Currently Envoy builds under g++ and can optionally be run under AddressSanitizer via do_ci.sh. There are other sanitizers provided by LLVM such as msan and tsan (see https://github.com/google/sanitizers) that could be automatically applied and run during presubmits to increase confidence in code correctness if we could perform a clang/llvm debug build.