Envoy OpenSSL Extensions

The Envoy OpenSSL Extensions project hosts extensions for building Envoy purely with OpenSSL.

OpenSSL is supported by providing a compatiblity library and a set of TLS related classes that track upstream functionality using OpenSSL rather than BoringSSL.

Documentation

• Analysis

Repository Structure

Compatiblity Library

Classes

Extensions

Building

After initial checkout, initialize and update submodules for Envoy and BoringSSL:

git submodule update --init --depth=1

For a standalone build of the bssl-compat library, see bssl-compat README.

For a full build of envoy on the bssl-compat library, start by running the run-build-container.sh script:

./run-build-container.sh

This script pulls the upstream envoy builder image (which may take some time) and then runs an interactive bash prompt.

Then, to build envoy simply run the following:

bazel build @envoy//:envoy

Testing

License

The Envoy OpenSSL Extensions project is governed by the Apache License, Version 2.0. See the LICENSE file for the full license text.

More info

• team meetings