diff --git a/WORKSPACE b/WORKSPACE
index 20ee70b120f2..3bd9feb32450 100644
--- a/WORKSPACE
+++ b/WORKSPACE
@@ -15,15 +15,32 @@
 ################################################################################
 #
 
-load("//contrib/endpoints:repositories.bzl",
-    "protobuf_repositories",
-    "grpc_repositories",
+load(
+    "//:repositories.bzl",
     "boringssl_repositories",
-    "servicecontrol_client_repositories",
-    "googletest_repositories")
+    "protobuf_repositories",
+    "googletest_repositories",
+)
 
 boringssl_repositories()
+
 protobuf_repositories()
+
+googletest_repositories()
+
+load(
+    "//contrib/endpoints:repositories.bzl",
+    "grpc_repositories",
+    "servicecontrol_client_repositories",
+)
+
 grpc_repositories()
+
 servicecontrol_client_repositories()
-googletest_repositories()
+
+load(
+    "//src/envoy:repositories.bzl",
+    "envoy_repositories",
+)
+
+envoy_repositories()
diff --git a/contrib/endpoints/repositories.bzl b/contrib/endpoints/repositories.bzl
index dd78050ce81d..a14d7ce4dfda 100644
--- a/contrib/endpoints/repositories.bzl
+++ b/contrib/endpoints/repositories.bzl
@@ -14,62 +14,6 @@
 #
 ################################################################################
 #
-def boringssl_repositories(bind=True):
-    native.git_repository(
-        name = "boringssl",
-        commit = "12c35d69008ae6b8486e435447445240509f7662",  # 2016-10-24
-        remote = "https://boringssl.googlesource.com/boringssl",
-    )
-
-    if bind:
-        native.bind(
-            name = "boringssl_crypto",
-            actual = "@boringssl//:crypto",
-        )
-
-        native.bind(
-            name = "libssl",
-            actual = "@boringssl//:ssl",
-        )
-
-def protobuf_repositories(bind=True):
-    native.git_repository(
-        name = "protobuf_git",
-        commit = "a428e42072765993ff674fda72863c9f1aa2d268",  # v3.1.0
-        remote = "https://github.com/google/protobuf.git",
-    )
-
-    if bind:
-        native.bind(
-            name = "protoc",
-            actual = "@protobuf_git//:protoc",
-        )
-
-        native.bind(
-            name = "protobuf",
-            actual = "@protobuf_git//:protobuf",
-        )
-
-        native.bind(
-            name = "cc_wkt_protos",
-            actual = "@protobuf_git//:cc_wkt_protos",
-        )
-
-        native.bind(
-            name = "cc_wkt_protos_genproto",
-            actual = "@protobuf_git//:cc_wkt_protos_genproto",
-        )
-
-        native.bind(
-            name = "protobuf_compiler",
-            actual = "@protobuf_git//:protoc_lib",
-        )
-
-        native.bind(
-            name = "protobuf_clib",
-            actual = "@protobuf_git//:protobuf_lite",
-        )
-
 def zlib_repositories(bind=True):
     BUILD = """
 # Copyright 2016 Google Inc. All Rights Reserved.
@@ -389,85 +333,3 @@ def servicecontrol_client_repositories(bind=True):
             name = "servicecontrol_client",
             actual = "@servicecontrol_client_git//:service_control_client_lib",
         )
-
-def googletest_repositories(bind=True):
-    BUILD = """
-# Copyright 2016 Google Inc. All Rights Reserved.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#    http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-################################################################################
-#
-
-cc_library(
-    name = "googletest",
-    srcs = [
-        "googletest/src/gtest-all.cc",
-        "googlemock/src/gmock-all.cc",
-    ],
-    hdrs = glob([
-        "googletest/include/**/*.h",
-        "googlemock/include/**/*.h",
-        "googletest/src/*.cc",
-        "googletest/src/*.h",
-        "googlemock/src/*.cc",
-    ]),
-    includes = [
-        "googlemock",
-        "googletest",
-        "googletest/include",
-        "googlemock/include",
-    ],
-    visibility = ["//visibility:public"],
-)
-
-cc_library(
-    name = "googletest_main",
-    srcs = ["googlemock/src/gmock_main.cc"],
-    visibility = ["//visibility:public"],
-    deps = [":googletest"],
-)
-
-cc_library(
-    name = "googletest_prod",
-    hdrs = [
-        "googletest/include/gtest/gtest_prod.h",
-    ],
-    includes = [
-        "googletest/include",
-    ],
-    visibility = ["//visibility:public"],
-)
-"""
-    native.new_git_repository(
-        name = "googletest_git",
-        build_file_content = BUILD,
-        commit = "d225acc90bc3a8c420a9bcd1f033033c1ccd7fe0",
-        remote = "https://github.com/google/googletest.git",
-    )
-
-    if bind:
-        native.bind(
-            name = "googletest",
-            actual = "@googletest_git//:googletest",
-        )
-
-        native.bind(
-            name = "googletest_main",
-            actual = "@googletest_git//:googletest_main",
-        )
-
-        native.bind(
-            name = "googletest_prod",
-            actual = "@googletest_git//:googletest_prod",
-        )
diff --git a/repositories.bzl b/repositories.bzl
new file mode 100644
index 000000000000..de0063c8ecbd
--- /dev/null
+++ b/repositories.bzl
@@ -0,0 +1,291 @@
+# Copyright 2016 Google Inc. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+################################################################################
+#
+def boringssl_repositories(bind=True):
+    # TODO(zlizan): Remove the custom BUILD file when
+    # https://github.com/lyft/envoy/issues/301 resolved
+    BUILD = """
+# Copyright (c) 2016, Google Inc.
+#
+# Permission to use, copy, modify, and/or distribute this software for any
+# purpose with or without fee is hereby granted, provided that the above
+# copyright notice and this permission notice appear in all copies.
+#
+# THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+# WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+# MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
+# SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+# WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
+# OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
+# CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */
+
+licenses(["notice"])
+
+exports_files(["LICENSE"])
+
+load(
+    ":BUILD.generated.bzl",
+    "crypto_headers",
+    "crypto_internal_headers",
+    "crypto_sources",
+    "crypto_sources_linux_x86_64",
+    "crypto_sources_mac_x86_64",
+    "ssl_headers",
+    "ssl_internal_headers",
+    "ssl_sources",
+    "tool_sources",
+    "tool_headers",
+)
+
+config_setting(
+    name = "linux_x86_64",
+    values = {"cpu": "k8"},
+)
+
+config_setting(
+    name = "mac_x86_64",
+    values = {"cpu": "darwin"},
+)
+
+boringssl_copts = [
+    # Assembler option --noexecstack adds .note.GNU-stack to each object to
+    # ensure that binaries can be built with non-executable stack.
+    "-Wa,--noexecstack",
+
+    # This is needed on Linux systems (at least) to get rwlock in pthread.
+    "-D_XOPEN_SOURCE=700",
+
+    # This list of warnings should match those in the top-level CMakeLists.txt.
+    "-Wall",
+    "-Werror",
+    "-Wformat=2",
+    "-Wsign-compare",
+    "-Wmissing-field-initializers",
+    "-Wwrite-strings",
+    "-Wshadow",
+    "-fno-common",
+
+    # Modern build environments should be able to set this to use atomic
+    # operations for reference counting rather than locks. However, it's
+    # known not to work on some Android builds.
+    # "-DOPENSSL_C11_ATOMIC",
+] + select({
+    ":linux_x86_64": [],
+    ":mac_x86_64": [],
+    "//conditions:default": ["-DOPENSSL_NO_ASM"],
+})
+
+crypto_sources_asm = select({
+    ":linux_x86_64": crypto_sources_linux_x86_64,
+    ":mac_x86_64": crypto_sources_mac_x86_64,
+    "//conditions:default": [],
+})
+
+# For C targets only (not C++), compile with C11 support.
+boringssl_copts_c11 = boringssl_copts + [
+    "-std=c11",
+    "-Wmissing-prototypes",
+    "-Wold-style-definition",
+    "-Wstrict-prototypes",
+]
+
+# For C targets only (not C++), compile with C11 support.
+boringssl_copts_cxx = boringssl_copts + [
+    "-std=c++11",
+    "-Wmissing-declarations",
+]
+
+cc_library(
+    name = "crypto",
+    srcs = crypto_sources + crypto_internal_headers + crypto_sources_asm,
+    hdrs = crypto_headers,
+    copts = boringssl_copts_c11,
+    includes = ["src/include"],
+    linkopts = select({
+        ":mac_x86_64": [],
+        "//conditions:default": ["-lpthread"],
+    }),
+    visibility = ["//visibility:public"],
+)
+
+cc_library(
+    name = "ssl",
+    srcs = ssl_sources + ssl_internal_headers,
+    hdrs = ssl_headers,
+    copts = boringssl_copts_c11,
+    includes = ["src/include"],
+    visibility = ["//visibility:public"],
+    deps = [":crypto"],
+)
+
+cc_binary(
+    name = "bssl",
+    srcs = tool_sources + tool_headers,
+    copts = boringssl_copts_cxx,
+    visibility = ["//visibility:public"],
+    deps = [":ssl"],
+)
+
+cc_library(
+    name = "deprecit_base64_bio",
+    srcs = [
+        "src/decrepit/bio/base64_bio.c",
+    ],
+    copts = boringssl_copts_c11,
+    includes = ["src/include"],
+    visibility = ["//visibility:public"],
+    deps = [":crypto"],
+)"""
+
+    native.new_git_repository(
+        name = "boringssl",
+        commit = "12c35d69008ae6b8486e435447445240509f7662",  # 2016-10-24
+        remote = "https://boringssl.googlesource.com/boringssl",
+        build_file_content = BUILD,
+    )
+
+    if bind:
+        native.bind(
+            name = "boringssl_crypto",
+            actual = "@boringssl//:crypto",
+        )
+
+        native.bind(
+            name = "libssl",
+            actual = "@boringssl//:ssl",
+        )
+
+
+def protobuf_repositories(bind=True):
+    native.git_repository(
+        name = "protobuf_git",
+        commit = "a428e42072765993ff674fda72863c9f1aa2d268",  # v3.1.0
+        remote = "https://github.com/google/protobuf.git",
+    )
+
+    if bind:
+        native.bind(
+            name = "protoc",
+            actual = "@protobuf_git//:protoc",
+        )
+
+        native.bind(
+            name = "protobuf",
+            actual = "@protobuf_git//:protobuf",
+        )
+
+        native.bind(
+            name = "cc_wkt_protos",
+            actual = "@protobuf_git//:cc_wkt_protos",
+        )
+
+        native.bind(
+            name = "cc_wkt_protos_genproto",
+            actual = "@protobuf_git//:cc_wkt_protos_genproto",
+        )
+
+        native.bind(
+            name = "protobuf_compiler",
+            actual = "@protobuf_git//:protoc_lib",
+        )
+
+        native.bind(
+            name = "protobuf_clib",
+            actual = "@protobuf_git//:protobuf_lite",
+        )
+
+
+def googletest_repositories(bind=True):
+    BUILD = """
+# Copyright 2016 Google Inc. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+################################################################################
+#
+
+cc_library(
+    name = "googletest",
+    srcs = [
+        "googletest/src/gtest-all.cc",
+        "googlemock/src/gmock-all.cc",
+    ],
+    hdrs = glob([
+        "googletest/include/**/*.h",
+        "googlemock/include/**/*.h",
+        "googletest/src/*.cc",
+        "googletest/src/*.h",
+        "googlemock/src/*.cc",
+    ]),
+    includes = [
+        "googlemock",
+        "googletest",
+        "googletest/include",
+        "googlemock/include",
+    ],
+    visibility = ["//visibility:public"],
+)
+
+cc_library(
+    name = "googletest_main",
+    srcs = ["googlemock/src/gmock_main.cc"],
+    visibility = ["//visibility:public"],
+    deps = [":googletest"],
+)
+
+cc_library(
+    name = "googletest_prod",
+    hdrs = [
+        "googletest/include/gtest/gtest_prod.h",
+    ],
+    includes = [
+        "googletest/include",
+    ],
+    visibility = ["//visibility:public"],
+)
+"""
+    native.new_git_repository(
+        name = "googletest_git",
+        build_file_content = BUILD,
+        commit = "d225acc90bc3a8c420a9bcd1f033033c1ccd7fe0",
+        remote = "https://github.com/google/googletest.git",
+    )
+
+    if bind:
+        native.bind(
+            name = "googletest",
+            actual = "@googletest_git//:googletest",
+        )
+
+        native.bind(
+            name = "googletest_main",
+            actual = "@googletest_git//:googletest_main",
+        )
+
+        native.bind(
+            name = "googletest_prod",
+            actual = "@googletest_git//:googletest_prod",
+        )
diff --git a/src/envoy/BUILD b/src/envoy/BUILD
new file mode 100644
index 000000000000..8c5d058fe455
--- /dev/null
+++ b/src/envoy/BUILD
@@ -0,0 +1,17 @@
+# Copyright 2016 Google Inc. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+################################################################################
+#
+# This file is intended to be empty for repositories.bzl
diff --git a/src/envoy/repositories.bzl b/src/envoy/repositories.bzl
new file mode 100644
index 000000000000..ea4aa04a48d4
--- /dev/null
+++ b/src/envoy/repositories.bzl
@@ -0,0 +1,598 @@
+# Copyright 2016 Google Inc. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+################################################################################
+#
+
+def libevent_repositories(bind=True):
+    BUILD = """
+genrule(
+    name = "config",
+    srcs = glob([
+        "**/*",
+    ]),
+    outs = [
+        "config.h",
+    ],
+    tools = [
+        "configure",
+    ],
+    cmd = ' '.join([
+        "$(location configure) --enable-shared=no --disable-libevent-regress --disable-openssl",
+        "&& cp config.h $@",
+    ]),
+)
+
+genrule(
+    name = "event-config",
+    srcs = [
+        "config.h",
+        "make-event-config.sed",
+    ],
+    outs = [
+        "include/event2/event-config.h",
+    ],
+    cmd = "sed -f $(location make-event-config.sed) < $(location config.h) > $@",
+)
+
+event_srcs = [
+    "buffer.c",
+    "bufferevent.c",
+    "bufferevent_filter.c",
+    "bufferevent_pair.c",
+    "bufferevent_ratelim.c",
+    "bufferevent_sock.c",
+    "epoll.c",
+    "evdns.c",
+    "event.c",
+    "event_tagging.c",
+    "evmap.c",
+    "evrpc.c",
+    "evthread.c",
+    "evutil.c",
+    "evutil_rand.c",
+    "http.c",
+    "listener.c",
+    "log.c",
+    "poll.c",
+    "select.c",
+    "signal.c",
+    "strlcpy.c",
+    ":event-config",
+] + glob(["*.h"])
+
+
+event_pthread_srcs = [
+    "evthread_pthread.c",
+    ":event-config",
+]
+
+cc_library(
+    name = "event",
+    hdrs = glob(["include/**/*.h"]) + [
+        "arc4random.c",  # arc4random.c is included by evutil_rand.c
+        "bufferevent-internal.h",
+        "defer-internal.h",
+        "evbuffer-internal.h",
+        "event-internal.h",
+        "event.h",
+        "evthread-internal.h",
+        "evutil.h",
+        "http-internal.h",
+        "iocp-internal.h",
+        "ipv6-internal.h",
+        "log-internal.h",
+        "minheap-internal.h",
+        "mm-internal.h",
+        "strlcpy-internal.h",
+        "util-internal.h",
+        "compat/sys/queue.h",
+    ],
+    srcs = event_srcs,
+    includes = [
+        "include",
+        "compat",
+    ],
+    copts = [
+        "-w",
+        "-DHAVE_CONFIG_H",
+    ],
+    visibility = ["//visibility:public"],
+)
+
+cc_library(
+    name = "event_pthreads",
+    srcs = event_pthread_srcs + ["include/event2/thread.h"],
+    hdrs = [
+        "evthread-internal.h",
+        "compat/sys/queue.h",
+    ],
+    copts = [
+        "-w",
+        "-DHAVE_CONFIG_H",
+    ],
+    includes = [
+        "include",
+        "compat",
+    ],
+    deps = [
+        ":event",
+    ],
+    visibility = ["//visibility:public"],
+)"""
+
+    native.new_http_archive(
+        name = "libevent_git",
+        url = "https://github.com/libevent/libevent/releases/download/release-2.0.22-stable/libevent-2.0.22-stable.tar.gz",
+        strip_prefix = "libevent-2.0.22-stable",
+        build_file_content = BUILD,
+    )
+
+    if bind:
+        native.bind(
+            name = "event",
+            actual = "@libevent_git//:event",
+        )
+
+        native.bind(
+            name = "event_pthreads",
+            actual = "@libevent_git//:event_pthreads",
+        )
+
+
+def spdlog_repositories(bind=True):
+    BUILD = """
+package(default_visibility=["//visibility:public"])
+
+cc_library(
+    name = "spdlog",
+    hdrs = glob([
+        "include/**/*.h",
+        "include/**/*.cc",
+    ]),
+    includes = [
+        "include",
+    ],
+)"""
+
+    native.new_git_repository(
+        name = "spdlog_git",
+        remote = "https://github.com/gabime/spdlog.git",
+        commit = "1f1f6a5f3b424203a429e9cb78e6548037adefa8",
+        build_file_content = BUILD,
+    )
+
+    if bind:
+        native.bind(
+            name = "spdlog",
+            actual = "@spdlog_git//:spdlog",
+        )
+
+def tclap_repositories(bind=True):
+    BUILD = """
+cc_library(
+    name = "tclap",
+    hdrs = [
+        "include/tclap/Arg.h",
+        "include/tclap/ArgException.h",
+        "include/tclap/ArgTraits.h",
+        "include/tclap/CmdLine.h",
+        "include/tclap/CmdLineInterface.h",
+        "include/tclap/CmdLineOutput.h",
+        "include/tclap/Constraint.h",
+        "include/tclap/DocBookOutput.h",
+        "include/tclap/HelpVisitor.h",
+        "include/tclap/IgnoreRestVisitor.h",
+        "include/tclap/MultiArg.h",
+        "include/tclap/MultiSwitchArg.h",
+        "include/tclap/OptionalUnlabeledTracker.h",
+        "include/tclap/StandardTraits.h",
+        "include/tclap/StdOutput.h",
+        "include/tclap/SwitchArg.h",
+        "include/tclap/UnlabeledMultiArg.h",
+        "include/tclap/UnlabeledValueArg.h",
+        "include/tclap/ValueArg.h",
+        "include/tclap/ValuesConstraint.h",
+        "include/tclap/VersionVisitor.h",
+        "include/tclap/Visitor.h",
+        "include/tclap/XorHandler.h",
+        "include/tclap/ZshCompletionOutput.h",
+    ],
+    defines = [
+        "HAVE_LONG_LONG=1",
+        "HAVE_SSTREAM=1",
+    ],
+    includes = [
+        "include",
+    ],
+    visibility = ["//visibility:public"],
+)"""
+
+    native.new_http_archive(
+        name = "tclap_tar",
+        url = "https://sourceforge.net/projects/tclap/files/tclap-1.2.1.tar.gz/download",
+        type = "tar.gz",
+        strip_prefix = "tclap-1.2.1",
+        build_file_content = BUILD,
+    )
+    if bind:
+        native.bind(
+            name = "tclap",
+            actual = "@tclap_tar//:tclap",
+        )
+
+def lightstep_repositories(bind=True):
+    BUILD = """
+load("@protobuf_git//:protobuf.bzl", "cc_proto_library")
+
+genrule(
+    name = "envoy_carrier_pb",
+    srcs = ["src/c++11/envoy/envoy_carrier.proto"],
+    outs = ["lightstep/envoy_carrier.proto"],
+    cmd = "cp $(SRCS) $@",
+)
+
+cc_proto_library(
+    name = "envoy_carrier_proto",
+    srcs = ["lightstep/envoy_carrier.proto"],
+    include = ".",
+    deps = [
+        "//external:cc_wkt_protos",
+    ],
+    protoc = "//external:protoc",
+    default_runtime = "//external:protobuf",
+    visibility = ["//visibility:public"],
+)
+
+cc_library(
+    name = "lightstep_core",
+    srcs = [
+        "src/c++11/impl.cc",
+        "src/c++11/span.cc",
+        "src/c++11/tracer.cc",
+        "src/c++11/util.cc",
+    ],
+    hdrs = [
+        "src/c++11/lightstep/impl.h",
+        "src/c++11/lightstep/options.h",
+        "src/c++11/lightstep/propagation.h",
+        "src/c++11/lightstep/envoy.h",
+        "src/c++11/lightstep/span.h",
+        "src/c++11/lightstep/tracer.h",
+        "src/c++11/lightstep/util.h",
+        "src/c++11/lightstep/value.h",
+        "src/c++11/mapbox_variant/recursive_wrapper.hpp",
+        "src/c++11/mapbox_variant/variant.hpp",
+    ],
+    copts = [
+        "-DPACKAGE_VERSION='\\"0.19\\"'",
+        "-Iexternal/lightstep_git/src/c++11/lightstep",
+        "-Iexternal/lightstep_git/src/c++11/mapbox_variant",
+    ],
+    includes = [
+        "src/c++11",
+    ],
+    visibility = ["//visibility:public"],
+    deps = [
+        "@lightstep_common_git//:collector_proto",
+        ":envoy_carrier_proto",
+        "//external:protobuf",
+    ],
+)"""
+
+    COMMON_BUILD = """
+load("@protobuf_git//:protobuf.bzl", "cc_proto_library")
+
+genrule(
+    name = "collector_pb",
+    srcs = ["collector.proto"],
+    outs = ["lightstep/collector.proto"],
+    cmd = "cp $(SRCS) $@",
+)
+
+cc_proto_library(
+    name = "collector_proto",
+    srcs = ["lightstep/collector.proto"],
+    include = ".",
+    deps = [
+        "//external:cc_wkt_protos",
+    ],
+    protoc = "//external:protoc",
+    default_runtime = "//external:protobuf",
+    visibility = ["//visibility:public"],
+)"""
+
+    native.new_git_repository(
+        name = "lightstep_common_git",
+        remote = "https://github.com/lightstep/lightstep-tracer-common.git",
+        commit = "8d932f7f76cd286691e6179621d0012b0ff1e6aa",
+        build_file_content = COMMON_BUILD,
+    )
+
+    native.new_git_repository(
+        name = "lightstep_git",
+        remote = "https://github.com/lightstep/lightstep-tracer-cpp.git",
+        commit = "5a71d623cac17a059041b04fabca4ed86ffff7cc",
+        build_file_content = BUILD,
+    )
+
+    if bind:
+        native.bind(
+            name = "lightstep",
+            actual = "@lightstep_git//:lightstep_core",
+        )
+
+def http_parser_repositories(bind=True):
+    BUILD = """
+cc_library(
+    name = "http_parser",
+    srcs = [
+        "http_parser.c",
+    ],
+    hdrs = [
+        "http_parser.h",
+    ],
+    visibility = ["//visibility:public"],
+)"""
+
+    native.new_git_repository(
+        name = "http_parser_git",
+        remote = "https://github.com/nodejs/http-parser.git",
+        commit = "9b0d5b33ebdaacff1dadd06bad4e198b11ff880e",
+        build_file_content = BUILD,
+    )
+
+    if bind:
+        native.bind(
+            name = "http_parser",
+            actual = "@http_parser_git//:http_parser",
+        )
+
+def rapidjson_repositories(bind=True):
+    BUILD = """
+cc_library(
+    name = "rapidjson",
+    srcs = glob([
+        "include/rapidjson/internal/*.h",
+    ]),
+    hdrs = glob([
+        "include/rapidjson/*.h",
+        "include/rapidjson/error/*.h",
+    ]),
+    includes = ["include"],
+    visibility = ["//visibility:public"],
+)
+"""
+
+    native.new_git_repository(
+        name = "rapidjson_git",
+        remote = "https://github.com/miloyip/rapidjson.git",
+        commit = "f54b0e47a08782a6131cc3d60f94d038fa6e0a51", # v1.1.0
+        build_file_content = BUILD,
+    )
+
+    if bind:
+        native.bind(
+            name = "rapidjson",
+            actual = "@rapidjson_git//:rapidjson",
+        )
+
+def nghttp2_repositories(bind=True):
+    BUILD = """
+genrule(
+    name = "config",
+    srcs = glob([
+        "**/*",
+    ]),
+    outs = [
+        "config.h",
+    ],
+    tools = [
+        "configure",
+    ],
+    cmd = ' '.join([
+        "$(location configure) --enable-lib-only --enable-shared=no",
+        "&& cp config.h $@",
+    ]),
+)
+
+cc_library(
+    name = "nghttp2",
+    srcs = glob([
+        "lib/*.c",
+        "lib/*.h",
+    ]) + ["config.h"],
+    hdrs = glob([
+        "lib/includes/nghttp2/*.h",
+    ]),
+    copts = [
+        "-DHAVE_CONFIG_H",
+        "-DBUILDING_NGHTTP2",
+        "-Iexternal/nghttp2_tar",
+    ],
+    includes = [
+        ".",
+        "lib/includes",
+    ],
+    visibility = ["//visibility:public"],
+)
+"""
+
+    native.new_http_archive(
+        name = "nghttp2_tar",
+        url = "https://github.com/nghttp2/nghttp2/releases/download/v1.14.1/nghttp2-1.14.1.tar.gz",
+        strip_prefix = "nghttp2-1.14.1",
+        build_file_content = BUILD,
+    )
+
+    if bind:
+        native.bind(
+            name = "nghttp2",
+            actual = "@nghttp2_tar//:nghttp2",
+        )
+
+
+def envoy_repositories(bind=True):
+    libevent_repositories(bind)
+    spdlog_repositories(bind)
+    tclap_repositories(bind)
+    lightstep_repositories(bind)
+    http_parser_repositories(bind)
+    rapidjson_repositories(bind)
+    nghttp2_repositories(bind)
+
+    BUILD = """
+load("@protobuf_git//:protobuf.bzl", "cc_proto_library")
+
+exports_files(["source/precompiled/precompiled.h"])
+
+genrule(
+    name = "envoy-ratelimit-proto",
+    srcs = [
+        "source/common/ratelimit/ratelimit.proto",
+    ],
+    outs = [
+        "source/common/generated/ratelimit.proto",
+    ],
+    cmd = "cp $(SRCS) $@",
+)
+
+cc_proto_library(
+    name = "envoy-ratelimit-pb",
+    srcs = [
+        "source/common/generated/ratelimit.proto",
+    ],
+    default_runtime = "//external:protobuf",
+    protoc = "//external:protoc",
+    include = "source",
+)
+
+genrule(
+    name = "envoy-test-proto",
+    srcs = [
+        "test/proto/helloworld.proto",
+    ],
+    outs = [
+        "test/generated/helloworld.proto",
+    ],
+    cmd = "cp $(SRCS) $@",
+)
+
+cc_proto_library(
+    name = "envoy-test-pb",
+    srcs = [
+        "test/generated/helloworld.proto",
+    ],
+    default_runtime = "//external:protobuf",
+    protoc = "//external:protoc",
+    include = "test",
+)
+
+genrule(
+    name = "envoy-version",
+    srcs = glob([
+        ".git/**",
+    ]),
+    tools = [
+        "tools/gen_git_sha.sh",
+    ],
+    outs = [
+        "source/common/version_generated.cc",
+    ],
+    cmd = "touch $@ && $(location tools/gen_git_sha.sh) $$(dirname $(location tools/gen_git_sha.sh)) $@",
+    local = 1,
+)
+
+cc_library(
+    name = "envoy-common",
+    srcs = glob([
+        "source/**/*.cc",
+        "source/**/*.h",
+        "include/**/*.h",
+    ], exclude=["source/exe/main.cc"]) + [
+        "source/common/version_generated.cc",
+    ],
+    copts = [
+        "-I./external/envoy_git/include",
+        "-I./external/envoy_git/source",
+        "-include ./external/envoy_git/source/precompiled/precompiled.h",
+    ],
+    linkopts = [
+        "-lpthread",
+        "-lanl",
+        "-lrt",
+    ],
+    linkstatic=1,
+    alwayslink=1,
+    deps = [
+        ":envoy-ratelimit-pb",
+        "//external:libssl",
+        "@boringssl//:deprecit_base64_bio",
+        "//external:nghttp2",
+        "//external:spdlog",
+        "//external:tclap",
+        "//external:lightstep",
+        "//external:event",
+        "//external:protobuf",
+        "//external:http_parser",
+        "//external:rapidjson",
+        "//external:event_pthreads",
+    ],
+)
+
+cc_binary(
+    name = "envoy",
+    srcs = [
+        "source/exe/main.cc",
+    ],
+    copts = [
+        "-I./external/envoy_git/include",
+        "-I./external/envoy_git/source",
+        "-include ./external/envoy_git/source/precompiled/precompiled.h",
+    ],
+    deps = [
+        ":envoy-common",
+    ],
+    linkstatic=1,
+)
+
+cc_test(
+    name = "envoy-test",
+    srcs = glob([
+        "test/**/*.cc",
+        "test/**/*.h",
+    ]),
+    data = glob([
+        "generated/**/*",
+        "test/**/*",
+    ]),
+    copts = [
+        "-I./external/envoy_git/include",
+        "-I./external/envoy_git/source",
+        "-include ./external/envoy_git/test/precompiled/precompiled_test.h",
+    ],
+    deps = [
+        ":envoy-common",
+        ":envoy-test-pb",
+        "//external:googletest",
+    ],
+    linkstatic=1,
+)"""
+
+    native.new_git_repository(
+        name = "envoy_git",
+        remote = "https://github.com/lyft/envoy.git",
+        commit = "b74cabb4cba3366ee79ca187715f16db28baf6d3", # 2016-12-19
+        build_file_content = BUILD,
+    )