External dependencies

Below we enumerate the external dependencies that may be linked into the Envoy binary. We exclude dependencies that only are used in CI or developer tooling above.

Data plane (core)

External dependencies: dataplane_core

Name

Version

Release date

CPE

License

Abseil

20230802.1

2023-09-18

Apache-2.0

BoringSSL

45cf810

2023-08-28

cpe:2.3:a:google:boringssl:*

Mixed

BoringSSL (FIPS)

fips-20210429

2021-04-29

cpe:2.3:a:google:boringssl:*

c-ares

1.19.1

2023-05-22

cpe:2.3:a:c-ares_project:c-ares:*

c-ares

fmt

9.1.0

2022-08-27

cpe:2.3:a:fmt:fmt:*

fmt

gperftools

2.10

2022-05-31

cpe:2.3:a:gperftools_project:gperftools:*

BSD-3-Clause

gRPC

1.59.4

2024-02-05

cpe:2.3:a:grpc:grpc:*

Apache-2.0

libcircllhist

39f9db7

2019-05-21

Apache-2.0

libevent

62c152d

2020-07-28

cpe:2.3:a:libevent_project:libevent:*

BSD-3-Clause

liburing

2.3

2022-10-26

Nghttp2

1.61.0

2024-04-04

cpe:2.3:a:nghttp2:nghttp2:*

MIT

nlohmann JSON

3.11.3

2023-11-28

cpe:2.3:a:json-for-modern-cpp_project:json-for-modern-cpp:*

MIT

Perfetto

40.0

2023-12-05

Apache-2.0

Protocol Buffers

23.4

2023-07-06

cpe:2.3:a:google:protobuf:*

Protocol Buffers

Protocol Buffers (protoc) linux_aarch_64

23.4

2023-07-06

Protocol Buffers

Protocol Buffers (protoc) linux_x86_64

23.4

2023-07-06

Protocol Buffers

Protocol Buffers (protoc) osx_aarch_64

23.4

2023-07-06

Protocol Buffers

Protocol Buffers (protoc) osx_x86_64

23.4

2023-07-06

Protocol Buffers

Protocol Buffers (protoc) win64

23.4

2023-07-06

Protocol Buffers

QUICHE

9e87593

2024-02-15

BSD-3-Clause

RE2

2023-11-01

2023-10-31

BSD-3-Clause

Rules for using foreign build systems in Bazel

0.9.0

2022-08-02

Apache-2.0

rules_license

0.0.7

2023-06-16

Apache-2.0

spdlog

1.12.0

2023-07-08

MIT

tcmalloc

e33c7bc

2022-10-24

Apache-2.0

utf8_range

d863bc3

2023-05-26

MIT

xxHash

0.8.2

2023-07-21

BSD-2-Clause

yaml-cpp

0.8.0

2023-08-10

cpe:2.3:a:yaml-cpp_project:yaml-cpp:*

MIT

zlib

1.2.13

2022-10-14

cpe:2.3:a:gnu:zlib:*

zlib

zlib-ng

2.0.7

2023-03-17

zlib

envoy.wasm.runtime.wasmtime

Name

Version

Release date

CPE

License

Bazel rust rules

0.35.0

2023-12-27

Apache-2.0

Data plane (extensions)

External dependencies: dataplane_ext

envoy.access_loggers.extension_filters.cel

Name

Version

Release date

CPE

License

Common Expression Language (CEL) C++ library

0abd738

2023-12-20

FlatBuffers

23.3.3

2023-03-03

cpe:2.3:a:google:flatbuffers:*

Apache-2.0

envoy.access_loggers.wasm

Name

Version

Release date

CPE

License

Common Expression Language (CEL) C++ library

0abd738

2023-12-20

FlatBuffers

23.3.3

2023-03-03

cpe:2.3:a:google:flatbuffers:*

Apache-2.0

WebAssembly for Proxies (C++ host implementation)

e200fee

2023-12-19

Apache-2.0

WebAssembly for Proxies (C++ SDK)

921039a

2023-05-01

Apache-2.0

envoy.bootstrap.wasm

Name

Version

Release date

CPE

License

Common Expression Language (CEL) C++ library

0abd738

2023-12-20

FlatBuffers

23.3.3

2023-03-03

cpe:2.3:a:google:flatbuffers:*

Apache-2.0

WebAssembly for Proxies (C++ host implementation)

e200fee

2023-12-19

Apache-2.0

WebAssembly for Proxies (C++ SDK)

921039a

2023-05-01

Apache-2.0

envoy.compression.brotli.compressor

Name

Version

Release date

CPE

License

brotli

1.1.0

2023-08-31

cpe:2.3:a:google:brotli:*

MIT

envoy.compression.brotli.decompressor

Name

Version

Release date

CPE

License

brotli

1.1.0

2023-08-31

cpe:2.3:a:google:brotli:*

MIT

envoy.compression.qatzip.compressor

Name

Version

Release date

CPE

License

LZ4

1.9.4

2022-08-15

qatlib

23.11.0

2023-11-15

BSD-3-Clause

qatzip

1.1.2

2023-03-24

BSD-3-Clause

envoy.compression.zstd.compressor

Name

Version

Release date

CPE

License

zstd

1.5.5

2023-04-04

cpe:2.3:a:facebook:zstandard:*

envoy.compression.zstd.decompressor

Name

Version

Release date

CPE

License

zstd

1.5.5

2023-04-04

cpe:2.3:a:facebook:zstandard:*

envoy.filters.http.aws_lambda

Name

Version

Release date

CPE

License

curl

8.4.0

2023-10-11

cpe:2.3:a:haxx:libcurl:*

curl

envoy.filters.http.aws_request_signing

Name

Version

Release date

CPE

License

curl

8.4.0

2023-10-11

cpe:2.3:a:haxx:libcurl:*

curl

envoy.filters.http.gcp_authn

Name

Version

Release date

CPE

License

jwt_verify_lib

b59e807

2023-05-17

Apache-2.0

envoy.filters.http.grpc_field_extraction

Name

Version

Release date

CPE

License

grpc-httpjson-transcoding

ff41eb3

2023-06-07

Apache-2.0

ocp

e965ac0

2023-05-05

Apache-2.0

proto-converter

d77ff30

2023-06-07

Apache-2.0

proto-field-extraction

2dfe275

2023-07-18

Apache-2.0

envoy.filters.http.grpc_json_transcoder

Name

Version

Release date

CPE

License

grpc-httpjson-transcoding

ff41eb3

2023-06-07

Apache-2.0

proto-converter

d77ff30

2023-06-07

Apache-2.0

proto-field-extraction

2dfe275

2023-07-18

Apache-2.0

envoy.filters.http.jwt_authn

Name

Version

Release date

CPE

License

jwt_verify_lib

b59e807

2023-05-17

Apache-2.0

envoy.filters.http.language

Name

Version

Release date

CPE

License

ICU Library

72-1

2022-10-18

ICU

envoy.filters.http.lua

Name

Version

Release date

CPE

License

LuaJIT

1c27912

2023-04-16

cpe:2.3:a:luajit:luajit:*

MIT

envoy.filters.http.rate_limit_quota

Name

Version

Release date

CPE

License

Common Expression Language (CEL) C++ library

0abd738

2023-12-20

FlatBuffers

23.3.3

2023-03-03

cpe:2.3:a:google:flatbuffers:*

Apache-2.0

envoy.filters.http.rbac

Name

Version

Release date

CPE

License

Common Expression Language (CEL) C++ library

0abd738

2023-12-20

FlatBuffers

23.3.3

2023-03-03

cpe:2.3:a:google:flatbuffers:*

Apache-2.0

envoy.filters.http.wasm

Name

Version

Release date

CPE

License

Common Expression Language (CEL) C++ library

0abd738

2023-12-20

FlatBuffers

23.3.3

2023-03-03

cpe:2.3:a:google:flatbuffers:*

Apache-2.0

WebAssembly for Proxies (C++ host implementation)

e200fee

2023-12-19

Apache-2.0

WebAssembly for Proxies (C++ SDK)

921039a

2023-05-01

Apache-2.0

envoy.filters.network.dubbo_proxy

Name

Version

Release date

CPE

License

hessian2-codec

e9bb36e

2022-10-10

Apache-2.0

envoy.filters.network.kafka_broker

Name

Version

Release date

CPE

License

Kafka (source)

3.5.1

2023-07-14

cpe:2.3:a:apache:kafka:*

Apache-2.0

envoy.filters.network.kafka_mesh

Name

Version

Release date

CPE

License

Kafka (C/C++ client)

2.3.0

2023-10-25

librdkafka

Kafka (source)

3.5.1

2023-07-14

cpe:2.3:a:apache:kafka:*

Apache-2.0

envoy.filters.network.mysql_proxy

Name

Version

Release date

CPE

License

C++ SQL Parser Library

3b40ba2

2020-06-10

MIT

envoy.filters.network.postgres_proxy

Name

Version

Release date

CPE

License

C++ SQL Parser Library

3b40ba2

2020-06-10

MIT

envoy.filters.network.rbac

Name

Version

Release date

CPE

License

Common Expression Language (CEL) C++ library

0abd738

2023-12-20

FlatBuffers

23.3.3

2023-03-03

cpe:2.3:a:google:flatbuffers:*

Apache-2.0

envoy.filters.network.wasm

Name

Version

Release date

CPE

License

Common Expression Language (CEL) C++ library

0abd738

2023-12-20

FlatBuffers

23.3.3

2023-03-03

cpe:2.3:a:google:flatbuffers:*

Apache-2.0

WebAssembly for Proxies (C++ host implementation)

e200fee

2023-12-19

Apache-2.0

WebAssembly for Proxies (C++ SDK)

921039a

2023-05-01

Apache-2.0

envoy.formatter.cel

Name

Version

Release date

CPE

License

Common Expression Language (CEL) C++ library

0abd738

2023-12-20

FlatBuffers

23.3.3

2023-03-03

cpe:2.3:a:google:flatbuffers:*

Apache-2.0

envoy.geoip_providers.maxmind

Name

Version

Release date

CPE

License

maxmind_libmaxminddb

1.8.0

2023-11-07

cpe:2.3:a:maxmind:libmaxminddb:*

Apache-2.0

envoy.grpc_credentials.aws_iam

Name

Version

Release date

CPE

License

curl

8.4.0

2023-10-11

cpe:2.3:a:haxx:libcurl:*

curl

envoy.matching.input_matchers.hyperscan

Name

Version

Release date

CPE

License

Boost

1.84.0

2023-12-13

cpe:2.3:a:boost:boost:*

Boost

Colm

2d8ba76

2021-12-28

MIT

Hyperscan

5.4.2

2023-04-19

BSD-3-Clause

Ragel

d4577c9

2021-12-28

MIT

Vectorscan

5.4.11

2023-11-20

BSD-3-Clause

envoy.matching.inputs.cel_data_input

Name

Version

Release date

CPE

License

Common Expression Language (CEL) C++ library

0abd738

2023-12-20

FlatBuffers

23.3.3

2023-03-03

cpe:2.3:a:google:flatbuffers:*

Apache-2.0

envoy.matching.matchers.cel_matcher

Name

Version

Release date

CPE

License

Common Expression Language (CEL) C++ library

0abd738

2023-12-20

FlatBuffers

23.3.3

2023-03-03

cpe:2.3:a:google:flatbuffers:*

Apache-2.0

envoy.network.connection_balance.dlb

Name

Version

Release date

CPE

License

Intel Dlb

8.0.0

2022-12-15

envoy.rate_limit_descriptors.expr

Name

Version

Release date

CPE

License

Common Expression Language (CEL) C++ library

0abd738

2023-12-20

FlatBuffers

23.3.3

2023-03-03

cpe:2.3:a:google:flatbuffers:*

Apache-2.0

envoy.rbac.matchers.upstream_ip_port

Name

Version

Release date

CPE

License

Common Expression Language (CEL) C++ library

0abd738

2023-12-20

FlatBuffers

23.3.3

2023-03-03

cpe:2.3:a:google:flatbuffers:*

Apache-2.0

envoy.regex_engines.hyperscan

Name

Version

Release date

CPE

License

Boost

1.84.0

2023-12-13

cpe:2.3:a:boost:boost:*

Boost

Colm

2d8ba76

2021-12-28

MIT

Hyperscan

5.4.2

2023-04-19

BSD-3-Clause

Ragel

d4577c9

2021-12-28

MIT

Vectorscan

5.4.11

2023-11-20

BSD-3-Clause

envoy.router.cluster_specifier_plugin.lua

Name

Version

Release date

CPE

License

LuaJIT

1c27912

2023-04-16

cpe:2.3:a:luajit:luajit:*

MIT

envoy.stat_sinks.wasm

Name

Version

Release date

CPE

License

Common Expression Language (CEL) C++ library

0abd738

2023-12-20

FlatBuffers

23.3.3

2023-03-03

cpe:2.3:a:google:flatbuffers:*

Apache-2.0

WebAssembly for Proxies (C++ host implementation)

e200fee

2023-12-19

Apache-2.0

WebAssembly for Proxies (C++ SDK)

921039a

2023-05-01

Apache-2.0

envoy.tls.key_providers.cryptomb

Name

Version

Release date

CPE

License

libipp-crypto

2021.6

2022-08-09

cpe:2.3:a:intel:cryptography_for_intel_integrated_performance_primitives:*

Apache-2.0

envoy.tls.key_providers.qat

Name

Version

Release date

CPE

License

qatlib

23.11.0

2023-11-15

BSD-3-Clause

envoy.tracers.opencensus

Name

Version

Release date

CPE

License

curl

8.4.0

2023-10-11

cpe:2.3:a:haxx:libcurl:*

curl

envoy.transport_sockets.alts

Name

Version

Release date

CPE

License

Protobuf and gRPC rules for Bazel

4.6.0

2023-12-14

Apache-2.0

envoy.wasm.runtime.null

Name

Version

Release date

CPE

License

WebAssembly for Proxies (C++ host implementation)

e200fee

2023-12-19

Apache-2.0

WebAssembly for Proxies (C++ SDK)

921039a

2023-05-01

Apache-2.0

envoy.wasm.runtime.v8

Name

Version

Release date

CPE

License

Chromium’s trace event headers

521ac34

2022-10-12

V8

10.7.193.13

2022-10-12

cpe:2.3:a:google:v8:*

WebAssembly for Proxies (C++ host implementation)

e200fee

2023-12-19

Apache-2.0

WebAssembly for Proxies (C++ SDK)

921039a

2023-05-01

Apache-2.0

envoy.wasm.runtime.wamr

Name

Version

Release date

CPE

License

LLVM

12.0.1

2021-07-09

cpe:2.3:a:llvm:*:*

Apache-2.0

WebAssembly for Proxies (C++ host implementation)

e200fee

2023-12-19

Apache-2.0

WebAssembly for Proxies (C++ SDK)

921039a

2023-05-01

Apache-2.0

Webassembly Micro Runtime

WAMR-1.2.2

2023-05-16

Apache-2.0

envoy.wasm.runtime.wasmtime

Name

Version

Release date

CPE

License

Bazel rust rules

0.35.0

2023-12-27

Apache-2.0

wasm-c-api

c9d3128

2021-01-11

Apache-2.0

wasmtime

9.0.3

2023-05-31

cpe:2.3:a:bytecodealliance:wasmtime:*

Apache-2.0

WebAssembly for Proxies (C++ host implementation)

e200fee

2023-12-19

Apache-2.0

WebAssembly for Proxies (C++ SDK)

921039a

2023-05-01

Apache-2.0

envoy.wasm.runtime.wavm

Name

Version

Release date

CPE

License

LLVM

12.0.1

2021-07-09

cpe:2.3:a:llvm:*:*

Apache-2.0

WAVM

3f9a150

2022-05-14

cpe:2.3:a:webassembly_virtual_machine_project:webassembly_virtual_machine:*

WebAssembly for Proxies (C++ host implementation)

e200fee

2023-12-19

Apache-2.0

WebAssembly for Proxies (C++ SDK)

921039a

2023-05-01

Apache-2.0

Control plane

External dependencies: controlplane

Name

Version

Release date

CPE

License

Abseil

20230802.1

2023-09-18

Apache-2.0

BoringSSL

45cf810

2023-08-28

cpe:2.3:a:google:boringssl:*

Mixed

BoringSSL (FIPS)

fips-20210429

2021-04-29

cpe:2.3:a:google:boringssl:*

c-ares

1.19.1

2023-05-22

cpe:2.3:a:c-ares_project:c-ares:*

c-ares

fmt

9.1.0

2022-08-27

cpe:2.3:a:fmt:fmt:*

fmt

gperftools

2.10

2022-05-31

cpe:2.3:a:gperftools_project:gperftools:*

BSD-3-Clause

gRPC

1.59.4

2024-02-05

cpe:2.3:a:grpc:grpc:*

Apache-2.0

libcircllhist

39f9db7

2019-05-21

Apache-2.0

libevent

62c152d

2020-07-28

cpe:2.3:a:libevent_project:libevent:*

BSD-3-Clause

liburing

2.3

2022-10-26

Nghttp2

1.61.0

2024-04-04

cpe:2.3:a:nghttp2:nghttp2:*

MIT

nlohmann JSON

3.11.3

2023-11-28

cpe:2.3:a:json-for-modern-cpp_project:json-for-modern-cpp:*

MIT

Perfetto

40.0

2023-12-05

Apache-2.0

Protocol Buffers

23.4

2023-07-06

cpe:2.3:a:google:protobuf:*

Protocol Buffers

Protocol Buffers (protoc) linux_aarch_64

23.4

2023-07-06

Protocol Buffers

Protocol Buffers (protoc) linux_x86_64

23.4

2023-07-06

Protocol Buffers

Protocol Buffers (protoc) osx_aarch_64

23.4

2023-07-06

Protocol Buffers

Protocol Buffers (protoc) osx_x86_64

23.4

2023-07-06

Protocol Buffers

Protocol Buffers (protoc) win64

23.4

2023-07-06

Protocol Buffers

QUICHE

9e87593

2024-02-15

BSD-3-Clause

RE2

2023-11-01

2023-10-31

BSD-3-Clause

Rules for using foreign build systems in Bazel

0.9.0

2022-08-02

Apache-2.0

rules_license

0.0.7

2023-06-16

Apache-2.0

spdlog

1.12.0

2023-07-08

MIT

tcmalloc

e33c7bc

2022-10-24

Apache-2.0

upb

e074c03

2023-07-21

upb

utf8_range

d863bc3

2023-05-26

MIT

xxHash

0.8.2

2023-07-21

BSD-2-Clause

yaml-cpp

0.8.0

2023-08-10

cpe:2.3:a:yaml-cpp_project:yaml-cpp:*

MIT

zlib

1.2.13

2022-10-14

cpe:2.3:a:gnu:zlib:*

zlib

zlib-ng

2.0.7

2023-03-17

zlib

envoy.wasm.runtime.wasmtime

Name

Version

Release date

CPE

License

Bazel rust rules

0.35.0

2023-12-27

Apache-2.0

API

External dependencies: api

Name

Version

Release date

CPE

License

bazel-skylib

1.5.0

2023-11-06

Apache-2.0

buf

1.28.1

2023-11-15

Apache-2.0

Go rules for Bazel

0.39.1

2023-04-20

Apache-2.0

Google APIs

114a745

2023-01-10

Apache-2.0

OpenCensus Proto

0.4.1

2022-09-23

Apache-2.0

OpenTelemetry Proto

1.0.0

2023-07-03

Apache-2.0

Prometheus client model

0.5.0

2023-10-03

Apache-2.0

Protobuf Rules for Bazel

4.0.0

2021-09-15

Apache-2.0

protoc-gen-validate (PGV)

1.0.2

2023-06-26

Apache-2.0

xDS API

3a472e5

2023-11-16

Apache-2.0

Zipkin API

1.0.0

2020-11-22

Apache-2.0

Observability (core)

External dependencies: observability_core

Name

Version

Release date

CPE

License

libcircllhist

39f9db7

2019-05-21

Apache-2.0

Observability (extensions)

External dependencies: observability_ext

envoy.filters.http.aws_lambda

Name

Version

Release date

CPE

License

curl

8.4.0

2023-10-11

cpe:2.3:a:haxx:libcurl:*

curl

envoy.filters.http.aws_request_signing

Name

Version

Release date

CPE

License

curl

8.4.0

2023-10-11

cpe:2.3:a:haxx:libcurl:*

curl

envoy.grpc_credentials.aws_iam

Name

Version

Release date

CPE

License

curl

8.4.0

2023-10-11

cpe:2.3:a:haxx:libcurl:*

curl

envoy.tracers.datadog

Name

Version

Release date

CPE

License

Datadog C++ Tracing Library

0.2.2

2024-06-21

Apache-2.0

OpenTracing

1.5.1

2019-01-16

Apache-2.0

envoy.tracers.dynamic_ot

Name

Version

Release date

CPE

License

OpenTracing

1.5.1

2019-01-16

Apache-2.0

envoy.tracers.opencensus

Name

Version

Release date

CPE

License

curl

8.4.0

2023-10-11

cpe:2.3:a:haxx:libcurl:*

curl

OpenCensus C++

f68a2d0

2022-09-20

Apache-2.0

RapidJSON

dfbe1db

2019-12-03

cpe:2.3:a:tencent:rapidjson:*

RapidJSON

envoy.tracers.skywalking

Name

Version

Release date

CPE

License

cpp2sky

0.4.0

2022-03-28

Apache-2.0

skywalking-data-collect-protocol

8.9.1

2021-12-11

cpe:2.3:a:apache:skywalking:*

Apache-2.0

envoy.tracers.zipkin

Name

Version

Release date

CPE

License

RapidJSON

dfbe1db

2019-12-03

cpe:2.3:a:tencent:rapidjson:*

RapidJSON

Build

External dependencies: build

Name

Version

Release date

CPE

License

Apple Rules for Bazel

3.1.1

2023-10-19

Apache-2.0

Aspect Bazel helpers

2.2.0

2024-01-08

Apache-2.0

bazel-compilation-database

4086479

2022-09-06

Apache-2.0

bazel-toolchains

5.1.2

2022-08-09

Apache-2.0

envoy-build-tools

7cd964f

2024-01-08

Apache-2.0

envoy_toolshed

0.1.3

2024-04-16

Apache-2.0

Gazelle

0.31.1

2023-06-13

Apache-2.0

Go rules for Bazel

0.39.1

2023-04-20

Apache-2.0

Packaging rules for Bazel

0.7.0

2022-04-07

Apache-2.0

protoc-gen-jsonschema

7680e49

2023-05-30

Python rules for Bazel

0.28.0

2024-01-08

Apache-2.0

Ruby rules for Bazel

37cf590

2023-01-12

Apache-2.0

Rules for using foreign build systems in Bazel

0.9.0

2022-08-02

Apache-2.0

rules_license

0.0.7

2023-06-16

Apache-2.0

Shellcheck rules for bazel

0.2.4

2023-10-27

MIT

utf8_range

d863bc3

2023-05-26

MIT

Miscellaneous

External dependencies: other

Name

Version

Release date

CPE

License

su-exec

212b751

2019-09-18

MIT

tclap

1.2.5

2021-11-01

cpe:2.3:a:tclap_project:tclap:*

MIT

envoy.bootstrap.vcl

Name

Version

Release date

CPE

License

VPP Comms Library

493b899

2023-06-28

Apache-2.0

envoy.filters.http.sxg

Name

Version

Release date

CPE

License

libsxg

beaa393

2021-07-08

Apache-2.0

Test only

Below we provide the status of the C/C++ dependencies that are only used in tests. Tests also include additional Java, Rust and Python dependencies that are not tracked below.

External dependencies: test_only

Name

Version

Release date

CPE

License

Bazel build tools

6.4.0

2023-11-15

Benchmark

1.8.3

2023-08-31

Apache-2.0

compiler-rt

14.0.0

2022-03-23

cpe:2.3:a:llvm:compiler-rt:*

Apache-2.0

Emscripten SDK

0ea8f8a

2022-03-09

Emscripten SDK

Fuzzing Rules for Bazel

0.4.1

2023-10-19

Apache-2.0

Google Test

a4ab0ab

2020-09-10

cpe:2.3:a:google:google_test:*

BSD-3-Clause

Kafka (Python client)

2.0.2

2020-09-30

Apache-2.0

Kafka (server binary)

3.5.1

2023-07-21

libpfm

4.11.0

2020-09-03

libprotobuf-mutator

3b28530

2023-04-25

Apache-2.0

WebAssembly for Proxies (Rust SDK)

0.2.1

2022-11-22

Apache-2.0