pkg.soopen package index

brew / rank 1764

Install envoy with Homebrew, Nix, winget

Cloud-native high-performance edge/middle/service proxy. Version 1.39.0 via Homebrew; verified 2026-07-16. Also installable with nix: nix profile install nixpkgs#envoy.

install

Additional install commands

macOS

Homebrewverified · 100%
brew install envoy

local Homebrew formula metadata

Linux

Nixverified · 92%
nix profile install nixpkgs#envoy

nixpkgs package indexes · pkgs/by-name/en/envoy/package.nix · source: api.github.com

Windows

Windows Package Managerverified · 92%
winget install --id LXBStudio.Envoy -e

Windows Package Manager source index · LXBStudio.Envoy · source: cdn.winget.microsoft.com

overview

Package summary

Cloud-native high-performance edge/middle/service proxy

Commands and aliases

  • envoy

history

Project history and usage

Envoy is a high-performance C++ edge, middle, and service proxy created at Lyft and later hosted by the Cloud Native Computing Foundation. It became important to cloud-native operators because it moved common network behavior out of application libraries and into a language-agnostic proxy process.

Package-manager users most often encounter Envoy as the standalone `envoy` binary used for local configuration testing, service-mesh sidecars, gateways, and proxy experiments. Its popularity is tied less to a traditional Unix CLI workflow than to the way it became a common data plane for Kubernetes-era networking.

Project history

Matt Klein described Envoy as beginning inside Lyft in May 2015 after the company found that existing open source options did not fit its microservice networking and observability needs. The first MVP was deployed in September 2015, initially as Lyft's edge proxy, and it later expanded into sidecar service-to-service proxying.

Lyft announced Envoy publicly on September 14, 2016, then donated it to CNCF in September 2017 as CNCF's eleventh hosted project. CNCF announced Envoy's graduation on November 28, 2018, citing neutral governance, multi-organization committership, adoption, and community sustainability.

Adoption history

By early summer 2016, Lyft was using Envoy for all edge and service-to-service networking across more than one hundred services and millions of requests per second. That production pedigree made Envoy unusually credible for teams trying to move from monoliths to microservices.

CNCF's graduation announcement named large-scale users and contributors including Airbnb, Booking.com, eBay, F5, Google, IBM, Lyft, Medium, Microsoft, Netflix, Pinterest, Salesforce, Square, Stripe, Tencent, Twilio, Verizon, and VSCO. It also framed Envoy as an enterprise-ready project with hundreds of contributors and thousands of commits by late 2018.

Envoy's adoption grew alongside service mesh and cloud-native gateway products. CNCF and the Envoy README describe it as a CNCF-hosted project with official documentation, release process, security policy, public user and developer lists, and related repositories for APIs, examples, and performance testing.

How it is used

Envoy runs out of process, so it can sit next to applications written in any language or runtime. Its documented feature set includes HTTP/2, gRPC, load balancing, retries, timeouts, circuit breaking, rate limiting, stats, logging, tracing, external authorization, and a rich configuration API.

Common package-level use cases are starting a local Envoy binary with an explicit configuration file, validating proxy behavior in development, running it as a sidecar in service mesh deployments, or using it as an edge or middle proxy in front of applications.

Why package nerds care

Envoy matters to package nerds because it is a large, fast-moving, C++ infrastructure binary whose Homebrew formula gives developers a direct way to install and test the same proxy that underpins many Kubernetes and service-mesh stacks.

It is also a canonical example of a package where the command-line executable is only the visible tip of a broader ecosystem: APIs, generated configuration, xDS control planes, security releases, service meshes, and gateway products all orbit the `envoy` binary.

Timeline

  • 2015-05: Envoy development began at Lyft.
  • 2015-09: MVP deployed at Lyft, initially as an edge proxy.
  • 2016-06: Fully deployed at Lyft for edge and service-to-service networking.
  • 2016-09-14: Lyft publicly announced Envoy.
  • 2017-09: Envoy joined CNCF as its eleventh hosted project.
  • 2018-11-28: CNCF announced Envoy graduation.

Related projects

  • Envoy is closely related to Kubernetes-era service mesh and gateway systems, including Istio and Ambassador/API gateway products that use Envoy as a data plane.
  • The Envoy project also maintains related repositories and assets for API definitions, performance testing, and filter examples.

security posture

Risk level: orange

infrastructure mutation or orchestration signal.

Risk classifier

orange risk · medium confidence · infrastructure

Why

  • infrastructure mutation or orchestration signal

Signals

  • text:cloud

Install behavior

  • No Homebrew bottle metadata was recorded.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

CommandKindExposureNote
envoyexecutableindexed executableDiscovered from the local executable index.

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-08-03
manager version1.39.0
manager updated2026-07-16
local dataunknown
upstreamnot available
latest detectednot detected
  • okNo freshness warnings were generated.

install metadata

Package metadata

Package keybrew:envoy
Version1.39.0
Package managerHomebrew
Homepagehttps://www.envoyproxy.io/index.html
Repositoryhttps://github.com/envoyproxy/envoy
Last updated2026-07-16T04:56:27Z
Pulseupdated
Bottlenot recorded
Servicenone declared

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

envoy

nix profile install nixpkgs#envoy
  • normalized package name match
  • Matched by: Envoy
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/en/envoy/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
winget95%

LXBStudio.Envoy

winget install --id LXBStudio.Envoy -e
  • normalized package name match
  • Matched by: Envoy
Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: LXBStudio.Envoy from https://cdn.winget.microsoft.com/cache/source.msix

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • cross-ecosystem install command graph
  • curated package history
  • external package-manager database matches
  • pkg.so package database
  • pkgdb category and tag curation