diff --git a/_cxx/envoy.mk b/_cxx/envoy.mk
index 7494ae1c04..0a4107c0d7 100644
--- a/_cxx/envoy.mk
+++ b/_cxx/envoy.mk
@@ -10,7 +10,7 @@ IS_PRIVATE ?= $(findstring private,$(_git_remote_urls))
 
 # IF YOU MESS WITH ANY OF THESE VALUES, YOU MUST RUN `make update-base`.
   ENVOY_REPO ?= $(if $(IS_PRIVATE),git@github.com:datawire/envoy-private.git,git://github.com/datawire/envoy.git)
-  ENVOY_COMMIT ?= 779911fc06e22e6ffd43d55bf51980a67d7552d9
+  ENVOY_COMMIT ?= 2ac861a486755a78cb55225c312a9f8be1d363b8
   ENVOY_COMPILATION_MODE ?= opt
   # Increment BASE_ENVOY_RELVER on changes to `docker/base-envoy/Dockerfile`, or Envoy recipes.
   # You may reset BASE_ENVOY_RELVER when adjusting ENVOY_COMMIT.