External dependencies

Below we enumerate the external dependencies that may be linked into the Envoy binary. We exclude dependencies that only are used in CI or developer tooling above.

Data plane (core)

External dependencies: dataplane_core

Name

Version

Release date

CPE

License

Abseil

c8b33b0

2023-05-16

Apache-2.0

BoringSSL

88d7a40

2023-02-14

cpe:2.3:a:google:boringssl:*

Mixed

BoringSSL (FIPS)

fips-20210429

2021-04-29

cpe:2.3:a:google:boringssl:*

c-ares

1.19.1

2023-05-22

cpe:2.3:a:c-ares_project:c-ares:*

c-ares

fmt

9.1.0

2022-08-27

cpe:2.3:a:fmt:fmt:*

fmt

gperftools

2.10

2022-05-31

cpe:2.3:a:gperftools_project:gperftools:*

BSD-3-Clause

gRPC

1.59.4

2024-02-05

cpe:2.3:a:grpc:grpc:*

Apache-2.0

libcircllhist

39f9db7

2019-05-21

Apache-2.0

libevent

62c152d

2020-07-28

cpe:2.3:a:libevent_project:libevent:*

BSD-3-Clause

liburing

2.3

2022-10-26

Nghttp2

1.57.0

2023-10-10

cpe:2.3:a:nghttp2:nghttp2:*

MIT

nlohmann JSON

3.11.2

2022-08-12

cpe:2.3:a:json-for-modern-cpp_project:json-for-modern-cpp:*

MIT

Perfetto

36.1

2023-07-06

Apache-2.0

Protocol Buffers

23.1

2023-05-17

cpe:2.3:a:google:protobuf:*

Protocol Buffers

Protocol Buffers (protoc) linux_aarch_64

23.1

2023-05-17

Protocol Buffers

Protocol Buffers (protoc) linux_x86_64

23.1

2023-05-17

Protocol Buffers

Protocol Buffers (protoc) osx_aarch_64

23.1

2023-05-17

Protocol Buffers

Protocol Buffers (protoc) osx_x86_64

23.1

2023-05-17

Protocol Buffers

Protocol Buffers (protoc) win64

23.1

2023-05-17

Protocol Buffers

QUICHE

ee8e5a9

2023-07-20

BSD-3-Clause

RE2

2023-03-01

2023-03-01

BSD-3-Clause

Rules for using foreign build systems in Bazel

0.9.0

2022-08-02

Apache-2.0

rules_license

0.0.7

2023-06-16

Apache-2.0

spdlog

1.12.0

2023-07-08

MIT

tcmalloc

e33c7bc

2022-10-24

Apache-2.0

utf8_range

d863bc3

2023-05-26

MIT

xxHash

0.8.1

2021-11-29

BSD-2-Clause

yaml-cpp

420c982

2022-04-27

cpe:2.3:a:yaml-cpp_project:yaml-cpp:*

MIT

zlib

1.2.13

2022-10-14

cpe:2.3:a:gnu:zlib:*

zlib

zlib-ng

2.0.7

2023-03-17

zlib

Data plane (extensions)

External dependencies: dataplane_ext

envoy.access_loggers.extension_filters.cel

Name

Version

Release date

CPE

License

Common Expression Language (CEL) C++ library

da0aba7

2023-03-08

FlatBuffers

23.3.3

2023-03-03

cpe:2.3:a:google:flatbuffers:*

Apache-2.0

envoy.access_loggers.wasm

Name

Version

Release date

CPE

License

Common Expression Language (CEL) C++ library

da0aba7

2023-03-08

FlatBuffers

23.3.3

2023-03-03

cpe:2.3:a:google:flatbuffers:*

Apache-2.0

WebAssembly for Proxies (C++ host implementation)

5d76116

2023-06-01

Apache-2.0

WebAssembly for Proxies (C++ SDK)

e30535b

2022-03-15

Apache-2.0

envoy.bootstrap.wasm

Name

Version

Release date

CPE

License

Common Expression Language (CEL) C++ library

da0aba7

2023-03-08

FlatBuffers

23.3.3

2023-03-03

cpe:2.3:a:google:flatbuffers:*

Apache-2.0

WebAssembly for Proxies (C++ host implementation)

5d76116

2023-06-01

Apache-2.0

WebAssembly for Proxies (C++ SDK)

e30535b

2022-03-15

Apache-2.0

envoy.compression.brotli.compressor

Name

Version

Release date

CPE

License

brotli

6d03dfb

2022-10-25

cpe:2.3:a:google:brotli:*

MIT

envoy.compression.brotli.decompressor

Name

Version

Release date

CPE

License

brotli

6d03dfb

2022-10-25

cpe:2.3:a:google:brotli:*

MIT

envoy.compression.zstd.compressor

Name

Version

Release date

CPE

License

zstd

1.5.5

2023-04-04

cpe:2.3:a:facebook:zstandard:*

envoy.compression.zstd.decompressor

Name

Version

Release date

CPE

License

zstd

1.5.5

2023-04-04

cpe:2.3:a:facebook:zstandard:*

envoy.filters.http.aws_lambda

Name

Version

Release date

CPE

License

curl

8.4.0

2023-10-11

cpe:2.3:a:haxx:libcurl:*

curl

envoy.filters.http.aws_request_signing

Name

Version

Release date

CPE

License

curl

8.4.0

2023-10-11

cpe:2.3:a:haxx:libcurl:*

curl

envoy.filters.http.gcp_authn

Name

Version

Release date

CPE

License

jwt_verify_lib

c29ba4b

2022-11-04

Apache-2.0

envoy.filters.http.grpc_field_extraction

Name

Version

Release date

CPE

License

grpc-httpjson-transcoding

ff41eb3

2023-06-07

Apache-2.0

ocp

e965ac0

2023-05-05

Apache-2.0

proto-converter

d77ff30

2023-06-07

Apache-2.0

proto-field-extraction

2dfe275

2023-07-18

Apache-2.0

envoy.filters.http.grpc_json_transcoder

Name

Version

Release date

CPE

License

grpc-httpjson-transcoding

ff41eb3

2023-06-07

Apache-2.0

proto-converter

d77ff30

2023-06-07

Apache-2.0

proto-field-extraction

2dfe275

2023-07-18

Apache-2.0

envoy.filters.http.jwt_authn

Name

Version

Release date

CPE

License

jwt_verify_lib

c29ba4b

2022-11-04

Apache-2.0

envoy.filters.http.language

Name

Version

Release date

CPE

License

ICU Library

72-1

2022-10-18

ICU

envoy.filters.http.lua

Name

Version

Release date

CPE

License

LuaJIT

1c27912

2023-04-16

cpe:2.3:a:luajit:luajit:*

MIT

envoy.filters.http.rbac

Name

Version

Release date

CPE

License

Common Expression Language (CEL) C++ library

da0aba7

2023-03-08

FlatBuffers

23.3.3

2023-03-03

cpe:2.3:a:google:flatbuffers:*

Apache-2.0

envoy.filters.http.wasm

Name

Version

Release date

CPE

License

Common Expression Language (CEL) C++ library

da0aba7

2023-03-08

FlatBuffers

23.3.3

2023-03-03

cpe:2.3:a:google:flatbuffers:*

Apache-2.0

WebAssembly for Proxies (C++ host implementation)

5d76116

2023-06-01

Apache-2.0

WebAssembly for Proxies (C++ SDK)

e30535b

2022-03-15

Apache-2.0

envoy.filters.network.dubbo_proxy

Name

Version

Release date

CPE

License

hessian2-codec

e9bb36e

2022-10-10

Apache-2.0

envoy.filters.network.kafka_broker

Name

Version

Release date

CPE

License

Kafka (source)

3.5.1

2023-07-14

cpe:2.3:a:apache:kafka:*

Apache-2.0

envoy.filters.network.kafka_mesh

Name

Version

Release date

CPE

License

Kafka (C/C++ client)

2.3.0

2023-10-25

librdkafka

Kafka (source)

3.5.1

2023-07-14

cpe:2.3:a:apache:kafka:*

Apache-2.0

envoy.filters.network.mysql_proxy

Name

Version

Release date

CPE

License

C++ SQL Parser Library

3b40ba2

2020-06-10

MIT

envoy.filters.network.postgres_proxy

Name

Version

Release date

CPE

License

C++ SQL Parser Library

3b40ba2

2020-06-10

MIT

envoy.filters.network.rbac

Name

Version

Release date

CPE

License

Common Expression Language (CEL) C++ library

da0aba7

2023-03-08

FlatBuffers

23.3.3

2023-03-03

cpe:2.3:a:google:flatbuffers:*

Apache-2.0

envoy.filters.network.wasm

Name

Version

Release date

CPE

License

Common Expression Language (CEL) C++ library

da0aba7

2023-03-08

FlatBuffers

23.3.3

2023-03-03

cpe:2.3:a:google:flatbuffers:*

Apache-2.0

WebAssembly for Proxies (C++ host implementation)

5d76116

2023-06-01

Apache-2.0

WebAssembly for Proxies (C++ SDK)

e30535b

2022-03-15

Apache-2.0

envoy.formatter.cel

Name

Version

Release date

CPE

License

Common Expression Language (CEL) C++ library

da0aba7

2023-03-08

FlatBuffers

23.3.3

2023-03-03

cpe:2.3:a:google:flatbuffers:*

Apache-2.0

envoy.grpc_credentials.aws_iam

Name

Version

Release date

CPE

License

curl

8.4.0

2023-10-11

cpe:2.3:a:haxx:libcurl:*

curl

envoy.matching.input_matchers.hyperscan

Name

Version

Release date

CPE

License

Boost

1.84.0

2023-12-13

cpe:2.3:a:boost:boost:*

Boost

Colm

2d8ba76

2021-12-28

MIT

Hyperscan

5.4.2

2023-04-19

BSD-3-Clause

Ragel

d4577c9

2021-12-28

MIT

envoy.matching.inputs.cel_data_input

Name

Version

Release date

CPE

License

Common Expression Language (CEL) C++ library

da0aba7

2023-03-08

FlatBuffers

23.3.3

2023-03-03

cpe:2.3:a:google:flatbuffers:*

Apache-2.0

envoy.matching.matchers.cel_matcher

Name

Version

Release date

CPE

License

Common Expression Language (CEL) C++ library

da0aba7

2023-03-08

FlatBuffers

23.3.3

2023-03-03

cpe:2.3:a:google:flatbuffers:*

Apache-2.0

envoy.network.connection_balance.dlb

Name

Version

Release date

CPE

License

Intel Dlb

8.0.0

2022-12-15

envoy.rate_limit_descriptors.expr

Name

Version

Release date

CPE

License

Common Expression Language (CEL) C++ library

da0aba7

2023-03-08

FlatBuffers

23.3.3

2023-03-03

cpe:2.3:a:google:flatbuffers:*

Apache-2.0

envoy.rbac.matchers.upstream_ip_port

Name

Version

Release date

CPE

License

Common Expression Language (CEL) C++ library

da0aba7

2023-03-08

FlatBuffers

23.3.3

2023-03-03

cpe:2.3:a:google:flatbuffers:*

Apache-2.0

envoy.regex_engines.hyperscan

Name

Version

Release date

CPE

License

Boost

1.84.0

2023-12-13

cpe:2.3:a:boost:boost:*

Boost

Colm

2d8ba76

2021-12-28

MIT

Hyperscan

5.4.2

2023-04-19

BSD-3-Clause

Ragel

d4577c9

2021-12-28

MIT

envoy.stat_sinks.wasm

Name

Version

Release date

CPE

License

Common Expression Language (CEL) C++ library

da0aba7

2023-03-08

FlatBuffers

23.3.3

2023-03-03

cpe:2.3:a:google:flatbuffers:*

Apache-2.0

WebAssembly for Proxies (C++ host implementation)

5d76116

2023-06-01

Apache-2.0

WebAssembly for Proxies (C++ SDK)

e30535b

2022-03-15

Apache-2.0

envoy.tls.key_providers.cryptomb

Name

Version

Release date

CPE

License

libipp-crypto

2021.6

2022-08-09

cpe:2.3:a:intel:cryptography_for_intel_integrated_performance_primitives:*

Apache-2.0

envoy.tls.key_providers.qat

Name

Version

Release date

CPE

License

qatlib

23.02.0

2023-02-24

BSD-3-Clause

envoy.tracers.opencensus

Name

Version

Release date

CPE

License

curl

8.4.0

2023-10-11

cpe:2.3:a:haxx:libcurl:*

curl

envoy.wasm.runtime.null

Name

Version

Release date

CPE

License

WebAssembly for Proxies (C++ host implementation)

5d76116

2023-06-01

Apache-2.0

WebAssembly for Proxies (C++ SDK)

e30535b

2022-03-15

Apache-2.0

envoy.wasm.runtime.v8

Name

Version

Release date

CPE

License

Chromium’s trace event headers

521ac34

2022-10-12

V8

10.7.193.13

2022-10-12

cpe:2.3:a:google:v8:*

WebAssembly for Proxies (C++ host implementation)

5d76116

2023-06-01

Apache-2.0

WebAssembly for Proxies (C++ SDK)

e30535b

2022-03-15

Apache-2.0

envoy.wasm.runtime.wamr

Name

Version

Release date

CPE

License

LLVM

12.0.1

2021-07-09

cpe:2.3:a:llvm:*:*

Apache-2.0

WebAssembly for Proxies (C++ host implementation)

5d76116

2023-06-01

Apache-2.0

WebAssembly for Proxies (C++ SDK)

e30535b

2022-03-15

Apache-2.0

Webassembly Micro Runtime

WAMR-1.2.2

2023-05-16

Apache-2.0

envoy.wasm.runtime.wasmtime

Name

Version

Release date

CPE

License

Bazel rust rules

0.27.0

2023-08-31

Apache-2.0

wasm-c-api

c9d3128

2021-01-11

Apache-2.0

wasmtime

9.0.3

2023-05-31

cpe:2.3:a:bytecodealliance:wasmtime:*

Apache-2.0

WebAssembly for Proxies (C++ host implementation)

5d76116

2023-06-01

Apache-2.0

WebAssembly for Proxies (C++ SDK)

e30535b

2022-03-15

Apache-2.0

envoy.wasm.runtime.wavm

Name

Version

Release date

CPE

License

LLVM

12.0.1

2021-07-09

cpe:2.3:a:llvm:*:*

Apache-2.0

WAVM

3f9a150

2022-05-14

cpe:2.3:a:webassembly_virtual_machine_project:webassembly_virtual_machine:*

WebAssembly for Proxies (C++ host implementation)

5d76116

2023-06-01

Apache-2.0

WebAssembly for Proxies (C++ SDK)

e30535b

2022-03-15

Apache-2.0

Control plane

External dependencies: controlplane

Name

Version

Release date

CPE

License

Abseil

c8b33b0

2023-05-16

Apache-2.0

BoringSSL

88d7a40

2023-02-14

cpe:2.3:a:google:boringssl:*

Mixed

BoringSSL (FIPS)

fips-20210429

2021-04-29

cpe:2.3:a:google:boringssl:*

c-ares

1.19.1

2023-05-22

cpe:2.3:a:c-ares_project:c-ares:*

c-ares

fmt

9.1.0

2022-08-27

cpe:2.3:a:fmt:fmt:*

fmt

gperftools

2.10

2022-05-31

cpe:2.3:a:gperftools_project:gperftools:*

BSD-3-Clause

gRPC

1.59.4

2024-02-05

cpe:2.3:a:grpc:grpc:*

Apache-2.0

libcircllhist

39f9db7

2019-05-21

Apache-2.0

libevent

62c152d

2020-07-28

cpe:2.3:a:libevent_project:libevent:*

BSD-3-Clause

liburing

2.3

2022-10-26

Nghttp2

1.57.0

2023-10-10

cpe:2.3:a:nghttp2:nghttp2:*

MIT

nlohmann JSON

3.11.2

2022-08-12

cpe:2.3:a:json-for-modern-cpp_project:json-for-modern-cpp:*

MIT

Perfetto

36.1

2023-07-06

Apache-2.0

Protocol Buffers

23.1

2023-05-17

cpe:2.3:a:google:protobuf:*

Protocol Buffers

Protocol Buffers (protoc) linux_aarch_64

23.1

2023-05-17

Protocol Buffers

Protocol Buffers (protoc) linux_x86_64

23.1

2023-05-17

Protocol Buffers

Protocol Buffers (protoc) osx_aarch_64

23.1

2023-05-17

Protocol Buffers

Protocol Buffers (protoc) osx_x86_64

23.1

2023-05-17

Protocol Buffers

Protocol Buffers (protoc) win64

23.1

2023-05-17

Protocol Buffers

QUICHE

ee8e5a9

2023-07-20

BSD-3-Clause

RE2

2023-03-01

2023-03-01

BSD-3-Clause

Rules for using foreign build systems in Bazel

0.9.0

2022-08-02

Apache-2.0

rules_license

0.0.7

2023-06-16

Apache-2.0

spdlog

1.12.0

2023-07-08

MIT

tcmalloc

e33c7bc

2022-10-24

Apache-2.0

upb

e074c03

2023-07-21

upb

utf8_range

d863bc3

2023-05-26

MIT

xxHash

0.8.1

2021-11-29

BSD-2-Clause

yaml-cpp

420c982

2022-04-27

cpe:2.3:a:yaml-cpp_project:yaml-cpp:*

MIT

zlib

1.2.13

2022-10-14

cpe:2.3:a:gnu:zlib:*

zlib

zlib-ng

2.0.7

2023-03-17

zlib

API

External dependencies: api

Name

Version

Release date

CPE

License

bazel-skylib

1.4.2

2023-05-31

Apache-2.0

buf

1.23.1

2023-06-30

Apache-2.0

Go rules for Bazel

0.39.1

2023-04-20

Apache-2.0

Google APIs

114a745

2023-01-10

Apache-2.0

OpenCensus Proto

0.4.1

2022-09-23

Apache-2.0

OpenTelemetry Proto

1.0.0

2023-07-03

Apache-2.0

Prometheus client model

0.4.0

2023-05-03

Apache-2.0

Protobuf Rules for Bazel

4.0.0

2021-09-15

Apache-2.0

protoc-gen-validate (PGV)

1.0.1

2023-05-09

Apache-2.0

xDS API

e9ce688

2023-06-07

Apache-2.0

Zipkin API

1.0.0

2020-11-22

Apache-2.0

Observability (core)

External dependencies: observability_core

Name

Version

Release date

CPE

License

libcircllhist

39f9db7

2019-05-21

Apache-2.0

Observability (extensions)

External dependencies: observability_ext

envoy.filters.http.aws_lambda

Name

Version

Release date

CPE

License

curl

8.4.0

2023-10-11

cpe:2.3:a:haxx:libcurl:*

curl

envoy.filters.http.aws_request_signing

Name

Version

Release date

CPE

License

curl

8.4.0

2023-10-11

cpe:2.3:a:haxx:libcurl:*

curl

envoy.grpc_credentials.aws_iam

Name

Version

Release date

CPE

License

curl

8.4.0

2023-10-11

cpe:2.3:a:haxx:libcurl:*

curl

envoy.tracers.datadog

Name

Version

Release date

CPE

License

Datadog C++ Tracing Library

0.1.8

2023-03-31

Apache-2.0

OpenTracing

1.5.1

2019-01-16

Apache-2.0

envoy.tracers.dynamic_ot

Name

Version

Release date

CPE

License

OpenTracing

1.5.1

2019-01-16

Apache-2.0

envoy.tracers.opencensus

Name

Version

Release date

CPE

License

curl

8.4.0

2023-10-11

cpe:2.3:a:haxx:libcurl:*

curl

OpenCensus C++

f68a2d0

2022-09-20

Apache-2.0

RapidJSON

dfbe1db

2019-12-03

cpe:2.3:a:tencent:rapidjson:*

RapidJSON

envoy.tracers.skywalking

Name

Version

Release date

CPE

License

cpp2sky

0.4.0

2022-03-28

Apache-2.0

skywalking-data-collect-protocol

8.9.1

2021-12-11

cpe:2.3:a:apache:skywalking:*

Apache-2.0

envoy.tracers.zipkin

Name

Version

Release date

CPE

License

RapidJSON

dfbe1db

2019-12-03

cpe:2.3:a:tencent:rapidjson:*

RapidJSON

Build

External dependencies: build

Name

Version

Release date

CPE

License

Apple Rules for Bazel

2.4.1

2023-07-07

Apache-2.0

Aspect Bazel helpers

1.33.0

2023-07-21

Apache-2.0

bazel-compilation-database

4086479

2022-09-06

Apache-2.0

bazel-toolchains

5.1.2

2022-08-09

Apache-2.0

envoy-build-tools

f727ec1

2023-10-16

Apache-2.0

envoy_toolshed

0.1.1

2023-10-21

Apache-2.0

Gazelle

0.31.1

2023-06-13

Apache-2.0

Go rules for Bazel

0.39.1

2023-04-20

Apache-2.0

Packaging rules for Bazel

0.7.0

2022-04-07

Apache-2.0

protoc-gen-jsonschema

7680e49

2023-05-30

Python rules for Bazel

0.24.0

2023-07-11

Apache-2.0

Ruby rules for Bazel

37cf590

2023-01-12

Apache-2.0

Rules for using foreign build systems in Bazel

0.9.0

2022-08-02

Apache-2.0

rules_license

0.0.7

2023-06-16

Apache-2.0

Shellcheck rules for bazel

0.1.1

2022-05-30

MIT

utf8_range

d863bc3

2023-05-26

MIT

Miscellaneous

External dependencies: other

Name

Version

Release date

CPE

License

su-exec

212b751

2019-09-18

MIT

tclap

1.2.5

2021-11-01

cpe:2.3:a:tclap_project:tclap:*

MIT

envoy.bootstrap.vcl

Name

Version

Release date

CPE

License

VPP Comms Library

fe6d8a3

2022-03-02

Apache-2.0

envoy.filters.http.sxg

Name

Version

Release date

CPE

License

libsxg

beaa393

2021-07-08

Apache-2.0

Test only

Below we provide the status of the C/C++ dependencies that are only used in tests. Tests also include additional Java, Rust and Python dependencies that are not tracked below.

External dependencies: test_only

Name

Version

Release date

CPE

License

Bazel build tools

6.3.3

2023-08-25

Benchmark

1.7.0

2022-07-25

Apache-2.0

compiler-rt

14.0.0

2022-03-23

cpe:2.3:a:llvm:compiler-rt:*

Apache-2.0

Emscripten SDK

0ea8f8a

2022-03-09

Emscripten SDK

Fuzzing Rules for Bazel

0.3.2

2022-08-31

Apache-2.0

Google Test

a4ab0ab

2020-09-10

cpe:2.3:a:google:google_test:*

BSD-3-Clause

Kafka (Python client)

2.0.2

2020-09-30

Apache-2.0

Kafka (server binary)

3.5.1

2023-07-21

libprotobuf-mutator

3b28530

2023-04-25

Apache-2.0

WebAssembly for Proxies (Rust SDK)

0.2.1

2022-11-22

Apache-2.0