Ross ROSS = Recommend OSS · open-source software intelligence for agents

Envoy

Cloud-native high-performance edge/middle/service proxy observed · 2026-10-18

github.com/envoyproxy/envoy · homepage · C++ · Apache-2.0 (permissive) observed · 2026-10-18

Health v2 · maintenance only

95/100

  • Activity 100
  • Release rhythm 87
  • Longevity 100
How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-10-21. Adoption (stars, forks) is never an input.

  • gap_med: 0.0
  • age_days: 3725
  • days_rel: 7
  • days_push: 3
  • n_releases_24m: 111

Full methodology

Adoption not part of the score

29082 stars · 5663 forks observed · 2026-10-18

What it is AI-extracted, prompt v1, taxonomy v1, 2026-10-05, confidence 0.99

Envoy is an open‑source, high‑performance edge and service proxy written in C++. It provides dynamic routing, load‑balancing, TLS termination and extensive observability for cloud‑native applications.

Use cases

  • route traffic between microservices in a service mesh
  • load‑balance HTTP/HTTPS requests across multiple backends
  • terminate TLS and perform mutual TLS authentication at the edge
  • apply authentication, authorization and rate‑limiting before requests reach services
  • collect L7 metrics, logs and distributed traces for all inbound and outbound traffic
  • proxy AI model inference traffic with streaming‑first protocols
  • extend proxy behavior with custom Wasm, Lua, Go or Rust filters

When to choose

  • You need a production‑grade, cloud‑native proxy with dynamic configuration via xDS APIs.
  • Your architecture relies on microservices, service meshes, or API gateways and requires high performance and observability.
  • You want to add custom logic to the data path without forking the proxy, using Wasm or other extensions.
  • You need built‑in TLS termination, mTLS, and advanced security features like JWT authentication and RBAC.

When to avoid

  • Your workload is a simple static website that does not need advanced L7 routing or observability.
  • You have very limited resources and cannot allocate the memory/CPU overhead of a full‑featured proxy.
  • You require a lightweight reverse proxy with minimal configuration and no need for dynamic control plane integration.

Facets

service · maturity active

http-server routing api-gateway security logging tracing middleware networking microservices cloud-computing windows cloud self-hosted edge-proxy service-mesh ai-native wasm-extensions high-performance devops linux macos docker kubernetes

6 sources

Member repositories

For agents

markdown · JSON · MCP: product_card(name="envoyproxy/envoy")

Data as of 2026-10-19T08:05:51.212177+00:00 · Report a problem