What is this?
Envoy is a cloud-native, high-performance proxy for edge, middle, and service-to-service traffic. It is an open-source project hosted by the CNCF.
Envoy is a cloud-native, high-performance proxy for edge, middle, and service-to-service traffic. It is an open-source project hosted by the CNCF.Is Envoy a library I add to my code, or something I deploy on its own?It is a standalone proxy you deploy in front of or alongside your services — not a library you import. You configure it and route traffic through it.
It is a standalone proxy you deploy in front of or alongside your services — not a library you import. You configure it and route traffic through it.How do I get Envoy running?The README itself gives no install steps — it points to the official documentation for that. If you want to build from source, builds and tests run through a Docker-based quick start.
The README itself gives no install steps — it points to the official documentation for that. If you want to build from source, builds and tests run through a Docker-based quick start.Is it all C++, or are other languages involved too?The core is modern C++, though the repository also contains Go and Rust code. The contributing guide says you do not need prior C++ experience to get involved.
The core is modern C++, though the repository also contains Go and Rust code. The contributing guide says you do not need prior C++ experience to get involved.Are there any platform gaps I should know about?Yes — builds for the ppc64le (PowerPC) architecture are best-effort and not covered by the Envoy security policy, so the core maintainers do not support them.
Yes — builds for the ppc64le (PowerPC) architecture are best-effort and not covered by the Envoy security policy, so the core maintainers do not support them.Has Envoy been independently security audited?Yes — Cure53 performed a security audit in 2018, and Ada Logics audited the fuzzing infrastructure in 2021. The project also runs continuous OSS fuzzing and sends security announcements through a dedicated mailing list.
Yes — Cure53 performed a security audit in 2018, and Ada Logics audited the fuzzing infrastructure in 2021. The project also runs continuous OSS fuzzing and sends security announcements through a dedicated mailing list.What other repositories are part of the Envoy project?Three are listed in the README: data-plane-api (the v2 API definitions, a read-only mirror), envoy-perf (a performance testing framework), and envoy-filter-example (how to add new filters and link them to the main repo).
Three are listed in the README: data-plane-api (the v2 API definitions, a read-only mirror), envoy-perf (a performance testing framework), and envoy-filter-example (how to add new filters and link them to the main repo).Why do the repo topics mention cats, corgis, and rocket ships?They are tongue-in-cheek placeholders — cars, cats, cats-over-dogs, corgis, more-cats, nanoservices, rocket-ships. The maintainers clearly had fun with the topic list; none of them describe the technology.
They are tongue-in-cheek placeholders — cars, cats, cats-over-dogs, corgis, more-cats, nanoservices, rocket-ships. The maintainers clearly had fun with the topic list; none of them describe the technology.What are similar projects?linkerd2, WasmEdge, cilium, istio, ingress-nginx, pingora, jaeger, cert-manager
linkerd2, WasmEdge, cilium, istio, ingress-nginx, pingora, jaeger, cert-managerWhich topics is it in?service-mesh, cncf, infrastructure, reverse-proxy, microservices, observability, cpp, proxy, c++, cloud, networking, performance
service-mesh, cncf, infrastructure, reverse-proxy, microservices, observability, cpp, proxy, c++, cloud, networking, performance