diff --git a/envoy/COMMIT b/envoy/COMMIT
index 37342c0ac..18f3d612e 100644
--- a/envoy/COMMIT
+++ b/envoy/COMMIT
@@ -1 +1 @@
-5b22dced91c062fc409153777c287f053dac0cbe
+03561251fbc50e9d16b35e02ae6032e073c16430
diff --git a/envoy/extensions/transport_sockets/http_11_proxy/v3/upstream_http_11_connect.pb.go b/envoy/extensions/transport_sockets/http_11_proxy/v3/upstream_http_11_connect.pb.go
index 9b545b124..f8ca4c10c 100755
--- a/envoy/extensions/transport_sockets/http_11_proxy/v3/upstream_http_11_connect.pb.go
+++ b/envoy/extensions/transport_sockets/http_11_proxy/v3/upstream_http_11_connect.pb.go
@@ -23,20 +23,30 @@ const (
 	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
 )
 
-// Configuration for HTTP/1.1 proxy transport sockets.
-// This is intended for use in Envoy Mobile, though may eventually be extended
-// for upstream Envoy use.
-// If this transport socket is configured, and an intermediate filter adds the
-// stream info necessary for proxying to the stream info (as the test filter
-// does :repo:`here <test/integration/filters/header_to_proxy_filter.cc>`) then
+// The HTTP/1.1 proxy transport socket opens an upstream connection to a specified proxy address
+// rather than the target host's address. If this transport socket is configured and proxy
+// information is configured, then:
 //
-//   - Upstream connections will be directed to the specified proxy address rather
-//     than the host's address
-//   - Upstream TLS connections will have a raw HTTP/1.1 CONNECT header prefaced
-//     to the payload, and 200 response stripped (if less than 200 bytes)
+//   - Upstream connections to the proxy address will have a raw HTTP/1.1 CONNECT header prefaced to
+//     the payload, and 200 response stripped (if less than 200 bytes).
 //   - Plaintext HTTP/1.1 connections will be sent with a fully qualified URL.
 //
-// This transport socket is not compatible with HTTP/3, plaintext HTTP/2, or raw TCP.
+// There are two primary ways to configure proxy information:
+//
+//   - An intermediate filter adds the stream info necessary for proxying to the stream info (as the
+//     test filter does :repo:`here <test/integration/filters/header_to_proxy_filter.cc>`).
+//   - Setting the "typed_filter_metadata" in :ref:`LbEndpoint.Metadata <envoy_v3_api_field_config.endpoint.v3.lbendpoint.metadata>`
+//     or :ref:`LocalityLbEndpoints.Metadata
+//     <envoy_v3_api_field_config.endpoint.v3.LocalityLbEndpoints.metadata>` using the key
+//     "envoy.http11_proxy_transport_socket.proxy_address" and the proxy address in
+//     config::core::v3::Address format.
+//
+// Some important notes regarding this transport socket:
+//
+//   - Configuration via stream info (as opposed to endpoint/locality metadata) will only proxy TLS
+//     connections to the proxy address on port 443. This is to maintain the original behavior of the
+//     transport socket when using this method of configuration.
+//   - The transport socket is not compatible with HTTP/3 or plaintext HTTP/2.
 type Http11ProxyUpstreamTransport struct {
 	state         protoimpl.MessageState
 	sizeCache     protoimpl.SizeCache