diff --git a/WORKSPACE b/WORKSPACE
index d6fd1eeced0..f759ce4d337 100644
--- a/WORKSPACE
+++ b/WORKSPACE
@@ -38,10 +38,10 @@ bind(
 # 2. Update .bazelversion, envoy.bazelrc and .bazelrc if needed.
 #
 # Note: this is needed by release builder to resolve envoy dep sha to tag.
-# Commit date: 2021-03-17
-ENVOY_SHA = "f0cb7a2244064942345372ee89ff5b9cb6db1e8b"
+# Commit date: 2021-04-15
+ENVOY_SHA = "f8592536954610e2bcd540a381b23967bc263045"
 
-ENVOY_SHA256 = "2e2ab50be07ffcf748ea28c1faff7f7d09af7259988a2ae623165e6b6b94c90e"
+ENVOY_SHA256 = "2a4657e266b0485c5efbeae686f0c77273046bd1b950e0df7352123e11bab98d"
 
 ENVOY_ORG = "istio"