macOS
brew install envoylocal Homebrew formula metadata
brew / rank 1764
Cloud-native high-performance edge/middle/service proxy. Version 1.39.0 via Homebrew; verified 2026-07-16. Also installable with nix: nix profile install nixpkgs#envoy.
install
brew install envoylocal Homebrew formula metadata
nix profile install nixpkgs#envoynixpkgs package indexes · pkgs/by-name/en/envoy/package.nix · source: api.github.com
winget install --id LXBStudio.Envoy -eWindows Package Manager source index · LXBStudio.Envoy · source: cdn.winget.microsoft.com
overview
Cloud-native high-performance edge/middle/service proxy
history
Envoy is a high-performance C++ edge, middle, and service proxy created at Lyft and later hosted by the Cloud Native Computing Foundation. It became important to cloud-native operators because it moved common network behavior out of application libraries and into a language-agnostic proxy process.
Package-manager users most often encounter Envoy as the standalone `envoy` binary used for local configuration testing, service-mesh sidecars, gateways, and proxy experiments. Its popularity is tied less to a traditional Unix CLI workflow than to the way it became a common data plane for Kubernetes-era networking.
Matt Klein described Envoy as beginning inside Lyft in May 2015 after the company found that existing open source options did not fit its microservice networking and observability needs. The first MVP was deployed in September 2015, initially as Lyft's edge proxy, and it later expanded into sidecar service-to-service proxying.
Lyft announced Envoy publicly on September 14, 2016, then donated it to CNCF in September 2017 as CNCF's eleventh hosted project. CNCF announced Envoy's graduation on November 28, 2018, citing neutral governance, multi-organization committership, adoption, and community sustainability.
By early summer 2016, Lyft was using Envoy for all edge and service-to-service networking across more than one hundred services and millions of requests per second. That production pedigree made Envoy unusually credible for teams trying to move from monoliths to microservices.
CNCF's graduation announcement named large-scale users and contributors including Airbnb, Booking.com, eBay, F5, Google, IBM, Lyft, Medium, Microsoft, Netflix, Pinterest, Salesforce, Square, Stripe, Tencent, Twilio, Verizon, and VSCO. It also framed Envoy as an enterprise-ready project with hundreds of contributors and thousands of commits by late 2018.
Envoy's adoption grew alongside service mesh and cloud-native gateway products. CNCF and the Envoy README describe it as a CNCF-hosted project with official documentation, release process, security policy, public user and developer lists, and related repositories for APIs, examples, and performance testing.
Envoy runs out of process, so it can sit next to applications written in any language or runtime. Its documented feature set includes HTTP/2, gRPC, load balancing, retries, timeouts, circuit breaking, rate limiting, stats, logging, tracing, external authorization, and a rich configuration API.
Common package-level use cases are starting a local Envoy binary with an explicit configuration file, validating proxy behavior in development, running it as a sidecar in service mesh deployments, or using it as an edge or middle proxy in front of applications.
Envoy matters to package nerds because it is a large, fast-moving, C++ infrastructure binary whose Homebrew formula gives developers a direct way to install and test the same proxy that underpins many Kubernetes and service-mesh stacks.
It is also a canonical example of a package where the command-line executable is only the visible tip of a broader ecosystem: APIs, generated configuration, xDS control planes, security releases, service meshes, and gateway products all orbit the `envoy` binary.
security posture
infrastructure mutation or orchestration signal.
orange risk · medium confidence · infrastructure
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
envoy | executable | indexed executable | Discovered from the local executable index. |
freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
install metadata
| Package key | brew:envoy |
|---|---|
| Version | 1.39.0 |
| Package manager | Homebrew |
| Homepage | https://www.envoyproxy.io/index.html |
| Repository | https://github.com/envoyproxy/envoy |
| Last updated | 2026-07-16T04:56:27Z |
| Pulse | updated |
| Bottle | not recorded |
| Service | none declared |
source database matches
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
envoy
nix profile install nixpkgs#envoyLXBStudio.Envoy
winget install --id LXBStudio.Envoy -esource trail
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
View the package source record on GitHub.