diff --git a/.changelog/8470.txt b/.changelog/8470.txt
new file mode 100644
index 000000000..3473f9899
--- /dev/null
+++ b/.changelog/8470.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+connect: use stronger validation that ingress gateways have compatible protocols defined for their upstreams
+```