External dependencies

Below we enumerate the external dependencies that may be linked into the Envoy binary. We exclude dependencies that only are used in CI or developer tooling above.

Data plane (core)

External dependencies: dataplane_core

Name

Version

Release date

CPE

License

Abseil

8317b9a

2022-10-06

Apache-2.0

BoringSSL

0986955

2022-07-19

cpe:2.3:a:google:boringssl:*

Mixed

BoringSSL (FIPS)

fips-20190808

2019-08-08

cpe:2.3:a:google:boringssl:*

c-ares

1.18.1

2021-10-27

cpe:2.3:a:c-ares_project:c-ares:*

c-ares

fmt

9.1.0

2022-08-27

cpe:2.3:a:fmt:fmt:*

fmt

gperftools

2.10

2022-05-31

cpe:2.3:a:gperftools_project:gperftools:*

BSD-3-Clause

gRPC

1.49.0

2022-09-14

cpe:2.3:a:grpc:grpc:*

Apache-2.0

libcircllhist

63a16dd

2019-02-11

Apache-2.0

libevent

62c152d

2020-07-28

cpe:2.3:a:libevent_project:libevent:*

BSD-3-Clause

liburing

2.1

2021-09-09

Nghttp2

1.50.0

2022-09-21

cpe:2.3:a:nghttp2:nghttp2:*

MIT

nlohmann JSON

3.11.2

2022-08-12

cpe:2.3:a:json-for-modern-cpp_project:json-for-modern-cpp:*

MIT

Perfetto

28.0

2022-08-02

Apache-2.0

Protocol Buffers

21.7

2022-09-29

cpe:2.3:a:google:protobuf:*

Protocol Buffers

Protocol Buffers (protoc) linux_aarch_64

21.7

2022-09-29

Protocol Buffers

Protocol Buffers (protoc) linux_x86_64

21.7

2022-09-29

Protocol Buffers

Protocol Buffers (protoc) osx_aarch_64

21.7

2022-09-29

Protocol Buffers

Protocol Buffers (protoc) osx_x86_64

21.7

2022-09-29

Protocol Buffers

Protocol Buffers (protoc) win64

21.7

2022-09-29

Protocol Buffers

QUICHE

44da7b6

2022-10-13

BSD-3-Clause

RE2

2022-06-01

2022-05-31

BSD-3-Clause

Rules for using foreign build systems in Bazel

0.8.0

2022-04-18

Apache-2.0

spdlog

1.9.2

2021-08-12

MIT

tcmalloc

5940033

2022-08-06

Apache-2.0

xxHash

0.8.1

2021-11-29

BSD-2-Clause

yaml-cpp

420c982

2022-04-27

cpe:2.3:a:yaml-cpp_project:yaml-cpp:*

MIT

zlib

1.2.12

2022-03-27

cpe:2.3:a:gnu:zlib:*

zlib

zlib-ng

2.0.6

2021-12-24

zlib

Data plane (extensions)

External dependencies: dataplane_ext

envoy.access_loggers.extension_filters.cel

Name

Version

Release date

CPE

License

Common Expression Language (CEL) C++ library

11f9d66

2022-09-01

FlatBuffers

22.9.29

2022-09-30

cpe:2.3:a:google:flatbuffers:*

Apache-2.0

envoy.compression.brotli.compressor

Name

Version

Release date

CPE

License

brotli

0cd2e39

2020-09-08

cpe:2.3:a:google:brotli:*

MIT

envoy.compression.brotli.decompressor

Name

Version

Release date

CPE

License

brotli

0cd2e39

2020-09-08

cpe:2.3:a:google:brotli:*

MIT

envoy.compression.zstd.compressor

Name

Version

Release date

CPE

License

zstd

1.5.2

2022-01-20

cpe:2.3:a:facebook:zstandard:*

envoy.compression.zstd.decompressor

Name

Version

Release date

CPE

License

zstd

1.5.2

2022-01-20

cpe:2.3:a:facebook:zstandard:*

envoy.filters.http.aws_lambda

Name

Version

Release date

CPE

License

curl

7.85.0

2022-08-31

cpe:2.3:a:haxx:libcurl:*

curl

envoy.filters.http.aws_request_signing

Name

Version

Release date

CPE

License

curl

7.85.0

2022-08-31

cpe:2.3:a:haxx:libcurl:*

curl

envoy.filters.http.gcp_authn

Name

Version

Release date

CPE

License

jwt_verify_lib

26c22c0

2022-09-22

Apache-2.0

envoy.filters.http.grpc_json_transcoder

Name

Version

Release date

CPE

License

grpc-httpjson-transcoding

387cce0

2022-10-07

Apache-2.0

envoy.filters.http.jwt_authn

Name

Version

Release date

CPE

License

jwt_verify_lib

26c22c0

2022-09-22

Apache-2.0

envoy.filters.http.language

Name

Version

Release date

CPE

License

ICU Library

71-1

2022-04-06

ICU

envoy.filters.http.lua

Name

Version

Release date

CPE

License

LuaJIT

1d8b747

2020-10-12

cpe:2.3:a:luajit:luajit:*

MIT

Moonjit

2.2.0

2020-01-14

cpe:2.3:a:moonjit_project:moonjit:*

moonjit

envoy.filters.http.rbac

Name

Version

Release date

CPE

License

Common Expression Language (CEL) C++ library

11f9d66

2022-09-01

FlatBuffers

22.9.29

2022-09-30

cpe:2.3:a:google:flatbuffers:*

Apache-2.0

envoy.filters.network.dubbo_proxy

Name

Version

Release date

CPE

License

hessian2-codec

e9bb36e

2022-10-10

Apache-2.0

envoy.filters.network.kafka_broker

Name

Version

Release date

CPE

License

Kafka (source)

3.2.3

2022-09-13

cpe:2.3:a:apache:kafka:*

Apache-2.0

envoy.filters.network.kafka_mesh

Name

Version

Release date

CPE

License

Kafka (C/C++ client)

1.8.2

2021-10-18

librdkafka

Kafka (source)

3.2.3

2022-09-13

cpe:2.3:a:apache:kafka:*

Apache-2.0

envoy.filters.network.mysql_proxy

Name

Version

Release date

CPE

License

C++ SQL Parser Library

3b40ba2

2020-06-10

MIT

envoy.filters.network.postgres_proxy

Name

Version

Release date

CPE

License

C++ SQL Parser Library

3b40ba2

2020-06-10

MIT

envoy.filters.network.rbac

Name

Version

Release date

CPE

License

Common Expression Language (CEL) C++ library

11f9d66

2022-09-01

FlatBuffers

22.9.29

2022-09-30

cpe:2.3:a:google:flatbuffers:*

Apache-2.0

envoy.grpc_credentials.aws_iam

Name

Version

Release date

CPE

License

curl

7.85.0

2022-08-31

cpe:2.3:a:haxx:libcurl:*

curl

envoy.matching.input_matchers.hyperscan

Name

Version

Release date

CPE

License

Boost

1.78.0

2021-12-08

cpe:2.3:a:boost:boost:*

Boost

Colm

2d8ba76

2021-12-28

MIT

Hyperscan

5.4.0

2021-01-13

BSD-3-Clause

Ragel

d4577c9

2021-12-28

MIT

envoy.network.connection_balance.dlb

Name

Version

Release date

CPE

License

Intel Dlb

7.8.0

2022-03-30

envoy.rate_limit_descriptors.expr

Name

Version

Release date

CPE

License

Common Expression Language (CEL) C++ library

11f9d66

2022-09-01

FlatBuffers

22.9.29

2022-09-30

cpe:2.3:a:google:flatbuffers:*

Apache-2.0

envoy.rbac.matchers.upstream_ip_port

Name

Version

Release date

CPE

License

Common Expression Language (CEL) C++ library

11f9d66

2022-09-01

FlatBuffers

22.9.29

2022-09-30

cpe:2.3:a:google:flatbuffers:*

Apache-2.0

envoy.regex_engines.hyperscan

Name

Version

Release date

CPE

License

Boost

1.78.0

2021-12-08

cpe:2.3:a:boost:boost:*

Boost

Colm

2d8ba76

2021-12-28

MIT

Hyperscan

5.4.0

2021-01-13

BSD-3-Clause

Ragel

d4577c9

2021-12-28

MIT

envoy.tls.key_providers.cryptomb

Name

Version

Release date

CPE

License

libipp-crypto

2021.5

2021-12-21

cpe:2.3:a:intel:cryptography_for_intel_integrated_performance_primitives:*

Apache-2.0

envoy.tls.key_providers.qat

Name

Version

Release date

CPE

License

qatlib

21.11.0

2021-11-10

BSD-3-Clause

envoy.tracers.opencensus

Name

Version

Release date

CPE

License

curl

7.85.0

2022-08-31

cpe:2.3:a:haxx:libcurl:*

curl

envoy.wasm.runtime.null

Name

Version

Release date

CPE

License

WebAssembly for Proxies (C++ host implementation)

b0a0594

2022-10-09

Apache-2.0

WebAssembly for Proxies (C++ SDK)

e30535b

2022-03-15

Apache-2.0

Control plane

External dependencies: controlplane

Name

Version

Release date

CPE

License

Abseil

8317b9a

2022-10-06

Apache-2.0

BoringSSL

0986955

2022-07-19

cpe:2.3:a:google:boringssl:*

Mixed

BoringSSL (FIPS)

fips-20190808

2019-08-08

cpe:2.3:a:google:boringssl:*

c-ares

1.18.1

2021-10-27

cpe:2.3:a:c-ares_project:c-ares:*

c-ares

fmt

9.1.0

2022-08-27

cpe:2.3:a:fmt:fmt:*

fmt

gperftools

2.10

2022-05-31

cpe:2.3:a:gperftools_project:gperftools:*

BSD-3-Clause

gRPC

1.49.0

2022-09-14

cpe:2.3:a:grpc:grpc:*

Apache-2.0

libcircllhist

63a16dd

2019-02-11

Apache-2.0

libevent

62c152d

2020-07-28

cpe:2.3:a:libevent_project:libevent:*

BSD-3-Clause

liburing

2.1

2021-09-09

Nghttp2

1.50.0

2022-09-21

cpe:2.3:a:nghttp2:nghttp2:*

MIT

nlohmann JSON

3.11.2

2022-08-12

cpe:2.3:a:json-for-modern-cpp_project:json-for-modern-cpp:*

MIT

Perfetto

28.0

2022-08-02

Apache-2.0

Protocol Buffers

21.7

2022-09-29

cpe:2.3:a:google:protobuf:*

Protocol Buffers

Protocol Buffers (protoc) linux_aarch_64

21.7

2022-09-29

Protocol Buffers

Protocol Buffers (protoc) linux_x86_64

21.7

2022-09-29

Protocol Buffers

Protocol Buffers (protoc) osx_aarch_64

21.7

2022-09-29

Protocol Buffers

Protocol Buffers (protoc) osx_x86_64

21.7

2022-09-29

Protocol Buffers

Protocol Buffers (protoc) win64

21.7

2022-09-29

Protocol Buffers

RE2

2022-06-01

2022-05-31

BSD-3-Clause

Rules for using foreign build systems in Bazel

0.8.0

2022-04-18

Apache-2.0

spdlog

1.9.2

2021-08-12

MIT

tcmalloc

5940033

2022-08-06

Apache-2.0

upb

e4635f2

2022-06-21

upb

xxHash

0.8.1

2021-11-29

BSD-2-Clause

yaml-cpp

420c982

2022-04-27

cpe:2.3:a:yaml-cpp_project:yaml-cpp:*

MIT

zlib

1.2.12

2022-03-27

cpe:2.3:a:gnu:zlib:*

zlib

zlib-ng

2.0.6

2021-12-24

zlib

API

External dependencies: api

Name

Version

Release date

CPE

License

bazel-skylib

1.3.0

2022-09-01

Apache-2.0

buf

1.7.0

2022-07-27

Apache-2.0

Go rules for Bazel

0.35.0

2022-09-11

Apache-2.0

Google APIs

82944da

2019-12-02

Apache-2.0

OpenCensus Proto

0.3.0

2022-09-22

Apache-2.0

OpenTelemetry Proto

0.19.0

2022-08-03

Apache-2.0

Prometheus client model

147c58e

2021-06-07

Apache-2.0

Protobuf Rules for Bazel

4.0.0

2021-09-15

Apache-2.0

protoc-gen-validate (PGV)

0.6.7

2022-03-04

Apache-2.0

xDS API

1e77728

2022-05-20

Apache-2.0

Zipkin API

1.0.0

2020-11-22

Apache-2.0

Observability (core)

External dependencies: observability_core

Name

Version

Release date

CPE

License

libcircllhist

63a16dd

2019-02-11

Apache-2.0

Observability (extensions)

External dependencies: observability_ext

envoy.filters.http.aws_lambda

Name

Version

Release date

CPE

License

curl

7.85.0

2022-08-31

cpe:2.3:a:haxx:libcurl:*

curl

envoy.filters.http.aws_request_signing

Name

Version

Release date

CPE

License

curl

7.85.0

2022-08-31

cpe:2.3:a:haxx:libcurl:*

curl

envoy.grpc_credentials.aws_iam

Name

Version

Release date

CPE

License

curl

7.85.0

2022-08-31

cpe:2.3:a:haxx:libcurl:*

curl

envoy.tracers.datadog

Name

Version

Release date

CPE

License

Datadog OpenTracing C++ Client

1.2.1

2021-01-27

Apache-2.0

msgpack for C/C++

3.3.0

2020-06-05

Boost

OpenTracing

1.5.1

2019-01-16

Apache-2.0

envoy.tracers.dynamic_ot

Name

Version

Release date

CPE

License

OpenTracing

1.5.1

2019-01-16

Apache-2.0

envoy.tracers.opencensus

Name

Version

Release date

CPE

License

curl

7.85.0

2022-08-31

cpe:2.3:a:haxx:libcurl:*

curl

OpenCensus C++

ba63106

2020-10-08

Apache-2.0

RapidJSON

dfbe1db

2019-12-03

cpe:2.3:a:tencent:rapidjson:*

RapidJSON

envoy.tracers.skywalking

Name

Version

Release date

CPE

License

cpp2sky

0.4.0

2022-03-28

Apache-2.0

skywalking-data-collect-protocol

8.9.1

2021-12-11

cpe:2.3:a:apache:skywalking:*

Apache-2.0

envoy.tracers.zipkin

Name

Version

Release date

CPE

License

RapidJSON

dfbe1db

2019-12-03

cpe:2.3:a:tencent:rapidjson:*

RapidJSON

Build

External dependencies: other

Name

Version

Release date

CPE

License

su-exec

212b751

2019-09-18

MIT

tclap

1.2.5

2021-11-01

cpe:2.3:a:tclap_project:tclap:*

MIT

envoy.bootstrap.vcl

Name

Version

Release date

CPE

License

VPP Comms Library

fe6d8a3

2022-03-02

Apache-2.0

envoy.filters.http.sxg

Name

Version

Release date

CPE

License

libsxg

beaa393

2021-07-08

Apache-2.0

Test only

Below we provide the status of the C/C++ dependencies that are only used in tests. Tests also include additional Java, Rust and Python dependencies that are not tracked below.