 +214,7 @@ func (*AddrSet) ProtoMessage() {}
 
 func (x *AddrSet) ProtoReflect() protoreflect.Message {
 	mi := &file_destination_proto_msgTypes[2]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -253,11 +247,9 @@ type WeightedAddrSet struct {
 
 func (x *WeightedAddrSet) Reset() {
 	*x = WeightedAddrSet{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_destination_proto_msgTypes[3]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_destination_proto_msgTypes[3]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *WeightedAddrSet) String() string {
@@ -268,7 +260,7 @@ func (*WeightedAddrSet) ProtoMessage() {}
 
 func (x *WeightedAddrSet) ProtoReflect() protoreflect.Message {
 	mi := &file_destination_proto_msgTypes[3]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -317,11 +309,9 @@ type WeightedAddr struct {
 
 func (x *WeightedAddr) Reset() {
 	*x = WeightedAddr{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_destination_proto_msgTypes[4]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_destination_proto_msgTypes[4]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *WeightedAddr) String() string {
@@ -332,7 +322,7 @@ func (*WeightedAddr) ProtoMessage() {}
 
 func (x *WeightedAddr) ProtoReflect() protoreflect.Message {
 	mi := &file_destination_proto_msgTypes[4]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -414,11 +404,9 @@ type TlsIdentity struct {
 
 func (x *TlsIdentity) Reset() {
 	*x = TlsIdentity{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_destination_proto_msgTypes[5]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_destination_proto_msgTypes[5]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *TlsIdentity) String() string {
@@ -429,7 +417,7 @@ func (*TlsIdentity) ProtoMessage() {}
 
 func (x *TlsIdentity) ProtoReflect() protoreflect.Message {
 	mi := &file_destination_proto_msgTypes[5]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -498,11 +486,9 @@ type AuthorityOverride struct {
 
 func (x *AuthorityOverride) Reset() {
 	*x = AuthorityOverride{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_destination_proto_msgTypes[6]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_destination_proto_msgTypes[6]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *AuthorityOverride) String() string {
@@ -513,7 +499,7 @@ func (*AuthorityOverride) ProtoMessage() {}
 
 func (x *AuthorityOverride) ProtoReflect() protoreflect.Message {
 	mi := &file_destination_proto_msgTypes[6]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -545,11 +531,9 @@ type NoEndpoints struct {
 
 func (x *NoEndpoints) Reset() {
 	*x = NoEndpoints{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_destination_proto_msgTypes[7]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_destination_proto_msgTypes[7]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *NoEndpoints) String() string {
@@ -560,7 +544,7 @@ func (*NoEndpoints) ProtoMessage() {}
 
 func (x *NoEndpoints) ProtoReflect() protoreflect.Message {
 	mi := &file_destination_proto_msgTypes[7]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -601,11 +585,9 @@ type ProtocolHint struct {
 
 func (x *ProtocolHint) Reset() {
 	*x = ProtocolHint{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_destination_proto_msgTypes[8]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_destination_proto_msgTypes[8]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *ProtocolHint) String() string {
@@ -616,7 +598,7 @@ func (*ProtocolHint) ProtoMessage() {}
 
 func (x *ProtocolHint) ProtoReflect() protoreflect.Message {
 	mi := &file_destination_proto_msgTypes[8]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -696,11 +678,9 @@ type Http2ClientParams struct {
 
 func (x *Http2ClientParams) Reset() {
 	*x = Http2ClientParams{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_destination_proto_msgTypes[9]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_destination_proto_msgTypes[9]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *Http2ClientParams) String() string {
@@ -711,7 +691,7 @@ func (*Http2ClientParams) ProtoMessage() {}
 
 func (x *Http2ClientParams) ProtoReflect() protoreflect.Message {
 	mi := &file_destination_proto_msgTypes[9]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -793,11 +773,9 @@ type DestinationProfile struct {
 
 func (x *DestinationProfile) Reset() {
 	*x = DestinationProfile{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_destination_proto_msgTypes[10]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_destination_proto_msgTypes[10]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *DestinationProfile) String() string {
@@ -808,7 +786,7 @@ func (*DestinationProfile) ProtoMessage() {}
 
 func (x *DestinationProfile) ProtoReflect() protoreflect.Message {
 	mi := &file_destination_proto_msgTypes[10]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -889,11 +867,9 @@ type Route struct {
 
 func (x *Route) Reset() {
 	*x = Route{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_destination_proto_msgTypes[11]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_destination_proto_msgTypes[11]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *Route) String() string {
@@ -904,7 +880,7 @@ func (*Route) ProtoMessage() {}
 
 func (x *Route) ProtoReflect() protoreflect.Message {
 	mi := &file_destination_proto_msgTypes[11]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -977,11 +953,9 @@ type RetryBudget struct {
 
 func (x *RetryBudget) Reset() {
 	*x = RetryBudget{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_destination_proto_msgTypes[12]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_destination_proto_msgTypes[12]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *RetryBudget) String() string {
@@ -992,7 +966,7 @@ func (*RetryBudget) ProtoMessage() {}
 
 func (x *RetryBudget) ProtoReflect() protoreflect.Message {
 	mi := &file_destination_proto_msgTypes[12]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1042,11 +1016,9 @@ type ResponseClass struct {
 
 func (x *ResponseClass) Reset() {
 	*x = ResponseClass{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_destination_proto_msgTypes[13]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_destination_proto_msgTypes[13]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *ResponseClass) String() string {
@@ -1057,7 +1029,7 @@ func (*ResponseClass) ProtoMessage() {}
 
 func (x *ResponseClass) ProtoReflect() protoreflect.Message {
 	mi := &file_destination_proto_msgTypes[13]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1103,11 +1075,9 @@ type RequestMatch struct {
 
 func (x *RequestMatch) Reset() {
 	*x = RequestMatch{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_destination_proto_msgTypes[14]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_destination_proto_msgTypes[14]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *RequestMatch) String() string {
@@ -1118,7 +1088,7 @@ func (*RequestMatch) ProtoMessage() {}
 
 func (x *RequestMatch) ProtoReflect() protoreflect.Message {
 	mi := &file_destination_proto_msgTypes[14]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1220,11 +1190,9 @@ type PathMatch struct {
 
 func (x *PathMatch) Reset() {
 	*x = PathMatch{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_destination_proto_msgTypes[15]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_destination_proto_msgTypes[15]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *PathMatch) String() string {
@@ -1235,7 +1203,7 @@ func (*PathMatch) ProtoMessage() {}
 
 func (x *PathMatch) ProtoReflect() protoreflect.Message {
 	mi := &file_destination_proto_msgTypes[15]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1273,11 +1241,9 @@ type ResponseMatch struct {
 
 func (x *ResponseMatch) Reset() {
 	*x = ResponseMatch{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_destination_proto_msgTypes[16]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_destination_proto_msgTypes[16]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *ResponseMatch) String() string {
@@ -1288,7 +1254,7 @@ func (*ResponseMatch) ProtoMessage() {}
 
 func (x *ResponseMatch) ProtoReflect() protoreflect.Message {
 	mi := &file_destination_proto_msgTypes[16]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1381,11 +1347,9 @@ type HttpStatusRange struct {
 
 func (x *HttpStatusRange) Reset() {
 	*x = HttpStatusRange{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_destination_proto_msgTypes[17]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_destination_proto_msgTypes[17]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *HttpStatusRange) String() string {
@@ -1396,7 +1360,7 @@ func (*HttpStatusRange) ProtoMessage() {}
 
 func (x *HttpStatusRange) ProtoReflect() protoreflect.Message {
 	mi := &file_destination_proto_msgTypes[17]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1440,11 +1404,9 @@ type WeightedDst struct {
 
 func (x *WeightedDst) Reset() {
 	*x = WeightedDst{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_destination_proto_msgTypes[18]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_destination_proto_msgTypes[18]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *WeightedDst) String() string {
@@ -1455,7 +1417,7 @@ func (*WeightedDst) ProtoMessage() {}
 
 func (x *WeightedDst) ProtoReflect() protoreflect.Message {
 	mi := &file_destination_proto_msgTypes[18]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1500,11 +1462,9 @@ type TlsIdentity_DnsLikeIdentity struct {
 
 func (x *TlsIdentity_DnsLikeIdentity) Reset() {
 	*x = TlsIdentity_DnsLikeIdentity{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_destination_proto_msgTypes[21]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_destination_proto_msgTypes[21]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *TlsIdentity_DnsLikeIdentity) String() string {
@@ -1515,7 +1475,7 @@ func (*TlsIdentity_DnsLikeIdentity) ProtoMessage() {}
 
 func (x *TlsIdentity_DnsLikeIdentity) ProtoReflect() protoreflect.Message {
 	mi := &file_destination_proto_msgTypes[21]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1553,11 +1513,9 @@ type TlsIdentity_UriLikeIdentity struct {
 
 func (x *TlsIdentity_UriLikeIdentity) Reset() {
 	*x = TlsIdentity_UriLikeIdentity{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_destination_proto_msgTypes[22]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_destination_proto_msgTypes[22]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *TlsIdentity_UriLikeIdentity) String() string {
@@ -1568,7 +1526,7 @@ func (*TlsIdentity_UriLikeIdentity) ProtoMessage() {}
 
 func (x *TlsIdentity_UriLikeIdentity) ProtoReflect() protoreflect.Message {
 	mi := &file_destination_proto_msgTypes[22]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1598,11 +1556,9 @@ type ProtocolHint_H2 struct {
 
 func (x *ProtocolHint_H2) Reset() {
 	*x = ProtocolHint_H2{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_destination_proto_msgTypes[23]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_destination_proto_msgTypes[23]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *ProtocolHint_H2) String() string {
@@ -1613,7 +1569,7 @@ func (*ProtocolHint_H2) ProtoMessage() {}
 
 func (x *ProtocolHint_H2) ProtoReflect() protoreflect.Message {
 	mi := &file_destination_proto_msgTypes[23]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1636,11 +1592,9 @@ type ProtocolHint_Opaque struct {
 
 func (x *ProtocolHint_Opaque) Reset() {
 	*x = ProtocolHint_Opaque{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_destination_proto_msgTypes[24]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_destination_proto_msgTypes[24]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *ProtocolHint_Opaque) String() string {
@@ -1651,7 +1605,7 @@ func (*ProtocolHint_Opaque) ProtoMessage() {}
 
 func (x *ProtocolHint_Opaque) ProtoReflect() protoreflect.Message {
 	mi := &file_destination_proto_msgTypes[24]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1677,11 +1631,9 @@ type ProtocolHint_OpaqueTransport struct {
 
 func (x *ProtocolHint_OpaqueTransport) Reset() {
 	*x = ProtocolHint_OpaqueTransport{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_destination_proto_msgTypes[25]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_destination_proto_msgTypes[25]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *ProtocolHint_OpaqueTransport) String() string {
@@ -1692,7 +1644,7 @@ func (*ProtocolHint_OpaqueTransport) ProtoMessage() {}
 
 func (x *ProtocolHint_OpaqueTransport) ProtoReflect() protoreflect.Message {
 	mi := &file_destination_proto_msgTypes[25]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1729,11 +1681,9 @@ type Http2ClientParams_FlowControl struct {
 
 func (x *Http2ClientParams_FlowControl) Reset() {
 	*x = Http2ClientParams_FlowControl{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_destination_proto_msgTypes[26]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_destination_proto_msgTypes[26]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *Http2ClientParams_FlowControl) String() string {
@@ -1744,7 +1694,7 @@ func (*Http2ClientParams_FlowControl) ProtoMessage() {}
 
 func (x *Http2ClientParams_FlowControl) ProtoReflect() protoreflect.Message {
 	mi := &file_destination_proto_msgTypes[26]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1796,11 +1746,9 @@ type Http2ClientParams_KeepAlive struct {
 
 func (x *Http2ClientParams_KeepAlive) Reset() {
 	*x = Http2ClientParams_KeepAlive{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_destination_proto_msgTypes[27]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_destination_proto_msgTypes[27]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *Http2ClientParams_KeepAlive) String() string {
@@ -1811,7 +1759,7 @@ func (*Http2ClientParams_KeepAlive) ProtoMessage() {}
 
 func (x *Http2ClientParams_KeepAlive) ProtoReflect() protoreflect.Message {
 	mi := &file_destination_proto_msgTypes[27]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1859,11 +1807,9 @@ type Http2ClientParams_Internals struct {
 
 func (x *Http2ClientParams_Internals) Reset() {
 	*x = Http2ClientParams_Internals{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_destination_proto_msgTypes[28]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_destination_proto_msgTypes[28]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *Http2ClientParams_Internals) String() string {
@@ -1874,7 +1820,7 @@ func (*Http2ClientParams_Internals) ProtoMessage() {}
 
 func (x *Http2ClientParams_Internals) ProtoReflect() protoreflect.Message {
 	mi := &file_destination_proto_msgTypes[28]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1920,11 +1866,9 @@ type RequestMatch_Seq struct {
 
 func (x *RequestMatch_Seq) Reset() {
 	*x = RequestMatch_Seq{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_destination_proto_msgTypes[30]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_destination_proto_msgTypes[30]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *RequestMatch_Seq) String() string {
@@ -1935,7 +1879,7 @@ func (*RequestMatch_Seq) ProtoMessage() {}
 
 func (x *RequestMatch_Seq) ProtoReflect() protoreflect.Message {
 	mi := &file_destination_proto_msgTypes[30]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1967,11 +1911,9 @@ type ResponseMatch_Seq struct {
 
 func (x *ResponseMatch_Seq) Reset() {
 	*x = ResponseMatch_Seq{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_destination_proto_msgTypes[31]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_destination_proto_msgTypes[31]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *ResponseMatch_Seq) String() string {
@@ -1982,7 +1924,7 @@ func (*ResponseMatch_Seq) ProtoMessage() {}
 
 func (x *ResponseMatch_Seq) ProtoReflect() protoreflect.Message {
 	mi := &file_destination_proto_msgTypes[31]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -2458,356 +2400,6 @@ func file_destination_proto_init() {
 	if File_destination_proto != nil {
 		return
 	}
-	if !protoimpl.UnsafeEnabled {
-		file_destination_proto_msgTypes[0].Exporter = func(v any, i int) any {
-			switch v := v.(*GetDestination); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_destination_proto_msgTypes[1].Exporter = func(v any, i int) any {
-			switch v := v.(*Update); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_destination_proto_msgTypes[2].Exporter = func(v any, i int) any {
-			switch v := v.(*AddrSet); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_destination_proto_msgTypes[3].Exporter = func(v any, i int) any {
-			switch v := v.(*WeightedAddrSet); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_destination_proto_msgTypes[4].Exporter = func(v any, i int) any {
-			switch v := v.(*WeightedAddr); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_destination_proto_msgTypes[5].Exporter = func(v any, i int) any {
-			switch v := v.(*TlsIdentity); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_destination_proto_msgTypes[6].Exporter = func(v any, i int) any {
-			switch v := v.(*AuthorityOverride); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_destination_proto_msgTypes[7].Exporter = func(v any, i int) any {
-			switch v := v.(*NoEndpoints); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_destination_proto_msgTypes[8].Exporter = func(v any, i int) any {
-			switch v := v.(*ProtocolHint); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_destination_proto_msgTypes[9].Exporter = func(v any, i int) any {
-			switch v := v.(*Http2ClientParams); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_destination_proto_msgTypes[10].Exporter = func(v any, i int) any {
-			switch v := v.(*DestinationProfile); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_destination_proto_msgTypes[11].Exporter = func(v any, i int) any {
-			switch v := v.(*Route); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_destination_proto_msgTypes[12].Exporter = func(v any, i int) any {
-			switch v := v.(*RetryBudget); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_destination_proto_msgTypes[13].Exporter = func(v any, i int) any {
-			switch v := v.(*ResponseClass); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_destination_proto_msgTypes[14].Exporter = func(v any, i int) any {
-			switch v := v.(*RequestMatch); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_destination_proto_msgTypes[15].Exporter = func(v any, i int) any {
-			switch v := v.(*PathMatch); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_destination_proto_msgTypes[16].Exporter = func(v any, i int) any {
-			switch v := v.(*ResponseMatch); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_destination_proto_msgTypes[17].Exporter = func(v any, i int) any {
-			switch v := v.(*HttpStatusRange); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_destination_proto_msgTypes[18].Exporter = func(v any, i int) any {
-			switch v := v.(*WeightedDst); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_destination_proto_msgTypes[21].Exporter = func(v any, i int) any {
-			switch v := v.(*TlsIdentity_DnsLikeIdentity); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_destination_proto_msgTypes[22].Exporter = func(v any, i int) any {
-			switch v := v.(*TlsIdentity_UriLikeIdentity); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_destination_proto_msgTypes[23].Exporter = func(v any, i int) any {
-			switch v := v.(*ProtocolHint_H2); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_destination_proto_msgTypes[24].Exporter = func(v any, i int) any {
-			switch v := v.(*ProtocolHint_Opaque); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_destination_proto_msgTypes[25].Exporter = func(v any, i int) any {
-			switch v := v.(*ProtocolHint_OpaqueTransport); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_destination_proto_msgTypes[26].Exporter = func(v any, i int) any {
-			switch v := v.(*Http2ClientParams_FlowControl); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_destination_proto_msgTypes[27].Exporter = func(v any, i int) any {
-			switch v := v.(*Http2ClientParams_KeepAlive); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_destination_proto_msgTypes[28].Exporter = func(v any, i int) any {
-			switch v := v.(*Http2ClientParams_Internals); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_destination_proto_msgTypes[30].Exporter = func(v any, i int) any {
-			switch v := v.(*RequestMatch_Seq); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_destination_proto_msgTypes[31].Exporter = func(v any, i int) any {
-			switch v := v.(*ResponseMatch_Seq); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-	}
 	file_destination_proto_msgTypes[1].OneofWrappers = []any{
 		(*Update_Add)(nil),
 		(*Update_Remove)(nil),
diff --git a/go/destination/destination_grpc.pb.go b/go/destination/destination_grpc.pb.go
index 2b62cb299..55a8c143f 100644
--- a/go/destination/destination_grpc.pb.go
+++ b/go/destination/destination_grpc.pb.go
@@ -1,6 +1,6 @@
 // Code generated by protoc-gen-go-grpc. DO NOT EDIT.
 // versions:
-// - protoc-gen-go-grpc v1.4.0
+// - protoc-gen-go-grpc v1.5.1
 // - protoc             v3.12.4
 // source: destination.proto
 
@@ -15,8 +15,8 @@ import (
 
 // This is a compile-time assertion to ensure that this generated file
 // is compatible with the grpc package it is being compiled against.
-// Requires gRPC-Go v1.62.0 or later.
-const _ = grpc.SupportPackageIsVersion8
+// Requires gRPC-Go v1.64.0 or later.
+const _ = grpc.SupportPackageIsVersion9
 
 const (
 	Destination_Get_FullMethodName        = "/io.linkerd.proxy.destination.Destination/Get"
@@ -29,10 +29,10 @@ const (
 type DestinationClient interface {
 	// Given a destination, return all addresses in that destination as a long-
 	// running stream of updates.
-	Get(ctx context.Context, in *GetDestination, opts ...grpc.CallOption) (Destination_GetClient, error)
+	Get(ctx context.Context, in *GetDestination, opts ...grpc.CallOption) (grpc.ServerStreamingClient[Update], error)
 	// Given a destination, return that destination's profile and send an update
 	// whenever it changes.
-	GetProfile(ctx context.Context, in *GetDestination, opts ...grpc.CallOption) (Destination_GetProfileClient, error)
+	GetProfile(ctx context.Context, in *GetDestination, opts ...grpc.CallOption) (grpc.ServerStreamingClient[DestinationProfile], error)
 }
 
 type destinationClient struct {
@@ -43,13 +43,13 @@ func NewDestinationClient(cc grpc.ClientConnInterface) DestinationClient {
 	return &destinationClient{cc}
 }
 
-func (c *destinationClient) Get(ctx context.Context, in *GetDestination, opts ...grpc.CallOption) (Destination_GetClient, error) {
+func (c *destinationClient) Get(ctx context.Context, in *GetDestination, opts ...grpc.CallOption) (grpc.ServerStreamingClient[Update], error) {
 	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
 	stream, err := c.cc.NewStream(ctx, &Destination_ServiceDesc.Streams[0], Destination_Get_FullMethodName, cOpts...)
 	if err != nil {
 		return nil, err
 	}
-	x := &destinationGetClient{ClientStream: stream}
+	x := &grpc.GenericClientStream[GetDestination, Update]{ClientStream: stream}
 	if err := x.ClientStream.SendMsg(in); err != nil {
 		return nil, err
 	}
@@ -59,30 +59,16 @@ func (c *destinationClient) Get(ctx context.Context, in *GetDestination, opts ..
 	return x, nil
 }
 
-type Destination_GetClient interface {
-	Recv() (*Update, error)
-	grpc.ClientStream
-}
-
-type destinationGetClient struct {
-	grpc.ClientStream
-}
-
-func (x *destinationGetClient) Recv() (*Update, error) {
-	m := new(Update)
-	if err := x.ClientStream.RecvMsg(m); err != nil {
-		return nil, err
-	}
-	return m, nil
-}
+// This type alias is provided for backwards compatibility with existing code that references the prior non-generic stream type by name.
+type Destination_GetClient = grpc.ServerStreamingClient[Update]
 
-func (c *destinationClient) GetProfile(ctx context.Context, in *GetDestination, opts ...grpc.CallOption) (Destination_GetProfileClient, error) {
+func (c *destinationClient) GetProfile(ctx context.Context, in *GetDestination, opts ...grpc.CallOption) (grpc.ServerStreamingClient[DestinationProfile], error) {
 	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
 	stream, err := c.cc.NewStream(ctx, &Destination_ServiceDesc.Streams[1], Destination_GetProfile_FullMethodName, cOpts...)
 	if err != nil {
 		return nil, err
 	}
-	x := &destinationGetProfileClient{ClientStream: stream}
+	x := &grpc.GenericClientStream[GetDestination, DestinationProfile]{ClientStream: stream}
 	if err := x.ClientStream.SendMsg(in); err != nil {
 		return nil, err
 	}
@@ -92,47 +78,37 @@ func (c *destinationClient) GetProfile(ctx context.Context, in *GetDestination,
 	return x, nil
 }
 
-type Destination_GetProfileClient interface {
-	Recv() (*DestinationProfile, error)
-	grpc.ClientStream
-}
-
-type destinationGetProfileClient struct {
-	grpc.ClientStream
-}
-
-func (x *destinationGetProfileClient) Recv() (*DestinationProfile, error) {
-	m := new(DestinationProfile)
-	if err := x.ClientStream.RecvMsg(m); err != nil {
-		return nil, err
-	}
-	return m, nil
-}
+// This type alias is provided for backwards compatibility with existing code that references the prior non-generic stream type by name.
+type Destination_GetProfileClient = grpc.ServerStreamingClient[DestinationProfile]
 
 // DestinationServer is the server API for Destination service.
 // All implementations must embed UnimplementedDestinationServer
-// for forward compatibility
+// for forward compatibility.
 type DestinationServer interface {
 	// Given a destination, return all addresses in that destination as a long-
 	// running stream of updates.
-	Get(*GetDestination, Destination_GetServer) error
+	Get(*GetDestination, grpc.ServerStreamingServer[Update]) error
 	// Given a destination, return that destination's profile and send an update
 	// whenever it changes.
-	GetProfile(*GetDestination, Destination_GetProfileServer) error
+	GetProfile(*GetDestination, grpc.ServerStreamingServer[DestinationProfile]) error
 	mustEmbedUnimplementedDestinationServer()
 }
 
-// UnimplementedDestinationServer must be embedded to have forward compatible implementations.
-type UnimplementedDestinationServer struct {
-}
+// UnimplementedDestinationServer must be embedded to have
+// forward compatible implementations.
+//
+// NOTE: this should be embedded by value instead of pointer to avoid a nil
+// pointer dereference when methods are called.
+type UnimplementedDestinationServer struct{}
 
-func (UnimplementedDestinationServer) Get(*GetDestination, Destination_GetServer) error {
+func (UnimplementedDestinationServer) Get(*GetDestination, grpc.ServerStreamingServer[Update]) error {
 	return status.Errorf(codes.Unimplemented, "method Get not implemented")
 }
-func (UnimplementedDestinationServer) GetProfile(*GetDestination, Destination_GetProfileServer) error {
+func (UnimplementedDestinationServer) GetProfile(*GetDestination, grpc.ServerStreamingServer[DestinationProfile]) error {
 	return status.Errorf(codes.Unimplemented, "method GetProfile not implemented")
 }
 func (UnimplementedDestinationServer) mustEmbedUnimplementedDestinationServer() {}
+func (UnimplementedDestinationServer) testEmbeddedByValue()                     {}
 
 // UnsafeDestinationServer may be embedded to opt out of forward compatibility for this service.
 // Use of this interface is not recommended, as added methods to DestinationServer will
@@ -142,6 +118,13 @@ type UnsafeDestinationServer interface {
 }
 
 func RegisterDestinationServer(s grpc.ServiceRegistrar, srv DestinationServer) {
+	// If the following call pancis, it indicates UnimplementedDestinationServer was
+	// embedded by pointer and is nil.  This will cause panics if an
+	// unimplemented method is ever invoked, so we test this at initialization
+	// time to prevent it from happening at runtime later due to I/O.
+	if t, ok := srv.(interface{ testEmbeddedByValue() }); ok {
+		t.testEmbeddedByValue()
+	}
 	s.RegisterService(&Destination_ServiceDesc, srv)
 }
 
@@ -150,42 +133,22 @@ func _Destination_Get_Handler(srv interface{}, stream grpc.ServerStream) error {
 	if err := stream.RecvMsg(m); err != nil {
 		return err
 	}
-	return srv.(DestinationServer).Get(m, &destinationGetServer{ServerStream: stream})
+	return srv.(DestinationServer).Get(m, &grpc.GenericServerStream[GetDestination, Update]{ServerStream: stream})
 }
 
-type Destination_GetServer interface {
-	Send(*Update) error
-	grpc.ServerStream
-}
-
-type destinationGetServer struct {
-	grpc.ServerStream
-}
-
-func (x *destinationGetServer) Send(m *Update) error {
-	return x.ServerStream.SendMsg(m)
-}
+// This type alias is provided for backwards compatibility with existing code that references the prior non-generic stream type by name.
+type Destination_GetServer = grpc.ServerStreamingServer[Update]
 
 func _Destination_GetProfile_Handler(srv interface{}, stream grpc.ServerStream) error {
 	m := new(GetDestination)
 	if err := stream.RecvMsg(m); err != nil {
 		return err
 	}
-	return srv.(DestinationServer).GetProfile(m, &destinationGetProfileServer{ServerStream: stream})
-}
-
-type Destination_GetProfileServer interface {
-	Send(*DestinationProfile) error
-	grpc.ServerStream
+	return srv.(DestinationServer).GetProfile(m, &grpc.GenericServerStream[GetDestination, DestinationProfile]{ServerStream: stream})
 }
 
-type destinationGetProfileServer struct {
-	grpc.ServerStream
-}
-
-func (x *destinationGetProfileServer) Send(m *DestinationProfile) error {
-	return x.ServerStream.SendMsg(m)
-}
+// This type alias is provided for backwards compatibility with existing code that references the prior non-generic stream type by name.
+type Destination_GetProfileServer = grpc.ServerStreamingServer[DestinationProfile]
 
 // Destination_ServiceDesc is the grpc.ServiceDesc for Destination service.
 // It's only intended for direct use with grpc.RegisterService,
diff --git a/go/grpc_route/grpc_route.pb.go b/go/grpc_route/grpc_route.pb.go
index 5e20f9db5..5989081d2 100644
--- a/go/grpc_route/grpc_route.pb.go
+++ b/go/grpc_route/grpc_route.pb.go
@@ -1,6 +1,6 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.34.2
+// 	protoc-gen-go v1.35.1
 // 	protoc        v3.12.4
 // source: grpc_route.proto
 
@@ -35,11 +35,9 @@ type GrpcRouteMatch struct {
 
 func (x *GrpcRouteMatch) Reset() {
 	*x = GrpcRouteMatch{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_grpc_route_proto_msgTypes[0]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_grpc_route_proto_msgTypes[0]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *GrpcRouteMatch) String() string {
@@ -50,7 +48,7 @@ func (*GrpcRouteMatch) ProtoMessage() {}
 
 func (x *GrpcRouteMatch) ProtoReflect() protoreflect.Message {
 	mi := &file_grpc_route_proto_msgTypes[0]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -90,11 +88,9 @@ type GrpcRpcMatch struct {
 
 func (x *GrpcRpcMatch) Reset() {
 	*x = GrpcRpcMatch{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_grpc_route_proto_msgTypes[1]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_grpc_route_proto_msgTypes[1]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *GrpcRpcMatch) String() string {
@@ -105,7 +101,7 @@ func (*GrpcRpcMatch) ProtoMessage() {}
 
 func (x *GrpcRpcMatch) ProtoReflect() protoreflect.Message {
 	mi := &file_grpc_route_proto_msgTypes[1]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -151,11 +147,9 @@ type GrpcFailureInjector struct {
 
 func (x *GrpcFailureInjector) Reset() {
 	*x = GrpcFailureInjector{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_grpc_route_proto_msgTypes[2]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_grpc_route_proto_msgTypes[2]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *GrpcFailureInjector) String() string {
@@ -166,7 +160,7 @@ func (*GrpcFailureInjector) ProtoMessage() {}
 
 func (x *GrpcFailureInjector) ProtoReflect() protoreflect.Message {
 	mi := &file_grpc_route_proto_msgTypes[2]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -273,44 +267,6 @@ func file_grpc_route_proto_init() {
 	if File_grpc_route_proto != nil {
 		return
 	}
-	if !protoimpl.UnsafeEnabled {
-		file_grpc_route_proto_msgTypes[0].Exporter = func(v any, i int) any {
-			switch v := v.(*GrpcRouteMatch); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_grpc_route_proto_msgTypes[1].Exporter = func(v any, i int) any {
-			switch v := v.(*GrpcRpcMatch); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_grpc_route_proto_msgTypes[2].Exporter = func(v any, i int) any {
-			switch v := v.(*GrpcFailureInjector); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-	}
 	type x struct{}
 	out := protoimpl.TypeBuilder{
 		File: protoimpl.DescBuilder{
diff --git a/go/http_route/http_route.pb.go b/go/http_route/http_route.pb.go
index 35a2c270f..4455ea61e 100644
--- a/go/http_route/http_route.pb.go
+++ b/go/http_route/http_route.pb.go
@@ -1,6 +1,6 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.34.2
+// 	protoc-gen-go v1.35.1
 // 	protoc        v3.12.4
 // source: http_route.proto
 
@@ -37,11 +37,9 @@ type HostMatch struct {
 
 func (x *HostMatch) Reset() {
 	*x = HostMatch{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_http_route_proto_msgTypes[0]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_http_route_proto_msgTypes[0]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *HostMatch) String() string {
@@ -52,7 +50,7 @@ func (*HostMatch) ProtoMessage() {}
 
 func (x *HostMatch) ProtoReflect() protoreflect.Message {
 	mi := &file_http_route_proto_msgTypes[0]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -128,11 +126,9 @@ type HttpRouteMatch struct {
 
 func (x *HttpRouteMatch) Reset() {
 	*x = HttpRouteMatch{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_http_route_proto_msgTypes[1]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_http_route_proto_msgTypes[1]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *HttpRouteMatch) String() string {
@@ -143,7 +139,7 @@ func (*HttpRouteMatch) ProtoMessage() {}
 
 func (x *HttpRouteMatch) ProtoReflect() protoreflect.Message {
 	mi := &file_http_route_proto_msgTypes[1]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -202,11 +198,9 @@ type PathMatch struct {
 
 func (x *PathMatch) Reset() {
 	*x = PathMatch{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_http_route_proto_msgTypes[2]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_http_route_proto_msgTypes[2]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *PathMatch) String() string {
@@ -217,7 +211,7 @@ func (*PathMatch) ProtoMessage() {}
 
 func (x *PathMatch) ProtoReflect() protoreflect.Message {
 	mi := &file_http_route_proto_msgTypes[2]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -298,11 +292,9 @@ type HeaderMatch struct {
 
 func (x *HeaderMatch) Reset() {
 	*x = HeaderMatch{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_http_route_proto_msgTypes[3]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_http_route_proto_msgTypes[3]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *HeaderMatch) String() string {
@@ -313,7 +305,7 @@ func (*HeaderMatch) ProtoMessage() {}
 
 func (x *HeaderMatch) ProtoReflect() protoreflect.Message {
 	mi := &file_http_route_proto_msgTypes[3]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -388,11 +380,9 @@ type QueryParamMatch struct {
 
 func (x *QueryParamMatch) Reset() {
 	*x = QueryParamMatch{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_http_route_proto_msgTypes[4]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_http_route_proto_msgTypes[4]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *QueryParamMatch) String() string {
@@ -403,7 +393,7 @@ func (*QueryParamMatch) ProtoMessage() {}
 
 func (x *QueryParamMatch) ProtoReflect() protoreflect.Message {
 	mi := &file_http_route_proto_msgTypes[4]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -483,11 +473,9 @@ type RequestHeaderModifier struct {
 
 func (x *RequestHeaderModifier) Reset() {
 	*x = RequestHeaderModifier{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_http_route_proto_msgTypes[5]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_http_route_proto_msgTypes[5]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *RequestHeaderModifier) String() string {
@@ -498,7 +486,7 @@ func (*RequestHeaderModifier) ProtoMessage() {}
 
 func (x *RequestHeaderModifier) ProtoReflect() protoreflect.Message {
 	mi := &file_http_route_proto_msgTypes[5]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -555,11 +543,9 @@ type ResponseHeaderModifier struct {
 
 func (x *ResponseHeaderModifier) Reset() {
 	*x = ResponseHeaderModifier{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_http_route_proto_msgTypes[6]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_http_route_proto_msgTypes[6]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *ResponseHeaderModifier) String() string {
@@ -570,7 +556,7 @@ func (*ResponseHeaderModifier) ProtoMessage() {}
 
 func (x *ResponseHeaderModifier) ProtoReflect() protoreflect.Message {
 	mi := &file_http_route_proto_msgTypes[6]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -632,11 +618,9 @@ type RequestRedirect struct {
 
 func (x *RequestRedirect) Reset() {
 	*x = RequestRedirect{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_http_route_proto_msgTypes[7]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_http_route_proto_msgTypes[7]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *RequestRedirect) String() string {
@@ -647,7 +631,7 @@ func (*RequestRedirect) ProtoMessage() {}
 
 func (x *RequestRedirect) ProtoReflect() protoreflect.Message {
 	mi := &file_http_route_proto_msgTypes[7]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -712,11 +696,9 @@ type PathModifier struct {
 
 func (x *PathModifier) Reset() {
 	*x = PathModifier{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_http_route_proto_msgTypes[8]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_http_route_proto_msgTypes[8]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *PathModifier) String() string {
@@ -727,7 +709,7 @@ func (*PathModifier) ProtoMessage() {}
 
 func (x *PathModifier) ProtoReflect() protoreflect.Message {
 	mi := &file_http_route_proto_msgTypes[8]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -803,11 +785,9 @@ type HttpFailureInjector struct {
 
 func (x *HttpFailureInjector) Reset() {
 	*x = HttpFailureInjector{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_http_route_proto_msgTypes[9]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_http_route_proto_msgTypes[9]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *HttpFailureInjector) String() string {
@@ -818,7 +798,7 @@ func (*HttpFailureInjector) ProtoMessage() {}
 
 func (x *HttpFailureInjector) ProtoReflect() protoreflect.Message {
 	mi := &file_http_route_proto_msgTypes[9]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -869,11 +849,9 @@ type Ratio struct {
 
 func (x *Ratio) Reset() {
 	*x = Ratio{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_http_route_proto_msgTypes[10]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_http_route_proto_msgTypes[10]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *Ratio) String() string {
@@ -884,7 +862,7 @@ func (*Ratio) ProtoMessage() {}
 
 func (x *Ratio) ProtoReflect() protoreflect.Message {
 	mi := &file_http_route_proto_msgTypes[10]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -931,11 +909,9 @@ type Timeouts struct {
 
 func (x *Timeouts) Reset() {
 	*x = Timeouts{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_http_route_proto_msgTypes[11]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_http_route_proto_msgTypes[11]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *Timeouts) String() string {
@@ -946,7 +922,7 @@ func (*Timeouts) ProtoMessage() {}
 
 func (x *Timeouts) ProtoReflect() protoreflect.Message {
 	mi := &file_http_route_proto_msgTypes[11]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -993,11 +969,9 @@ type HostMatch_Suffix struct {
 
 func (x *HostMatch_Suffix) Reset() {
 	*x = HostMatch_Suffix{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_http_route_proto_msgTypes[12]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_http_route_proto_msgTypes[12]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *HostMatch_Suffix) String() string {
@@ -1008,7 +982,7 @@ func (*HostMatch_Suffix) ProtoMessage() {}
 
 func (x *HostMatch_Suffix) ProtoReflect() protoreflect.Message {
 	mi := &file_http_route_proto_msgTypes[12]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1213,164 +1187,6 @@ func file_http_route_proto_init() {
 	if File_http_route_proto != nil {
 		return
 	}
-	if !protoimpl.UnsafeEnabled {
-		file_http_route_proto_msgTypes[0].Exporter = func(v any, i int) any {
-			switch v := v.(*HostMatch); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_http_route_proto_msgTypes[1].Exporter = func(v any, i int) any {
-			switch v := v.(*HttpRouteMatch); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_http_route_proto_msgTypes[2].Exporter = func(v any, i int) any {
-			switch v := v.(*PathMatch); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_http_route_proto_msgTypes[3].Exporter = func(v any, i int) any {
-			switch v := v.(*HeaderMatch); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_http_route_proto_msgTypes[4].Exporter = func(v any, i int) any {
-			switch v := v.(*QueryParamMatch); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_http_route_proto_msgTypes[5].Exporter = func(v any, i int) any {
-			switch v := v.(*RequestHeaderModifier); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_http_route_proto_msgTypes[6].Exporter = func(v any, i int) any {
-			switch v := v.(*ResponseHeaderModifier); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_http_route_proto_msgTypes[7].Exporter = func(v any, i int) any {
-			switch v := v.(*RequestRedirect); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_http_route_proto_msgTypes[8].Exporter = func(v any, i int) any {
-			switch v := v.(*PathModifier); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_http_route_proto_msgTypes[9].Exporter = func(v any, i int) any {
-			switch v := v.(*HttpFailureInjector); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_http_route_proto_msgTypes[10].Exporter = func(v any, i int) any {
-			switch v := v.(*Ratio); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_http_route_proto_msgTypes[11].Exporter = func(v any, i int) any {
-			switch v := v.(*Timeouts); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_http_route_proto_msgTypes[12].Exporter = func(v any, i int) any {
-			switch v := v.(*HostMatch_Suffix); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-	}
 	file_http_route_proto_msgTypes[0].OneofWrappers = []any{
 		(*HostMatch_Exact)(nil),
 		(*HostMatch_Suffix_)(nil),
diff --git a/go/http_types/http_types.pb.go b/go/http_types/http_types.pb.go
index 15e2cd94d..f0529d2f6 100644
--- a/go/http_types/http_types.pb.go
+++ b/go/http_types/http_types.pb.go
@@ -1,6 +1,6 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.34.2
+// 	protoc-gen-go v1.35.1
 // 	protoc        v3.12.4
 // source: http_types.proto
 
@@ -147,11 +147,9 @@ type HttpMethod struct {
 
 func (x *HttpMethod) Reset() {
 	*x = HttpMethod{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_http_types_proto_msgTypes[0]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_http_types_proto_msgTypes[0]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *HttpMethod) String() string {
@@ -162,7 +160,7 @@ func (*HttpMethod) ProtoMessage() {}
 
 func (x *HttpMethod) ProtoReflect() protoreflect.Message {
 	mi := &file_http_types_proto_msgTypes[0]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -228,11 +226,9 @@ type Scheme struct {
 
 func (x *Scheme) Reset() {
 	*x = Scheme{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_http_types_proto_msgTypes[1]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_http_types_proto_msgTypes[1]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *Scheme) String() string {
@@ -243,7 +239,7 @@ func (*Scheme) ProtoMessage() {}
 
 func (x *Scheme) ProtoReflect() protoreflect.Message {
 	mi := &file_http_types_proto_msgTypes[1]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -305,11 +301,9 @@ type Headers struct {
 
 func (x *Headers) Reset() {
 	*x = Headers{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_http_types_proto_msgTypes[2]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_http_types_proto_msgTypes[2]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *Headers) String() string {
@@ -320,7 +314,7 @@ func (*Headers) ProtoMessage() {}
 
 func (x *Headers) ProtoReflect() protoreflect.Message {
 	mi := &file_http_types_proto_msgTypes[2]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -353,11 +347,9 @@ type Headers_Header struct {
 
 func (x *Headers_Header) Reset() {
 	*x = Headers_Header{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_http_types_proto_msgTypes[3]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_http_types_proto_msgTypes[3]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *Headers_Header) String() string {
@@ -368,7 +360,7 @@ func (*Headers_Header) ProtoMessage() {}
 
 func (x *Headers_Header) ProtoReflect() protoreflect.Message {
 	mi := &file_http_types_proto_msgTypes[3]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -483,56 +475,6 @@ func file_http_types_proto_init() {
 	if File_http_types_proto != nil {
 		return
 	}
-	if !protoimpl.UnsafeEnabled {
-		file_http_types_proto_msgTypes[0].Exporter = func(v any, i int) any {
-			switch v := v.(*HttpMethod); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_http_types_proto_msgTypes[1].Exporter = func(v any, i int) any {
-			switch v := v.(*Scheme); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_http_types_proto_msgTypes[2].Exporter = func(v any, i int) any {
-			switch v := v.(*Headers); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_http_types_proto_msgTypes[3].Exporter = func(v any, i int) any {
-			switch v := v.(*Headers_Header); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-	}
 	file_http_types_proto_msgTypes[0].OneofWrappers = []any{
 		(*HttpMethod_Registered_)(nil),
 		(*HttpMethod_Unregistered)(nil),
diff --git a/go/identity/identity.pb.go b/go/identity/identity.pb.go
index a3dfab0f6..af376cc04 100644
--- a/go/identity/identity.pb.go
+++ b/go/identity/identity.pb.go
@@ -1,6 +1,6 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.34.2
+// 	protoc-gen-go v1.35.1
 // 	protoc        v3.12.4
 // source: identity.proto
 
@@ -38,11 +38,9 @@ type CertifyRequest struct {
 
 func (x *CertifyRequest) Reset() {
 	*x = CertifyRequest{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_identity_proto_msgTypes[0]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_identity_proto_msgTypes[0]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *CertifyRequest) String() string {
@@ -53,7 +51,7 @@ func (*CertifyRequest) ProtoMessage() {}
 
 func (x *CertifyRequest) ProtoReflect() protoreflect.Message {
 	mi := &file_identity_proto_msgTypes[0]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -104,11 +102,9 @@ type CertifyResponse struct {
 
 func (x *CertifyResponse) Reset() {
 	*x = CertifyResponse{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_identity_proto_msgTypes[1]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_identity_proto_msgTypes[1]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *CertifyResponse) String() string {
@@ -119,7 +115,7 @@ func (*CertifyResponse) ProtoMessage() {}
 
 func (x *CertifyResponse) ProtoReflect() protoreflect.Message {
 	mi := &file_identity_proto_msgTypes[1]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -231,32 +227,6 @@ func file_identity_proto_init() {
 	if File_identity_proto != nil {
 		return
 	}
-	if !protoimpl.UnsafeEnabled {
-		file_identity_proto_msgTypes[0].Exporter = func(v any, i int) any {
-			switch v := v.(*CertifyRequest); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_identity_proto_msgTypes[1].Exporter = func(v any, i int) any {
-			switch v := v.(*CertifyResponse); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-	}
 	type x struct{}
 	out := protoimpl.TypeBuilder{
 		File: protoimpl.DescBuilder{
diff --git a/go/identity/identity_grpc.pb.go b/go/identity/identity_grpc.pb.go
index 4565907a3..56994c1b1 100644
--- a/go/identity/identity_grpc.pb.go
+++ b/go/identity/identity_grpc.pb.go
@@ -1,6 +1,6 @@
 // Code generated by protoc-gen-go-grpc. DO NOT EDIT.
 // versions:
-// - protoc-gen-go-grpc v1.4.0
+// - protoc-gen-go-grpc v1.5.1
 // - protoc             v3.12.4
 // source: identity.proto
 
@@ -15,8 +15,8 @@ import (
 
 // This is a compile-time assertion to ensure that this generated file
 // is compatible with the grpc package it is being compiled against.
-// Requires gRPC-Go v1.62.0 or later.
-const _ = grpc.SupportPackageIsVersion8
+// Requires gRPC-Go v1.64.0 or later.
+const _ = grpc.SupportPackageIsVersion9
 
 const (
 	Identity_Certify_FullMethodName = "/io.linkerd.proxy.identity.Identity/Certify"
@@ -56,7 +56,7 @@ func (c *identityClient) Certify(ctx context.Context, in *CertifyRequest, opts .
 
 // IdentityServer is the server API for Identity service.
 // All implementations must embed UnimplementedIdentityServer
-// for forward compatibility
+// for forward compatibility.
 type IdentityServer interface {
 	// Requests that a time-bounded certificate be signed.
 	//
@@ -69,14 +69,18 @@ type IdentityServer interface {
 	mustEmbedUnimplementedIdentityServer()
 }
 
-// UnimplementedIdentityServer must be embedded to have forward compatible implementations.
-type UnimplementedIdentityServer struct {
-}
+// UnimplementedIdentityServer must be embedded to have
+// forward compatible implementations.
+//
+// NOTE: this should be embedded by value instead of pointer to avoid a nil
+// pointer dereference when methods are called.
+type UnimplementedIdentityServer struct{}
 
 func (UnimplementedIdentityServer) Certify(context.Context, *CertifyRequest) (*CertifyResponse, error) {
 	return nil, status.Errorf(codes.Unimplemented, "method Certify not implemented")
 }
 func (UnimplementedIdentityServer) mustEmbedUnimplementedIdentityServer() {}
+func (UnimplementedIdentityServer) testEmbeddedByValue()                  {}
 
 // UnsafeIdentityServer may be embedded to opt out of forward compatibility for this service.
 // Use of this interface is not recommended, as added methods to IdentityServer will
@@ -86,6 +90,13 @@ type UnsafeIdentityServer interface {
 }
 
 func RegisterIdentityServer(s grpc.ServiceRegistrar, srv IdentityServer) {
+	// If the following call pancis, it indicates UnimplementedIdentityServer was
+	// embedded by pointer and is nil.  This will cause panics if an
+	// unimplemented method is ever invoked, so we test this at initialization
+	// time to prevent it from happening at runtime later due to I/O.
+	if t, ok := srv.(interface{ testEmbeddedByValue() }); ok {
+		t.testEmbeddedByValue()
+	}
 	s.RegisterService(&Identity_ServiceDesc, srv)
 }
 
diff --git a/go/inbound/inbound.pb.go b/go/inbound/inbound.pb.go
index a68d94497..74728ab03 100644
--- a/go/inbound/inbound.pb.go
+++ b/go/inbound/inbound.pb.go
@@ -1,6 +1,6 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.34.2
+// 	protoc-gen-go v1.35.1
 // 	protoc        v3.12.4
 // source: inbound.proto
 
@@ -38,11 +38,9 @@ type PortSpec struct {
 
 func (x *PortSpec) Reset() {
 	*x = PortSpec{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_inbound_proto_msgTypes[0]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_inbound_proto_msgTypes[0]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *PortSpec) String() string {
@@ -53,7 +51,7 @@ func (*PortSpec) ProtoMessage() {}
 
 func (x *PortSpec) ProtoReflect() protoreflect.Message {
 	mi := &file_inbound_proto_msgTypes[0]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -106,11 +104,9 @@ type Server struct {
 
 func (x *Server) Reset() {
 	*x = Server{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_inbound_proto_msgTypes[1]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_inbound_proto_msgTypes[1]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *Server) String() string {
@@ -121,7 +117,7 @@ func (*Server) ProtoMessage() {}
 
 func (x *Server) ProtoReflect() protoreflect.Message {
 	mi := &file_inbound_proto_msgTypes[1]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -182,11 +178,9 @@ type ProxyProtocol struct {
 
 func (x *ProxyProtocol) Reset() {
 	*x = ProxyProtocol{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_inbound_proto_msgTypes[2]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_inbound_proto_msgTypes[2]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *ProxyProtocol) String() string {
@@ -197,7 +191,7 @@ func (*ProxyProtocol) ProtoMessage() {}
 
 func (x *ProxyProtocol) ProtoReflect() protoreflect.Message {
 	mi := &file_inbound_proto_msgTypes[2]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -330,11 +324,9 @@ type Authz struct {
 
 func (x *Authz) Reset() {
 	*x = Authz{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_inbound_proto_msgTypes[3]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_inbound_proto_msgTypes[3]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *Authz) String() string {
@@ -345,7 +337,7 @@ func (*Authz) ProtoMessage() {}
 
 func (x *Authz) ProtoReflect() protoreflect.Message {
 	mi := &file_inbound_proto_msgTypes[3]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -400,11 +392,9 @@ type Network struct {
 
 func (x *Network) Reset() {
 	*x = Network{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_inbound_proto_msgTypes[4]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_inbound_proto_msgTypes[4]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *Network) String() string {
@@ -415,7 +405,7 @@ func (*Network) ProtoMessage() {}
 
 func (x *Network) ProtoReflect() protoreflect.Message {
 	mi := &file_inbound_proto_msgTypes[4]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -458,11 +448,9 @@ type Authn struct {
 
 func (x *Authn) Reset() {
 	*x = Authn{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_inbound_proto_msgTypes[5]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_inbound_proto_msgTypes[5]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *Authn) String() string {
@@ -473,7 +461,7 @@ func (*Authn) ProtoMessage() {}
 
 func (x *Authn) ProtoReflect() protoreflect.Message {
 	mi := &file_inbound_proto_msgTypes[5]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -536,11 +524,9 @@ type Identity struct {
 
 func (x *Identity) Reset() {
 	*x = Identity{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_inbound_proto_msgTypes[6]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_inbound_proto_msgTypes[6]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *Identity) String() string {
@@ -551,7 +537,7 @@ func (*Identity) ProtoMessage() {}
 
 func (x *Identity) ProtoReflect() protoreflect.Message {
 	mi := &file_inbound_proto_msgTypes[6]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -587,11 +573,9 @@ type IdentitySuffix struct {
 
 func (x *IdentitySuffix) Reset() {
 	*x = IdentitySuffix{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_inbound_proto_msgTypes[7]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_inbound_proto_msgTypes[7]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *IdentitySuffix) String() string {
@@ -602,7 +586,7 @@ func (*IdentitySuffix) ProtoMessage() {}
 
 func (x *IdentitySuffix) ProtoReflect() protoreflect.Message {
 	mi := &file_inbound_proto_msgTypes[7]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -643,11 +627,9 @@ type HttpRoute struct {
 
 func (x *HttpRoute) Reset() {
 	*x = HttpRoute{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_inbound_proto_msgTypes[8]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_inbound_proto_msgTypes[8]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *HttpRoute) String() string {
@@ -658,7 +640,7 @@ func (*HttpRoute) ProtoMessage() {}
 
 func (x *HttpRoute) ProtoReflect() protoreflect.Message {
 	mi := &file_inbound_proto_msgTypes[8]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -719,11 +701,9 @@ type GrpcRoute struct {
 
 func (x *GrpcRoute) Reset() {
 	*x = GrpcRoute{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_inbound_proto_msgTypes[9]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_inbound_proto_msgTypes[9]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *GrpcRoute) String() string {
@@ -734,7 +714,7 @@ func (*GrpcRoute) ProtoMessage() {}
 
 func (x *GrpcRoute) ProtoReflect() protoreflect.Message {
 	mi := &file_inbound_proto_msgTypes[9]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -790,11 +770,9 @@ type ProxyProtocol_Detect struct {
 
 func (x *ProxyProtocol_Detect) Reset() {
 	*x = ProxyProtocol_Detect{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_inbound_proto_msgTypes[11]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_inbound_proto_msgTypes[11]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *ProxyProtocol_Detect) String() string {
@@ -805,7 +783,7 @@ func (*ProxyProtocol_Detect) ProtoMessage() {}
 
 func (x *ProxyProtocol_Detect) ProtoReflect() protoreflect.Message {
 	mi := &file_inbound_proto_msgTypes[11]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -844,11 +822,9 @@ type ProxyProtocol_Http1 struct {
 
 func (x *ProxyProtocol_Http1) Reset() {
 	*x = ProxyProtocol_Http1{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_inbound_proto_msgTypes[12]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_inbound_proto_msgTypes[12]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *ProxyProtocol_Http1) String() string {
@@ -859,7 +835,7 @@ func (*ProxyProtocol_Http1) ProtoMessage() {}
 
 func (x *ProxyProtocol_Http1) ProtoReflect() protoreflect.Message {
 	mi := &file_inbound_proto_msgTypes[12]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -891,11 +867,9 @@ type ProxyProtocol_Http2 struct {
 
 func (x *ProxyProtocol_Http2) Reset() {
 	*x = ProxyProtocol_Http2{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_inbound_proto_msgTypes[13]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_inbound_proto_msgTypes[13]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *ProxyProtocol_Http2) String() string {
@@ -906,7 +880,7 @@ func (*ProxyProtocol_Http2) ProtoMessage() {}
 
 func (x *ProxyProtocol_Http2) ProtoReflect() protoreflect.Message {
 	mi := &file_inbound_proto_msgTypes[13]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -938,11 +912,9 @@ type ProxyProtocol_Grpc struct {
 
 func (x *ProxyProtocol_Grpc) Reset() {
 	*x = ProxyProtocol_Grpc{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_inbound_proto_msgTypes[14]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_inbound_proto_msgTypes[14]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *ProxyProtocol_Grpc) String() string {
@@ -953,7 +925,7 @@ func (*ProxyProtocol_Grpc) ProtoMessage() {}
 
 func (x *ProxyProtocol_Grpc) ProtoReflect() protoreflect.Message {
 	mi := &file_inbound_proto_msgTypes[14]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -983,11 +955,9 @@ type ProxyProtocol_Opaque struct {
 
 func (x *ProxyProtocol_Opaque) Reset() {
 	*x = ProxyProtocol_Opaque{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_inbound_proto_msgTypes[15]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_inbound_proto_msgTypes[15]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *ProxyProtocol_Opaque) String() string {
@@ -998,7 +968,7 @@ func (*ProxyProtocol_Opaque) ProtoMessage() {}
 
 func (x *ProxyProtocol_Opaque) ProtoReflect() protoreflect.Message {
 	mi := &file_inbound_proto_msgTypes[15]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1021,11 +991,9 @@ type ProxyProtocol_Tls struct {
 
 func (x *ProxyProtocol_Tls) Reset() {
 	*x = ProxyProtocol_Tls{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_inbound_proto_msgTypes[16]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_inbound_proto_msgTypes[16]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *ProxyProtocol_Tls) String() string {
@@ -1036,7 +1004,7 @@ func (*ProxyProtocol_Tls) ProtoMessage() {}
 
 func (x *ProxyProtocol_Tls) ProtoReflect() protoreflect.Message {
 	mi := &file_inbound_proto_msgTypes[16]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1059,11 +1027,9 @@ type Authn_PermitUnauthenticated struct {
 
 func (x *Authn_PermitUnauthenticated) Reset() {
 	*x = Authn_PermitUnauthenticated{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_inbound_proto_msgTypes[18]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_inbound_proto_msgTypes[18]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *Authn_PermitUnauthenticated) String() string {
@@ -1074,7 +1040,7 @@ func (*Authn_PermitUnauthenticated) ProtoMessage() {}
 
 func (x *Authn_PermitUnauthenticated) ProtoReflect() protoreflect.Message {
 	mi := &file_inbound_proto_msgTypes[18]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1103,11 +1069,9 @@ type Authn_PermitMeshTLS struct {
 
 func (x *Authn_PermitMeshTLS) Reset() {
 	*x = Authn_PermitMeshTLS{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_inbound_proto_msgTypes[19]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_inbound_proto_msgTypes[19]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *Authn_PermitMeshTLS) String() string {
@@ -1118,7 +1082,7 @@ func (*Authn_PermitMeshTLS) ProtoMessage() {}
 
 func (x *Authn_PermitMeshTLS) ProtoReflect() protoreflect.Message {
 	mi := &file_inbound_proto_msgTypes[19]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1188,11 +1152,9 @@ type Authn_PermitMeshTLS_PermitClientIdentities struct {
 
 func (x *Authn_PermitMeshTLS_PermitClientIdentities) Reset() {
 	*x = Authn_PermitMeshTLS_PermitClientIdentities{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_inbound_proto_msgTypes[20]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_inbound_proto_msgTypes[20]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *Authn_PermitMeshTLS_PermitClientIdentities) String() string {
@@ -1203,7 +1165,7 @@ func (*Authn_PermitMeshTLS_PermitClientIdentities) ProtoMessage() {}
 
 func (x *Authn_PermitMeshTLS_PermitClientIdentities) ProtoReflect() protoreflect.Message {
 	mi := &file_inbound_proto_msgTypes[20]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1243,11 +1205,9 @@ type HttpRoute_Rule struct {
 
 func (x *HttpRoute_Rule) Reset() {
 	*x = HttpRoute_Rule{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_inbound_proto_msgTypes[21]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_inbound_proto_msgTypes[21]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *HttpRoute_Rule) String() string {
@@ -1258,7 +1218,7 @@ func (*HttpRoute_Rule) ProtoMessage() {}
 
 func (x *HttpRoute_Rule) ProtoReflect() protoreflect.Message {
 	mi := &file_inbound_proto_msgTypes[21]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1302,11 +1262,9 @@ type HttpRoute_Filter struct {
 
 func (x *HttpRoute_Filter) Reset() {
 	*x = HttpRoute_Filter{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_inbound_proto_msgTypes[22]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_inbound_proto_msgTypes[22]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *HttpRoute_Filter) String() string {
@@ -1317,7 +1275,7 @@ func (*HttpRoute_Filter) ProtoMessage() {}
 
 func (x *HttpRoute_Filter) ProtoReflect() protoreflect.Message {
 	mi := &file_inbound_proto_msgTypes[22]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1393,11 +1351,9 @@ type GrpcRoute_Rule struct {
 
 func (x *GrpcRoute_Rule) Reset() {
 	*x = GrpcRoute_Rule{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_inbound_proto_msgTypes[23]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_inbound_proto_msgTypes[23]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *GrpcRoute_Rule) String() string {
@@ -1408,7 +1364,7 @@ func (*GrpcRoute_Rule) ProtoMessage() {}
 
 func (x *GrpcRoute_Rule) ProtoReflect() protoreflect.Message {
 	mi := &file_inbound_proto_msgTypes[23]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1451,11 +1407,9 @@ type GrpcRoute_Filter struct {
 
 func (x *GrpcRoute_Filter) Reset() {
 	*x = GrpcRoute_Filter{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_inbound_proto_msgTypes[24]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_inbound_proto_msgTypes[24]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *GrpcRoute_Filter) String() string {
@@ -1466,7 +1420,7 @@ func (*GrpcRoute_Filter) ProtoMessage() {}
 
 func (x *GrpcRoute_Filter) ProtoReflect() protoreflect.Message {
 	mi := &file_inbound_proto_msgTypes[24]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1894,284 +1848,6 @@ func file_inbound_proto_init() {
 	if File_inbound_proto != nil {
 		return
 	}
-	if !protoimpl.UnsafeEnabled {
-		file_inbound_proto_msgTypes[0].Exporter = func(v any, i int) any {
-			switch v := v.(*PortSpec); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_inbound_proto_msgTypes[1].Exporter = func(v any, i int) any {
-			switch v := v.(*Server); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_inbound_proto_msgTypes[2].Exporter = func(v any, i int) any {
-			switch v := v.(*ProxyProtocol); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_inbound_proto_msgTypes[3].Exporter = func(v any, i int) any {
-			switch v := v.(*Authz); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_inbound_proto_msgTypes[4].Exporter = func(v any, i int) any {
-			switch v := v.(*Network); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_inbound_proto_msgTypes[5].Exporter = func(v any, i int) any {
-			switch v := v.(*Authn); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_inbound_proto_msgTypes[6].Exporter = func(v any, i int) any {
-			switch v := v.(*Identity); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_inbound_proto_msgTypes[7].Exporter = func(v any, i int) any {
-			switch v := v.(*IdentitySuffix); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_inbound_proto_msgTypes[8].Exporter = func(v any, i int) any {
-			switch v := v.(*HttpRoute); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_inbound_proto_msgTypes[9].Exporter = func(v any, i int) any {
-			switch v := v.(*GrpcRoute); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_inbound_proto_msgTypes[11].Exporter = func(v any, i int) any {
-			switch v := v.(*ProxyProtocol_Detect); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_inbound_proto_msgTypes[12].Exporter = func(v any, i int) any {
-			switch v := v.(*ProxyProtocol_Http1); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_inbound_proto_msgTypes[13].Exporter = func(v any, i int) any {
-			switch v := v.(*ProxyProtocol_Http2); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_inbound_proto_msgTypes[14].Exporter = func(v any, i int) any {
-			switch v := v.(*ProxyProtocol_Grpc); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_inbound_proto_msgTypes[15].Exporter = func(v any, i int) any {
-			switch v := v.(*ProxyProtocol_Opaque); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_inbound_proto_msgTypes[16].Exporter = func(v any, i int) any {
-			switch v := v.(*ProxyProtocol_Tls); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_inbound_proto_msgTypes[18].Exporter = func(v any, i int) any {
-			switch v := v.(*Authn_PermitUnauthenticated); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_inbound_proto_msgTypes[19].Exporter = func(v any, i int) any {
-			switch v := v.(*Authn_PermitMeshTLS); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_inbound_proto_msgTypes[20].Exporter = func(v any, i int) any {
-			switch v := v.(*Authn_PermitMeshTLS_PermitClientIdentities); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_inbound_proto_msgTypes[21].Exporter = func(v any, i int) any {
-			switch v := v.(*HttpRoute_Rule); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_inbound_proto_msgTypes[22].Exporter = func(v any, i int) any {
-			switch v := v.(*HttpRoute_Filter); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_inbound_proto_msgTypes[23].Exporter = func(v any, i int) any {
-			switch v := v.(*GrpcRoute_Rule); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_inbound_proto_msgTypes[24].Exporter = func(v any, i int) any {
-			switch v := v.(*GrpcRoute_Filter); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-	}
 	file_inbound_proto_msgTypes[2].OneofWrappers = []any{
 		(*ProxyProtocol_Detect_)(nil),
 		(*ProxyProtocol_Opaque_)(nil),
diff --git a/go/inbound/inbound_grpc.pb.go b/go/inbound/inbound_grpc.pb.go
index 13b921df4..0f615829c 100644
--- a/go/inbound/inbound_grpc.pb.go
+++ b/go/inbound/inbound_grpc.pb.go
@@ -1,6 +1,6 @@
 // Code generated by protoc-gen-go-grpc. DO NOT EDIT.
 // versions:
-// - protoc-gen-go-grpc v1.4.0
+// - protoc-gen-go-grpc v1.5.1
 // - protoc             v3.12.4
 // source: inbound.proto
 
@@ -15,8 +15,8 @@ import (
 
 // This is a compile-time assertion to ensure that this generated file
 // is compatible with the grpc package it is being compiled against.
-// Requires gRPC-Go v1.62.0 or later.
-const _ = grpc.SupportPackageIsVersion8
+// Requires gRPC-Go v1.64.0 or later.
+const _ = grpc.SupportPackageIsVersion9
 
 const (
 	InboundServerPolicies_GetPort_FullMethodName   = "/io.linkerd.proxy.inbound.InboundServerPolicies/GetPort"
@@ -38,7 +38,7 @@ type InboundServerPoliciesClient interface {
 	// / Gets the inbound server policy for a given workload port.
 	GetPort(ctx context.Context, in *PortSpec, opts ...grpc.CallOption) (*Server, error)
 	// / Watches the inbound server policy for a given workload port.
-	WatchPort(ctx context.Context, in *PortSpec, opts ...grpc.CallOption) (InboundServerPolicies_WatchPortClient, error)
+	WatchPort(ctx context.Context, in *PortSpec, opts ...grpc.CallOption) (grpc.ServerStreamingClient[Server], error)
 }
 
 type inboundServerPoliciesClient struct {
@@ -59,13 +59,13 @@ func (c *inboundServerPoliciesClient) GetPort(ctx context.Context, in *PortSpec,
 	return out, nil
 }
 
-func (c *inboundServerPoliciesClient) WatchPort(ctx context.Context, in *PortSpec, opts ...grpc.CallOption) (InboundServerPolicies_WatchPortClient, error) {
+func (c *inboundServerPoliciesClient) WatchPort(ctx context.Context, in *PortSpec, opts ...grpc.CallOption) (grpc.ServerStreamingClient[Server], error) {
 	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
 	stream, err := c.cc.NewStream(ctx, &InboundServerPolicies_ServiceDesc.Streams[0], InboundServerPolicies_WatchPort_FullMethodName, cOpts...)
 	if err != nil {
 		return nil, err
 	}
-	x := &inboundServerPoliciesWatchPortClient{ClientStream: stream}
+	x := &grpc.GenericClientStream[PortSpec, Server]{ClientStream: stream}
 	if err := x.ClientStream.SendMsg(in); err != nil {
 		return nil, err
 	}
@@ -75,26 +75,12 @@ func (c *inboundServerPoliciesClient) WatchPort(ctx context.Context, in *PortSpe
 	return x, nil
 }
 
-type InboundServerPolicies_WatchPortClient interface {
-	Recv() (*Server, error)
-	grpc.ClientStream
-}
-
-type inboundServerPoliciesWatchPortClient struct {
-	grpc.ClientStream
-}
-
-func (x *inboundServerPoliciesWatchPortClient) Recv() (*Server, error) {
-	m := new(Server)
-	if err := x.ClientStream.RecvMsg(m); err != nil {
-		return nil, err
-	}
-	return m, nil
-}
+// This type alias is provided for backwards compatibility with existing code that references the prior non-generic stream type by name.
+type InboundServerPolicies_WatchPortClient = grpc.ServerStreamingClient[Server]
 
 // InboundServerPoliciesServer is the server API for InboundServerPolicies service.
 // All implementations must embed UnimplementedInboundServerPoliciesServer
-// for forward compatibility
+// for forward compatibility.
 //
 // / An API exposed to the linkerd2-proxy to configure the inbound proxy with per-port configuration
 // /
@@ -107,21 +93,25 @@ type InboundServerPoliciesServer interface {
 	// / Gets the inbound server policy for a given workload port.
 	GetPort(context.Context, *PortSpec) (*Server, error)
 	// / Watches the inbound server policy for a given workload port.
-	WatchPort(*PortSpec, InboundServerPolicies_WatchPortServer) error
+	WatchPort(*PortSpec, grpc.ServerStreamingServer[Server]) error
 	mustEmbedUnimplementedInboundServerPoliciesServer()
 }
 
-// UnimplementedInboundServerPoliciesServer must be embedded to have forward compatible implementations.
-type UnimplementedInboundServerPoliciesServer struct {
-}
+// UnimplementedInboundServerPoliciesServer must be embedded to have
+// forward compatible implementations.
+//
+// NOTE: this should be embedded by value instead of pointer to avoid a nil
+// pointer dereference when methods are called.
+type UnimplementedInboundServerPoliciesServer struct{}
 
 func (UnimplementedInboundServerPoliciesServer) GetPort(context.Context, *PortSpec) (*Server, error) {
 	return nil, status.Errorf(codes.Unimplemented, "method GetPort not implemented")
 }
-func (UnimplementedInboundServerPoliciesServer) WatchPort(*PortSpec, InboundServerPolicies_WatchPortServer) error {
+func (UnimplementedInboundServerPoliciesServer) WatchPort(*PortSpec, grpc.ServerStreamingServer[Server]) error {
 	return status.Errorf(codes.Unimplemented, "method WatchPort not implemented")
 }
 func (UnimplementedInboundServerPoliciesServer) mustEmbedUnimplementedInboundServerPoliciesServer() {}
+func (UnimplementedInboundServerPoliciesServer) testEmbeddedByValue()                               {}
 
 // UnsafeInboundServerPoliciesServer may be embedded to opt out of forward compatibility for this service.
 // Use of this interface is not recommended, as added methods to InboundServerPoliciesServer will
@@ -131,6 +121,13 @@ type UnsafeInboundServerPoliciesServer interface {
 }
 
 func RegisterInboundServerPoliciesServer(s grpc.ServiceRegistrar, srv InboundServerPoliciesServer) {
+	// If the following call pancis, it indicates UnimplementedInboundServerPoliciesServer was
+	// embedded by pointer and is nil.  This will cause panics if an
+	// unimplemented method is ever invoked, so we test this at initialization
+	// time to prevent it from happening at runtime later due to I/O.
+	if t, ok := srv.(interface{ testEmbeddedByValue() }); ok {
+		t.testEmbeddedByValue()
+	}
 	s.RegisterService(&InboundServerPolicies_ServiceDesc, srv)
 }
 
@@ -157,21 +154,11 @@ func _InboundServerPolicies_WatchPort_Handler(srv interface{}, stream grpc.Serve
 	if err := stream.RecvMsg(m); err != nil {
 		return err
 	}
-	return srv.(InboundServerPoliciesServer).WatchPort(m, &inboundServerPoliciesWatchPortServer{ServerStream: stream})
-}
-
-type InboundServerPolicies_WatchPortServer interface {
-	Send(*Server) error
-	grpc.ServerStream
+	return srv.(InboundServerPoliciesServer).WatchPort(m, &grpc.GenericServerStream[PortSpec, Server]{ServerStream: stream})
 }
 
-type inboundServerPoliciesWatchPortServer struct {
-	grpc.ServerStream
-}
-
-func (x *inboundServerPoliciesWatchPortServer) Send(m *Server) error {
-	return x.ServerStream.SendMsg(m)
-}
+// This type alias is provided for backwards compatibility with existing code that references the prior non-generic stream type by name.
+type InboundServerPolicies_WatchPortServer = grpc.ServerStreamingServer[Server]
 
 // InboundServerPolicies_ServiceDesc is the grpc.ServiceDesc for InboundServerPolicies service.
 // It's only intended for direct use with grpc.RegisterService,
diff --git a/go/meta/meta.pb.go b/go/meta/meta.pb.go
index f21a94717..064751085 100644
--- a/go/meta/meta.pb.go
+++ b/go/meta/meta.pb.go
@@ -1,6 +1,6 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.34.2
+// 	protoc-gen-go v1.35.1
 // 	protoc        v3.12.4
 // source: meta.proto
 
@@ -36,11 +36,9 @@ type Metadata struct {
 
 func (x *Metadata) Reset() {
 	*x = Metadata{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_meta_proto_msgTypes[0]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_meta_proto_msgTypes[0]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *Metadata) String() string {
@@ -51,7 +49,7 @@ func (*Metadata) ProtoMessage() {}
 
 func (x *Metadata) ProtoReflect() protoreflect.Message {
 	mi := &file_meta_proto_msgTypes[0]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -124,11 +122,9 @@ type Resource struct {
 
 func (x *Resource) Reset() {
 	*x = Resource{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_meta_proto_msgTypes[1]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_meta_proto_msgTypes[1]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *Resource) String() string {
@@ -139,7 +135,7 @@ func (*Resource) ProtoMessage() {}
 
 func (x *Resource) ProtoReflect() protoreflect.Message {
 	mi := &file_meta_proto_msgTypes[1]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -255,32 +251,6 @@ func file_meta_proto_init() {
 	if File_meta_proto != nil {
 		return
 	}
-	if !protoimpl.UnsafeEnabled {
-		file_meta_proto_msgTypes[0].Exporter = func(v any, i int) any {
-			switch v := v.(*Metadata); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_meta_proto_msgTypes[1].Exporter = func(v any, i int) any {
-			switch v := v.(*Resource); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-	}
 	file_meta_proto_msgTypes[0].OneofWrappers = []any{
 		(*Metadata_Default)(nil),
 		(*Metadata_Resource)(nil),
diff --git a/go/net/net.pb.go b/go/net/net.pb.go
index fca360db3..e0f2d7327 100644
--- a/go/net/net.pb.go
+++ b/go/net/net.pb.go
@@ -1,6 +1,6 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.34.2
+// 	protoc-gen-go v1.35.1
 // 	protoc        v3.12.4
 // source: net.proto
 
@@ -34,11 +34,9 @@ type IPAddress struct {
 
 func (x *IPAddress) Reset() {
 	*x = IPAddress{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_net_proto_msgTypes[0]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_net_proto_msgTypes[0]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *IPAddress) String() string {
@@ -49,7 +47,7 @@ func (*IPAddress) ProtoMessage() {}
 
 func (x *IPAddress) ProtoReflect() protoreflect.Message {
 	mi := &file_net_proto_msgTypes[0]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -112,11 +110,9 @@ type IPNetwork struct {
 
 func (x *IPNetwork) Reset() {
 	*x = IPNetwork{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_net_proto_msgTypes[1]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_net_proto_msgTypes[1]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *IPNetwork) String() string {
@@ -127,7 +123,7 @@ func (*IPNetwork) ProtoMessage() {}
 
 func (x *IPNetwork) ProtoReflect() protoreflect.Message {
 	mi := &file_net_proto_msgTypes[1]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -167,11 +163,9 @@ type IPv6 struct {
 
 func (x *IPv6) Reset() {
 	*x = IPv6{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_net_proto_msgTypes[2]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_net_proto_msgTypes[2]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *IPv6) String() string {
@@ -182,7 +176,7 @@ func (*IPv6) ProtoMessage() {}
 
 func (x *IPv6) ProtoReflect() protoreflect.Message {
 	mi := &file_net_proto_msgTypes[2]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -222,11 +216,9 @@ type TcpAddress struct {
 
 func (x *TcpAddress) Reset() {
 	*x = TcpAddress{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_net_proto_msgTypes[3]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_net_proto_msgTypes[3]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *TcpAddress) String() string {
@@ -237,7 +229,7 @@ func (*TcpAddress) ProtoMessage() {}
 
 func (x *TcpAddress) ProtoReflect() protoreflect.Message {
 	mi := &file_net_proto_msgTypes[3]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -332,56 +324,6 @@ func file_net_proto_init() {
 	if File_net_proto != nil {
 		return
 	}
-	if !protoimpl.UnsafeEnabled {
-		file_net_proto_msgTypes[0].Exporter = func(v any, i int) any {
-			switch v := v.(*IPAddress); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_net_proto_msgTypes[1].Exporter = func(v any, i int) any {
-			switch v := v.(*IPNetwork); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_net_proto_msgTypes[2].Exporter = func(v any, i int) any {
-			switch v := v.(*IPv6); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_net_proto_msgTypes[3].Exporter = func(v any, i int) any {
-			switch v := v.(*TcpAddress); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-	}
 	file_net_proto_msgTypes[0].OneofWrappers = []any{
 		(*IPAddress_Ipv4)(nil),
 		(*IPAddress_Ipv6)(nil),
diff --git a/go/outbound/outbound.pb.go b/go/outbound/outbound.pb.go
index 908b04331..9a4260f93 100644
--- a/go/outbound/outbound.pb.go
+++ b/go/outbound/outbound.pb.go
@@ -1,6 +1,6 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.34.2
+// 	protoc-gen-go v1.35.1
 // 	protoc        v3.12.4
 // source: outbound.proto
 
@@ -27,94 +27,90 @@ const (
 	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
 )
 
-// Error type that is used to indicate that any traffic
-// that is delivered through a route should be failed.
-type OpaqueRoute_RouteError int32
+type OpaqueRoute_RouteError_Kind int32
 
 const (
-	OpaqueRoute_FORBIDDEN OpaqueRoute_RouteError = 0
+	OpaqueRoute_RouteError_FORBIDDEN OpaqueRoute_RouteError_Kind = 0
 )
 
-// Enum value maps for OpaqueRoute_RouteError.
+// Enum value maps for OpaqueRoute_RouteError_Kind.
 var (
-	OpaqueRoute_RouteError_name = map[int32]string{
+	OpaqueRoute_RouteError_Kind_name = map[int32]string{
 		0: "FORBIDDEN",
 	}
-	OpaqueRoute_RouteError_value = map[string]int32{
+	OpaqueRoute_RouteError_Kind_value = map[string]int32{
 		"FORBIDDEN": 0,
 	}
 )
 
-func (x OpaqueRoute_RouteError) Enum() *OpaqueRoute_RouteError {
-	p := new(OpaqueRoute_RouteError)
+func (x OpaqueRoute_RouteError_Kind) Enum() *OpaqueRoute_RouteError_Kind {
+	p := new(OpaqueRoute_RouteError_Kind)
 	*p = x
 	return p
 }
 
-func (x OpaqueRoute_RouteError) String() string {
+func (x OpaqueRoute_RouteError_Kind) String() string {
 	return protoimpl.X.EnumStringOf(x.Descriptor(), protoreflect.EnumNumber(x))
 }
 
-func (OpaqueRoute_RouteError) Descriptor() protoreflect.EnumDescriptor {
+func (OpaqueRoute_RouteError_Kind) Descriptor() protoreflect.EnumDescriptor {
 	return file_outbound_proto_enumTypes[0].Descriptor()
 }
 
-func (OpaqueRoute_RouteError) Type() protoreflect.EnumType {
+func (OpaqueRoute_RouteError_Kind) Type() protoreflect.EnumType {
 	return &file_outbound_proto_enumTypes[0]
 }
 
-func (x OpaqueRoute_RouteError) Number() protoreflect.EnumNumber {
+func (x OpaqueRoute_RouteError_Kind) Number() protoreflect.EnumNumber {
 	return protoreflect.EnumNumber(x)
 }
 
-// Deprecated: Use OpaqueRoute_RouteError.Descriptor instead.
-func (OpaqueRoute_RouteError) EnumDescriptor() ([]byte, []int) {
-	return file_outbound_proto_rawDescGZIP(), []int{5, 0}
+// Deprecated: Use OpaqueRoute_RouteError_Kind.Descriptor instead.
+func (OpaqueRoute_RouteError_Kind) EnumDescriptor() ([]byte, []int) {
+	return file_outbound_proto_rawDescGZIP(), []int{5, 4, 0}
 }
 
-// Error type that is used to indicate that any traffic
-// that is delivered through a route should be failed.
-type TlsRoute_RouteError int32
+type TlsRoute_RouteError_Kind int32
 
 const (
-	TlsRoute_FORBIDDEN TlsRoute_RouteError = 0
+	TlsRoute_RouteError_FORBIDDEN TlsRoute_RouteError_Kind = 0
 )
 
-// Enum value maps for TlsRoute_RouteError.
+// Enum value maps for TlsRoute_RouteError_Kind.
 var (
-	TlsRoute_RouteError_name = map[int32]string{
+	TlsRoute_RouteError_Kind_name = map[int32]string{
 		0: "FORBIDDEN",
 	}
-	TlsRoute_RouteError_value = map[string]int32{
+	TlsRoute_RouteError_Kind_value = map[string]int32{
 		"FORBIDDEN": 0,
 	}
 )
 
-func (x TlsRoute_RouteError) Enum() *TlsRoute_RouteError {
-	p := new(TlsRoute_RouteError)
+func (x TlsRoute_RouteError_Kind) Enum() *TlsRoute_RouteError_Kind {
+	p := new(TlsRoute_RouteError_Kind)
 	*p = x
 	return p
 }
 
-func (x TlsRoute_RouteError) String() string {
+func (x TlsRoute_RouteError_Kind) String() string {
 	return protoimpl.X.EnumStringOf(x.Descriptor(), protoreflect.EnumNumber(x))
 }
 
-func (TlsRoute_RouteError) Descriptor() protoreflect.EnumDescriptor {
+func (TlsRoute_RouteError_Kind) Descriptor() protoreflect.EnumDescriptor {
 	return file_outbound_proto_enumTypes[1].Descriptor()
 }
 
-func (TlsRoute_RouteError) Type() protoreflect.EnumType {
+func (TlsRoute_RouteError_Kind) Type() protoreflect.EnumType {
 	return &file_outbound_proto_enumTypes[1]
 }
 
-func (x TlsRoute_RouteError) Number() protoreflect.EnumNumber {
+func (x TlsRoute_RouteError_Kind) Number() protoreflect.EnumNumber {
 	return protoreflect.EnumNumber(x)
 }
 
-// Deprecated: Use TlsRoute_RouteError.Descriptor instead.
-func (TlsRoute_RouteError) EnumDescriptor() ([]byte, []int) {
-	return file_outbound_proto_rawDescGZIP(), []int{6, 0}
+// Deprecated: Use TlsRoute_RouteError_Kind.Descriptor instead.
+func (TlsRoute_RouteError_Kind) EnumDescriptor() ([]byte, []int) {
+	return file_outbound_proto_rawDescGZIP(), []int{6, 4, 0}
 }
 
 type TrafficSpec struct {
@@ -136,11 +132,9 @@ type TrafficSpec struct {
 
 func (x *TrafficSpec) Reset() {
 	*x = TrafficSpec{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[0]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[0]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *TrafficSpec) String() string {
@@ -151,7 +145,7 @@ func (*TrafficSpec) ProtoMessage() {}
 
 func (x *TrafficSpec) ProtoReflect() protoreflect.Message {
 	mi := &file_outbound_proto_msgTypes[0]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -228,11 +222,9 @@ type OutboundPolicy struct {
 
 func (x *OutboundPolicy) Reset() {
 	*x = OutboundPolicy{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[1]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[1]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *OutboundPolicy) String() string {
@@ -243,7 +235,7 @@ func (*OutboundPolicy) ProtoMessage() {}
 
 func (x *OutboundPolicy) ProtoReflect() protoreflect.Message {
 	mi := &file_outbound_proto_msgTypes[1]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -290,11 +282,9 @@ type ProxyProtocol struct {
 
 func (x *ProxyProtocol) Reset() {
 	*x = ProxyProtocol{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[2]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[2]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *ProxyProtocol) String() string {
@@ -305,7 +295,7 @@ func (*ProxyProtocol) ProtoMessage() {}
 
 func (x *ProxyProtocol) ProtoReflect() protoreflect.Message {
 	mi := &file_outbound_proto_msgTypes[2]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -429,11 +419,9 @@ type HttpRoute struct {
 
 func (x *HttpRoute) Reset() {
 	*x = HttpRoute{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[3]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[3]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *HttpRoute) String() string {
@@ -444,7 +432,7 @@ func (*HttpRoute) ProtoMessage() {}
 
 func (x *HttpRoute) ProtoReflect() protoreflect.Message {
 	mi := &file_outbound_proto_msgTypes[3]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -494,11 +482,9 @@ type GrpcRoute struct {
 
 func (x *GrpcRoute) Reset() {
 	*x = GrpcRoute{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[4]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[4]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *GrpcRoute) String() string {
@@ -509,7 +495,7 @@ func (*GrpcRoute) ProtoMessage() {}
 
 func (x *GrpcRoute) ProtoReflect() protoreflect.Message {
 	mi := &file_outbound_proto_msgTypes[4]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -552,17 +538,15 @@ type OpaqueRoute struct {
 
 	Metadata *meta.Metadata `protobuf:"bytes,1,opt,name=metadata,proto3" json:"metadata,omitempty"`
 	// Must have at least one rule.
-	Rules []*OpaqueRoute_Rule    `protobuf:"bytes,3,rep,name=rules,proto3" json:"rules,omitempty"`
-	Error OpaqueRoute_RouteError `protobuf:"varint,4,opt,name=error,proto3,enum=io.linkerd.proxy.outbound.OpaqueRoute_RouteError" json:"error,omitempty"`
+	Rules []*OpaqueRoute_Rule     `protobuf:"bytes,3,rep,name=rules,proto3" json:"rules,omitempty"`
+	Error *OpaqueRoute_RouteError `protobuf:"bytes,4,opt,name=error,proto3" json:"error,omitempty"`
 }
 
 func (x *OpaqueRoute) Reset() {
 	*x = OpaqueRoute{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[5]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[5]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *OpaqueRoute) String() string {
@@ -573,7 +557,7 @@ func (*OpaqueRoute) ProtoMessage() {}
 
 func (x *OpaqueRoute) ProtoReflect() protoreflect.Message {
 	mi := &file_outbound_proto_msgTypes[5]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -602,11 +586,11 @@ func (x *OpaqueRoute) GetRules() []*OpaqueRoute_Rule {
 	return nil
 }
 
-func (x *OpaqueRoute) GetError() OpaqueRoute_RouteError {
+func (x *OpaqueRoute) GetError() *OpaqueRoute_RouteError {
 	if x != nil {
 		return x.Error
 	}
-	return OpaqueRoute_FORBIDDEN
+	return nil
 }
 
 type TlsRoute struct {
@@ -618,17 +602,15 @@ type TlsRoute struct {
 	// If empty, the SNI value is ignored.
 	Snis []*tls_route.SniMatch `protobuf:"bytes,2,rep,name=snis,proto3" json:"snis,omitempty"`
 	// Must have at least one rule.
-	Rules []*TlsRoute_Rule    `protobuf:"bytes,3,rep,name=rules,proto3" json:"rules,omitempty"`
-	Error TlsRoute_RouteError `protobuf:"varint,4,opt,name=error,proto3,enum=io.linkerd.proxy.outbound.TlsRoute_RouteError" json:"error,omitempty"`
+	Rules []*TlsRoute_Rule     `protobuf:"bytes,3,rep,name=rules,proto3" json:"rules,omitempty"`
+	Error *TlsRoute_RouteError `protobuf:"bytes,4,opt,name=error,proto3" json:"error,omitempty"`
 }
 
 func (x *TlsRoute) Reset() {
 	*x = TlsRoute{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[6]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[6]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *TlsRoute) String() string {
@@ -639,7 +621,7 @@ func (*TlsRoute) ProtoMessage() {}
 
 func (x *TlsRoute) ProtoReflect() protoreflect.Message {
 	mi := &file_outbound_proto_msgTypes[6]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -675,11 +657,11 @@ func (x *TlsRoute) GetRules() []*TlsRoute_Rule {
 	return nil
 }
 
-func (x *TlsRoute) GetError() TlsRoute_RouteError {
+func (x *TlsRoute) GetError() *TlsRoute_RouteError {
 	if x != nil {
 		return x.Error
 	}
-	return TlsRoute_FORBIDDEN
+	return nil
 }
 
 type Backend struct {
@@ -699,11 +681,9 @@ type Backend struct {
 
 func (x *Backend) Reset() {
 	*x = Backend{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[7]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[7]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *Backend) String() string {
@@ -714,7 +694,7 @@ func (*Backend) ProtoMessage() {}
 
 func (x *Backend) ProtoReflect() protoreflect.Message {
 	mi := &file_outbound_proto_msgTypes[7]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -797,11 +777,9 @@ type Queue struct {
 
 func (x *Queue) Reset() {
 	*x = Queue{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[8]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[8]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *Queue) String() string {
@@ -812,7 +790,7 @@ func (*Queue) ProtoMessage() {}
 
 func (x *Queue) ProtoReflect() protoreflect.Message {
 	mi := &file_outbound_proto_msgTypes[8]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -854,11 +832,9 @@ type FailureAccrual struct {
 
 func (x *FailureAccrual) Reset() {
 	*x = FailureAccrual{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[9]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[9]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *FailureAccrual) String() string {
@@ -869,7 +845,7 @@ func (*FailureAccrual) ProtoMessage() {}
 
 func (x *FailureAccrual) ProtoReflect() protoreflect.Message {
 	mi := &file_outbound_proto_msgTypes[9]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -925,11 +901,9 @@ type ExponentialBackoff struct {
 
 func (x *ExponentialBackoff) Reset() {
 	*x = ExponentialBackoff{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[10]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[10]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *ExponentialBackoff) String() string {
@@ -940,7 +914,7 @@ func (*ExponentialBackoff) ProtoMessage() {}
 
 func (x *ExponentialBackoff) ProtoReflect() protoreflect.Message {
 	mi := &file_outbound_proto_msgTypes[10]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -992,11 +966,9 @@ type ProxyProtocol_Detect struct {
 
 func (x *ProxyProtocol_Detect) Reset() {
 	*x = ProxyProtocol_Detect{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[11]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[11]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *ProxyProtocol_Detect) String() string {
@@ -1007,7 +979,7 @@ func (*ProxyProtocol_Detect) ProtoMessage() {}
 
 func (x *ProxyProtocol_Detect) ProtoReflect() protoreflect.Message {
 	mi := &file_outbound_proto_msgTypes[11]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1060,11 +1032,9 @@ type ProxyProtocol_Opaque struct {
 
 func (x *ProxyProtocol_Opaque) Reset() {
 	*x = ProxyProtocol_Opaque{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[12]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[12]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *ProxyProtocol_Opaque) String() string {
@@ -1075,7 +1045,7 @@ func (*ProxyProtocol_Opaque) ProtoMessage() {}
 
 func (x *ProxyProtocol_Opaque) ProtoReflect() protoreflect.Message {
 	mi := &file_outbound_proto_msgTypes[12]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1109,11 +1079,9 @@ type ProxyProtocol_Http1 struct {
 
 func (x *ProxyProtocol_Http1) Reset() {
 	*x = ProxyProtocol_Http1{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[13]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[13]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *ProxyProtocol_Http1) String() string {
@@ -1124,7 +1092,7 @@ func (*ProxyProtocol_Http1) ProtoMessage() {}
 
 func (x *ProxyProtocol_Http1) ProtoReflect() protoreflect.Message {
 	mi := &file_outbound_proto_msgTypes[13]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1165,11 +1133,9 @@ type ProxyProtocol_Http2 struct {
 
 func (x *ProxyProtocol_Http2) Reset() {
 	*x = ProxyProtocol_Http2{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[14]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[14]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *ProxyProtocol_Http2) String() string {
@@ -1180,7 +1146,7 @@ func (*ProxyProtocol_Http2) ProtoMessage() {}
 
 func (x *ProxyProtocol_Http2) ProtoReflect() protoreflect.Message {
 	mi := &file_outbound_proto_msgTypes[14]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1221,11 +1187,9 @@ type ProxyProtocol_Grpc struct {
 
 func (x *ProxyProtocol_Grpc) Reset() {
 	*x = ProxyProtocol_Grpc{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[15]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[15]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *ProxyProtocol_Grpc) String() string {
@@ -1236,7 +1200,7 @@ func (*ProxyProtocol_Grpc) ProtoMessage() {}
 
 func (x *ProxyProtocol_Grpc) ProtoReflect() protoreflect.Message {
 	mi := &file_outbound_proto_msgTypes[15]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1275,11 +1239,9 @@ type ProxyProtocol_Tls struct {
 
 func (x *ProxyProtocol_Tls) Reset() {
 	*x = ProxyProtocol_Tls{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[16]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[16]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *ProxyProtocol_Tls) String() string {
@@ -1290,7 +1252,7 @@ func (*ProxyProtocol_Tls) ProtoMessage() {}
 
 func (x *ProxyProtocol_Tls) ProtoReflect() protoreflect.Message {
 	mi := &file_outbound_proto_msgTypes[16]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1334,11 +1296,9 @@ type HttpRoute_Rule struct {
 
 func (x *HttpRoute_Rule) Reset() {
 	*x = HttpRoute_Rule{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[17]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[17]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *HttpRoute_Rule) String() string {
@@ -1349,7 +1309,7 @@ func (*HttpRoute_Rule) ProtoMessage() {}
 
 func (x *HttpRoute_Rule) ProtoReflect() protoreflect.Message {
 	mi := &file_outbound_proto_msgTypes[17]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1430,11 +1390,9 @@ type HttpRoute_Filter struct {
 
 func (x *HttpRoute_Filter) Reset() {
 	*x = HttpRoute_Filter{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[18]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[18]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *HttpRoute_Filter) String() string {
@@ -1445,7 +1403,7 @@ func (*HttpRoute_Filter) ProtoMessage() {}
 
 func (x *HttpRoute_Filter) ProtoReflect() protoreflect.Message {
 	mi := &file_outbound_proto_msgTypes[18]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1538,11 +1496,9 @@ type HttpRoute_Distribution struct {
 
 func (x *HttpRoute_Distribution) Reset() {
 	*x = HttpRoute_Distribution{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[19]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[19]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *HttpRoute_Distribution) String() string {
@@ -1553,7 +1509,7 @@ func (*HttpRoute_Distribution) ProtoMessage() {}
 
 func (x *HttpRoute_Distribution) ProtoReflect() protoreflect.Message {
 	mi := &file_outbound_proto_msgTypes[19]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1634,11 +1590,9 @@ type HttpRoute_Retry struct {
 
 func (x *HttpRoute_Retry) Reset() {
 	*x = HttpRoute_Retry{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[20]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[20]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *HttpRoute_Retry) String() string {
@@ -1649,7 +1603,7 @@ func (*HttpRoute_Retry) ProtoMessage() {}
 
 func (x *HttpRoute_Retry) ProtoReflect() protoreflect.Message {
 	mi := &file_outbound_proto_msgTypes[20]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1714,11 +1668,9 @@ type HttpRoute_RouteBackend struct {
 
 func (x *HttpRoute_RouteBackend) Reset() {
 	*x = HttpRoute_RouteBackend{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[21]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[21]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *HttpRoute_RouteBackend) String() string {
@@ -1729,7 +1681,7 @@ func (*HttpRoute_RouteBackend) ProtoMessage() {}
 
 func (x *HttpRoute_RouteBackend) ProtoReflect() protoreflect.Message {
 	mi := &file_outbound_proto_msgTypes[21]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1777,11 +1729,9 @@ type HttpRoute_WeightedRouteBackend struct {
 
 func (x *HttpRoute_WeightedRouteBackend) Reset() {
 	*x = HttpRoute_WeightedRouteBackend{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[22]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[22]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *HttpRoute_WeightedRouteBackend) String() string {
@@ -1792,7 +1742,7 @@ func (*HttpRoute_WeightedRouteBackend) ProtoMessage() {}
 
 func (x *HttpRoute_WeightedRouteBackend) ProtoReflect() protoreflect.Message {
 	mi := &file_outbound_proto_msgTypes[22]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1829,11 +1779,9 @@ type HttpRoute_Distribution_Empty struct {
 
 func (x *HttpRoute_Distribution_Empty) Reset() {
 	*x = HttpRoute_Distribution_Empty{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[23]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[23]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *HttpRoute_Distribution_Empty) String() string {
@@ -1844,7 +1792,7 @@ func (*HttpRoute_Distribution_Empty) ProtoMessage() {}
 
 func (x *HttpRoute_Distribution_Empty) ProtoReflect() protoreflect.Message {
 	mi := &file_outbound_proto_msgTypes[23]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1869,11 +1817,9 @@ type HttpRoute_Distribution_FirstAvailable struct {
 
 func (x *HttpRoute_Distribution_FirstAvailable) Reset() {
 	*x = HttpRoute_Distribution_FirstAvailable{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[24]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[24]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *HttpRoute_Distribution_FirstAvailable) String() string {
@@ -1884,7 +1830,7 @@ func (*HttpRoute_Distribution_FirstAvailable) ProtoMessage() {}
 
 func (x *HttpRoute_Distribution_FirstAvailable) ProtoReflect() protoreflect.Message {
 	mi := &file_outbound_proto_msgTypes[24]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1916,11 +1862,9 @@ type HttpRoute_Distribution_RandomAvailable struct {
 
 func (x *HttpRoute_Distribution_RandomAvailable) Reset() {
 	*x = HttpRoute_Distribution_RandomAvailable{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[25]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[25]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *HttpRoute_Distribution_RandomAvailable) String() string {
@@ -1931,7 +1875,7 @@ func (*HttpRoute_Distribution_RandomAvailable) ProtoMessage() {}
 
 func (x *HttpRoute_Distribution_RandomAvailable) ProtoReflect() protoreflect.Message {
 	mi := &file_outbound_proto_msgTypes[25]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1965,11 +1909,9 @@ type HttpRoute_Retry_Conditions struct {
 
 func (x *HttpRoute_Retry_Conditions) Reset() {
 	*x = HttpRoute_Retry_Conditions{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[26]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[26]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *HttpRoute_Retry_Conditions) String() string {
@@ -1980,7 +1922,7 @@ func (*HttpRoute_Retry_Conditions) ProtoMessage() {}
 
 func (x *HttpRoute_Retry_Conditions) ProtoReflect() protoreflect.Message {
 	mi := &file_outbound_proto_msgTypes[26]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -2013,11 +1955,9 @@ type HttpRoute_Retry_Conditions_StatusRange struct {
 
 func (x *HttpRoute_Retry_Conditions_StatusRange) Reset() {
 	*x = HttpRoute_Retry_Conditions_StatusRange{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[27]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[27]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *HttpRoute_Retry_Conditions_StatusRange) String() string {
@@ -2028,7 +1968,7 @@ func (*HttpRoute_Retry_Conditions_StatusRange) ProtoMessage() {}
 
 func (x *HttpRoute_Retry_Conditions_StatusRange) ProtoReflect() protoreflect.Message {
 	mi := &file_outbound_proto_msgTypes[27]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -2079,11 +2019,9 @@ type GrpcRoute_Rule struct {
 
 func (x *GrpcRoute_Rule) Reset() {
 	*x = GrpcRoute_Rule{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[28]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[28]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *GrpcRoute_Rule) String() string {
@@ -2094,7 +2032,7 @@ func (*GrpcRoute_Rule) ProtoMessage() {}
 
 func (x *GrpcRoute_Rule) ProtoReflect() protoreflect.Message {
 	mi := &file_outbound_proto_msgTypes[28]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -2173,11 +2111,9 @@ type GrpcRoute_Filter struct {
 
 func (x *GrpcRoute_Filter) Reset() {
 	*x = GrpcRoute_Filter{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[29]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[29]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *GrpcRoute_Filter) String() string {
@@ -2188,7 +2124,7 @@ func (*GrpcRoute_Filter) ProtoMessage() {}
 
 func (x *GrpcRoute_Filter) ProtoReflect() protoreflect.Message {
 	mi := &file_outbound_proto_msgTypes[29]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -2255,11 +2191,9 @@ type GrpcRoute_Distribution struct {
 
 func (x *GrpcRoute_Distribution) Reset() {
 	*x = GrpcRoute_Distribution{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[30]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[30]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *GrpcRoute_Distribution) String() string {
@@ -2270,7 +2204,7 @@ func (*GrpcRoute_Distribution) ProtoMessage() {}
 
 func (x *GrpcRoute_Distribution) ProtoReflect() protoreflect.Message {
 	mi := &file_outbound_proto_msgTypes[30]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -2351,11 +2285,9 @@ type GrpcRoute_Retry struct {
 
 func (x *GrpcRoute_Retry) Reset() {
 	*x = GrpcRoute_Retry{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[31]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[31]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *GrpcRoute_Retry) String() string {
@@ -2366,7 +2298,7 @@ func (*GrpcRoute_Retry) ProtoMessage() {}
 
 func (x *GrpcRoute_Retry) ProtoReflect() protoreflect.Message {
 	mi := &file_outbound_proto_msgTypes[31]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -2431,11 +2363,9 @@ type GrpcRoute_RouteBackend struct {
 
 func (x *GrpcRoute_RouteBackend) Reset() {
 	*x = GrpcRoute_RouteBackend{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[32]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[32]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *GrpcRoute_RouteBackend) String() string {
@@ -2446,7 +2376,7 @@ func (*GrpcRoute_RouteBackend) ProtoMessage() {}
 
 func (x *GrpcRoute_RouteBackend) ProtoReflect() protoreflect.Message {
 	mi := &file_outbound_proto_msgTypes[32]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -2494,11 +2424,9 @@ type GrpcRoute_WeightedRouteBackend struct {
 
 func (x *GrpcRoute_WeightedRouteBackend) Reset() {
 	*x = GrpcRoute_WeightedRouteBackend{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[33]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[33]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *GrpcRoute_WeightedRouteBackend) String() string {
@@ -2509,7 +2437,7 @@ func (*GrpcRoute_WeightedRouteBackend) ProtoMessage() {}
 
 func (x *GrpcRoute_WeightedRouteBackend) ProtoReflect() protoreflect.Message {
 	mi := &file_outbound_proto_msgTypes[33]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -2546,11 +2474,9 @@ type GrpcRoute_Distribution_Empty struct {
 
 func (x *GrpcRoute_Distribution_Empty) Reset() {
 	*x = GrpcRoute_Distribution_Empty{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[34]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[34]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *GrpcRoute_Distribution_Empty) String() string {
@@ -2561,7 +2487,7 @@ func (*GrpcRoute_Distribution_Empty) ProtoMessage() {}
 
 func (x *GrpcRoute_Distribution_Empty) ProtoReflect() protoreflect.Message {
 	mi := &file_outbound_proto_msgTypes[34]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -2586,11 +2512,9 @@ type GrpcRoute_Distribution_FirstAvailable struct {
 
 func (x *GrpcRoute_Distribution_FirstAvailable) Reset() {
 	*x = GrpcRoute_Distribution_FirstAvailable{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[35]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[35]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *GrpcRoute_Distribution_FirstAvailable) String() string {
@@ -2601,7 +2525,7 @@ func (*GrpcRoute_Distribution_FirstAvailable) ProtoMessage() {}
 
 func (x *GrpcRoute_Distribution_FirstAvailable) ProtoReflect() protoreflect.Message {
 	mi := &file_outbound_proto_msgTypes[35]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -2633,11 +2557,9 @@ type GrpcRoute_Distribution_RandomAvailable struct {
 
 func (x *GrpcRoute_Distribution_RandomAvailable) Reset() {
 	*x = GrpcRoute_Distribution_RandomAvailable{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[36]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[36]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *GrpcRoute_Distribution_RandomAvailable) String() string {
@@ -2648,7 +2570,7 @@ func (*GrpcRoute_Distribution_RandomAvailable) ProtoMessage() {}
 
 func (x *GrpcRoute_Distribution_RandomAvailable) ProtoReflect() protoreflect.Message {
 	mi := &file_outbound_proto_msgTypes[36]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -2685,11 +2607,9 @@ type GrpcRoute_Retry_Conditions struct {
 
 func (x *GrpcRoute_Retry_Conditions) Reset() {
 	*x = GrpcRoute_Retry_Conditions{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[37]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[37]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *GrpcRoute_Retry_Conditions) String() string {
@@ -2700,7 +2620,7 @@ func (*GrpcRoute_Retry_Conditions) ProtoMessage() {}
 
 func (x *GrpcRoute_Retry_Conditions) ProtoReflect() protoreflect.Message {
 	mi := &file_outbound_proto_msgTypes[37]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -2760,11 +2680,9 @@ type OpaqueRoute_Rule struct {
 
 func (x *OpaqueRoute_Rule) Reset() {
 	*x = OpaqueRoute_Rule{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[38]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[38]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *OpaqueRoute_Rule) String() string {
@@ -2775,7 +2693,7 @@ func (*OpaqueRoute_Rule) ProtoMessage() {}
 
 func (x *OpaqueRoute_Rule) ProtoReflect() protoreflect.Message {
 	mi := &file_outbound_proto_msgTypes[38]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -2812,11 +2730,9 @@ type OpaqueRoute_Distribution struct {
 
 func (x *OpaqueRoute_Distribution) Reset() {
 	*x = OpaqueRoute_Distribution{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[39]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[39]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *OpaqueRoute_Distribution) String() string {
@@ -2827,7 +2743,7 @@ func (*OpaqueRoute_Distribution) ProtoMessage() {}
 
 func (x *OpaqueRoute_Distribution) ProtoReflect() protoreflect.Message {
 	mi := &file_outbound_proto_msgTypes[39]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -2904,11 +2820,9 @@ type OpaqueRoute_RouteBackend struct {
 
 func (x *OpaqueRoute_RouteBackend) Reset() {
 	*x = OpaqueRoute_RouteBackend{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[40]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[40]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *OpaqueRoute_RouteBackend) String() string {
@@ -2919,7 +2833,7 @@ func (*OpaqueRoute_RouteBackend) ProtoMessage() {}
 
 func (x *OpaqueRoute_RouteBackend) ProtoReflect() protoreflect.Message {
 	mi := &file_outbound_proto_msgTypes[40]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -2959,11 +2873,9 @@ type OpaqueRoute_WeightedRouteBackend struct {
 
 func (x *OpaqueRoute_WeightedRouteBackend) Reset() {
 	*x = OpaqueRoute_WeightedRouteBackend{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[41]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[41]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *OpaqueRoute_WeightedRouteBackend) String() string {
@@ -2974,7 +2886,7 @@ func (*OpaqueRoute_WeightedRouteBackend) ProtoMessage() {}
 
 func (x *OpaqueRoute_WeightedRouteBackend) ProtoReflect() protoreflect.Message {
 	mi := &file_outbound_proto_msgTypes[41]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -3003,6 +2915,53 @@ func (x *OpaqueRoute_WeightedRouteBackend) GetWeight() uint32 {
 	return 0
 }
 
+// Error type that is used to indicate that any traffic
+// that is delivered through a route should be failed.
+type OpaqueRoute_RouteError struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Kind OpaqueRoute_RouteError_Kind `protobuf:"varint,1,opt,name=kind,proto3,enum=io.linkerd.proxy.outbound.OpaqueRoute_RouteError_Kind" json:"kind,omitempty"`
+}
+
+func (x *OpaqueRoute_RouteError) Reset() {
+	*x = OpaqueRoute_RouteError{}
+	mi := &file_outbound_proto_msgTypes[42]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *OpaqueRoute_RouteError) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*OpaqueRoute_RouteError) ProtoMessage() {}
+
+func (x *OpaqueRoute_RouteError) ProtoReflect() protoreflect.Message {
+	mi := &file_outbound_proto_msgTypes[42]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use OpaqueRoute_RouteError.ProtoReflect.Descriptor instead.
+func (*OpaqueRoute_RouteError) Descriptor() ([]byte, []int) {
+	return file_outbound_proto_rawDescGZIP(), []int{5, 4}
+}
+
+func (x *OpaqueRoute_RouteError) GetKind() OpaqueRoute_RouteError_Kind {
+	if x != nil {
+		return x.Kind
+	}
+	return OpaqueRoute_RouteError_FORBIDDEN
+}
+
 type OpaqueRoute_Distribution_Empty struct {
 	state         protoimpl.MessageState
 	sizeCache     protoimpl.SizeCache
@@ -3011,11 +2970,9 @@ type OpaqueRoute_Distribution_Empty struct {
 
 func (x *OpaqueRoute_Distribution_Empty) Reset() {
 	*x = OpaqueRoute_Distribution_Empty{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[42]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[43]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *OpaqueRoute_Distribution_Empty) String() string {
@@ -3025,8 +2982,8 @@ func (x *OpaqueRoute_Distribution_Empty) String() string {
 func (*OpaqueRoute_Distribution_Empty) ProtoMessage() {}
 
 func (x *OpaqueRoute_Distribution_Empty) ProtoReflect() protoreflect.Message {
-	mi := &file_outbound_proto_msgTypes[42]
-	if protoimpl.UnsafeEnabled && x != nil {
+	mi := &file_outbound_proto_msgTypes[43]
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -3051,11 +3008,9 @@ type OpaqueRoute_Distribution_FirstAvailable struct {
 
 func (x *OpaqueRoute_Distribution_FirstAvailable) Reset() {
 	*x = OpaqueRoute_Distribution_FirstAvailable{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[43]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[44]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *OpaqueRoute_Distribution_FirstAvailable) String() string {
@@ -3065,8 +3020,8 @@ func (x *OpaqueRoute_Distribution_FirstAvailable) String() string {
 func (*OpaqueRoute_Distribution_FirstAvailable) ProtoMessage() {}
 
 func (x *OpaqueRoute_Distribution_FirstAvailable) ProtoReflect() protoreflect.Message {
-	mi := &file_outbound_proto_msgTypes[43]
-	if protoimpl.UnsafeEnabled && x != nil {
+	mi := &file_outbound_proto_msgTypes[44]
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -3098,11 +3053,9 @@ type OpaqueRoute_Distribution_RandomAvailable struct {
 
 func (x *OpaqueRoute_Distribution_RandomAvailable) Reset() {
 	*x = OpaqueRoute_Distribution_RandomAvailable{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[44]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[45]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *OpaqueRoute_Distribution_RandomAvailable) String() string {
@@ -3112,8 +3065,8 @@ func (x *OpaqueRoute_Distribution_RandomAvailable) String() string {
 func (*OpaqueRoute_Distribution_RandomAvailable) ProtoMessage() {}
 
 func (x *OpaqueRoute_Distribution_RandomAvailable) ProtoReflect() protoreflect.Message {
-	mi := &file_outbound_proto_msgTypes[44]
-	if protoimpl.UnsafeEnabled && x != nil {
+	mi := &file_outbound_proto_msgTypes[45]
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -3145,11 +3098,9 @@ type OpaqueRoute_RouteBackend_Invalid struct {
 
 func (x *OpaqueRoute_RouteBackend_Invalid) Reset() {
 	*x = OpaqueRoute_RouteBackend_Invalid{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[45]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[46]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *OpaqueRoute_RouteBackend_Invalid) String() string {
@@ -3159,8 +3110,8 @@ func (x *OpaqueRoute_RouteBackend_Invalid) String() string {
 func (*OpaqueRoute_RouteBackend_Invalid) ProtoMessage() {}
 
 func (x *OpaqueRoute_RouteBackend_Invalid) ProtoReflect() protoreflect.Message {
-	mi := &file_outbound_proto_msgTypes[45]
-	if protoimpl.UnsafeEnabled && x != nil {
+	mi := &file_outbound_proto_msgTypes[46]
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -3192,11 +3143,9 @@ type TlsRoute_Rule struct {
 
 func (x *TlsRoute_Rule) Reset() {
 	*x = TlsRoute_Rule{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[46]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[47]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *TlsRoute_Rule) String() string {
@@ -3206,8 +3155,8 @@ func (x *TlsRoute_Rule) String() string {
 func (*TlsRoute_Rule) ProtoMessage() {}
 
 func (x *TlsRoute_Rule) ProtoReflect() protoreflect.Message {
-	mi := &file_outbound_proto_msgTypes[46]
-	if protoimpl.UnsafeEnabled && x != nil {
+	mi := &file_outbound_proto_msgTypes[47]
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -3244,11 +3193,9 @@ type TlsRoute_Distribution struct {
 
 func (x *TlsRoute_Distribution) Reset() {
 	*x = TlsRoute_Distribution{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[47]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[48]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *TlsRoute_Distribution) String() string {
@@ -3258,8 +3205,8 @@ func (x *TlsRoute_Distribution) String() string {
 func (*TlsRoute_Distribution) ProtoMessage() {}
 
 func (x *TlsRoute_Distribution) ProtoReflect() protoreflect.Message {
-	mi := &file_outbound_proto_msgTypes[47]
-	if protoimpl.UnsafeEnabled && x != nil {
+	mi := &file_outbound_proto_msgTypes[48]
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -3336,11 +3283,9 @@ type TlsRoute_RouteBackend struct {
 
 func (x *TlsRoute_RouteBackend) Reset() {
 	*x = TlsRoute_RouteBackend{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[48]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[49]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *TlsRoute_RouteBackend) String() string {
@@ -3350,8 +3295,8 @@ func (x *TlsRoute_RouteBackend) String() string {
 func (*TlsRoute_RouteBackend) ProtoMessage() {}
 
 func (x *TlsRoute_RouteBackend) ProtoReflect() protoreflect.Message {
-	mi := &file_outbound_proto_msgTypes[48]
-	if protoimpl.UnsafeEnabled && x != nil {
+	mi := &file_outbound_proto_msgTypes[49]
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -3391,11 +3336,9 @@ type TlsRoute_WeightedRouteBackend struct {
 
 func (x *TlsRoute_WeightedRouteBackend) Reset() {
 	*x = TlsRoute_WeightedRouteBackend{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[49]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[50]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *TlsRoute_WeightedRouteBackend) String() string {
@@ -3405,8 +3348,8 @@ func (x *TlsRoute_WeightedRouteBackend) String() string {
 func (*TlsRoute_WeightedRouteBackend) ProtoMessage() {}
 
 func (x *TlsRoute_WeightedRouteBackend) ProtoReflect() protoreflect.Message {
-	mi := &file_outbound_proto_msgTypes[49]
-	if protoimpl.UnsafeEnabled && x != nil {
+	mi := &file_outbound_proto_msgTypes[50]
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -3435,6 +3378,53 @@ func (x *TlsRoute_WeightedRouteBackend) GetWeight() uint32 {
 	return 0
 }
 
+// Error type that is used to indicate that any traffic
+// that is delivered through a route should be failed.
+type TlsRoute_RouteError struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Kind TlsRoute_RouteError_Kind `protobuf:"varint,1,opt,name=kind,proto3,enum=io.linkerd.proxy.outbound.TlsRoute_RouteError_Kind" json:"kind,omitempty"`
+}
+
+func (x *TlsRoute_RouteError) Reset() {
+	*x = TlsRoute_RouteError{}
+	mi := &file_outbound_proto_msgTypes[51]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *TlsRoute_RouteError) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*TlsRoute_RouteError) ProtoMessage() {}
+
+func (x *TlsRoute_RouteError) ProtoReflect() protoreflect.Message {
+	mi := &file_outbound_proto_msgTypes[51]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use TlsRoute_RouteError.ProtoReflect.Descriptor instead.
+func (*TlsRoute_RouteError) Descriptor() ([]byte, []int) {
+	return file_outbound_proto_rawDescGZIP(), []int{6, 4}
+}
+
+func (x *TlsRoute_RouteError) GetKind() TlsRoute_RouteError_Kind {
+	if x != nil {
+		return x.Kind
+	}
+	return TlsRoute_RouteError_FORBIDDEN
+}
+
 type TlsRoute_Distribution_Empty struct {
 	state         protoimpl.MessageState
 	sizeCache     protoimpl.SizeCache
@@ -3443,11 +3433,9 @@ type TlsRoute_Distribution_Empty struct {
 
 func (x *TlsRoute_Distribution_Empty) Reset() {
 	*x = TlsRoute_Distribution_Empty{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[50]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[52]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *TlsRoute_Distribution_Empty) String() string {
@@ -3457,8 +3445,8 @@ func (x *TlsRoute_Distribution_Empty) String() string {
 func (*TlsRoute_Distribution_Empty) ProtoMessage() {}
 
 func (x *TlsRoute_Distribution_Empty) ProtoReflect() protoreflect.Message {
-	mi := &file_outbound_proto_msgTypes[50]
-	if protoimpl.UnsafeEnabled && x != nil {
+	mi := &file_outbound_proto_msgTypes[52]
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -3483,11 +3471,9 @@ type TlsRoute_Distribution_FirstAvailable struct {
 
 func (x *TlsRoute_Distribution_FirstAvailable) Reset() {
 	*x = TlsRoute_Distribution_FirstAvailable{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[51]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[53]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *TlsRoute_Distribution_FirstAvailable) String() string {
@@ -3497,8 +3483,8 @@ func (x *TlsRoute_Distribution_FirstAvailable) String() string {
 func (*TlsRoute_Distribution_FirstAvailable) ProtoMessage() {}
 
 func (x *TlsRoute_Distribution_FirstAvailable) ProtoReflect() protoreflect.Message {
-	mi := &file_outbound_proto_msgTypes[51]
-	if protoimpl.UnsafeEnabled && x != nil {
+	mi := &file_outbound_proto_msgTypes[53]
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -3530,11 +3516,9 @@ type TlsRoute_Distribution_RandomAvailable struct {
 
 func (x *TlsRoute_Distribution_RandomAvailable) Reset() {
 	*x = TlsRoute_Distribution_RandomAvailable{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[52]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[54]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *TlsRoute_Distribution_RandomAvailable) String() string {
@@ -3544,8 +3528,8 @@ func (x *TlsRoute_Distribution_RandomAvailable) String() string {
 func (*TlsRoute_Distribution_RandomAvailable) ProtoMessage() {}
 
 func (x *TlsRoute_Distribution_RandomAvailable) ProtoReflect() protoreflect.Message {
-	mi := &file_outbound_proto_msgTypes[52]
-	if protoimpl.UnsafeEnabled && x != nil {
+	mi := &file_outbound_proto_msgTypes[54]
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -3577,11 +3561,9 @@ type TlsRoute_RouteBackend_Invalid struct {
 
 func (x *TlsRoute_RouteBackend_Invalid) Reset() {
 	*x = TlsRoute_RouteBackend_Invalid{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[53]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[55]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *TlsRoute_RouteBackend_Invalid) String() string {
@@ -3591,8 +3573,8 @@ func (x *TlsRoute_RouteBackend_Invalid) String() string {
 func (*TlsRoute_RouteBackend_Invalid) ProtoMessage() {}
 
 func (x *TlsRoute_RouteBackend_Invalid) ProtoReflect() protoreflect.Message {
-	mi := &file_outbound_proto_msgTypes[53]
-	if protoimpl.UnsafeEnabled && x != nil {
+	mi := &file_outbound_proto_msgTypes[55]
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -3628,11 +3610,9 @@ type Backend_EndpointDiscovery struct {
 
 func (x *Backend_EndpointDiscovery) Reset() {
 	*x = Backend_EndpointDiscovery{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[54]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[56]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *Backend_EndpointDiscovery) String() string {
@@ -3642,8 +3622,8 @@ func (x *Backend_EndpointDiscovery) String() string {
 func (*Backend_EndpointDiscovery) ProtoMessage() {}
 
 func (x *Backend_EndpointDiscovery) ProtoReflect() protoreflect.Message {
-	mi := &file_outbound_proto_msgTypes[54]
-	if protoimpl.UnsafeEnabled && x != nil {
+	mi := &file_outbound_proto_msgTypes[56]
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -3701,11 +3681,9 @@ type Backend_BalanceP2C struct {
 
 func (x *Backend_BalanceP2C) Reset() {
 	*x = Backend_BalanceP2C{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[55]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[57]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *Backend_BalanceP2C) String() string {
@@ -3715,8 +3693,8 @@ func (x *Backend_BalanceP2C) String() string {
 func (*Backend_BalanceP2C) ProtoMessage() {}
 
 func (x *Backend_BalanceP2C) ProtoReflect() protoreflect.Message {
-	mi := &file_outbound_proto_msgTypes[55]
-	if protoimpl.UnsafeEnabled && x != nil {
+	mi := &file_outbound_proto_msgTypes[57]
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -3774,11 +3752,9 @@ type Backend_EndpointDiscovery_DestinationGet struct {
 
 func (x *Backend_EndpointDiscovery_DestinationGet) Reset() {
 	*x = Backend_EndpointDiscovery_DestinationGet{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[56]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[58]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *Backend_EndpointDiscovery_DestinationGet) String() string {
@@ -3788,8 +3764,8 @@ func (x *Backend_EndpointDiscovery_DestinationGet) String() string {
 func (*Backend_EndpointDiscovery_DestinationGet) ProtoMessage() {}
 
 func (x *Backend_EndpointDiscovery_DestinationGet) ProtoReflect() protoreflect.Message {
-	mi := &file_outbound_proto_msgTypes[56]
-	if protoimpl.UnsafeEnabled && x != nil {
+	mi := &file_outbound_proto_msgTypes[58]
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -3826,11 +3802,9 @@ type Backend_BalanceP2C_PeakEwma struct {
 
 func (x *Backend_BalanceP2C_PeakEwma) Reset() {
 	*x = Backend_BalanceP2C_PeakEwma{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[57]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[59]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *Backend_BalanceP2C_PeakEwma) String() string {
@@ -3840,8 +3814,8 @@ func (x *Backend_BalanceP2C_PeakEwma) String() string {
 func (*Backend_BalanceP2C_PeakEwma) ProtoMessage() {}
 
 func (x *Backend_BalanceP2C_PeakEwma) ProtoReflect() protoreflect.Message {
-	mi := &file_outbound_proto_msgTypes[57]
-	if protoimpl.UnsafeEnabled && x != nil {
+	mi := &file_outbound_proto_msgTypes[59]
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -3881,11 +3855,9 @@ type FailureAccrual_ConsecutiveFailures struct {
 
 func (x *FailureAccrual_ConsecutiveFailures) Reset() {
 	*x = FailureAccrual_ConsecutiveFailures{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_outbound_proto_msgTypes[58]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_outbound_proto_msgTypes[60]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *FailureAccrual_ConsecutiveFailures) String() string {
@@ -3895,8 +3867,8 @@ func (x *FailureAccrual_ConsecutiveFailures) String() string {
 func (*FailureAccrual_ConsecutiveFailures) ProtoMessage() {}
 
 func (x *FailureAccrual_ConsecutiveFailures) ProtoReflect() protoreflect.Message {
-	mi := &file_outbound_proto_msgTypes[58]
-	if protoimpl.UnsafeEnabled && x != nil {
+	mi := &file_outbound_proto_msgTypes[60]
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -4339,7 +4311,7 @@ var file_outbound_proto_rawDesc = []byte{
 	0x2e, 0x47, 0x72, 0x70, 0x63, 0x52, 0x6f, 0x75, 0x74, 0x65, 0x2e, 0x52, 0x6f, 0x75, 0x74, 0x65,
 	0x42, 0x61, 0x63, 0x6b, 0x65, 0x6e, 0x64, 0x52, 0x07, 0x62, 0x61, 0x63, 0x6b, 0x65, 0x6e, 0x64,
 	0x12, 0x16, 0x0a, 0x06, 0x77, 0x65, 0x69, 0x67, 0x68, 0x74, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0d,
-	0x52, 0x06, 0x77, 0x65, 0x69, 0x67, 0x68, 0x74, 0x22, 0xbb, 0x09, 0x0a, 0x0b, 0x4f, 0x70, 0x61,
+	0x52, 0x06, 0x77, 0x65, 0x69, 0x67, 0x68, 0x74, 0x22, 0x8f, 0x0a, 0x0a, 0x0b, 0x4f, 0x70, 0x61,
 	0x71, 0x75, 0x65, 0x52, 0x6f, 0x75, 0x74, 0x65, 0x12, 0x3b, 0x0a, 0x08, 0x6d, 0x65, 0x74, 0x61,
 	0x64, 0x61, 0x74, 0x61, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1f, 0x2e, 0x69, 0x6f, 0x2e,
 	0x6c, 0x69, 0x6e, 0x6b, 0x65, 0x72, 0x64, 0x2e, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x6d, 0x65,
@@ -4349,7 +4321,7 @@ var file_outbound_proto_rawDesc = []byte{
 	0x64, 0x2e, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x6f, 0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64,
 	0x2e, 0x4f, 0x70, 0x61, 0x71, 0x75, 0x65, 0x52, 0x6f, 0x75, 0x74, 0x65, 0x2e, 0x52, 0x75, 0x6c,
 	0x65, 0x52, 0x05, 0x72, 0x75, 0x6c, 0x65, 0x73, 0x12, 0x47, 0x0a, 0x05, 0x65, 0x72, 0x72, 0x6f,
-	0x72, 0x18, 0x04, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x31, 0x2e, 0x69, 0x6f, 0x2e, 0x6c, 0x69, 0x6e,
+	0x72, 0x18, 0x04, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x31, 0x2e, 0x69, 0x6f, 0x2e, 0x6c, 0x69, 0x6e,
 	0x6b, 0x65, 0x72, 0x64, 0x2e, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x6f, 0x75, 0x74, 0x62, 0x6f,
 	0x75, 0x6e, 0x64, 0x2e, 0x4f, 0x70, 0x61, 0x71, 0x75, 0x65, 0x52, 0x6f, 0x75, 0x74, 0x65, 0x2e,
 	0x52, 0x6f, 0x75, 0x74, 0x65, 0x45, 0x72, 0x72, 0x6f, 0x72, 0x52, 0x05, 0x65, 0x72, 0x72, 0x6f,
@@ -4413,186 +4385,196 @@ var file_outbound_proto_rawDesc = []byte{
 	0x4f, 0x70, 0x61, 0x71, 0x75, 0x65, 0x52, 0x6f, 0x75, 0x74, 0x65, 0x2e, 0x52, 0x6f, 0x75, 0x74,
 	0x65, 0x42, 0x61, 0x63, 0x6b, 0x65, 0x6e, 0x64, 0x52, 0x07, 0x62, 0x61, 0x63, 0x6b, 0x65, 0x6e,
 	0x64, 0x12, 0x16, 0x0a, 0x06, 0x77, 0x65, 0x69, 0x67, 0x68, 0x74, 0x18, 0x02, 0x20, 0x01, 0x28,
-	0x0d, 0x52, 0x06, 0x77, 0x65, 0x69, 0x67, 0x68, 0x74, 0x22, 0x1b, 0x0a, 0x0a, 0x52, 0x6f, 0x75,
-	0x74, 0x65, 0x45, 0x72, 0x72, 0x6f, 0x72, 0x12, 0x0d, 0x0a, 0x09, 0x46, 0x4f, 0x52, 0x42, 0x49,
-	0x44, 0x44, 0x45, 0x4e, 0x10, 0x00, 0x22, 0xd4, 0x09, 0x0a, 0x08, 0x54, 0x6c, 0x73, 0x52, 0x6f,
-	0x75, 0x74, 0x65, 0x12, 0x3b, 0x0a, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x18,
-	0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1f, 0x2e, 0x69, 0x6f, 0x2e, 0x6c, 0x69, 0x6e, 0x6b, 0x65,
-	0x72, 0x64, 0x2e, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x6d, 0x65, 0x74, 0x61, 0x2e, 0x4d, 0x65,
-	0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x52, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61,
-	0x12, 0x38, 0x0a, 0x04, 0x73, 0x6e, 0x69, 0x73, 0x18, 0x02, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x24,
-	0x2e, 0x69, 0x6f, 0x2e, 0x6c, 0x69, 0x6e, 0x6b, 0x65, 0x72, 0x64, 0x2e, 0x70, 0x72, 0x6f, 0x78,
-	0x79, 0x2e, 0x74, 0x6c, 0x73, 0x5f, 0x72, 0x6f, 0x75, 0x74, 0x65, 0x2e, 0x53, 0x6e, 0x69, 0x4d,
-	0x61, 0x74, 0x63, 0x68, 0x52, 0x04, 0x73, 0x6e, 0x69, 0x73, 0x12, 0x3e, 0x0a, 0x05, 0x72, 0x75,
-	0x6c, 0x65, 0x73, 0x18, 0x03, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x28, 0x2e, 0x69, 0x6f, 0x2e, 0x6c,
-	0x69, 0x6e, 0x6b, 0x65, 0x72, 0x64, 0x2e, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x6f, 0x75, 0x74,
-	0x62, 0x6f, 0x75, 0x6e, 0x64, 0x2e, 0x54, 0x6c, 0x73, 0x52, 0x6f, 0x75, 0x74, 0x65, 0x2e, 0x52,
-	0x75, 0x6c, 0x65, 0x52, 0x05, 0x72, 0x75, 0x6c, 0x65, 0x73, 0x12, 0x44, 0x0a, 0x05, 0x65, 0x72,
-	0x72, 0x6f, 0x72, 0x18, 0x04, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x2e, 0x2e, 0x69, 0x6f, 0x2e, 0x6c,
-	0x69, 0x6e, 0x6b, 0x65, 0x72, 0x64, 0x2e, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x6f, 0x75, 0x74,
-	0x62, 0x6f, 0x75, 0x6e, 0x64, 0x2e, 0x54, 0x6c, 0x73, 0x52, 0x6f, 0x75, 0x74, 0x65, 0x2e, 0x52,
-	0x6f, 0x75, 0x74, 0x65, 0x45, 0x72, 0x72, 0x6f, 0x72, 0x52, 0x05, 0x65, 0x72, 0x72, 0x6f, 0x72,
-	0x1a, 0x54, 0x0a, 0x04, 0x52, 0x75, 0x6c, 0x65, 0x12, 0x4c, 0x0a, 0x08, 0x62, 0x61, 0x63, 0x6b,
-	0x65, 0x6e, 0x64, 0x73, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x30, 0x2e, 0x69, 0x6f, 0x2e,
-	0x6c, 0x69, 0x6e, 0x6b, 0x65, 0x72, 0x64, 0x2e, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x6f, 0x75,
-	0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x2e, 0x54, 0x6c, 0x73, 0x52, 0x6f, 0x75, 0x74, 0x65, 0x2e,
-	0x44, 0x69, 0x73, 0x74, 0x72, 0x69, 0x62, 0x75, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x08, 0x62, 0x61,
-	0x63, 0x6b, 0x65, 0x6e, 0x64, 0x73, 0x1a, 0x93, 0x04, 0x0a, 0x0c, 0x44, 0x69, 0x73, 0x74, 0x72,
-	0x69, 0x62, 0x75, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x4e, 0x0a, 0x05, 0x65, 0x6d, 0x70, 0x74, 0x79,
-	0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x36, 0x2e, 0x69, 0x6f, 0x2e, 0x6c, 0x69, 0x6e, 0x6b,
-	0x65, 0x72, 0x64, 0x2e, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x6f, 0x75, 0x74, 0x62, 0x6f, 0x75,
-	0x6e, 0x64, 0x2e, 0x54, 0x6c, 0x73, 0x52, 0x6f, 0x75, 0x74, 0x65, 0x2e, 0x44, 0x69, 0x73, 0x74,
-	0x72, 0x69, 0x62, 0x75, 0x74, 0x69, 0x6f, 0x6e, 0x2e, 0x45, 0x6d, 0x70, 0x74, 0x79, 0x48, 0x00,
-	0x52, 0x05, 0x65, 0x6d, 0x70, 0x74, 0x79, 0x12, 0x6a, 0x0a, 0x0f, 0x66, 0x69, 0x72, 0x73, 0x74,
-	0x5f, 0x61, 0x76, 0x61, 0x69, 0x6c, 0x61, 0x62, 0x6c, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b,
-	0x32, 0x3f, 0x2e, 0x69, 0x6f, 0x2e, 0x6c, 0x69, 0x6e, 0x6b, 0x65, 0x72, 0x64, 0x2e, 0x70, 0x72,
-	0x6f, 0x78, 0x79, 0x2e, 0x6f, 0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x2e, 0x54, 0x6c, 0x73,
-	0x52, 0x6f, 0x75, 0x74, 0x65, 0x2e, 0x44, 0x69, 0x73, 0x74, 0x72, 0x69, 0x62, 0x75, 0x74, 0x69,
-	0x6f, 0x6e, 0x2e, 0x46, 0x69, 0x72, 0x73, 0x74, 0x41, 0x76, 0x61, 0x69, 0x6c, 0x61, 0x62, 0x6c,
-	0x65, 0x48, 0x00, 0x52, 0x0e, 0x66, 0x69, 0x72, 0x73, 0x74, 0x41, 0x76, 0x61, 0x69, 0x6c, 0x61,
-	0x62, 0x6c, 0x65, 0x12, 0x6d, 0x0a, 0x10, 0x72, 0x61, 0x6e, 0x64, 0x6f, 0x6d, 0x5f, 0x61, 0x76,
-	0x61, 0x69, 0x6c, 0x61, 0x62, 0x6c, 0x65, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x40, 0x2e,
+	0x0d, 0x52, 0x06, 0x77, 0x65, 0x69, 0x67, 0x68, 0x74, 0x1a, 0x6f, 0x0a, 0x0a, 0x52, 0x6f, 0x75,
+	0x74, 0x65, 0x45, 0x72, 0x72, 0x6f, 0x72, 0x12, 0x4a, 0x0a, 0x04, 0x6b, 0x69, 0x6e, 0x64, 0x18,
+	0x01, 0x20, 0x01, 0x28, 0x0e, 0x32, 0x36, 0x2e, 0x69, 0x6f, 0x2e, 0x6c, 0x69, 0x6e, 0x6b, 0x65,
+	0x72, 0x64, 0x2e, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x6f, 0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e,
+	0x64, 0x2e, 0x4f, 0x70, 0x61, 0x71, 0x75, 0x65, 0x52, 0x6f, 0x75, 0x74, 0x65, 0x2e, 0x52, 0x6f,
+	0x75, 0x74, 0x65, 0x45, 0x72, 0x72, 0x6f, 0x72, 0x2e, 0x4b, 0x69, 0x6e, 0x64, 0x52, 0x04, 0x6b,
+	0x69, 0x6e, 0x64, 0x22, 0x15, 0x0a, 0x04, 0x4b, 0x69, 0x6e, 0x64, 0x12, 0x0d, 0x0a, 0x09, 0x46,
+	0x4f, 0x52, 0x42, 0x49, 0x44, 0x44, 0x45, 0x4e, 0x10, 0x00, 0x22, 0xa5, 0x0a, 0x0a, 0x08, 0x54,
+	0x6c, 0x73, 0x52, 0x6f, 0x75, 0x74, 0x65, 0x12, 0x3b, 0x0a, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64,
+	0x61, 0x74, 0x61, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1f, 0x2e, 0x69, 0x6f, 0x2e, 0x6c,
+	0x69, 0x6e, 0x6b, 0x65, 0x72, 0x64, 0x2e, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x6d, 0x65, 0x74,
+	0x61, 0x2e, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x52, 0x08, 0x6d, 0x65, 0x74, 0x61,
+	0x64, 0x61, 0x74, 0x61, 0x12, 0x38, 0x0a, 0x04, 0x73, 0x6e, 0x69, 0x73, 0x18, 0x02, 0x20, 0x03,
+	0x28, 0x0b, 0x32, 0x24, 0x2e, 0x69, 0x6f, 0x2e, 0x6c, 0x69, 0x6e, 0x6b, 0x65, 0x72, 0x64, 0x2e,
+	0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x74, 0x6c, 0x73, 0x5f, 0x72, 0x6f, 0x75, 0x74, 0x65, 0x2e,
+	0x53, 0x6e, 0x69, 0x4d, 0x61, 0x74, 0x63, 0x68, 0x52, 0x04, 0x73, 0x6e, 0x69, 0x73, 0x12, 0x3e,
+	0x0a, 0x05, 0x72, 0x75, 0x6c, 0x65, 0x73, 0x18, 0x03, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x28, 0x2e,
 	0x69, 0x6f, 0x2e, 0x6c, 0x69, 0x6e, 0x6b, 0x65, 0x72, 0x64, 0x2e, 0x70, 0x72, 0x6f, 0x78, 0x79,
 	0x2e, 0x6f, 0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x2e, 0x54, 0x6c, 0x73, 0x52, 0x6f, 0x75,
-	0x74, 0x65, 0x2e, 0x44, 0x69, 0x73, 0x74, 0x72, 0x69, 0x62, 0x75, 0x74, 0x69, 0x6f, 0x6e, 0x2e,
-	0x52, 0x61, 0x6e, 0x64, 0x6f, 0x6d, 0x41, 0x76, 0x61, 0x69, 0x6c, 0x61, 0x62, 0x6c, 0x65, 0x48,
-	0x00, 0x52, 0x0f, 0x72, 0x61, 0x6e, 0x64, 0x6f, 0x6d, 0x41, 0x76, 0x61, 0x69, 0x6c, 0x61, 0x62,
-	0x6c, 0x65, 0x1a, 0x07, 0x0a, 0x05, 0x45, 0x6d, 0x70, 0x74, 0x79, 0x1a, 0x5e, 0x0a, 0x0e, 0x46,
-	0x69, 0x72, 0x73, 0x74, 0x41, 0x76, 0x61, 0x69, 0x6c, 0x61, 0x62, 0x6c, 0x65, 0x12, 0x4c, 0x0a,
-	0x08, 0x62, 0x61, 0x63, 0x6b, 0x65, 0x6e, 0x64, 0x73, 0x18, 0x01, 0x20, 0x03, 0x28, 0x0b, 0x32,
-	0x30, 0x2e, 0x69, 0x6f, 0x2e, 0x6c, 0x69, 0x6e, 0x6b, 0x65, 0x72, 0x64, 0x2e, 0x70, 0x72, 0x6f,
-	0x78, 0x79, 0x2e, 0x6f, 0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x2e, 0x54, 0x6c, 0x73, 0x52,
-	0x6f, 0x75, 0x74, 0x65, 0x2e, 0x52, 0x6f, 0x75, 0x74, 0x65, 0x42, 0x61, 0x63, 0x6b, 0x65, 0x6e,
-	0x64, 0x52, 0x08, 0x62, 0x61, 0x63, 0x6b, 0x65, 0x6e, 0x64, 0x73, 0x1a, 0x67, 0x0a, 0x0f, 0x52,
-	0x61, 0x6e, 0x64, 0x6f, 0x6d, 0x41, 0x76, 0x61, 0x69, 0x6c, 0x61, 0x62, 0x6c, 0x65, 0x12, 0x54,
-	0x0a, 0x08, 0x62, 0x61, 0x63, 0x6b, 0x65, 0x6e, 0x64, 0x73, 0x18, 0x01, 0x20, 0x03, 0x28, 0x0b,
-	0x32, 0x38, 0x2e, 0x69, 0x6f, 0x2e, 0x6c, 0x69, 0x6e, 0x6b, 0x65, 0x72, 0x64, 0x2e, 0x70, 0x72,
-	0x6f, 0x78, 0x79, 0x2e, 0x6f, 0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x2e, 0x54, 0x6c, 0x73,
-	0x52, 0x6f, 0x75, 0x74, 0x65, 0x2e, 0x57, 0x65, 0x69, 0x67, 0x68, 0x74, 0x65, 0x64, 0x52, 0x6f,
-	0x75, 0x74, 0x65, 0x42, 0x61, 0x63, 0x6b, 0x65, 0x6e, 0x64, 0x52, 0x08, 0x62, 0x61, 0x63, 0x6b,
-	0x65, 0x6e, 0x64, 0x73, 0x42, 0x06, 0x0a, 0x04, 0x6b, 0x69, 0x6e, 0x64, 0x1a, 0xc5, 0x01, 0x0a,
-	0x0c, 0x52, 0x6f, 0x75, 0x74, 0x65, 0x42, 0x61, 0x63, 0x6b, 0x65, 0x6e, 0x64, 0x12, 0x3c, 0x0a,
-	0x07, 0x62, 0x61, 0x63, 0x6b, 0x65, 0x6e, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x22,
-	0x2e, 0x69, 0x6f, 0x2e, 0x6c, 0x69, 0x6e, 0x6b, 0x65, 0x72, 0x64, 0x2e, 0x70, 0x72, 0x6f, 0x78,
-	0x79, 0x2e, 0x6f, 0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x2e, 0x42, 0x61, 0x63, 0x6b, 0x65,
-	0x6e, 0x64, 0x52, 0x07, 0x62, 0x61, 0x63, 0x6b, 0x65, 0x6e, 0x64, 0x12, 0x52, 0x0a, 0x07, 0x69,
-	0x6e, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x38, 0x2e, 0x69,
-	0x6f, 0x2e, 0x6c, 0x69, 0x6e, 0x6b, 0x65, 0x72, 0x64, 0x2e, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e,
-	0x6f, 0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x2e, 0x54, 0x6c, 0x73, 0x52, 0x6f, 0x75, 0x74,
-	0x65, 0x2e, 0x52, 0x6f, 0x75, 0x74, 0x65, 0x42, 0x61, 0x63, 0x6b, 0x65, 0x6e, 0x64, 0x2e, 0x49,
-	0x6e, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x52, 0x07, 0x69, 0x6e, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x1a,
-	0x23, 0x0a, 0x07, 0x49, 0x6e, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x12, 0x18, 0x0a, 0x07, 0x6d, 0x65,
-	0x73, 0x73, 0x61, 0x67, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x07, 0x6d, 0x65, 0x73,
-	0x73, 0x61, 0x67, 0x65, 0x1a, 0x7a, 0x0a, 0x14, 0x57, 0x65, 0x69, 0x67, 0x68, 0x74, 0x65, 0x64,
-	0x52, 0x6f, 0x75, 0x74, 0x65, 0x42, 0x61, 0x63, 0x6b, 0x65, 0x6e, 0x64, 0x12, 0x4a, 0x0a, 0x07,
-	0x62, 0x61, 0x63, 0x6b, 0x65, 0x6e, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x30, 0x2e,
+	0x74, 0x65, 0x2e, 0x52, 0x75, 0x6c, 0x65, 0x52, 0x05, 0x72, 0x75, 0x6c, 0x65, 0x73, 0x12, 0x44,
+	0x0a, 0x05, 0x65, 0x72, 0x72, 0x6f, 0x72, 0x18, 0x04, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x2e, 0x2e,
 	0x69, 0x6f, 0x2e, 0x6c, 0x69, 0x6e, 0x6b, 0x65, 0x72, 0x64, 0x2e, 0x70, 0x72, 0x6f, 0x78, 0x79,
 	0x2e, 0x6f, 0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x2e, 0x54, 0x6c, 0x73, 0x52, 0x6f, 0x75,
-	0x74, 0x65, 0x2e, 0x52, 0x6f, 0x75, 0x74, 0x65, 0x42, 0x61, 0x63, 0x6b, 0x65, 0x6e, 0x64, 0x52,
-	0x07, 0x62, 0x61, 0x63, 0x6b, 0x65, 0x6e, 0x64, 0x12, 0x16, 0x0a, 0x06, 0x77, 0x65, 0x69, 0x67,
-	0x68, 0x74, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0d, 0x52, 0x06, 0x77, 0x65, 0x69, 0x67, 0x68, 0x74,
-	0x22, 0x1b, 0x0a, 0x0a, 0x52, 0x6f, 0x75, 0x74, 0x65, 0x45, 0x72, 0x72, 0x6f, 0x72, 0x12, 0x0d,
-	0x0a, 0x09, 0x46, 0x4f, 0x52, 0x42, 0x49, 0x44, 0x44, 0x45, 0x4e, 0x10, 0x00, 0x22, 0xf3, 0x05,
-	0x0a, 0x07, 0x42, 0x61, 0x63, 0x6b, 0x65, 0x6e, 0x64, 0x12, 0x3b, 0x0a, 0x08, 0x6d, 0x65, 0x74,
-	0x61, 0x64, 0x61, 0x74, 0x61, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1f, 0x2e, 0x69, 0x6f,
-	0x2e, 0x6c, 0x69, 0x6e, 0x6b, 0x65, 0x72, 0x64, 0x2e, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x6d,
-	0x65, 0x74, 0x61, 0x2e, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x52, 0x08, 0x6d, 0x65,
-	0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x12, 0x46, 0x0a, 0x07, 0x66, 0x6f, 0x72, 0x77, 0x61, 0x72,
-	0x64, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x2a, 0x2e, 0x69, 0x6f, 0x2e, 0x6c, 0x69, 0x6e,
-	0x6b, 0x65, 0x72, 0x64, 0x2e, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x64, 0x65, 0x73, 0x74, 0x69,
-	0x6e, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x2e, 0x57, 0x65, 0x69, 0x67, 0x68, 0x74, 0x65, 0x64, 0x41,
-	0x64, 0x64, 0x72, 0x48, 0x00, 0x52, 0x07, 0x66, 0x6f, 0x72, 0x77, 0x61, 0x72, 0x64, 0x12, 0x4b,
-	0x0a, 0x08, 0x62, 0x61, 0x6c, 0x61, 0x6e, 0x63, 0x65, 0x72, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b,
-	0x32, 0x2d, 0x2e, 0x69, 0x6f, 0x2e, 0x6c, 0x69, 0x6e, 0x6b, 0x65, 0x72, 0x64, 0x2e, 0x70, 0x72,
-	0x6f, 0x78, 0x79, 0x2e, 0x6f, 0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x2e, 0x42, 0x61, 0x63,
-	0x6b, 0x65, 0x6e, 0x64, 0x2e, 0x42, 0x61, 0x6c, 0x61, 0x6e, 0x63, 0x65, 0x50, 0x32, 0x63, 0x48,
-	0x00, 0x52, 0x08, 0x62, 0x61, 0x6c, 0x61, 0x6e, 0x63, 0x65, 0x72, 0x12, 0x36, 0x0a, 0x05, 0x71,
-	0x75, 0x65, 0x75, 0x65, 0x18, 0x04, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x20, 0x2e, 0x69, 0x6f, 0x2e,
+	0x74, 0x65, 0x2e, 0x52, 0x6f, 0x75, 0x74, 0x65, 0x45, 0x72, 0x72, 0x6f, 0x72, 0x52, 0x05, 0x65,
+	0x72, 0x72, 0x6f, 0x72, 0x1a, 0x54, 0x0a, 0x04, 0x52, 0x75, 0x6c, 0x65, 0x12, 0x4c, 0x0a, 0x08,
+	0x62, 0x61, 0x63, 0x6b, 0x65, 0x6e, 0x64, 0x73, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x30,
+	0x2e, 0x69, 0x6f, 0x2e, 0x6c, 0x69, 0x6e, 0x6b, 0x65, 0x72, 0x64, 0x2e, 0x70, 0x72, 0x6f, 0x78,
+	0x79, 0x2e, 0x6f, 0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x2e, 0x54, 0x6c, 0x73, 0x52, 0x6f,
+	0x75, 0x74, 0x65, 0x2e, 0x44, 0x69, 0x73, 0x74, 0x72, 0x69, 0x62, 0x75, 0x74, 0x69, 0x6f, 0x6e,
+	0x52, 0x08, 0x62, 0x61, 0x63, 0x6b, 0x65, 0x6e, 0x64, 0x73, 0x1a, 0x93, 0x04, 0x0a, 0x0c, 0x44,
+	0x69, 0x73, 0x74, 0x72, 0x69, 0x62, 0x75, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x4e, 0x0a, 0x05, 0x65,
+	0x6d, 0x70, 0x74, 0x79, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x36, 0x2e, 0x69, 0x6f, 0x2e,
 	0x6c, 0x69, 0x6e, 0x6b, 0x65, 0x72, 0x64, 0x2e, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x6f, 0x75,
-	0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x2e, 0x51, 0x75, 0x65, 0x75, 0x65, 0x52, 0x05, 0x71, 0x75,
-	0x65, 0x75, 0x65, 0x1a, 0x9a, 0x01, 0x0a, 0x11, 0x45, 0x6e, 0x64, 0x70, 0x6f, 0x69, 0x6e, 0x74,
-	0x44, 0x69, 0x73, 0x63, 0x6f, 0x76, 0x65, 0x72, 0x79, 0x12, 0x57, 0x0a, 0x03, 0x64, 0x73, 0x74,
-	0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x43, 0x2e, 0x69, 0x6f, 0x2e, 0x6c, 0x69, 0x6e, 0x6b,
-	0x65, 0x72, 0x64, 0x2e, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x6f, 0x75, 0x74, 0x62, 0x6f, 0x75,
-	0x6e, 0x64, 0x2e, 0x42, 0x61, 0x63, 0x6b, 0x65, 0x6e, 0x64, 0x2e, 0x45, 0x6e, 0x64, 0x70, 0x6f,
-	0x69, 0x6e, 0x74, 0x44, 0x69, 0x73, 0x63, 0x6f, 0x76, 0x65, 0x72, 0x79, 0x2e, 0x44, 0x65, 0x73,
-	0x74, 0x69, 0x6e, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x47, 0x65, 0x74, 0x48, 0x00, 0x52, 0x03, 0x64,
-	0x73, 0x74, 0x1a, 0x24, 0x0a, 0x0e, 0x44, 0x65, 0x73, 0x74, 0x69, 0x6e, 0x61, 0x74, 0x69, 0x6f,
-	0x6e, 0x47, 0x65, 0x74, 0x12, 0x12, 0x0a, 0x04, 0x70, 0x61, 0x74, 0x68, 0x18, 0x01, 0x20, 0x01,
-	0x28, 0x09, 0x52, 0x04, 0x70, 0x61, 0x74, 0x68, 0x42, 0x06, 0x0a, 0x04, 0x6b, 0x69, 0x6e, 0x64,
-	0x1a, 0xb8, 0x02, 0x0a, 0x0a, 0x42, 0x61, 0x6c, 0x61, 0x6e, 0x63, 0x65, 0x50, 0x32, 0x63, 0x12,
-	0x52, 0x0a, 0x09, 0x64, 0x69, 0x73, 0x63, 0x6f, 0x76, 0x65, 0x72, 0x79, 0x18, 0x01, 0x20, 0x01,
-	0x28, 0x0b, 0x32, 0x34, 0x2e, 0x69, 0x6f, 0x2e, 0x6c, 0x69, 0x6e, 0x6b, 0x65, 0x72, 0x64, 0x2e,
+	0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x2e, 0x54, 0x6c, 0x73, 0x52, 0x6f, 0x75, 0x74, 0x65, 0x2e,
+	0x44, 0x69, 0x73, 0x74, 0x72, 0x69, 0x62, 0x75, 0x74, 0x69, 0x6f, 0x6e, 0x2e, 0x45, 0x6d, 0x70,
+	0x74, 0x79, 0x48, 0x00, 0x52, 0x05, 0x65, 0x6d, 0x70, 0x74, 0x79, 0x12, 0x6a, 0x0a, 0x0f, 0x66,
+	0x69, 0x72, 0x73, 0x74, 0x5f, 0x61, 0x76, 0x61, 0x69, 0x6c, 0x61, 0x62, 0x6c, 0x65, 0x18, 0x02,
+	0x20, 0x01, 0x28, 0x0b, 0x32, 0x3f, 0x2e, 0x69, 0x6f, 0x2e, 0x6c, 0x69, 0x6e, 0x6b, 0x65, 0x72,
+	0x64, 0x2e, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x6f, 0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64,
+	0x2e, 0x54, 0x6c, 0x73, 0x52, 0x6f, 0x75, 0x74, 0x65, 0x2e, 0x44, 0x69, 0x73, 0x74, 0x72, 0x69,
+	0x62, 0x75, 0x74, 0x69, 0x6f, 0x6e, 0x2e, 0x46, 0x69, 0x72, 0x73, 0x74, 0x41, 0x76, 0x61, 0x69,
+	0x6c, 0x61, 0x62, 0x6c, 0x65, 0x48, 0x00, 0x52, 0x0e, 0x66, 0x69, 0x72, 0x73, 0x74, 0x41, 0x76,
+	0x61, 0x69, 0x6c, 0x61, 0x62, 0x6c, 0x65, 0x12, 0x6d, 0x0a, 0x10, 0x72, 0x61, 0x6e, 0x64, 0x6f,
+	0x6d, 0x5f, 0x61, 0x76, 0x61, 0x69, 0x6c, 0x61, 0x62, 0x6c, 0x65, 0x18, 0x03, 0x20, 0x01, 0x28,
+	0x0b, 0x32, 0x40, 0x2e, 0x69, 0x6f, 0x2e, 0x6c, 0x69, 0x6e, 0x6b, 0x65, 0x72, 0x64, 0x2e, 0x70,
+	0x72, 0x6f, 0x78, 0x79, 0x2e, 0x6f, 0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x2e, 0x54, 0x6c,
+	0x73, 0x52, 0x6f, 0x75, 0x74, 0x65, 0x2e, 0x44, 0x69, 0x73, 0x74, 0x72, 0x69, 0x62, 0x75, 0x74,
+	0x69, 0x6f, 0x6e, 0x2e, 0x52, 0x61, 0x6e, 0x64, 0x6f, 0x6d, 0x41, 0x76, 0x61, 0x69, 0x6c, 0x61,
+	0x62, 0x6c, 0x65, 0x48, 0x00, 0x52, 0x0f, 0x72, 0x61, 0x6e, 0x64, 0x6f, 0x6d, 0x41, 0x76, 0x61,
+	0x69, 0x6c, 0x61, 0x62, 0x6c, 0x65, 0x1a, 0x07, 0x0a, 0x05, 0x45, 0x6d, 0x70, 0x74, 0x79, 0x1a,
+	0x5e, 0x0a, 0x0e, 0x46, 0x69, 0x72, 0x73, 0x74, 0x41, 0x76, 0x61, 0x69, 0x6c, 0x61, 0x62, 0x6c,
+	0x65, 0x12, 0x4c, 0x0a, 0x08, 0x62, 0x61, 0x63, 0x6b, 0x65, 0x6e, 0x64, 0x73, 0x18, 0x01, 0x20,
+	0x03, 0x28, 0x0b, 0x32, 0x30, 0x2e, 0x69, 0x6f, 0x2e, 0x6c, 0x69, 0x6e, 0x6b, 0x65, 0x72, 0x64,
+	0x2e, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x6f, 0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x2e,
+	0x54, 0x6c, 0x73, 0x52, 0x6f, 0x75, 0x74, 0x65, 0x2e, 0x52, 0x6f, 0x75, 0x74, 0x65, 0x42, 0x61,
+	0x63, 0x6b, 0x65, 0x6e, 0x64, 0x52, 0x08, 0x62, 0x61, 0x63, 0x6b, 0x65, 0x6e, 0x64, 0x73, 0x1a,
+	0x67, 0x0a, 0x0f, 0x52, 0x61, 0x6e, 0x64, 0x6f, 0x6d, 0x41, 0x76, 0x61, 0x69, 0x6c, 0x61, 0x62,
+	0x6c, 0x65, 0x12, 0x54, 0x0a, 0x08, 0x62, 0x61, 0x63, 0x6b, 0x65, 0x6e, 0x64, 0x73, 0x18, 0x01,
+	0x20, 0x03, 0x28, 0x0b, 0x32, 0x38, 0x2e, 0x69, 0x6f, 0x2e, 0x6c, 0x69, 0x6e, 0x6b, 0x65, 0x72,
+	0x64, 0x2e, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x6f, 0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64,
+	0x2e, 0x54, 0x6c, 0x73, 0x52, 0x6f, 0x75, 0x74, 0x65, 0x2e, 0x57, 0x65, 0x69, 0x67, 0x68, 0x74,
+	0x65, 0x64, 0x52, 0x6f, 0x75, 0x74, 0x65, 0x42, 0x61, 0x63, 0x6b, 0x65, 0x6e, 0x64, 0x52, 0x08,
+	0x62, 0x61, 0x63, 0x6b, 0x65, 0x6e, 0x64, 0x73, 0x42, 0x06, 0x0a, 0x04, 0x6b, 0x69, 0x6e, 0x64,
+	0x1a, 0xc5, 0x01, 0x0a, 0x0c, 0x52, 0x6f, 0x75, 0x74, 0x65, 0x42, 0x61, 0x63, 0x6b, 0x65, 0x6e,
+	0x64, 0x12, 0x3c, 0x0a, 0x07, 0x62, 0x61, 0x63, 0x6b, 0x65, 0x6e, 0x64, 0x18, 0x01, 0x20, 0x01,
+	0x28, 0x0b, 0x32, 0x22, 0x2e, 0x69, 0x6f, 0x2e, 0x6c, 0x69, 0x6e, 0x6b, 0x65, 0x72, 0x64, 0x2e,
 	0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x6f, 0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x2e, 0x42,
-	0x61, 0x63, 0x6b, 0x65, 0x6e, 0x64, 0x2e, 0x45, 0x6e, 0x64, 0x70, 0x6f, 0x69, 0x6e, 0x74, 0x44,
-	0x69, 0x73, 0x63, 0x6f, 0x76, 0x65, 0x72, 0x79, 0x52, 0x09, 0x64, 0x69, 0x73, 0x63, 0x6f, 0x76,
-	0x65, 0x72, 0x79, 0x12, 0x55, 0x0a, 0x09, 0x70, 0x65, 0x61, 0x6b, 0x5f, 0x65, 0x77, 0x6d, 0x61,
-	0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x36, 0x2e, 0x69, 0x6f, 0x2e, 0x6c, 0x69, 0x6e, 0x6b,
+	0x61, 0x63, 0x6b, 0x65, 0x6e, 0x64, 0x52, 0x07, 0x62, 0x61, 0x63, 0x6b, 0x65, 0x6e, 0x64, 0x12,
+	0x52, 0x0a, 0x07, 0x69, 0x6e, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b,
+	0x32, 0x38, 0x2e, 0x69, 0x6f, 0x2e, 0x6c, 0x69, 0x6e, 0x6b, 0x65, 0x72, 0x64, 0x2e, 0x70, 0x72,
+	0x6f, 0x78, 0x79, 0x2e, 0x6f, 0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x2e, 0x54, 0x6c, 0x73,
+	0x52, 0x6f, 0x75, 0x74, 0x65, 0x2e, 0x52, 0x6f, 0x75, 0x74, 0x65, 0x42, 0x61, 0x63, 0x6b, 0x65,
+	0x6e, 0x64, 0x2e, 0x49, 0x6e, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x52, 0x07, 0x69, 0x6e, 0x76, 0x61,
+	0x6c, 0x69, 0x64, 0x1a, 0x23, 0x0a, 0x07, 0x49, 0x6e, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x12, 0x18,
+	0x0a, 0x07, 0x6d, 0x65, 0x73, 0x73, 0x61, 0x67, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52,
+	0x07, 0x6d, 0x65, 0x73, 0x73, 0x61, 0x67, 0x65, 0x1a, 0x7a, 0x0a, 0x14, 0x57, 0x65, 0x69, 0x67,
+	0x68, 0x74, 0x65, 0x64, 0x52, 0x6f, 0x75, 0x74, 0x65, 0x42, 0x61, 0x63, 0x6b, 0x65, 0x6e, 0x64,
+	0x12, 0x4a, 0x0a, 0x07, 0x62, 0x61, 0x63, 0x6b, 0x65, 0x6e, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28,
+	0x0b, 0x32, 0x30, 0x2e, 0x69, 0x6f, 0x2e, 0x6c, 0x69, 0x6e, 0x6b, 0x65, 0x72, 0x64, 0x2e, 0x70,
+	0x72, 0x6f, 0x78, 0x79, 0x2e, 0x6f, 0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x2e, 0x54, 0x6c,
+	0x73, 0x52, 0x6f, 0x75, 0x74, 0x65, 0x2e, 0x52, 0x6f, 0x75, 0x74, 0x65, 0x42, 0x61, 0x63, 0x6b,
+	0x65, 0x6e, 0x64, 0x52, 0x07, 0x62, 0x61, 0x63, 0x6b, 0x65, 0x6e, 0x64, 0x12, 0x16, 0x0a, 0x06,
+	0x77, 0x65, 0x69, 0x67, 0x68, 0x74, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0d, 0x52, 0x06, 0x77, 0x65,
+	0x69, 0x67, 0x68, 0x74, 0x1a, 0x6c, 0x0a, 0x0a, 0x52, 0x6f, 0x75, 0x74, 0x65, 0x45, 0x72, 0x72,
+	0x6f, 0x72, 0x12, 0x47, 0x0a, 0x04, 0x6b, 0x69, 0x6e, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0e,
+	0x32, 0x33, 0x2e, 0x69, 0x6f, 0x2e, 0x6c, 0x69, 0x6e, 0x6b, 0x65, 0x72, 0x64, 0x2e, 0x70, 0x72,
+	0x6f, 0x78, 0x79, 0x2e, 0x6f, 0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x2e, 0x54, 0x6c, 0x73,
+	0x52, 0x6f, 0x75, 0x74, 0x65, 0x2e, 0x52, 0x6f, 0x75, 0x74, 0x65, 0x45, 0x72, 0x72, 0x6f, 0x72,
+	0x2e, 0x4b, 0x69, 0x6e, 0x64, 0x52, 0x04, 0x6b, 0x69, 0x6e, 0x64, 0x22, 0x15, 0x0a, 0x04, 0x4b,
+	0x69, 0x6e, 0x64, 0x12, 0x0d, 0x0a, 0x09, 0x46, 0x4f, 0x52, 0x42, 0x49, 0x44, 0x44, 0x45, 0x4e,
+	0x10, 0x00, 0x22, 0xf3, 0x05, 0x0a, 0x07, 0x42, 0x61, 0x63, 0x6b, 0x65, 0x6e, 0x64, 0x12, 0x3b,
+	0x0a, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b,
+	0x32, 0x1f, 0x2e, 0x69, 0x6f, 0x2e, 0x6c, 0x69, 0x6e, 0x6b, 0x65, 0x72, 0x64, 0x2e, 0x70, 0x72,
+	0x6f, 0x78, 0x79, 0x2e, 0x6d, 0x65, 0x74, 0x61, 0x2e, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74,
+	0x61, 0x52, 0x08, 0x6d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0x12, 0x46, 0x0a, 0x07, 0x66,
+	0x6f, 0x72, 0x77, 0x61, 0x72, 0x64, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x2a, 0x2e, 0x69,
+	0x6f, 0x2e, 0x6c, 0x69, 0x6e, 0x6b, 0x65, 0x72, 0x64, 0x2e, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e,
+	0x64, 0x65, 0x73, 0x74, 0x69, 0x6e, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x2e, 0x57, 0x65, 0x69, 0x67,
+	0x68, 0x74, 0x65, 0x64, 0x41, 0x64, 0x64, 0x72, 0x48, 0x00, 0x52, 0x07, 0x66, 0x6f, 0x72, 0x77,
+	0x61, 0x72, 0x64, 0x12, 0x4b, 0x0a, 0x08, 0x62, 0x61, 0x6c, 0x61, 0x6e, 0x63, 0x65, 0x72, 0x18,
+	0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x2d, 0x2e, 0x69, 0x6f, 0x2e, 0x6c, 0x69, 0x6e, 0x6b, 0x65,
+	0x72, 0x64, 0x2e, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x6f, 0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e,
+	0x64, 0x2e, 0x42, 0x61, 0x63, 0x6b, 0x65, 0x6e, 0x64, 0x2e, 0x42, 0x61, 0x6c, 0x61, 0x6e, 0x63,
+	0x65, 0x50, 0x32, 0x63, 0x48, 0x00, 0x52, 0x08, 0x62, 0x61, 0x6c, 0x61, 0x6e, 0x63, 0x65, 0x72,
+	0x12, 0x36, 0x0a, 0x05, 0x71, 0x75, 0x65, 0x75, 0x65, 0x18, 0x04, 0x20, 0x01, 0x28, 0x0b, 0x32,
+	0x20, 0x2e, 0x69, 0x6f, 0x2e, 0x6c, 0x69, 0x6e, 0x6b, 0x65, 0x72, 0x64, 0x2e, 0x70, 0x72, 0x6f,
+	0x78, 0x79, 0x2e, 0x6f, 0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x2e, 0x51, 0x75, 0x65, 0x75,
+	0x65, 0x52, 0x05, 0x71, 0x75, 0x65, 0x75, 0x65, 0x1a, 0x9a, 0x01, 0x0a, 0x11, 0x45, 0x6e, 0x64,
+	0x70, 0x6f, 0x69, 0x6e, 0x74, 0x44, 0x69, 0x73, 0x63, 0x6f, 0x76, 0x65, 0x72, 0x79, 0x12, 0x57,
+	0x0a, 0x03, 0x64, 0x73, 0x74, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x43, 0x2e, 0x69, 0x6f,
+	0x2e, 0x6c, 0x69, 0x6e, 0x6b, 0x65, 0x72, 0x64, 0x2e, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x6f,
+	0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x2e, 0x42, 0x61, 0x63, 0x6b, 0x65, 0x6e, 0x64, 0x2e,
+	0x45, 0x6e, 0x64, 0x70, 0x6f, 0x69, 0x6e, 0x74, 0x44, 0x69, 0x73, 0x63, 0x6f, 0x76, 0x65, 0x72,
+	0x79, 0x2e, 0x44, 0x65, 0x73, 0x74, 0x69, 0x6e, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x47, 0x65, 0x74,
+	0x48, 0x00, 0x52, 0x03, 0x64, 0x73, 0x74, 0x1a, 0x24, 0x0a, 0x0e, 0x44, 0x65, 0x73, 0x74, 0x69,
+	0x6e, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x47, 0x65, 0x74, 0x12, 0x12, 0x0a, 0x04, 0x70, 0x61, 0x74,
+	0x68, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x04, 0x70, 0x61, 0x74, 0x68, 0x42, 0x06, 0x0a,
+	0x04, 0x6b, 0x69, 0x6e, 0x64, 0x1a, 0xb8, 0x02, 0x0a, 0x0a, 0x42, 0x61, 0x6c, 0x61, 0x6e, 0x63,
+	0x65, 0x50, 0x32, 0x63, 0x12, 0x52, 0x0a, 0x09, 0x64, 0x69, 0x73, 0x63, 0x6f, 0x76, 0x65, 0x72,
+	0x79, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x34, 0x2e, 0x69, 0x6f, 0x2e, 0x6c, 0x69, 0x6e,
+	0x6b, 0x65, 0x72, 0x64, 0x2e, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x6f, 0x75, 0x74, 0x62, 0x6f,
+	0x75, 0x6e, 0x64, 0x2e, 0x42, 0x61, 0x63, 0x6b, 0x65, 0x6e, 0x64, 0x2e, 0x45, 0x6e, 0x64, 0x70,
+	0x6f, 0x69, 0x6e, 0x74, 0x44, 0x69, 0x73, 0x63, 0x6f, 0x76, 0x65, 0x72, 0x79, 0x52, 0x09, 0x64,
+	0x69, 0x73, 0x63, 0x6f, 0x76, 0x65, 0x72, 0x79, 0x12, 0x55, 0x0a, 0x09, 0x70, 0x65, 0x61, 0x6b,
+	0x5f, 0x65, 0x77, 0x6d, 0x61, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x36, 0x2e, 0x69, 0x6f,
+	0x2e, 0x6c, 0x69, 0x6e, 0x6b, 0x65, 0x72, 0x64, 0x2e, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x6f,
+	0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x2e, 0x42, 0x61, 0x63, 0x6b, 0x65, 0x6e, 0x64, 0x2e,
+	0x42, 0x61, 0x6c, 0x61, 0x6e, 0x63, 0x65, 0x50, 0x32, 0x63, 0x2e, 0x50, 0x65, 0x61, 0x6b, 0x45,
+	0x77, 0x6d, 0x61, 0x48, 0x00, 0x52, 0x08, 0x70, 0x65, 0x61, 0x6b, 0x45, 0x77, 0x6d, 0x61, 0x1a,
+	0x77, 0x0a, 0x08, 0x50, 0x65, 0x61, 0x6b, 0x45, 0x77, 0x6d, 0x61, 0x12, 0x3a, 0x0a, 0x0b, 0x64,
+	0x65, 0x66, 0x61, 0x75, 0x6c, 0x74, 0x5f, 0x72, 0x74, 0x74, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b,
+	0x32, 0x19, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62,
+	0x75, 0x66, 0x2e, 0x44, 0x75, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x0a, 0x64, 0x65, 0x66,
+	0x61, 0x75, 0x6c, 0x74, 0x52, 0x74, 0x74, 0x12, 0x2f, 0x0a, 0x05, 0x64, 0x65, 0x63, 0x61, 0x79,
+	0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x19, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e,
+	0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x44, 0x75, 0x72, 0x61, 0x74, 0x69, 0x6f,
+	0x6e, 0x52, 0x05, 0x64, 0x65, 0x63, 0x61, 0x79, 0x42, 0x06, 0x0a, 0x04, 0x6c, 0x6f, 0x61, 0x64,
+	0x42, 0x06, 0x0a, 0x04, 0x6b, 0x69, 0x6e, 0x64, 0x22, 0x69, 0x0a, 0x05, 0x51, 0x75, 0x65, 0x75,
+	0x65, 0x12, 0x1a, 0x0a, 0x08, 0x63, 0x61, 0x70, 0x61, 0x63, 0x69, 0x74, 0x79, 0x18, 0x01, 0x20,
+	0x01, 0x28, 0x0d, 0x52, 0x08, 0x63, 0x61, 0x70, 0x61, 0x63, 0x69, 0x74, 0x79, 0x12, 0x44, 0x0a,
+	0x10, 0x66, 0x61, 0x69, 0x6c, 0x66, 0x61, 0x73, 0x74, 0x5f, 0x74, 0x69, 0x6d, 0x65, 0x6f, 0x75,
+	0x74, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x19, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65,
+	0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x44, 0x75, 0x72, 0x61, 0x74, 0x69,
+	0x6f, 0x6e, 0x52, 0x0f, 0x66, 0x61, 0x69, 0x6c, 0x66, 0x61, 0x73, 0x74, 0x54, 0x69, 0x6d, 0x65,
+	0x6f, 0x75, 0x74, 0x22, 0x90, 0x02, 0x0a, 0x0e, 0x46, 0x61, 0x69, 0x6c, 0x75, 0x72, 0x65, 0x41,
+	0x63, 0x63, 0x72, 0x75, 0x61, 0x6c, 0x12, 0x72, 0x0a, 0x14, 0x63, 0x6f, 0x6e, 0x73, 0x65, 0x63,
+	0x75, 0x74, 0x69, 0x76, 0x65, 0x5f, 0x66, 0x61, 0x69, 0x6c, 0x75, 0x72, 0x65, 0x73, 0x18, 0x01,
+	0x20, 0x01, 0x28, 0x0b, 0x32, 0x3d, 0x2e, 0x69, 0x6f, 0x2e, 0x6c, 0x69, 0x6e, 0x6b, 0x65, 0x72,
+	0x64, 0x2e, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x6f, 0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64,
+	0x2e, 0x46, 0x61, 0x69, 0x6c, 0x75, 0x72, 0x65, 0x41, 0x63, 0x63, 0x72, 0x75, 0x61, 0x6c, 0x2e,
+	0x43, 0x6f, 0x6e, 0x73, 0x65, 0x63, 0x75, 0x74, 0x69, 0x76, 0x65, 0x46, 0x61, 0x69, 0x6c, 0x75,
+	0x72, 0x65, 0x73, 0x48, 0x00, 0x52, 0x13, 0x63, 0x6f, 0x6e, 0x73, 0x65, 0x63, 0x75, 0x74, 0x69,
+	0x76, 0x65, 0x46, 0x61, 0x69, 0x6c, 0x75, 0x72, 0x65, 0x73, 0x1a, 0x81, 0x01, 0x0a, 0x13, 0x43,
+	0x6f, 0x6e, 0x73, 0x65, 0x63, 0x75, 0x74, 0x69, 0x76, 0x65, 0x46, 0x61, 0x69, 0x6c, 0x75, 0x72,
+	0x65, 0x73, 0x12, 0x21, 0x0a, 0x0c, 0x6d, 0x61, 0x78, 0x5f, 0x66, 0x61, 0x69, 0x6c, 0x75, 0x72,
+	0x65, 0x73, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0d, 0x52, 0x0b, 0x6d, 0x61, 0x78, 0x46, 0x61, 0x69,
+	0x6c, 0x75, 0x72, 0x65, 0x73, 0x12, 0x47, 0x0a, 0x07, 0x62, 0x61, 0x63, 0x6b, 0x6f, 0x66, 0x66,
+	0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x2d, 0x2e, 0x69, 0x6f, 0x2e, 0x6c, 0x69, 0x6e, 0x6b,
 	0x65, 0x72, 0x64, 0x2e, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x6f, 0x75, 0x74, 0x62, 0x6f, 0x75,
-	0x6e, 0x64, 0x2e, 0x42, 0x61, 0x63, 0x6b, 0x65, 0x6e, 0x64, 0x2e, 0x42, 0x61, 0x6c, 0x61, 0x6e,
-	0x63, 0x65, 0x50, 0x32, 0x63, 0x2e, 0x50, 0x65, 0x61, 0x6b, 0x45, 0x77, 0x6d, 0x61, 0x48, 0x00,
-	0x52, 0x08, 0x70, 0x65, 0x61, 0x6b, 0x45, 0x77, 0x6d, 0x61, 0x1a, 0x77, 0x0a, 0x08, 0x50, 0x65,
-	0x61, 0x6b, 0x45, 0x77, 0x6d, 0x61, 0x12, 0x3a, 0x0a, 0x0b, 0x64, 0x65, 0x66, 0x61, 0x75, 0x6c,
-	0x74, 0x5f, 0x72, 0x74, 0x74, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x19, 0x2e, 0x67, 0x6f,
-	0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x44, 0x75,
-	0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x0a, 0x64, 0x65, 0x66, 0x61, 0x75, 0x6c, 0x74, 0x52,
-	0x74, 0x74, 0x12, 0x2f, 0x0a, 0x05, 0x64, 0x65, 0x63, 0x61, 0x79, 0x18, 0x02, 0x20, 0x01, 0x28,
-	0x0b, 0x32, 0x19, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f,
-	0x62, 0x75, 0x66, 0x2e, 0x44, 0x75, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x05, 0x64, 0x65,
-	0x63, 0x61, 0x79, 0x42, 0x06, 0x0a, 0x04, 0x6c, 0x6f, 0x61, 0x64, 0x42, 0x06, 0x0a, 0x04, 0x6b,
-	0x69, 0x6e, 0x64, 0x22, 0x69, 0x0a, 0x05, 0x51, 0x75, 0x65, 0x75, 0x65, 0x12, 0x1a, 0x0a, 0x08,
-	0x63, 0x61, 0x70, 0x61, 0x63, 0x69, 0x74, 0x79, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0d, 0x52, 0x08,
-	0x63, 0x61, 0x70, 0x61, 0x63, 0x69, 0x74, 0x79, 0x12, 0x44, 0x0a, 0x10, 0x66, 0x61, 0x69, 0x6c,
-	0x66, 0x61, 0x73, 0x74, 0x5f, 0x74, 0x69, 0x6d, 0x65, 0x6f, 0x75, 0x74, 0x18, 0x02, 0x20, 0x01,
+	0x6e, 0x64, 0x2e, 0x45, 0x78, 0x70, 0x6f, 0x6e, 0x65, 0x6e, 0x74, 0x69, 0x61, 0x6c, 0x42, 0x61,
+	0x63, 0x6b, 0x6f, 0x66, 0x66, 0x52, 0x07, 0x62, 0x61, 0x63, 0x6b, 0x6f, 0x66, 0x66, 0x42, 0x06,
+	0x0a, 0x04, 0x6b, 0x69, 0x6e, 0x64, 0x22, 0xaf, 0x01, 0x0a, 0x12, 0x45, 0x78, 0x70, 0x6f, 0x6e,
+	0x65, 0x6e, 0x74, 0x69, 0x61, 0x6c, 0x42, 0x61, 0x63, 0x6b, 0x6f, 0x66, 0x66, 0x12, 0x3a, 0x0a,
+	0x0b, 0x6d, 0x69, 0x6e, 0x5f, 0x62, 0x61, 0x63, 0x6b, 0x6f, 0x66, 0x66, 0x18, 0x01, 0x20, 0x01,
 	0x28, 0x0b, 0x32, 0x19, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74,
-	0x6f, 0x62, 0x75, 0x66, 0x2e, 0x44, 0x75, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x0f, 0x66,
-	0x61, 0x69, 0x6c, 0x66, 0x61, 0x73, 0x74, 0x54, 0x69, 0x6d, 0x65, 0x6f, 0x75, 0x74, 0x22, 0x90,
-	0x02, 0x0a, 0x0e, 0x46, 0x61, 0x69, 0x6c, 0x75, 0x72, 0x65, 0x41, 0x63, 0x63, 0x72, 0x75, 0x61,
-	0x6c, 0x12, 0x72, 0x0a, 0x14, 0x63, 0x6f, 0x6e, 0x73, 0x65, 0x63, 0x75, 0x74, 0x69, 0x76, 0x65,
-	0x5f, 0x66, 0x61, 0x69, 0x6c, 0x75, 0x72, 0x65, 0x73, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32,
-	0x3d, 0x2e, 0x69, 0x6f, 0x2e, 0x6c, 0x69, 0x6e, 0x6b, 0x65, 0x72, 0x64, 0x2e, 0x70, 0x72, 0x6f,
-	0x78, 0x79, 0x2e, 0x6f, 0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x2e, 0x46, 0x61, 0x69, 0x6c,
-	0x75, 0x72, 0x65, 0x41, 0x63, 0x63, 0x72, 0x75, 0x61, 0x6c, 0x2e, 0x43, 0x6f, 0x6e, 0x73, 0x65,
-	0x63, 0x75, 0x74, 0x69, 0x76, 0x65, 0x46, 0x61, 0x69, 0x6c, 0x75, 0x72, 0x65, 0x73, 0x48, 0x00,
-	0x52, 0x13, 0x63, 0x6f, 0x6e, 0x73, 0x65, 0x63, 0x75, 0x74, 0x69, 0x76, 0x65, 0x46, 0x61, 0x69,
-	0x6c, 0x75, 0x72, 0x65, 0x73, 0x1a, 0x81, 0x01, 0x0a, 0x13, 0x43, 0x6f, 0x6e, 0x73, 0x65, 0x63,
-	0x75, 0x74, 0x69, 0x76, 0x65, 0x46, 0x61, 0x69, 0x6c, 0x75, 0x72, 0x65, 0x73, 0x12, 0x21, 0x0a,
-	0x0c, 0x6d, 0x61, 0x78, 0x5f, 0x66, 0x61, 0x69, 0x6c, 0x75, 0x72, 0x65, 0x73, 0x18, 0x01, 0x20,
-	0x01, 0x28, 0x0d, 0x52, 0x0b, 0x6d, 0x61, 0x78, 0x46, 0x61, 0x69, 0x6c, 0x75, 0x72, 0x65, 0x73,
-	0x12, 0x47, 0x0a, 0x07, 0x62, 0x61, 0x63, 0x6b, 0x6f, 0x66, 0x66, 0x18, 0x02, 0x20, 0x01, 0x28,
-	0x0b, 0x32, 0x2d, 0x2e, 0x69, 0x6f, 0x2e, 0x6c, 0x69, 0x6e, 0x6b, 0x65, 0x72, 0x64, 0x2e, 0x70,
-	0x72, 0x6f, 0x78, 0x79, 0x2e, 0x6f, 0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x2e, 0x45, 0x78,
-	0x70, 0x6f, 0x6e, 0x65, 0x6e, 0x74, 0x69, 0x61, 0x6c, 0x42, 0x61, 0x63, 0x6b, 0x6f, 0x66, 0x66,
-	0x52, 0x07, 0x62, 0x61, 0x63, 0x6b, 0x6f, 0x66, 0x66, 0x42, 0x06, 0x0a, 0x04, 0x6b, 0x69, 0x6e,
-	0x64, 0x22, 0xaf, 0x01, 0x0a, 0x12, 0x45, 0x78, 0x70, 0x6f, 0x6e, 0x65, 0x6e, 0x74, 0x69, 0x61,
-	0x6c, 0x42, 0x61, 0x63, 0x6b, 0x6f, 0x66, 0x66, 0x12, 0x3a, 0x0a, 0x0b, 0x6d, 0x69, 0x6e, 0x5f,
-	0x62, 0x61, 0x63, 0x6b, 0x6f, 0x66, 0x66, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x19, 0x2e,
-	0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e,
-	0x44, 0x75, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x0a, 0x6d, 0x69, 0x6e, 0x42, 0x61, 0x63,
-	0x6b, 0x6f, 0x66, 0x66, 0x12, 0x3a, 0x0a, 0x0b, 0x6d, 0x61, 0x78, 0x5f, 0x62, 0x61, 0x63, 0x6b,
-	0x6f, 0x66, 0x66, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x19, 0x2e, 0x67, 0x6f, 0x6f, 0x67,
-	0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x44, 0x75, 0x72, 0x61,
-	0x74, 0x69, 0x6f, 0x6e, 0x52, 0x0a, 0x6d, 0x61, 0x78, 0x42, 0x61, 0x63, 0x6b, 0x6f, 0x66, 0x66,
-	0x12, 0x21, 0x0a, 0x0c, 0x6a, 0x69, 0x74, 0x74, 0x65, 0x72, 0x5f, 0x72, 0x61, 0x74, 0x69, 0x6f,
-	0x18, 0x03, 0x20, 0x01, 0x28, 0x02, 0x52, 0x0b, 0x6a, 0x69, 0x74, 0x74, 0x65, 0x72, 0x52, 0x61,
-	0x74, 0x69, 0x6f, 0x32, 0xce, 0x01, 0x0a, 0x10, 0x4f, 0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64,
-	0x50, 0x6f, 0x6c, 0x69, 0x63, 0x69, 0x65, 0x73, 0x12, 0x5a, 0x0a, 0x03, 0x47, 0x65, 0x74, 0x12,
-	0x26, 0x2e, 0x69, 0x6f, 0x2e, 0x6c, 0x69, 0x6e, 0x6b, 0x65, 0x72, 0x64, 0x2e, 0x70, 0x72, 0x6f,
-	0x78, 0x79, 0x2e, 0x6f, 0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x2e, 0x54, 0x72, 0x61, 0x66,
-	0x66, 0x69, 0x63, 0x53, 0x70, 0x65, 0x63, 0x1a, 0x29, 0x2e, 0x69, 0x6f, 0x2e, 0x6c, 0x69, 0x6e,
-	0x6b, 0x65, 0x72, 0x64, 0x2e, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x6f, 0x75, 0x74, 0x62, 0x6f,
-	0x75, 0x6e, 0x64, 0x2e, 0x4f, 0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x50, 0x6f, 0x6c, 0x69,
-	0x63, 0x79, 0x22, 0x00, 0x12, 0x5e, 0x0a, 0x05, 0x57, 0x61, 0x74, 0x63, 0x68, 0x12, 0x26, 0x2e,
-	0x69, 0x6f, 0x2e, 0x6c, 0x69, 0x6e, 0x6b, 0x65, 0x72, 0x64, 0x2e, 0x70, 0x72, 0x6f, 0x78, 0x79,
-	0x2e, 0x6f, 0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x2e, 0x54, 0x72, 0x61, 0x66, 0x66, 0x69,
-	0x63, 0x53, 0x70, 0x65, 0x63, 0x1a, 0x29, 0x2e, 0x69, 0x6f, 0x2e, 0x6c, 0x69, 0x6e, 0x6b, 0x65,
-	0x72, 0x64, 0x2e, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x6f, 0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e,
-	0x64, 0x2e, 0x4f, 0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x50, 0x6f, 0x6c, 0x69, 0x63, 0x79,
-	0x22, 0x00, 0x30, 0x01, 0x42, 0x33, 0x5a, 0x31, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63,
-	0x6f, 0x6d, 0x2f, 0x6c, 0x69, 0x6e, 0x6b, 0x65, 0x72, 0x64, 0x2f, 0x6c, 0x69, 0x6e, 0x6b, 0x65,
-	0x72, 0x64, 0x32, 0x2d, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2d, 0x61, 0x70, 0x69, 0x2f, 0x67, 0x6f,
-	0x2f, 0x6f, 0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f,
-	0x33,
+	0x6f, 0x62, 0x75, 0x66, 0x2e, 0x44, 0x75, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x0a, 0x6d,
+	0x69, 0x6e, 0x42, 0x61, 0x63, 0x6b, 0x6f, 0x66, 0x66, 0x12, 0x3a, 0x0a, 0x0b, 0x6d, 0x61, 0x78,
+	0x5f, 0x62, 0x61, 0x63, 0x6b, 0x6f, 0x66, 0x66, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x19,
+	0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66,
+	0x2e, 0x44, 0x75, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x0a, 0x6d, 0x61, 0x78, 0x42, 0x61,
+	0x63, 0x6b, 0x6f, 0x66, 0x66, 0x12, 0x21, 0x0a, 0x0c, 0x6a, 0x69, 0x74, 0x74, 0x65, 0x72, 0x5f,
+	0x72, 0x61, 0x74, 0x69, 0x6f, 0x18, 0x03, 0x20, 0x01, 0x28, 0x02, 0x52, 0x0b, 0x6a, 0x69, 0x74,
+	0x74, 0x65, 0x72, 0x52, 0x61, 0x74, 0x69, 0x6f, 0x32, 0xce, 0x01, 0x0a, 0x10, 0x4f, 0x75, 0x74,
+	0x62, 0x6f, 0x75, 0x6e, 0x64, 0x50, 0x6f, 0x6c, 0x69, 0x63, 0x69, 0x65, 0x73, 0x12, 0x5a, 0x0a,
+	0x03, 0x47, 0x65, 0x74, 0x12, 0x26, 0x2e, 0x69, 0x6f, 0x2e, 0x6c, 0x69, 0x6e, 0x6b, 0x65, 0x72,
+	0x64, 0x2e, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x6f, 0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64,
+	0x2e, 0x54, 0x72, 0x61, 0x66, 0x66, 0x69, 0x63, 0x53, 0x70, 0x65, 0x63, 0x1a, 0x29, 0x2e, 0x69,
+	0x6f, 0x2e, 0x6c, 0x69, 0x6e, 0x6b, 0x65, 0x72, 0x64, 0x2e, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e,
+	0x6f, 0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x2e, 0x4f, 0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e,
+	0x64, 0x50, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x22, 0x00, 0x12, 0x5e, 0x0a, 0x05, 0x57, 0x61, 0x74,
+	0x63, 0x68, 0x12, 0x26, 0x2e, 0x69, 0x6f, 0x2e, 0x6c, 0x69, 0x6e, 0x6b, 0x65, 0x72, 0x64, 0x2e,
+	0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x6f, 0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x2e, 0x54,
+	0x72, 0x61, 0x66, 0x66, 0x69, 0x63, 0x53, 0x70, 0x65, 0x63, 0x1a, 0x29, 0x2e, 0x69, 0x6f, 0x2e,
+	0x6c, 0x69, 0x6e, 0x6b, 0x65, 0x72, 0x64, 0x2e, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x6f, 0x75,
+	0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x2e, 0x4f, 0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x50,
+	0x6f, 0x6c, 0x69, 0x63, 0x79, 0x22, 0x00, 0x30, 0x01, 0x42, 0x33, 0x5a, 0x31, 0x67, 0x69, 0x74,
+	0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x6c, 0x69, 0x6e, 0x6b, 0x65, 0x72, 0x64, 0x2f,
+	0x6c, 0x69, 0x6e, 0x6b, 0x65, 0x72, 0x64, 0x32, 0x2d, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2d, 0x61,
+	0x70, 0x69, 0x2f, 0x67, 0x6f, 0x2f, 0x6f, 0x75, 0x74, 0x62, 0x6f, 0x75, 0x6e, 0x64, 0x62, 0x06,
+	0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
 }
 
 var (
@@ -4608,10 +4590,10 @@ func file_outbound_proto_rawDescGZIP() []byte {
 }
 
 var file_outbound_proto_enumTypes = make([]protoimpl.EnumInfo, 2)
-var file_outbound_proto_msgTypes = make([]protoimpl.MessageInfo, 59)
+var file_outbound_proto_msgTypes = make([]protoimpl.MessageInfo, 61)
 var file_outbound_proto_goTypes = []any{
-	(OpaqueRoute_RouteError)(0),                      // 0: io.linkerd.proxy.outbound.OpaqueRoute.RouteError
-	(TlsRoute_RouteError)(0),                         // 1: io.linkerd.proxy.outbound.TlsRoute.RouteError
+	(OpaqueRoute_RouteError_Kind)(0),                 // 0: io.linkerd.proxy.outbound.OpaqueRoute.RouteError.Kind
+	(TlsRoute_RouteError_Kind)(0),                    // 1: io.linkerd.proxy.outbound.TlsRoute.RouteError.Kind
 	(*TrafficSpec)(nil),                              // 2: io.linkerd.proxy.outbound.TrafficSpec
 	(*OutboundPolicy)(nil),                           // 3: io.linkerd.proxy.outbound.OutboundPolicy
 	(*ProxyProtocol)(nil),                            // 4: io.linkerd.proxy.outbound.ProxyProtocol
@@ -4654,70 +4636,72 @@ var file_outbound_proto_goTypes = []any{
 	(*OpaqueRoute_Distribution)(nil),                 // 41: io.linkerd.proxy.outbound.OpaqueRoute.Distribution
 	(*OpaqueRoute_RouteBackend)(nil),                 // 42: io.linkerd.proxy.outbound.OpaqueRoute.RouteBackend
 	(*OpaqueRoute_WeightedRouteBackend)(nil),         // 43: io.linkerd.proxy.outbound.OpaqueRoute.WeightedRouteBackend
-	(*OpaqueRoute_Distribution_Empty)(nil),           // 44: io.linkerd.proxy.outbound.OpaqueRoute.Distribution.Empty
-	(*OpaqueRoute_Distribution_FirstAvailable)(nil),  // 45: io.linkerd.proxy.outbound.OpaqueRoute.Distribution.FirstAvailable
-	(*OpaqueRoute_Distribution_RandomAvailable)(nil), // 46: io.linkerd.proxy.outbound.OpaqueRoute.Distribution.RandomAvailable
-	(*OpaqueRoute_RouteBackend_Invalid)(nil),         // 47: io.linkerd.proxy.outbound.OpaqueRoute.RouteBackend.Invalid
-	(*TlsRoute_Rule)(nil),                            // 48: io.linkerd.proxy.outbound.TlsRoute.Rule
-	(*TlsRoute_Distribution)(nil),                    // 49: io.linkerd.proxy.outbound.TlsRoute.Distribution
-	(*TlsRoute_RouteBackend)(nil),                    // 50: io.linkerd.proxy.outbound.TlsRoute.RouteBackend
-	(*TlsRoute_WeightedRouteBackend)(nil),            // 51: io.linkerd.proxy.outbound.TlsRoute.WeightedRouteBackend
-	(*TlsRoute_Distribution_Empty)(nil),              // 52: io.linkerd.proxy.outbound.TlsRoute.Distribution.Empty
-	(*TlsRoute_Distribution_FirstAvailable)(nil),     // 53: io.linkerd.proxy.outbound.TlsRoute.Distribution.FirstAvailable
-	(*TlsRoute_Distribution_RandomAvailable)(nil),    // 54: io.linkerd.proxy.outbound.TlsRoute.Distribution.RandomAvailable
-	(*TlsRoute_RouteBackend_Invalid)(nil),            // 55: io.linkerd.proxy.outbound.TlsRoute.RouteBackend.Invalid
-	(*Backend_EndpointDiscovery)(nil),                // 56: io.linkerd.proxy.outbound.Backend.EndpointDiscovery
-	(*Backend_BalanceP2C)(nil),                       // 57: io.linkerd.proxy.outbound.Backend.BalanceP2c
-	(*Backend_EndpointDiscovery_DestinationGet)(nil), // 58: io.linkerd.proxy.outbound.Backend.EndpointDiscovery.DestinationGet
-	(*Backend_BalanceP2C_PeakEwma)(nil),              // 59: io.linkerd.proxy.outbound.Backend.BalanceP2c.PeakEwma
-	(*FailureAccrual_ConsecutiveFailures)(nil),       // 60: io.linkerd.proxy.outbound.FailureAccrual.ConsecutiveFailures
-	(*net.TcpAddress)(nil),                           // 61: io.linkerd.proxy.net.TcpAddress
-	(*meta.Metadata)(nil),                            // 62: io.linkerd.proxy.meta.Metadata
-	(*http_route.HostMatch)(nil),                     // 63: io.linkerd.proxy.http_route.HostMatch
-	(*tls_route.SniMatch)(nil),                       // 64: io.linkerd.proxy.tls_route.SniMatch
-	(*destination.WeightedAddr)(nil),                 // 65: io.linkerd.proxy.destination.WeightedAddr
-	(*duration.Duration)(nil),                        // 66: google.protobuf.Duration
-	(*http_route.HttpRouteMatch)(nil),                // 67: io.linkerd.proxy.http_route.HttpRouteMatch
-	(*http_route.Timeouts)(nil),                      // 68: io.linkerd.proxy.http_route.Timeouts
-	(*http_route.HttpFailureInjector)(nil),           // 69: io.linkerd.proxy.http_route.HttpFailureInjector
-	(*http_route.RequestHeaderModifier)(nil),         // 70: io.linkerd.proxy.http_route.RequestHeaderModifier
-	(*http_route.RequestRedirect)(nil),               // 71: io.linkerd.proxy.http_route.RequestRedirect
-	(*http_route.ResponseHeaderModifier)(nil),        // 72: io.linkerd.proxy.http_route.ResponseHeaderModifier
-	(*grpc_route.GrpcRouteMatch)(nil),                // 73: io.linkerd.proxy.grpc_route.GrpcRouteMatch
-	(*grpc_route.GrpcFailureInjector)(nil),           // 74: io.linkerd.proxy.grpc_route.GrpcFailureInjector
+	(*OpaqueRoute_RouteError)(nil),                   // 44: io.linkerd.proxy.outbound.OpaqueRoute.RouteError
+	(*OpaqueRoute_Distribution_Empty)(nil),           // 45: io.linkerd.proxy.outbound.OpaqueRoute.Distribution.Empty
+	(*OpaqueRoute_Distribution_FirstAvailable)(nil),  // 46: io.linkerd.proxy.outbound.OpaqueRoute.Distribution.FirstAvailable
+	(*OpaqueRoute_Distribution_RandomAvailable)(nil), // 47: io.linkerd.proxy.outbound.OpaqueRoute.Distribution.RandomAvailable
+	(*OpaqueRoute_RouteBackend_Invalid)(nil),         // 48: io.linkerd.proxy.outbound.OpaqueRoute.RouteBackend.Invalid
+	(*TlsRoute_Rule)(nil),                            // 49: io.linkerd.proxy.outbound.TlsRoute.Rule
+	(*TlsRoute_Distribution)(nil),                    // 50: io.linkerd.proxy.outbound.TlsRoute.Distribution
+	(*TlsRoute_RouteBackend)(nil),                    // 51: io.linkerd.proxy.outbound.TlsRoute.RouteBackend
+	(*TlsRoute_WeightedRouteBackend)(nil),            // 52: io.linkerd.proxy.outbound.TlsRoute.WeightedRouteBackend
+	(*TlsRoute_RouteError)(nil),                      // 53: io.linkerd.proxy.outbound.TlsRoute.RouteError
+	(*TlsRoute_Distribution_Empty)(nil),              // 54: io.linkerd.proxy.outbound.TlsRoute.Distribution.Empty
+	(*TlsRoute_Distribution_FirstAvailable)(nil),     // 55: io.linkerd.proxy.outbound.TlsRoute.Distribution.FirstAvailable
+	(*TlsRoute_Distribution_RandomAvailable)(nil),    // 56: io.linkerd.proxy.outbound.TlsRoute.Distribution.RandomAvailable
+	(*TlsRoute_RouteBackend_Invalid)(nil),            // 57: io.linkerd.proxy.outbound.TlsRoute.RouteBackend.Invalid
+	(*Backend_EndpointDiscovery)(nil),                // 58: io.linkerd.proxy.outbound.Backend.EndpointDiscovery
+	(*Backend_BalanceP2C)(nil),                       // 59: io.linkerd.proxy.outbound.Backend.BalanceP2c
+	(*Backend_EndpointDiscovery_DestinationGet)(nil), // 60: io.linkerd.proxy.outbound.Backend.EndpointDiscovery.DestinationGet
+	(*Backend_BalanceP2C_PeakEwma)(nil),              // 61: io.linkerd.proxy.outbound.Backend.BalanceP2c.PeakEwma
+	(*FailureAccrual_ConsecutiveFailures)(nil),       // 62: io.linkerd.proxy.outbound.FailureAccrual.ConsecutiveFailures
+	(*net.TcpAddress)(nil),                           // 63: io.linkerd.proxy.net.TcpAddress
+	(*meta.Metadata)(nil),                            // 64: io.linkerd.proxy.meta.Metadata
+	(*http_route.HostMatch)(nil),                     // 65: io.linkerd.proxy.http_route.HostMatch
+	(*tls_route.SniMatch)(nil),                       // 66: io.linkerd.proxy.tls_route.SniMatch
+	(*destination.WeightedAddr)(nil),                 // 67: io.linkerd.proxy.destination.WeightedAddr
+	(*duration.Duration)(nil),                        // 68: google.protobuf.Duration
+	(*http_route.HttpRouteMatch)(nil),                // 69: io.linkerd.proxy.http_route.HttpRouteMatch
+	(*http_route.Timeouts)(nil),                      // 70: io.linkerd.proxy.http_route.Timeouts
+	(*http_route.HttpFailureInjector)(nil),           // 71: io.linkerd.proxy.http_route.HttpFailureInjector
+	(*http_route.RequestHeaderModifier)(nil),         // 72: io.linkerd.proxy.http_route.RequestHeaderModifier
+	(*http_route.RequestRedirect)(nil),               // 73: io.linkerd.proxy.http_route.RequestRedirect
+	(*http_route.ResponseHeaderModifier)(nil),        // 74: io.linkerd.proxy.http_route.ResponseHeaderModifier
+	(*grpc_route.GrpcRouteMatch)(nil),                // 75: io.linkerd.proxy.grpc_route.GrpcRouteMatch
+	(*grpc_route.GrpcFailureInjector)(nil),           // 76: io.linkerd.proxy.grpc_route.GrpcFailureInjector
 }
 var file_outbound_proto_depIdxs = []int32{
-	61,  // 0: io.linkerd.proxy.outbound.TrafficSpec.addr:type_name -> io.linkerd.proxy.net.TcpAddress
+	63,  // 0: io.linkerd.proxy.outbound.TrafficSpec.addr:type_name -> io.linkerd.proxy.net.TcpAddress
 	4,   // 1: io.linkerd.proxy.outbound.OutboundPolicy.protocol:type_name -> io.linkerd.proxy.outbound.ProxyProtocol
-	62,  // 2: io.linkerd.proxy.outbound.OutboundPolicy.metadata:type_name -> io.linkerd.proxy.meta.Metadata
+	64,  // 2: io.linkerd.proxy.outbound.OutboundPolicy.metadata:type_name -> io.linkerd.proxy.meta.Metadata
 	13,  // 3: io.linkerd.proxy.outbound.ProxyProtocol.detect:type_name -> io.linkerd.proxy.outbound.ProxyProtocol.Detect
 	14,  // 4: io.linkerd.proxy.outbound.ProxyProtocol.opaque:type_name -> io.linkerd.proxy.outbound.ProxyProtocol.Opaque
 	15,  // 5: io.linkerd.proxy.outbound.ProxyProtocol.http1:type_name -> io.linkerd.proxy.outbound.ProxyProtocol.Http1
 	16,  // 6: io.linkerd.proxy.outbound.ProxyProtocol.http2:type_name -> io.linkerd.proxy.outbound.ProxyProtocol.Http2
 	17,  // 7: io.linkerd.proxy.outbound.ProxyProtocol.grpc:type_name -> io.linkerd.proxy.outbound.ProxyProtocol.Grpc
 	18,  // 8: io.linkerd.proxy.outbound.ProxyProtocol.tls:type_name -> io.linkerd.proxy.outbound.ProxyProtocol.Tls
-	62,  // 9: io.linkerd.proxy.outbound.HttpRoute.metadata:type_name -> io.linkerd.proxy.meta.Metadata
-	63,  // 10: io.linkerd.proxy.outbound.HttpRoute.hosts:type_name -> io.linkerd.proxy.http_route.HostMatch
+	64,  // 9: io.linkerd.proxy.outbound.HttpRoute.metadata:type_name -> io.linkerd.proxy.meta.Metadata
+	65,  // 10: io.linkerd.proxy.outbound.HttpRoute.hosts:type_name -> io.linkerd.proxy.http_route.HostMatch
 	19,  // 11: io.linkerd.proxy.outbound.HttpRoute.rules:type_name -> io.linkerd.proxy.outbound.HttpRoute.Rule
-	62,  // 12: io.linkerd.proxy.outbound.GrpcRoute.metadata:type_name -> io.linkerd.proxy.meta.Metadata
-	63,  // 13: io.linkerd.proxy.outbound.GrpcRoute.hosts:type_name -> io.linkerd.proxy.http_route.HostMatch
+	64,  // 12: io.linkerd.proxy.outbound.GrpcRoute.metadata:type_name -> io.linkerd.proxy.meta.Metadata
+	65,  // 13: io.linkerd.proxy.outbound.GrpcRoute.hosts:type_name -> io.linkerd.proxy.http_route.HostMatch
 	30,  // 14: io.linkerd.proxy.outbound.GrpcRoute.rules:type_name -> io.linkerd.proxy.outbound.GrpcRoute.Rule
-	62,  // 15: io.linkerd.proxy.outbound.OpaqueRoute.metadata:type_name -> io.linkerd.proxy.meta.Metadata
+	64,  // 15: io.linkerd.proxy.outbound.OpaqueRoute.metadata:type_name -> io.linkerd.proxy.meta.Metadata
 	40,  // 16: io.linkerd.proxy.outbound.OpaqueRoute.rules:type_name -> io.linkerd.proxy.outbound.OpaqueRoute.Rule
-	0,   // 17: io.linkerd.proxy.outbound.OpaqueRoute.error:type_name -> io.linkerd.proxy.outbound.OpaqueRoute.RouteError
-	62,  // 18: io.linkerd.proxy.outbound.TlsRoute.metadata:type_name -> io.linkerd.proxy.meta.Metadata
-	64,  // 19: io.linkerd.proxy.outbound.TlsRoute.snis:type_name -> io.linkerd.proxy.tls_route.SniMatch
-	48,  // 20: io.linkerd.proxy.outbound.TlsRoute.rules:type_name -> io.linkerd.proxy.outbound.TlsRoute.Rule
-	1,   // 21: io.linkerd.proxy.outbound.TlsRoute.error:type_name -> io.linkerd.proxy.outbound.TlsRoute.RouteError
-	62,  // 22: io.linkerd.proxy.outbound.Backend.metadata:type_name -> io.linkerd.proxy.meta.Metadata
-	65,  // 23: io.linkerd.proxy.outbound.Backend.forward:type_name -> io.linkerd.proxy.destination.WeightedAddr
-	57,  // 24: io.linkerd.proxy.outbound.Backend.balancer:type_name -> io.linkerd.proxy.outbound.Backend.BalanceP2c
+	44,  // 17: io.linkerd.proxy.outbound.OpaqueRoute.error:type_name -> io.linkerd.proxy.outbound.OpaqueRoute.RouteError
+	64,  // 18: io.linkerd.proxy.outbound.TlsRoute.metadata:type_name -> io.linkerd.proxy.meta.Metadata
+	66,  // 19: io.linkerd.proxy.outbound.TlsRoute.snis:type_name -> io.linkerd.proxy.tls_route.SniMatch
+	49,  // 20: io.linkerd.proxy.outbound.TlsRoute.rules:type_name -> io.linkerd.proxy.outbound.TlsRoute.Rule
+	53,  // 21: io.linkerd.proxy.outbound.TlsRoute.error:type_name -> io.linkerd.proxy.outbound.TlsRoute.RouteError
+	64,  // 22: io.linkerd.proxy.outbound.Backend.metadata:type_name -> io.linkerd.proxy.meta.Metadata
+	67,  // 23: io.linkerd.proxy.outbound.Backend.forward:type_name -> io.linkerd.proxy.destination.WeightedAddr
+	59,  // 24: io.linkerd.proxy.outbound.Backend.balancer:type_name -> io.linkerd.proxy.outbound.Backend.BalanceP2c
 	10,  // 25: io.linkerd.proxy.outbound.Backend.queue:type_name -> io.linkerd.proxy.outbound.Queue
-	66,  // 26: io.linkerd.proxy.outbound.Queue.failfast_timeout:type_name -> google.protobuf.Duration
-	60,  // 27: io.linkerd.proxy.outbound.FailureAccrual.consecutive_failures:type_name -> io.linkerd.proxy.outbound.FailureAccrual.ConsecutiveFailures
-	66,  // 28: io.linkerd.proxy.outbound.ExponentialBackoff.min_backoff:type_name -> google.protobuf.Duration
-	66,  // 29: io.linkerd.proxy.outbound.ExponentialBackoff.max_backoff:type_name -> google.protobuf.Duration
-	66,  // 30: io.linkerd.proxy.outbound.ProxyProtocol.Detect.timeout:type_name -> google.protobuf.Duration
+	68,  // 26: io.linkerd.proxy.outbound.Queue.failfast_timeout:type_name -> google.protobuf.Duration
+	62,  // 27: io.linkerd.proxy.outbound.FailureAccrual.consecutive_failures:type_name -> io.linkerd.proxy.outbound.FailureAccrual.ConsecutiveFailures
+	68,  // 28: io.linkerd.proxy.outbound.ExponentialBackoff.min_backoff:type_name -> google.protobuf.Duration
+	68,  // 29: io.linkerd.proxy.outbound.ExponentialBackoff.max_backoff:type_name -> google.protobuf.Duration
+	68,  // 30: io.linkerd.proxy.outbound.ProxyProtocol.Detect.timeout:type_name -> google.protobuf.Duration
 	14,  // 31: io.linkerd.proxy.outbound.ProxyProtocol.Detect.opaque:type_name -> io.linkerd.proxy.outbound.ProxyProtocol.Opaque
 	15,  // 32: io.linkerd.proxy.outbound.ProxyProtocol.Detect.http1:type_name -> io.linkerd.proxy.outbound.ProxyProtocol.Http1
 	16,  // 33: io.linkerd.proxy.outbound.ProxyProtocol.Detect.http2:type_name -> io.linkerd.proxy.outbound.ProxyProtocol.Http2
@@ -4729,82 +4713,84 @@ var file_outbound_proto_depIdxs = []int32{
 	6,   // 39: io.linkerd.proxy.outbound.ProxyProtocol.Grpc.routes:type_name -> io.linkerd.proxy.outbound.GrpcRoute
 	11,  // 40: io.linkerd.proxy.outbound.ProxyProtocol.Grpc.failure_accrual:type_name -> io.linkerd.proxy.outbound.FailureAccrual
 	8,   // 41: io.linkerd.proxy.outbound.ProxyProtocol.Tls.routes:type_name -> io.linkerd.proxy.outbound.TlsRoute
-	67,  // 42: io.linkerd.proxy.outbound.HttpRoute.Rule.matches:type_name -> io.linkerd.proxy.http_route.HttpRouteMatch
+	69,  // 42: io.linkerd.proxy.outbound.HttpRoute.Rule.matches:type_name -> io.linkerd.proxy.http_route.HttpRouteMatch
 	20,  // 43: io.linkerd.proxy.outbound.HttpRoute.Rule.filters:type_name -> io.linkerd.proxy.outbound.HttpRoute.Filter
 	21,  // 44: io.linkerd.proxy.outbound.HttpRoute.Rule.backends:type_name -> io.linkerd.proxy.outbound.HttpRoute.Distribution
-	66,  // 45: io.linkerd.proxy.outbound.HttpRoute.Rule.requestTimeout:type_name -> google.protobuf.Duration
-	68,  // 46: io.linkerd.proxy.outbound.HttpRoute.Rule.timeouts:type_name -> io.linkerd.proxy.http_route.Timeouts
+	68,  // 45: io.linkerd.proxy.outbound.HttpRoute.Rule.requestTimeout:type_name -> google.protobuf.Duration
+	70,  // 46: io.linkerd.proxy.outbound.HttpRoute.Rule.timeouts:type_name -> io.linkerd.proxy.http_route.Timeouts
 	22,  // 47: io.linkerd.proxy.outbound.HttpRoute.Rule.retry:type_name -> io.linkerd.proxy.outbound.HttpRoute.Retry
-	69,  // 48: io.linkerd.proxy.outbound.HttpRoute.Filter.failure_injector:type_name -> io.linkerd.proxy.http_route.HttpFailureInjector
-	70,  // 49: io.linkerd.proxy.outbound.HttpRoute.Filter.request_header_modifier:type_name -> io.linkerd.proxy.http_route.RequestHeaderModifier
-	71,  // 50: io.linkerd.proxy.outbound.HttpRoute.Filter.redirect:type_name -> io.linkerd.proxy.http_route.RequestRedirect
-	72,  // 51: io.linkerd.proxy.outbound.HttpRoute.Filter.response_header_modifier:type_name -> io.linkerd.proxy.http_route.ResponseHeaderModifier
+	71,  // 48: io.linkerd.proxy.outbound.HttpRoute.Filter.failure_injector:type_name -> io.linkerd.proxy.http_route.HttpFailureInjector
+	72,  // 49: io.linkerd.proxy.outbound.HttpRoute.Filter.request_header_modifier:type_name -> io.linkerd.proxy.http_route.RequestHeaderModifier
+	73,  // 50: io.linkerd.proxy.outbound.HttpRoute.Filter.redirect:type_name -> io.linkerd.proxy.http_route.RequestRedirect
+	74,  // 51: io.linkerd.proxy.outbound.HttpRoute.Filter.response_header_modifier:type_name -> io.linkerd.proxy.http_route.ResponseHeaderModifier
 	25,  // 52: io.linkerd.proxy.outbound.HttpRoute.Distribution.empty:type_name -> io.linkerd.proxy.outbound.HttpRoute.Distribution.Empty
 	26,  // 53: io.linkerd.proxy.outbound.HttpRoute.Distribution.first_available:type_name -> io.linkerd.proxy.outbound.HttpRoute.Distribution.FirstAvailable
 	27,  // 54: io.linkerd.proxy.outbound.HttpRoute.Distribution.random_available:type_name -> io.linkerd.proxy.outbound.HttpRoute.Distribution.RandomAvailable
 	28,  // 55: io.linkerd.proxy.outbound.HttpRoute.Retry.conditions:type_name -> io.linkerd.proxy.outbound.HttpRoute.Retry.Conditions
-	66,  // 56: io.linkerd.proxy.outbound.HttpRoute.Retry.timeout:type_name -> google.protobuf.Duration
+	68,  // 56: io.linkerd.proxy.outbound.HttpRoute.Retry.timeout:type_name -> google.protobuf.Duration
 	12,  // 57: io.linkerd.proxy.outbound.HttpRoute.Retry.backoff:type_name -> io.linkerd.proxy.outbound.ExponentialBackoff
 	9,   // 58: io.linkerd.proxy.outbound.HttpRoute.RouteBackend.backend:type_name -> io.linkerd.proxy.outbound.Backend
 	20,  // 59: io.linkerd.proxy.outbound.HttpRoute.RouteBackend.filters:type_name -> io.linkerd.proxy.outbound.HttpRoute.Filter
-	66,  // 60: io.linkerd.proxy.outbound.HttpRoute.RouteBackend.requestTimeout:type_name -> google.protobuf.Duration
+	68,  // 60: io.linkerd.proxy.outbound.HttpRoute.RouteBackend.requestTimeout:type_name -> google.protobuf.Duration
 	23,  // 61: io.linkerd.proxy.outbound.HttpRoute.WeightedRouteBackend.backend:type_name -> io.linkerd.proxy.outbound.HttpRoute.RouteBackend
 	23,  // 62: io.linkerd.proxy.outbound.HttpRoute.Distribution.FirstAvailable.backends:type_name -> io.linkerd.proxy.outbound.HttpRoute.RouteBackend
 	24,  // 63: io.linkerd.proxy.outbound.HttpRoute.Distribution.RandomAvailable.backends:type_name -> io.linkerd.proxy.outbound.HttpRoute.WeightedRouteBackend
 	29,  // 64: io.linkerd.proxy.outbound.HttpRoute.Retry.Conditions.status_ranges:type_name -> io.linkerd.proxy.outbound.HttpRoute.Retry.Conditions.StatusRange
-	73,  // 65: io.linkerd.proxy.outbound.GrpcRoute.Rule.matches:type_name -> io.linkerd.proxy.grpc_route.GrpcRouteMatch
+	75,  // 65: io.linkerd.proxy.outbound.GrpcRoute.Rule.matches:type_name -> io.linkerd.proxy.grpc_route.GrpcRouteMatch
 	31,  // 66: io.linkerd.proxy.outbound.GrpcRoute.Rule.filters:type_name -> io.linkerd.proxy.outbound.GrpcRoute.Filter
 	32,  // 67: io.linkerd.proxy.outbound.GrpcRoute.Rule.backends:type_name -> io.linkerd.proxy.outbound.GrpcRoute.Distribution
-	66,  // 68: io.linkerd.proxy.outbound.GrpcRoute.Rule.requestTimeout:type_name -> google.protobuf.Duration
-	68,  // 69: io.linkerd.proxy.outbound.GrpcRoute.Rule.timeouts:type_name -> io.linkerd.proxy.http_route.Timeouts
+	68,  // 68: io.linkerd.proxy.outbound.GrpcRoute.Rule.requestTimeout:type_name -> google.protobuf.Duration
+	70,  // 69: io.linkerd.proxy.outbound.GrpcRoute.Rule.timeouts:type_name -> io.linkerd.proxy.http_route.Timeouts
 	33,  // 70: io.linkerd.proxy.outbound.GrpcRoute.Rule.retry:type_name -> io.linkerd.proxy.outbound.GrpcRoute.Retry
-	74,  // 71: io.linkerd.proxy.outbound.GrpcRoute.Filter.failure_injector:type_name -> io.linkerd.proxy.grpc_route.GrpcFailureInjector
-	70,  // 72: io.linkerd.proxy.outbound.GrpcRoute.Filter.request_header_modifier:type_name -> io.linkerd.proxy.http_route.RequestHeaderModifier
+	76,  // 71: io.linkerd.proxy.outbound.GrpcRoute.Filter.failure_injector:type_name -> io.linkerd.proxy.grpc_route.GrpcFailureInjector
+	72,  // 72: io.linkerd.proxy.outbound.GrpcRoute.Filter.request_header_modifier:type_name -> io.linkerd.proxy.http_route.RequestHeaderModifier
 	36,  // 73: io.linkerd.proxy.outbound.GrpcRoute.Distribution.empty:type_name -> io.linkerd.proxy.outbound.GrpcRoute.Distribution.Empty
 	37,  // 74: io.linkerd.proxy.outbound.GrpcRoute.Distribution.first_available:type_name -> io.linkerd.proxy.outbound.GrpcRoute.Distribution.FirstAvailable
 	38,  // 75: io.linkerd.proxy.outbound.GrpcRoute.Distribution.random_available:type_name -> io.linkerd.proxy.outbound.GrpcRoute.Distribution.RandomAvailable
 	39,  // 76: io.linkerd.proxy.outbound.GrpcRoute.Retry.conditions:type_name -> io.linkerd.proxy.outbound.GrpcRoute.Retry.Conditions
-	66,  // 77: io.linkerd.proxy.outbound.GrpcRoute.Retry.timeout:type_name -> google.protobuf.Duration
+	68,  // 77: io.linkerd.proxy.outbound.GrpcRoute.Retry.timeout:type_name -> google.protobuf.Duration
 	12,  // 78: io.linkerd.proxy.outbound.GrpcRoute.Retry.backoff:type_name -> io.linkerd.proxy.outbound.ExponentialBackoff
 	9,   // 79: io.linkerd.proxy.outbound.GrpcRoute.RouteBackend.backend:type_name -> io.linkerd.proxy.outbound.Backend
 	31,  // 80: io.linkerd.proxy.outbound.GrpcRoute.RouteBackend.filters:type_name -> io.linkerd.proxy.outbound.GrpcRoute.Filter
-	66,  // 81: io.linkerd.proxy.outbound.GrpcRoute.RouteBackend.requestTimeout:type_name -> google.protobuf.Duration
+	68,  // 81: io.linkerd.proxy.outbound.GrpcRoute.RouteBackend.requestTimeout:type_name -> google.protobuf.Duration
 	34,  // 82: io.linkerd.proxy.outbound.GrpcRoute.WeightedRouteBackend.backend:type_name -> io.linkerd.proxy.outbound.GrpcRoute.RouteBackend
 	34,  // 83: io.linkerd.proxy.outbound.GrpcRoute.Distribution.FirstAvailable.backends:type_name -> io.linkerd.proxy.outbound.GrpcRoute.RouteBackend
 	35,  // 84: io.linkerd.proxy.outbound.GrpcRoute.Distribution.RandomAvailable.backends:type_name -> io.linkerd.proxy.outbound.GrpcRoute.WeightedRouteBackend
 	41,  // 85: io.linkerd.proxy.outbound.OpaqueRoute.Rule.backends:type_name -> io.linkerd.proxy.outbound.OpaqueRoute.Distribution
-	44,  // 86: io.linkerd.proxy.outbound.OpaqueRoute.Distribution.empty:type_name -> io.linkerd.proxy.outbound.OpaqueRoute.Distribution.Empty
-	45,  // 87: io.linkerd.proxy.outbound.OpaqueRoute.Distribution.first_available:type_name -> io.linkerd.proxy.outbound.OpaqueRoute.Distribution.FirstAvailable
-	46,  // 88: io.linkerd.proxy.outbound.OpaqueRoute.Distribution.random_available:type_name -> io.linkerd.proxy.outbound.OpaqueRoute.Distribution.RandomAvailable
+	45,  // 86: io.linkerd.proxy.outbound.OpaqueRoute.Distribution.empty:type_name -> io.linkerd.proxy.outbound.OpaqueRoute.Distribution.Empty
+	46,  // 87: io.linkerd.proxy.outbound.OpaqueRoute.Distribution.first_available:type_name -> io.linkerd.proxy.outbound.OpaqueRoute.Distribution.FirstAvailable
+	47,  // 88: io.linkerd.proxy.outbound.OpaqueRoute.Distribution.random_available:type_name -> io.linkerd.proxy.outbound.OpaqueRoute.Distribution.RandomAvailable
 	9,   // 89: io.linkerd.proxy.outbound.OpaqueRoute.RouteBackend.backend:type_name -> io.linkerd.proxy.outbound.Backend
-	47,  // 90: io.linkerd.proxy.outbound.OpaqueRoute.RouteBackend.invalid:type_name -> io.linkerd.proxy.outbound.OpaqueRoute.RouteBackend.Invalid
+	48,  // 90: io.linkerd.proxy.outbound.OpaqueRoute.RouteBackend.invalid:type_name -> io.linkerd.proxy.outbound.OpaqueRoute.RouteBackend.Invalid
 	42,  // 91: io.linkerd.proxy.outbound.OpaqueRoute.WeightedRouteBackend.backend:type_name -> io.linkerd.proxy.outbound.OpaqueRoute.RouteBackend
-	42,  // 92: io.linkerd.proxy.outbound.OpaqueRoute.Distribution.FirstAvailable.backends:type_name -> io.linkerd.proxy.outbound.OpaqueRoute.RouteBackend
-	43,  // 93: io.linkerd.proxy.outbound.OpaqueRoute.Distribution.RandomAvailable.backends:type_name -> io.linkerd.proxy.outbound.OpaqueRoute.WeightedRouteBackend
-	49,  // 94: io.linkerd.proxy.outbound.TlsRoute.Rule.backends:type_name -> io.linkerd.proxy.outbound.TlsRoute.Distribution
-	52,  // 95: io.linkerd.proxy.outbound.TlsRoute.Distribution.empty:type_name -> io.linkerd.proxy.outbound.TlsRoute.Distribution.Empty
-	53,  // 96: io.linkerd.proxy.outbound.TlsRoute.Distribution.first_available:type_name -> io.linkerd.proxy.outbound.TlsRoute.Distribution.FirstAvailable
-	54,  // 97: io.linkerd.proxy.outbound.TlsRoute.Distribution.random_available:type_name -> io.linkerd.proxy.outbound.TlsRoute.Distribution.RandomAvailable
-	9,   // 98: io.linkerd.proxy.outbound.TlsRoute.RouteBackend.backend:type_name -> io.linkerd.proxy.outbound.Backend
-	55,  // 99: io.linkerd.proxy.outbound.TlsRoute.RouteBackend.invalid:type_name -> io.linkerd.proxy.outbound.TlsRoute.RouteBackend.Invalid
-	50,  // 100: io.linkerd.proxy.outbound.TlsRoute.WeightedRouteBackend.backend:type_name -> io.linkerd.proxy.outbound.TlsRoute.RouteBackend
-	50,  // 101: io.linkerd.proxy.outbound.TlsRoute.Distribution.FirstAvailable.backends:type_name -> io.linkerd.proxy.outbound.TlsRoute.RouteBackend
-	51,  // 102: io.linkerd.proxy.outbound.TlsRoute.Distribution.RandomAvailable.backends:type_name -> io.linkerd.proxy.outbound.TlsRoute.WeightedRouteBackend
-	58,  // 103: io.linkerd.proxy.outbound.Backend.EndpointDiscovery.dst:type_name -> io.linkerd.proxy.outbound.Backend.EndpointDiscovery.DestinationGet
-	56,  // 104: io.linkerd.proxy.outbound.Backend.BalanceP2c.discovery:type_name -> io.linkerd.proxy.outbound.Backend.EndpointDiscovery
-	59,  // 105: io.linkerd.proxy.outbound.Backend.BalanceP2c.peak_ewma:type_name -> io.linkerd.proxy.outbound.Backend.BalanceP2c.PeakEwma
-	66,  // 106: io.linkerd.proxy.outbound.Backend.BalanceP2c.PeakEwma.default_rtt:type_name -> google.protobuf.Duration
-	66,  // 107: io.linkerd.proxy.outbound.Backend.BalanceP2c.PeakEwma.decay:type_name -> google.protobuf.Duration
-	12,  // 108: io.linkerd.proxy.outbound.FailureAccrual.ConsecutiveFailures.backoff:type_name -> io.linkerd.proxy.outbound.ExponentialBackoff
-	2,   // 109: io.linkerd.proxy.outbound.OutboundPolicies.Get:input_type -> io.linkerd.proxy.outbound.TrafficSpec
-	2,   // 110: io.linkerd.proxy.outbound.OutboundPolicies.Watch:input_type -> io.linkerd.proxy.outbound.TrafficSpec
-	3,   // 111: io.linkerd.proxy.outbound.OutboundPolicies.Get:output_type -> io.linkerd.proxy.outbound.OutboundPolicy
-	3,   // 112: io.linkerd.proxy.outbound.OutboundPolicies.Watch:output_type -> io.linkerd.proxy.outbound.OutboundPolicy
-	111, // [111:113] is the sub-list for method output_type
-	109, // [109:111] is the sub-list for method input_type
-	109, // [109:109] is the sub-list for extension type_name
-	109, // [109:109] is the sub-list for extension extendee
-	0,   // [0:109] is the sub-list for field type_name
+	0,   // 92: io.linkerd.proxy.outbound.OpaqueRoute.RouteError.kind:type_name -> io.linkerd.proxy.outbound.OpaqueRoute.RouteError.Kind
+	42,  // 93: io.linkerd.proxy.outbound.OpaqueRoute.Distribution.FirstAvailable.backends:type_name -> io.linkerd.proxy.outbound.OpaqueRoute.RouteBackend
+	43,  // 94: io.linkerd.proxy.outbound.OpaqueRoute.Distribution.RandomAvailable.backends:type_name -> io.linkerd.proxy.outbound.OpaqueRoute.WeightedRouteBackend
+	50,  // 95: io.linkerd.proxy.outbound.TlsRoute.Rule.backends:type_name -> io.linkerd.proxy.outbound.TlsRoute.Distribution
+	54,  // 96: io.linkerd.proxy.outbound.TlsRoute.Distribution.empty:type_name -> io.linkerd.proxy.outbound.TlsRoute.Distribution.Empty
+	55,  // 97: io.linkerd.proxy.outbound.TlsRoute.Distribution.first_available:type_name -> io.linkerd.proxy.outbound.TlsRoute.Distribution.FirstAvailable
+	56,  // 98: io.linkerd.proxy.outbound.TlsRoute.Distribution.random_available:type_name -> io.linkerd.proxy.outbound.TlsRoute.Distribution.RandomAvailable
+	9,   // 99: io.linkerd.proxy.outbound.TlsRoute.RouteBackend.backend:type_name -> io.linkerd.proxy.outbound.Backend
+	57,  // 100: io.linkerd.proxy.outbound.TlsRoute.RouteBackend.invalid:type_name -> io.linkerd.proxy.outbound.TlsRoute.RouteBackend.Invalid
+	51,  // 101: io.linkerd.proxy.outbound.TlsRoute.WeightedRouteBackend.backend:type_name -> io.linkerd.proxy.outbound.TlsRoute.RouteBackend
+	1,   // 102: io.linkerd.proxy.outbound.TlsRoute.RouteError.kind:type_name -> io.linkerd.proxy.outbound.TlsRoute.RouteError.Kind
+	51,  // 103: io.linkerd.proxy.outbound.TlsRoute.Distribution.FirstAvailable.backends:type_name -> io.linkerd.proxy.outbound.TlsRoute.RouteBackend
+	52,  // 104: io.linkerd.proxy.outbound.TlsRoute.Distribution.RandomAvailable.backends:type_name -> io.linkerd.proxy.outbound.TlsRoute.WeightedRouteBackend
+	60,  // 105: io.linkerd.proxy.outbound.Backend.EndpointDiscovery.dst:type_name -> io.linkerd.proxy.outbound.Backend.EndpointDiscovery.DestinationGet
+	58,  // 106: io.linkerd.proxy.outbound.Backend.BalanceP2c.discovery:type_name -> io.linkerd.proxy.outbound.Backend.EndpointDiscovery
+	61,  // 107: io.linkerd.proxy.outbound.Backend.BalanceP2c.peak_ewma:type_name -> io.linkerd.proxy.outbound.Backend.BalanceP2c.PeakEwma
+	68,  // 108: io.linkerd.proxy.outbound.Backend.BalanceP2c.PeakEwma.default_rtt:type_name -> google.protobuf.Duration
+	68,  // 109: io.linkerd.proxy.outbound.Backend.BalanceP2c.PeakEwma.decay:type_name -> google.protobuf.Duration
+	12,  // 110: io.linkerd.proxy.outbound.FailureAccrual.ConsecutiveFailures.backoff:type_name -> io.linkerd.proxy.outbound.ExponentialBackoff
+	2,   // 111: io.linkerd.proxy.outbound.OutboundPolicies.Get:input_type -> io.linkerd.proxy.outbound.TrafficSpec
+	2,   // 112: io.linkerd.proxy.outbound.OutboundPolicies.Watch:input_type -> io.linkerd.proxy.outbound.TrafficSpec
+	3,   // 113: io.linkerd.proxy.outbound.OutboundPolicies.Get:output_type -> io.linkerd.proxy.outbound.OutboundPolicy
+	3,   // 114: io.linkerd.proxy.outbound.OutboundPolicies.Watch:output_type -> io.linkerd.proxy.outbound.OutboundPolicy
+	113, // [113:115] is the sub-list for method output_type
+	111, // [111:113] is the sub-list for method input_type
+	111, // [111:111] is the sub-list for extension type_name
+	111, // [111:111] is the sub-list for extension extendee
+	0,   // [0:111] is the sub-list for field type_name
 }
 
 func init() { file_outbound_proto_init() }
@@ -4812,716 +4798,6 @@ func file_outbound_proto_init() {
 	if File_outbound_proto != nil {
 		return
 	}
-	if !protoimpl.UnsafeEnabled {
-		file_outbound_proto_msgTypes[0].Exporter = func(v any, i int) any {
-			switch v := v.(*TrafficSpec); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[1].Exporter = func(v any, i int) any {
-			switch v := v.(*OutboundPolicy); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[2].Exporter = func(v any, i int) any {
-			switch v := v.(*ProxyProtocol); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[3].Exporter = func(v any, i int) any {
-			switch v := v.(*HttpRoute); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[4].Exporter = func(v any, i int) any {
-			switch v := v.(*GrpcRoute); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[5].Exporter = func(v any, i int) any {
-			switch v := v.(*OpaqueRoute); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[6].Exporter = func(v any, i int) any {
-			switch v := v.(*TlsRoute); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[7].Exporter = func(v any, i int) any {
-			switch v := v.(*Backend); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[8].Exporter = func(v any, i int) any {
-			switch v := v.(*Queue); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[9].Exporter = func(v any, i int) any {
-			switch v := v.(*FailureAccrual); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[10].Exporter = func(v any, i int) any {
-			switch v := v.(*ExponentialBackoff); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[11].Exporter = func(v any, i int) any {
-			switch v := v.(*ProxyProtocol_Detect); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[12].Exporter = func(v any, i int) any {
-			switch v := v.(*ProxyProtocol_Opaque); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[13].Exporter = func(v any, i int) any {
-			switch v := v.(*ProxyProtocol_Http1); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[14].Exporter = func(v any, i int) any {
-			switch v := v.(*ProxyProtocol_Http2); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[15].Exporter = func(v any, i int) any {
-			switch v := v.(*ProxyProtocol_Grpc); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[16].Exporter = func(v any, i int) any {
-			switch v := v.(*ProxyProtocol_Tls); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[17].Exporter = func(v any, i int) any {
-			switch v := v.(*HttpRoute_Rule); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[18].Exporter = func(v any, i int) any {
-			switch v := v.(*HttpRoute_Filter); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[19].Exporter = func(v any, i int) any {
-			switch v := v.(*HttpRoute_Distribution); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[20].Exporter = func(v any, i int) any {
-			switch v := v.(*HttpRoute_Retry); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[21].Exporter = func(v any, i int) any {
-			switch v := v.(*HttpRoute_RouteBackend); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[22].Exporter = func(v any, i int) any {
-			switch v := v.(*HttpRoute_WeightedRouteBackend); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[23].Exporter = func(v any, i int) any {
-			switch v := v.(*HttpRoute_Distribution_Empty); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[24].Exporter = func(v any, i int) any {
-			switch v := v.(*HttpRoute_Distribution_FirstAvailable); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[25].Exporter = func(v any, i int) any {
-			switch v := v.(*HttpRoute_Distribution_RandomAvailable); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[26].Exporter = func(v any, i int) any {
-			switch v := v.(*HttpRoute_Retry_Conditions); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[27].Exporter = func(v any, i int) any {
-			switch v := v.(*HttpRoute_Retry_Conditions_StatusRange); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[28].Exporter = func(v any, i int) any {
-			switch v := v.(*GrpcRoute_Rule); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[29].Exporter = func(v any, i int) any {
-			switch v := v.(*GrpcRoute_Filter); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[30].Exporter = func(v any, i int) any {
-			switch v := v.(*GrpcRoute_Distribution); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[31].Exporter = func(v any, i int) any {
-			switch v := v.(*GrpcRoute_Retry); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[32].Exporter = func(v any, i int) any {
-			switch v := v.(*GrpcRoute_RouteBackend); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[33].Exporter = func(v any, i int) any {
-			switch v := v.(*GrpcRoute_WeightedRouteBackend); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[34].Exporter = func(v any, i int) any {
-			switch v := v.(*GrpcRoute_Distribution_Empty); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[35].Exporter = func(v any, i int) any {
-			switch v := v.(*GrpcRoute_Distribution_FirstAvailable); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[36].Exporter = func(v any, i int) any {
-			switch v := v.(*GrpcRoute_Distribution_RandomAvailable); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[37].Exporter = func(v any, i int) any {
-			switch v := v.(*GrpcRoute_Retry_Conditions); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[38].Exporter = func(v any, i int) any {
-			switch v := v.(*OpaqueRoute_Rule); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[39].Exporter = func(v any, i int) any {
-			switch v := v.(*OpaqueRoute_Distribution); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[40].Exporter = func(v any, i int) any {
-			switch v := v.(*OpaqueRoute_RouteBackend); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[41].Exporter = func(v any, i int) any {
-			switch v := v.(*OpaqueRoute_WeightedRouteBackend); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[42].Exporter = func(v any, i int) any {
-			switch v := v.(*OpaqueRoute_Distribution_Empty); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[43].Exporter = func(v any, i int) any {
-			switch v := v.(*OpaqueRoute_Distribution_FirstAvailable); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[44].Exporter = func(v any, i int) any {
-			switch v := v.(*OpaqueRoute_Distribution_RandomAvailable); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[45].Exporter = func(v any, i int) any {
-			switch v := v.(*OpaqueRoute_RouteBackend_Invalid); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[46].Exporter = func(v any, i int) any {
-			switch v := v.(*TlsRoute_Rule); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[47].Exporter = func(v any, i int) any {
-			switch v := v.(*TlsRoute_Distribution); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[48].Exporter = func(v any, i int) any {
-			switch v := v.(*TlsRoute_RouteBackend); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[49].Exporter = func(v any, i int) any {
-			switch v := v.(*TlsRoute_WeightedRouteBackend); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[50].Exporter = func(v any, i int) any {
-			switch v := v.(*TlsRoute_Distribution_Empty); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[51].Exporter = func(v any, i int) any {
-			switch v := v.(*TlsRoute_Distribution_FirstAvailable); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[52].Exporter = func(v any, i int) any {
-			switch v := v.(*TlsRoute_Distribution_RandomAvailable); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[53].Exporter = func(v any, i int) any {
-			switch v := v.(*TlsRoute_RouteBackend_Invalid); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[54].Exporter = func(v any, i int) any {
-			switch v := v.(*Backend_EndpointDiscovery); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[55].Exporter = func(v any, i int) any {
-			switch v := v.(*Backend_BalanceP2C); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[56].Exporter = func(v any, i int) any {
-			switch v := v.(*Backend_EndpointDiscovery_DestinationGet); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[57].Exporter = func(v any, i int) any {
-			switch v := v.(*Backend_BalanceP2C_PeakEwma); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_outbound_proto_msgTypes[58].Exporter = func(v any, i int) any {
-			switch v := v.(*FailureAccrual_ConsecutiveFailures); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-	}
 	file_outbound_proto_msgTypes[0].OneofWrappers = []any{
 		(*TrafficSpec_Addr)(nil),
 		(*TrafficSpec_Authority)(nil),
@@ -5566,15 +4842,15 @@ func file_outbound_proto_init() {
 		(*OpaqueRoute_Distribution_FirstAvailable_)(nil),
 		(*OpaqueRoute_Distribution_RandomAvailable_)(nil),
 	}
-	file_outbound_proto_msgTypes[47].OneofWrappers = []any{
+	file_outbound_proto_msgTypes[48].OneofWrappers = []any{
 		(*TlsRoute_Distribution_Empty_)(nil),
 		(*TlsRoute_Distribution_FirstAvailable_)(nil),
 		(*TlsRoute_Distribution_RandomAvailable_)(nil),
 	}
-	file_outbound_proto_msgTypes[54].OneofWrappers = []any{
+	file_outbound_proto_msgTypes[56].OneofWrappers = []any{
 		(*Backend_EndpointDiscovery_Dst)(nil),
 	}
-	file_outbound_proto_msgTypes[55].OneofWrappers = []any{
+	file_outbound_proto_msgTypes[57].OneofWrappers = []any{
 		(*Backend_BalanceP2C_PeakEwma_)(nil),
 	}
 	type x struct{}
@@ -5583,7 +4859,7 @@ func file_outbound_proto_init() {
 			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
 			RawDescriptor: file_outbound_proto_rawDesc,
 			NumEnums:      2,
-			NumMessages:   59,
+			NumMessages:   61,
 			NumExtensions: 0,
 			NumServices:   1,
 		},
diff --git a/go/outbound/outbound_grpc.pb.go b/go/outbound/outbound_grpc.pb.go
index 05483a2fb..a91a1ed50 100644
--- a/go/outbound/outbound_grpc.pb.go
+++ b/go/outbound/outbound_grpc.pb.go
@@ -1,6 +1,6 @@
 // Code generated by protoc-gen-go-grpc. DO NOT EDIT.
 // versions:
-// - protoc-gen-go-grpc v1.4.0
+// - protoc-gen-go-grpc v1.5.1
 // - protoc             v3.12.4
 // source: outbound.proto
 
@@ -15,8 +15,8 @@ import (
 
 // This is a compile-time assertion to ensure that this generated file
 // is compatible with the grpc package it is being compiled against.
-// Requires gRPC-Go v1.62.0 or later.
-const _ = grpc.SupportPackageIsVersion8
+// Requires gRPC-Go v1.64.0 or later.
+const _ = grpc.SupportPackageIsVersion9
 
 const (
 	OutboundPolicies_Get_FullMethodName   = "/io.linkerd.proxy.outbound.OutboundPolicies/Get"
@@ -28,7 +28,7 @@ const (
 // For semantics around ctx use and closing/ending streaming RPCs, please refer to https://pkg.go.dev/google.golang.org/grpc/?tab=doc#ClientConn.NewStream.
 type OutboundPoliciesClient interface {
 	Get(ctx context.Context, in *TrafficSpec, opts ...grpc.CallOption) (*OutboundPolicy, error)
-	Watch(ctx context.Context, in *TrafficSpec, opts ...grpc.CallOption) (OutboundPolicies_WatchClient, error)
+	Watch(ctx context.Context, in *TrafficSpec, opts ...grpc.CallOption) (grpc.ServerStreamingClient[OutboundPolicy], error)
 }
 
 type outboundPoliciesClient struct {
@@ -49,13 +49,13 @@ func (c *outboundPoliciesClient) Get(ctx context.Context, in *TrafficSpec, opts
 	return out, nil
 }
 
-func (c *outboundPoliciesClient) Watch(ctx context.Context, in *TrafficSpec, opts ...grpc.CallOption) (OutboundPolicies_WatchClient, error) {
+func (c *outboundPoliciesClient) Watch(ctx context.Context, in *TrafficSpec, opts ...grpc.CallOption) (grpc.ServerStreamingClient[OutboundPolicy], error) {
 	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
 	stream, err := c.cc.NewStream(ctx, &OutboundPolicies_ServiceDesc.Streams[0], OutboundPolicies_Watch_FullMethodName, cOpts...)
 	if err != nil {
 		return nil, err
 	}
-	x := &outboundPoliciesWatchClient{ClientStream: stream}
+	x := &grpc.GenericClientStream[TrafficSpec, OutboundPolicy]{ClientStream: stream}
 	if err := x.ClientStream.SendMsg(in); err != nil {
 		return nil, err
 	}
@@ -65,43 +65,33 @@ func (c *outboundPoliciesClient) Watch(ctx context.Context, in *TrafficSpec, opt
 	return x, nil
 }
 
-type OutboundPolicies_WatchClient interface {
-	Recv() (*OutboundPolicy, error)
-	grpc.ClientStream
-}
-
-type outboundPoliciesWatchClient struct {
-	grpc.ClientStream
-}
-
-func (x *outboundPoliciesWatchClient) Recv() (*OutboundPolicy, error) {
-	m := new(OutboundPolicy)
-	if err := x.ClientStream.RecvMsg(m); err != nil {
-		return nil, err
-	}
-	return m, nil
-}
+// This type alias is provided for backwards compatibility with existing code that references the prior non-generic stream type by name.
+type OutboundPolicies_WatchClient = grpc.ServerStreamingClient[OutboundPolicy]
 
 // OutboundPoliciesServer is the server API for OutboundPolicies service.
 // All implementations must embed UnimplementedOutboundPoliciesServer
-// for forward compatibility
+// for forward compatibility.
 type OutboundPoliciesServer interface {
 	Get(context.Context, *TrafficSpec) (*OutboundPolicy, error)
-	Watch(*TrafficSpec, OutboundPolicies_WatchServer) error
+	Watch(*TrafficSpec, grpc.ServerStreamingServer[OutboundPolicy]) error
 	mustEmbedUnimplementedOutboundPoliciesServer()
 }
 
-// UnimplementedOutboundPoliciesServer must be embedded to have forward compatible implementations.
-type UnimplementedOutboundPoliciesServer struct {
-}
+// UnimplementedOutboundPoliciesServer must be embedded to have
+// forward compatible implementations.
+//
+// NOTE: this should be embedded by value instead of pointer to avoid a nil
+// pointer dereference when methods are called.
+type UnimplementedOutboundPoliciesServer struct{}
 
 func (UnimplementedOutboundPoliciesServer) Get(context.Context, *TrafficSpec) (*OutboundPolicy, error) {
 	return nil, status.Errorf(codes.Unimplemented, "method Get not implemented")
 }
-func (UnimplementedOutboundPoliciesServer) Watch(*TrafficSpec, OutboundPolicies_WatchServer) error {
+func (UnimplementedOutboundPoliciesServer) Watch(*TrafficSpec, grpc.ServerStreamingServer[OutboundPolicy]) error {
 	return status.Errorf(codes.Unimplemented, "method Watch not implemented")
 }
 func (UnimplementedOutboundPoliciesServer) mustEmbedUnimplementedOutboundPoliciesServer() {}
+func (UnimplementedOutboundPoliciesServer) testEmbeddedByValue()                          {}
 
 // UnsafeOutboundPoliciesServer may be embedded to opt out of forward compatibility for this service.
 // Use of this interface is not recommended, as added methods to OutboundPoliciesServer will
@@ -111,6 +101,13 @@ type UnsafeOutboundPoliciesServer interface {
 }
 
 func RegisterOutboundPoliciesServer(s grpc.ServiceRegistrar, srv OutboundPoliciesServer) {
+	// If the following call pancis, it indicates UnimplementedOutboundPoliciesServer was
+	// embedded by pointer and is nil.  This will cause panics if an
+	// unimplemented method is ever invoked, so we test this at initialization
+	// time to prevent it from happening at runtime later due to I/O.
+	if t, ok := srv.(interface{ testEmbeddedByValue() }); ok {
+		t.testEmbeddedByValue()
+	}
 	s.RegisterService(&OutboundPolicies_ServiceDesc, srv)
 }
 
@@ -137,21 +134,11 @@ func _OutboundPolicies_Watch_Handler(srv interface{}, stream grpc.ServerStream)
 	if err := stream.RecvMsg(m); err != nil {
 		return err
 	}
-	return srv.(OutboundPoliciesServer).Watch(m, &outboundPoliciesWatchServer{ServerStream: stream})
-}
-
-type OutboundPolicies_WatchServer interface {
-	Send(*OutboundPolicy) error
-	grpc.ServerStream
+	return srv.(OutboundPoliciesServer).Watch(m, &grpc.GenericServerStream[TrafficSpec, OutboundPolicy]{ServerStream: stream})
 }
 
-type outboundPoliciesWatchServer struct {
-	grpc.ServerStream
-}
-
-func (x *outboundPoliciesWatchServer) Send(m *OutboundPolicy) error {
-	return x.ServerStream.SendMsg(m)
-}
+// This type alias is provided for backwards compatibility with existing code that references the prior non-generic stream type by name.
+type OutboundPolicies_WatchServer = grpc.ServerStreamingServer[OutboundPolicy]
 
 // OutboundPolicies_ServiceDesc is the grpc.ServiceDesc for OutboundPolicies service.
 // It's only intended for direct use with grpc.RegisterService,
diff --git a/go/tap/tap.pb.go b/go/tap/tap.pb.go
index 1be3e369f..95dbf6e5b 100644
--- a/go/tap/tap.pb.go
+++ b/go/tap/tap.pb.go
@@ -1,6 +1,6 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.34.2
+// 	protoc-gen-go v1.35.1
 // 	protoc        v3.12.4
 // source: tap.proto
 
@@ -88,11 +88,9 @@ type ObserveRequest struct {
 
 func (x *ObserveRequest) Reset() {
 	*x = ObserveRequest{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_tap_proto_msgTypes[0]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_tap_proto_msgTypes[0]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *ObserveRequest) String() string {
@@ -103,7 +101,7 @@ func (*ObserveRequest) ProtoMessage() {}
 
 func (x *ObserveRequest) ProtoReflect() protoreflect.Message {
 	mi := &file_tap_proto_msgTypes[0]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -153,11 +151,9 @@ type Eos struct {
 
 func (x *Eos) Reset() {
 	*x = Eos{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_tap_proto_msgTypes[1]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_tap_proto_msgTypes[1]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *Eos) String() string {
@@ -168,7 +164,7 @@ func (*Eos) ProtoMessage() {}
 
 func (x *Eos) ProtoReflect() protoreflect.Message {
 	mi := &file_tap_proto_msgTypes[1]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -239,11 +235,9 @@ type TapEvent struct {
 
 func (x *TapEvent) Reset() {
 	*x = TapEvent{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_tap_proto_msgTypes[2]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_tap_proto_msgTypes[2]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *TapEvent) String() string {
@@ -254,7 +248,7 @@ func (*TapEvent) ProtoMessage() {}
 
 func (x *TapEvent) ProtoReflect() protoreflect.Message {
 	mi := &file_tap_proto_msgTypes[2]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -355,11 +349,9 @@ type ObserveRequest_Match struct {
 
 func (x *ObserveRequest_Match) Reset() {
 	*x = ObserveRequest_Match{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_tap_proto_msgTypes[3]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_tap_proto_msgTypes[3]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *ObserveRequest_Match) String() string {
@@ -370,7 +362,7 @@ func (*ObserveRequest_Match) ProtoMessage() {}
 
 func (x *ObserveRequest_Match) ProtoReflect() protoreflect.Message {
 	mi := &file_tap_proto_msgTypes[3]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -513,11 +505,9 @@ type ObserveRequest_Extract struct {
 
 func (x *ObserveRequest_Extract) Reset() {
 	*x = ObserveRequest_Extract{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_tap_proto_msgTypes[4]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_tap_proto_msgTypes[4]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *ObserveRequest_Extract) String() string {
@@ -528,7 +518,7 @@ func (*ObserveRequest_Extract) ProtoMessage() {}
 
 func (x *ObserveRequest_Extract) ProtoReflect() protoreflect.Message {
 	mi := &file_tap_proto_msgTypes[4]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -577,11 +567,9 @@ type ObserveRequest_Match_Seq struct {
 
 func (x *ObserveRequest_Match_Seq) Reset() {
 	*x = ObserveRequest_Match_Seq{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_tap_proto_msgTypes[5]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_tap_proto_msgTypes[5]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *ObserveRequest_Match_Seq) String() string {
@@ -592,7 +580,7 @@ func (*ObserveRequest_Match_Seq) ProtoMessage() {}
 
 func (x *ObserveRequest_Match_Seq) ProtoReflect() protoreflect.Message {
 	mi := &file_tap_proto_msgTypes[5]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -625,11 +613,9 @@ type ObserveRequest_Match_Label struct {
 
 func (x *ObserveRequest_Match_Label) Reset() {
 	*x = ObserveRequest_Match_Label{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_tap_proto_msgTypes[6]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_tap_proto_msgTypes[6]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *ObserveRequest_Match_Label) String() string {
@@ -640,7 +626,7 @@ func (*ObserveRequest_Match_Label) ProtoMessage() {}
 
 func (x *ObserveRequest_Match_Label) ProtoReflect() protoreflect.Message {
 	mi := &file_tap_proto_msgTypes[6]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -683,11 +669,9 @@ type ObserveRequest_Match_Tcp struct {
 
 func (x *ObserveRequest_Match_Tcp) Reset() {
 	*x = ObserveRequest_Match_Tcp{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_tap_proto_msgTypes[7]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_tap_proto_msgTypes[7]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *ObserveRequest_Match_Tcp) String() string {
@@ -698,7 +682,7 @@ func (*ObserveRequest_Match_Tcp) ProtoMessage() {}
 
 func (x *ObserveRequest_Match_Tcp) ProtoReflect() protoreflect.Message {
 	mi := &file_tap_proto_msgTypes[7]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -766,11 +750,9 @@ type ObserveRequest_Match_Http struct {
 
 func (x *ObserveRequest_Match_Http) Reset() {
 	*x = ObserveRequest_Match_Http{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_tap_proto_msgTypes[8]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_tap_proto_msgTypes[8]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *ObserveRequest_Match_Http) String() string {
@@ -781,7 +763,7 @@ func (*ObserveRequest_Match_Http) ProtoMessage() {}
 
 func (x *ObserveRequest_Match_Http) ProtoReflect() protoreflect.Message {
 	mi := &file_tap_proto_msgTypes[8]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -870,11 +852,9 @@ type ObserveRequest_Match_Tcp_Netmask struct {
 
 func (x *ObserveRequest_Match_Tcp_Netmask) Reset() {
 	*x = ObserveRequest_Match_Tcp_Netmask{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_tap_proto_msgTypes[9]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_tap_proto_msgTypes[9]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *ObserveRequest_Match_Tcp_Netmask) String() string {
@@ -885,7 +865,7 @@ func (*ObserveRequest_Match_Tcp_Netmask) ProtoMessage() {}
 
 func (x *ObserveRequest_Match_Tcp_Netmask) ProtoReflect() protoreflect.Message {
 	mi := &file_tap_proto_msgTypes[9]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -929,11 +909,9 @@ type ObserveRequest_Match_Tcp_PortRange struct {
 
 func (x *ObserveRequest_Match_Tcp_PortRange) Reset() {
 	*x = ObserveRequest_Match_Tcp_PortRange{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_tap_proto_msgTypes[10]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_tap_proto_msgTypes[10]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *ObserveRequest_Match_Tcp_PortRange) String() string {
@@ -944,7 +922,7 @@ func (*ObserveRequest_Match_Tcp_PortRange) ProtoMessage() {}
 
 func (x *ObserveRequest_Match_Tcp_PortRange) ProtoReflect() protoreflect.Message {
 	mi := &file_tap_proto_msgTypes[10]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -987,11 +965,9 @@ type ObserveRequest_Match_Http_StringMatch struct {
 
 func (x *ObserveRequest_Match_Http_StringMatch) Reset() {
 	*x = ObserveRequest_Match_Http_StringMatch{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_tap_proto_msgTypes[11]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_tap_proto_msgTypes[11]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *ObserveRequest_Match_Http_StringMatch) String() string {
@@ -1002,7 +978,7 @@ func (*ObserveRequest_Match_Http_StringMatch) ProtoMessage() {}
 
 func (x *ObserveRequest_Match_Http_StringMatch) ProtoReflect() protoreflect.Message {
 	mi := &file_tap_proto_msgTypes[11]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1068,11 +1044,9 @@ type ObserveRequest_Extract_Http struct {
 
 func (x *ObserveRequest_Extract_Http) Reset() {
 	*x = ObserveRequest_Extract_Http{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_tap_proto_msgTypes[12]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_tap_proto_msgTypes[12]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *ObserveRequest_Extract_Http) String() string {
@@ -1083,7 +1057,7 @@ func (*ObserveRequest_Extract_Http) ProtoMessage() {}
 
 func (x *ObserveRequest_Extract_Http) ProtoReflect() protoreflect.Message {
 	mi := &file_tap_proto_msgTypes[12]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1130,11 +1104,9 @@ type ObserveRequest_Extract_Http_Headers struct {
 
 func (x *ObserveRequest_Extract_Http_Headers) Reset() {
 	*x = ObserveRequest_Extract_Http_Headers{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_tap_proto_msgTypes[13]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_tap_proto_msgTypes[13]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *ObserveRequest_Extract_Http_Headers) String() string {
@@ -1145,7 +1117,7 @@ func (*ObserveRequest_Extract_Http_Headers) ProtoMessage() {}
 
 func (x *ObserveRequest_Extract_Http_Headers) ProtoReflect() protoreflect.Message {
 	mi := &file_tap_proto_msgTypes[13]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1170,11 +1142,9 @@ type TapEvent_EndpointMeta struct {
 
 func (x *TapEvent_EndpointMeta) Reset() {
 	*x = TapEvent_EndpointMeta{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_tap_proto_msgTypes[14]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_tap_proto_msgTypes[14]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *TapEvent_EndpointMeta) String() string {
@@ -1185,7 +1155,7 @@ func (*TapEvent_EndpointMeta) ProtoMessage() {}
 
 func (x *TapEvent_EndpointMeta) ProtoReflect() protoreflect.Message {
 	mi := &file_tap_proto_msgTypes[14]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1217,11 +1187,9 @@ type TapEvent_RouteMeta struct {
 
 func (x *TapEvent_RouteMeta) Reset() {
 	*x = TapEvent_RouteMeta{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_tap_proto_msgTypes[15]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_tap_proto_msgTypes[15]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *TapEvent_RouteMeta) String() string {
@@ -1232,7 +1200,7 @@ func (*TapEvent_RouteMeta) ProtoMessage() {}
 
 func (x *TapEvent_RouteMeta) ProtoReflect() protoreflect.Message {
 	mi := &file_tap_proto_msgTypes[15]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1269,11 +1237,9 @@ type TapEvent_Http struct {
 
 func (x *TapEvent_Http) Reset() {
 	*x = TapEvent_Http{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_tap_proto_msgTypes[16]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_tap_proto_msgTypes[16]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *TapEvent_Http) String() string {
@@ -1284,7 +1250,7 @@ func (*TapEvent_Http) ProtoMessage() {}
 
 func (x *TapEvent_Http) ProtoReflect() protoreflect.Message {
 	mi := &file_tap_proto_msgTypes[16]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1362,11 +1328,9 @@ type TapEvent_Http_StreamId struct {
 
 func (x *TapEvent_Http_StreamId) Reset() {
 	*x = TapEvent_Http_StreamId{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_tap_proto_msgTypes[19]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_tap_proto_msgTypes[19]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *TapEvent_Http_StreamId) String() string {
@@ -1377,7 +1341,7 @@ func (*TapEvent_Http_StreamId) ProtoMessage() {}
 
 func (x *TapEvent_Http_StreamId) ProtoReflect() protoreflect.Message {
 	mi := &file_tap_proto_msgTypes[19]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1421,11 +1385,9 @@ type TapEvent_Http_RequestInit struct {
 
 func (x *TapEvent_Http_RequestInit) Reset() {
 	*x = TapEvent_Http_RequestInit{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_tap_proto_msgTypes[20]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_tap_proto_msgTypes[20]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *TapEvent_Http_RequestInit) String() string {
@@ -1436,7 +1398,7 @@ func (*TapEvent_Http_RequestInit) ProtoMessage() {}
 
 func (x *TapEvent_Http_RequestInit) ProtoReflect() protoreflect.Message {
 	mi := &file_tap_proto_msgTypes[20]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1506,11 +1468,9 @@ type TapEvent_Http_ResponseInit struct {
 
 func (x *TapEvent_Http_ResponseInit) Reset() {
 	*x = TapEvent_Http_ResponseInit{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_tap_proto_msgTypes[21]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_tap_proto_msgTypes[21]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *TapEvent_Http_ResponseInit) String() string {
@@ -1521,7 +1481,7 @@ func (*TapEvent_Http_ResponseInit) ProtoMessage() {}
 
 func (x *TapEvent_Http_ResponseInit) ProtoReflect() protoreflect.Message {
 	mi := &file_tap_proto_msgTypes[21]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -1579,11 +1539,9 @@ type TapEvent_Http_ResponseEnd struct {
 
 func (x *TapEvent_Http_ResponseEnd) Reset() {
 	*x = TapEvent_Http_ResponseEnd{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_tap_proto_msgTypes[22]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_tap_proto_msgTypes[22]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *TapEvent_Http_ResponseEnd) String() string {
@@ -1594,7 +1552,7 @@ func (*TapEvent_Http_ResponseEnd) ProtoMessage() {}
 
 func (x *TapEvent_Http_ResponseEnd) ProtoReflect() protoreflect.Message {
 	mi := &file_tap_proto_msgTypes[22]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -2035,260 +1993,6 @@ func file_tap_proto_init() {
 	if File_tap_proto != nil {
 		return
 	}
-	if !protoimpl.UnsafeEnabled {
-		file_tap_proto_msgTypes[0].Exporter = func(v any, i int) any {
-			switch v := v.(*ObserveRequest); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_tap_proto_msgTypes[1].Exporter = func(v any, i int) any {
-			switch v := v.(*Eos); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_tap_proto_msgTypes[2].Exporter = func(v any, i int) any {
-			switch v := v.(*TapEvent); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_tap_proto_msgTypes[3].Exporter = func(v any, i int) any {
-			switch v := v.(*ObserveRequest_Match); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_tap_proto_msgTypes[4].Exporter = func(v any, i int) any {
-			switch v := v.(*ObserveRequest_Extract); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_tap_proto_msgTypes[5].Exporter = func(v any, i int) any {
-			switch v := v.(*ObserveRequest_Match_Seq); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_tap_proto_msgTypes[6].Exporter = func(v any, i int) any {
-			switch v := v.(*ObserveRequest_Match_Label); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_tap_proto_msgTypes[7].Exporter = func(v any, i int) any {
-			switch v := v.(*ObserveRequest_Match_Tcp); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_tap_proto_msgTypes[8].Exporter = func(v any, i int) any {
-			switch v := v.(*ObserveRequest_Match_Http); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_tap_proto_msgTypes[9].Exporter = func(v any, i int) any {
-			switch v := v.(*ObserveRequest_Match_Tcp_Netmask); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_tap_proto_msgTypes[10].Exporter = func(v any, i int) any {
-			switch v := v.(*ObserveRequest_Match_Tcp_PortRange); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_tap_proto_msgTypes[11].Exporter = func(v any, i int) any {
-			switch v := v.(*ObserveRequest_Match_Http_StringMatch); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_tap_proto_msgTypes[12].Exporter = func(v any, i int) any {
-			switch v := v.(*ObserveRequest_Extract_Http); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_tap_proto_msgTypes[13].Exporter = func(v any, i int) any {
-			switch v := v.(*ObserveRequest_Extract_Http_Headers); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_tap_proto_msgTypes[14].Exporter = func(v any, i int) any {
-			switch v := v.(*TapEvent_EndpointMeta); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_tap_proto_msgTypes[15].Exporter = func(v any, i int) any {
-			switch v := v.(*TapEvent_RouteMeta); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_tap_proto_msgTypes[16].Exporter = func(v any, i int) any {
-			switch v := v.(*TapEvent_Http); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_tap_proto_msgTypes[19].Exporter = func(v any, i int) any {
-			switch v := v.(*TapEvent_Http_StreamId); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_tap_proto_msgTypes[20].Exporter = func(v any, i int) any {
-			switch v := v.(*TapEvent_Http_RequestInit); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_tap_proto_msgTypes[21].Exporter = func(v any, i int) any {
-			switch v := v.(*TapEvent_Http_ResponseInit); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_tap_proto_msgTypes[22].Exporter = func(v any, i int) any {
-			switch v := v.(*TapEvent_Http_ResponseEnd); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-	}
 	file_tap_proto_msgTypes[1].OneofWrappers = []any{
 		(*Eos_GrpcStatusCode)(nil),
 		(*Eos_ResetErrorCode)(nil),
diff --git a/go/tap/tap_grpc.pb.go b/go/tap/tap_grpc.pb.go
index 86c281175..e905f2ff8 100644
--- a/go/tap/tap_grpc.pb.go
+++ b/go/tap/tap_grpc.pb.go
@@ -1,6 +1,6 @@
 // Code generated by protoc-gen-go-grpc. DO NOT EDIT.
 // versions:
-// - protoc-gen-go-grpc v1.4.0
+// - protoc-gen-go-grpc v1.5.1
 // - protoc             v3.12.4
 // source: tap.proto
 
@@ -15,8 +15,8 @@ import (
 
 // This is a compile-time assertion to ensure that this generated file
 // is compatible with the grpc package it is being compiled against.
-// Requires gRPC-Go v1.62.0 or later.
-const _ = grpc.SupportPackageIsVersion8
+// Requires gRPC-Go v1.64.0 or later.
+const _ = grpc.SupportPackageIsVersion9
 
 const (
 	Tap_Observe_FullMethodName = "/io.linkerd.proxy.tap.Tap/Observe"
@@ -28,7 +28,7 @@ const (
 //
 // A service exposed by proxy instances to setup
 type TapClient interface {
-	Observe(ctx context.Context, in *ObserveRequest, opts ...grpc.CallOption) (Tap_ObserveClient, error)
+	Observe(ctx context.Context, in *ObserveRequest, opts ...grpc.CallOption) (grpc.ServerStreamingClient[TapEvent], error)
 }
 
 type tapClient struct {
@@ -39,13 +39,13 @@ func NewTapClient(cc grpc.ClientConnInterface) TapClient {
 	return &tapClient{cc}
 }
 
-func (c *tapClient) Observe(ctx context.Context, in *ObserveRequest, opts ...grpc.CallOption) (Tap_ObserveClient, error) {
+func (c *tapClient) Observe(ctx context.Context, in *ObserveRequest, opts ...grpc.CallOption) (grpc.ServerStreamingClient[TapEvent], error) {
 	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
 	stream, err := c.cc.NewStream(ctx, &Tap_ServiceDesc.Streams[0], Tap_Observe_FullMethodName, cOpts...)
 	if err != nil {
 		return nil, err
 	}
-	x := &tapObserveClient{ClientStream: stream}
+	x := &grpc.GenericClientStream[ObserveRequest, TapEvent]{ClientStream: stream}
 	if err := x.ClientStream.SendMsg(in); err != nil {
 		return nil, err
 	}
@@ -55,41 +55,31 @@ func (c *tapClient) Observe(ctx context.Context, in *ObserveRequest, opts ...grp
 	return x, nil
 }
 
-type Tap_ObserveClient interface {
-	Recv() (*TapEvent, error)
-	grpc.ClientStream
-}
-
-type tapObserveClient struct {
-	grpc.ClientStream
-}
-
-func (x *tapObserveClient) Recv() (*TapEvent, error) {
-	m := new(TapEvent)
-	if err := x.ClientStream.RecvMsg(m); err != nil {
-		return nil, err
-	}
-	return m, nil
-}
+// This type alias is provided for backwards compatibility with existing code that references the prior non-generic stream type by name.
+type Tap_ObserveClient = grpc.ServerStreamingClient[TapEvent]
 
 // TapServer is the server API for Tap service.
 // All implementations must embed UnimplementedTapServer
-// for forward compatibility
+// for forward compatibility.
 //
 // A service exposed by proxy instances to setup
 type TapServer interface {
-	Observe(*ObserveRequest, Tap_ObserveServer) error
+	Observe(*ObserveRequest, grpc.ServerStreamingServer[TapEvent]) error
 	mustEmbedUnimplementedTapServer()
 }
 
-// UnimplementedTapServer must be embedded to have forward compatible implementations.
-type UnimplementedTapServer struct {
-}
+// UnimplementedTapServer must be embedded to have
+// forward compatible implementations.
+//
+// NOTE: this should be embedded by value instead of pointer to avoid a nil
+// pointer dereference when methods are called.
+type UnimplementedTapServer struct{}
 
-func (UnimplementedTapServer) Observe(*ObserveRequest, Tap_ObserveServer) error {
+func (UnimplementedTapServer) Observe(*ObserveRequest, grpc.ServerStreamingServer[TapEvent]) error {
 	return status.Errorf(codes.Unimplemented, "method Observe not implemented")
 }
 func (UnimplementedTapServer) mustEmbedUnimplementedTapServer() {}
+func (UnimplementedTapServer) testEmbeddedByValue()             {}
 
 // UnsafeTapServer may be embedded to opt out of forward compatibility for this service.
 // Use of this interface is not recommended, as added methods to TapServer will
@@ -99,6 +89,13 @@ type UnsafeTapServer interface {
 }
 
 func RegisterTapServer(s grpc.ServiceRegistrar, srv TapServer) {
+	// If the following call pancis, it indicates UnimplementedTapServer was
+	// embedded by pointer and is nil.  This will cause panics if an
+	// unimplemented method is ever invoked, so we test this at initialization
+	// time to prevent it from happening at runtime later due to I/O.
+	if t, ok := srv.(interface{ testEmbeddedByValue() }); ok {
+		t.testEmbeddedByValue()
+	}
 	s.RegisterService(&Tap_ServiceDesc, srv)
 }
 
@@ -107,21 +104,11 @@ func _Tap_Observe_Handler(srv interface{}, stream grpc.ServerStream) error {
 	if err := stream.RecvMsg(m); err != nil {
 		return err
 	}
-	return srv.(TapServer).Observe(m, &tapObserveServer{ServerStream: stream})
-}
-
-type Tap_ObserveServer interface {
-	Send(*TapEvent) error
-	grpc.ServerStream
+	return srv.(TapServer).Observe(m, &grpc.GenericServerStream[ObserveRequest, TapEvent]{ServerStream: stream})
 }
 
-type tapObserveServer struct {
-	grpc.ServerStream
-}
-
-func (x *tapObserveServer) Send(m *TapEvent) error {
-	return x.ServerStream.SendMsg(m)
-}
+// This type alias is provided for backwards compatibility with existing code that references the prior non-generic stream type by name.
+type Tap_ObserveServer = grpc.ServerStreamingServer[TapEvent]
 
 // Tap_ServiceDesc is the grpc.ServiceDesc for Tap service.
 // It's only intended for direct use with grpc.RegisterService,
diff --git a/go/tls_route/tls_route.pb.go b/go/tls_route/tls_route.pb.go
index 80663dd89..cc368d786 100644
--- a/go/tls_route/tls_route.pb.go
+++ b/go/tls_route/tls_route.pb.go
@@ -1,6 +1,6 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
-// 	protoc-gen-go v1.34.2
+// 	protoc-gen-go v1.35.1
 // 	protoc        v3.12.4
 // source: tls_route.proto
 
@@ -35,11 +35,9 @@ type SniMatch struct {
 
 func (x *SniMatch) Reset() {
 	*x = SniMatch{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_tls_route_proto_msgTypes[0]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_tls_route_proto_msgTypes[0]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *SniMatch) String() string {
@@ -50,7 +48,7 @@ func (*SniMatch) ProtoMessage() {}
 
 func (x *SniMatch) ProtoReflect() protoreflect.Message {
 	mi := &file_tls_route_proto_msgTypes[0]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -115,11 +113,9 @@ type SniMatch_Suffix struct {
 
 func (x *SniMatch_Suffix) Reset() {
 	*x = SniMatch_Suffix{}
-	if protoimpl.UnsafeEnabled {
-		mi := &file_tls_route_proto_msgTypes[1]
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		ms.StoreMessageInfo(mi)
-	}
+	mi := &file_tls_route_proto_msgTypes[1]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
 }
 
 func (x *SniMatch_Suffix) String() string {
@@ -130,7 +126,7 @@ func (*SniMatch_Suffix) ProtoMessage() {}
 
 func (x *SniMatch_Suffix) ProtoReflect() protoreflect.Message {
 	mi := &file_tls_route_proto_msgTypes[1]
-	if protoimpl.UnsafeEnabled && x != nil {
+	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
 			ms.StoreMessageInfo(mi)
@@ -206,32 +202,6 @@ func file_tls_route_proto_init() {
 	if File_tls_route_proto != nil {
 		return
 	}
-	if !protoimpl.UnsafeEnabled {
-		file_tls_route_proto_msgTypes[0].Exporter = func(v any, i int) any {
-			switch v := v.(*SniMatch); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-		file_tls_route_proto_msgTypes[1].Exporter = func(v any, i int) any {
-			switch v := v.(*SniMatch_Suffix); i {
-			case 0:
-				return &v.state
-			case 1:
-				return &v.sizeCache
-			case 2:
-				return &v.unknownFields
-			default:
-				return nil
-			}
-		}
-	}
 	file_tls_route_proto_msgTypes[0].OneofWrappers = []any{
 		(*SniMatch_Exact)(nil),
 		(*SniMatch_Suffix_)(nil),
diff --git a/proto/outbound.proto b/proto/outbound.proto
index 1c06f8ae2..4ab8c4d2d 100644
--- a/proto/outbound.proto
+++ b/proto/outbound.proto
@@ -322,11 +322,15 @@ message OpaqueRoute {
     RouteBackend backend = 1;
     uint32 weight = 2;
   }
-  
+
   // Error type that is used to indicate that any traffic
   // that is delivered through a route should be failed.
-  enum RouteError {
-    FORBIDDEN = 0;
+  message RouteError {
+    Kind kind = 1;
+
+    enum Kind {
+      FORBIDDEN = 0;
+    }
   }
 }
 
@@ -378,8 +382,12 @@ message TlsRoute {
 
   // Error type that is used to indicate that any traffic
   // that is delivered through a route should be failed.
-  enum RouteError {
-    FORBIDDEN = 0;
+  message RouteError {
+    Kind kind = 1;
+
+    enum Kind {
+      FORBIDDEN = 0;
+    }
   }
 }
 
diff --git a/src/gen/io.linkerd.proxy.outbound.rs b/src/gen/io.linkerd.proxy.outbound.rs
index 91152dc25..d078bce97 100644
--- a/src/gen/io.linkerd.proxy.outbound.rs
+++ b/src/gen/io.linkerd.proxy.outbound.rs
@@ -429,8 +429,8 @@ pub struct OpaqueRoute {
     /// Must have at least one rule.
     #[prost(message, repeated, tag = "3")]
     pub rules: ::prost::alloc::vec::Vec<opaque_route::Rule>,
-    #[prost(enumeration = "opaque_route::RouteError", tag = "4")]
-    pub error: i32,
+    #[prost(message, optional, tag = "4")]
+    pub error: ::core::option::Option<opaque_route::RouteError>,
 }
 /// Nested message and enum types in `OpaqueRoute`.
 pub mod opaque_route {
@@ -502,36 +502,45 @@ pub mod opaque_route {
     }
     /// Error type that is used to indicate that any traffic
     /// that is delivered through a route should be failed.
-    #[derive(
-        Clone,
-        Copy,
-        Debug,
-        PartialEq,
-        Eq,
-        Hash,
-        PartialOrd,
-        Ord,
-        ::prost::Enumeration
-    )]
-    #[repr(i32)]
-    pub enum RouteError {
-        Forbidden = 0,
+    #[allow(clippy::derive_partial_eq_without_eq)]
+    #[derive(Clone, PartialEq, ::prost::Message)]
+    pub struct RouteError {
+        #[prost(enumeration = "route_error::Kind", tag = "1")]
+        pub kind: i32,
     }
-    impl RouteError {
-        /// String value of the enum field names used in the ProtoBuf definition.
-        ///
-        /// The values are not transformed in any way and thus are considered stable
-        /// (if the ProtoBuf definition does not change) and safe for programmatic use.
-        pub fn as_str_name(&self) -> &'static str {
-            match self {
-                RouteError::Forbidden => "FORBIDDEN",
-            }
+    /// Nested message and enum types in `RouteError`.
+    pub mod route_error {
+        #[derive(
+            Clone,
+            Copy,
+            Debug,
+            PartialEq,
+            Eq,
+            Hash,
+            PartialOrd,
+            Ord,
+            ::prost::Enumeration
+        )]
+        #[repr(i32)]
+        pub enum Kind {
+            Forbidden = 0,
         }
-        /// Creates an enum from field names used in the ProtoBuf definition.
-        pub fn from_str_name(value: &str) -> ::core::option::Option<Self> {
-            match value {
-                "FORBIDDEN" => Some(Self::Forbidden),
-                _ => None,
+        impl Kind {
+            /// String value of the enum field names used in the ProtoBuf definition.
+            ///
+            /// The values are not transformed in any way and thus are considered stable
+            /// (if the ProtoBuf definition does not change) and safe for programmatic use.
+            pub fn as_str_name(&self) -> &'static str {
+                match self {
+                    Kind::Forbidden => "FORBIDDEN",
+                }
+            }
+            /// Creates an enum from field names used in the ProtoBuf definition.
+            pub fn from_str_name(value: &str) -> ::core::option::Option<Self> {
+                match value {
+                    "FORBIDDEN" => Some(Self::Forbidden),
+                    _ => None,
+                }
             }
         }
     }
@@ -547,8 +556,8 @@ pub struct TlsRoute {
     /// Must have at least one rule.
     #[prost(message, repeated, tag = "3")]
     pub rules: ::prost::alloc::vec::Vec<tls_route::Rule>,
-    #[prost(enumeration = "tls_route::RouteError", tag = "4")]
-    pub error: i32,
+    #[prost(message, optional, tag = "4")]
+    pub error: ::core::option::Option<tls_route::RouteError>,
 }
 /// Nested message and enum types in `TlsRoute`.
 pub mod tls_route {
@@ -620,36 +629,45 @@ pub mod tls_route {
     }
     /// Error type that is used to indicate that any traffic
     /// that is delivered through a route should be failed.
-    #[derive(
-        Clone,
-        Copy,
-        Debug,
-        PartialEq,
-        Eq,
-        Hash,
-        PartialOrd,
-        Ord,
-        ::prost::Enumeration
-    )]
-    #[repr(i32)]
-    pub enum RouteError {
-        Forbidden = 0,
+    #[allow(clippy::derive_partial_eq_without_eq)]
+    #[derive(Clone, PartialEq, ::prost::Message)]
+    pub struct RouteError {
+        #[prost(enumeration = "route_error::Kind", tag = "1")]
+        pub kind: i32,
     }
-    impl RouteError {
-        /// String value of the enum field names used in the ProtoBuf definition.
-        ///
-        /// The values are not transformed in any way and thus are considered stable
-        /// (if the ProtoBuf definition does not change) and safe for programmatic use.
-        pub fn as_str_name(&self) -> &'static str {
-            match self {
-                RouteError::Forbidden => "FORBIDDEN",
-            }
+    /// Nested message and enum types in `RouteError`.
+    pub mod route_error {
+        #[derive(
+            Clone,
+            Copy,
+            Debug,
+            PartialEq,
+            Eq,
+            Hash,
+            PartialOrd,
+            Ord,
+            ::prost::Enumeration
+        )]
+        #[repr(i32)]
+        pub enum Kind {
+            Forbidden = 0,
         }
-        /// Creates an enum from field names used in the ProtoBuf definition.
-        pub fn from_str_name(value: &str) -> ::core::option::Option<Self> {
-            match value {
-                "FORBIDDEN" => Some(Self::Forbidden),
-                _ => None,
+        impl Kind {
+            /// String value of the enum field names used in the ProtoBuf definition.
+            ///
+            /// The values are not transformed in any way and thus are considered stable
+            /// (if the ProtoBuf definition does not change) and safe for programmatic use.
+            pub fn as_str_name(&self) -> &'static str {
+                match self {
+                    Kind::Forbidden => "FORBIDDEN",
+                }
+            }
+            /// Creates an enum from field names used in the ProtoBuf definition.
+            pub fn from_str_name(value: &str) -> ::core::option::Option<Self> {
+                match value {
+                    "FORBIDDEN" => Some(Self::Forbidden),
+                    _ => None,
+                }
             }
         }
     }