diff --git a/.bazelrc b/.bazelrc
index 71f457fb5e4a..b88d5079faee 100644
--- a/.bazelrc
+++ b/.bazelrc
@@ -81,6 +81,8 @@ build:clang-tsan --define ENVOY_CONFIG_TSAN=1
 build:clang-tsan --copt -fsanitize=thread
 build:clang-tsan --linkopt -fsanitize=thread
 build:clang-tsan --linkopt -fuse-ld=lld
+build:clang-tsan --build_tag_filters=-no_san,-no_tsan
+build:clang-tsan --test_tag_filters=-no_san,-no_tsan
 # Needed due to https://github.com/libevent/libevent/issues/777
 build:clang-tsan --copt -DEVENT__DISABLE_DEBUG_MODE
 
diff --git a/test/integration/BUILD b/test/integration/BUILD
index 5fe7aa10a5f1..a8ed5cb5dbcc 100644
--- a/test/integration/BUILD
+++ b/test/integration/BUILD
@@ -217,7 +217,11 @@ envoy_cc_test(
     data = [
         "//test/config/integration/certs",
     ],
-    tags = ["fails_on_windows"],
+    tags = [
+        "fails_on_windows",
+        # https://github.com/envoyproxy/envoy/issues/9784
+        "no_tsan",
+    ],
     deps = [
         ":http_integration_lib",
         "//source/common/config:protobuf_link_hacks",
diff --git a/test/per_file_coverage.sh b/test/per_file_coverage.sh
index e06bf489cb07..8dd9531fc065 100755
--- a/test/per_file_coverage.sh
+++ b/test/per_file_coverage.sh
@@ -42,6 +42,7 @@ declare -a KNOWN_LOW_COVERAGE=(
 "source/extensions/quic_listeners/quiche:84.8"
 "source/extensions/retry:95.5"
 "source/extensions/retry/host:85.7"
+"source/extensions/retry/host/omit_canary_hosts:92.9"
 "source/extensions/stat_sinks/statsd:85.2"
 "source/extensions/tracers:96.5"
 "source/extensions/tracers/opencensus:92.4"