…voyproxy#5975)

Signed-off-by: Ismo Puustinen <ismo.puustinen@intel.com>

…n & code layout (envoyproxy#6158)

Signed-off-by: Michael Payne <michael@sooper.org>

Avoid stack overflows and bound actions to avoid OOM.

Fixes oss-fuzz issues:
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13493
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13494

Risk level: Low
Testing: Corpus entry added.

Signed-off-by: Harvey Tuch <htuch@google.com>

Description:
Fixes merge race with envoyproxy#6049.

Risk Level: Low
Testing:
Docs Changes:
Release Notes:

Signed-off-by: Lizan Zhou <lizan@tetrate.io>

This brings in buffer correctness fixes for libevent/libevent#774 and libevent/libevent#778.

This will temporarily take us away from a released version until 2.1.9.

Fixes oss-fuzz issue https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13400.

Risk level: Low (since we're already at 2.1.9-beta, which is pretty near in history).
Testing: regression unit tests added upstream in libevent, corpus entry added.

Signed-off-by: Harvey Tuch <htuch@google.com>

Signed-off-by: Nicolas Flacco <nflacco@lyft.com>

…proxy#6152)

Signed-off-by: Rama Chavali <rama.rao@salesforce.com>

Description: implement recvfrom(2) in os_sys_calls and use in udp_listener_impl
Risk Level: Low - same functionality but different implementation
Testing: bazel test //test/common/network:udp_listener_impl_test
Docs Changes: N/A
Release Notes: N/A

Signed-off-by: Christopher M. Luciano <cmluciano@us.ibm.com>

Bump up max configurable max_request_headers_kb to 96 KiB.
Add a check to http1/codec_impl.cc for headers size.
Raise the default library limits in http_parser nghttp2 so we'll rely on our own codec check.

Risk Level: Medium.
Testing: Moved all the large request headers tests to ProtocolIntegrationTest.
Part of envoyproxy#5626.

Signed-off-by: Auni Ahsan <auni@google.com>

…roxy#6176)

This is needed to enable Bazel native coverage (without, we don't get
coverage files generated).

Risk level: Low
Testing: bazel coverage run inside CI image.

Signed-off-by: Harvey Tuch <htuch@google.com>

…im-time are sorted out. (envoyproxy#6175)

Signed-off-by: Joshua Marantz <jmarantz@google.com>

This provides genhtml, which is needed for Bazel native coverage report
generation.

Signed-off-by: Harvey Tuch <htuch@google.com>

Remove the last prebuilt dependencies and switches to foreign_cc with a slight wrapper script.

Risk Level: Low
Testing: CI

Signed-off-by: Lizan Zhou <lizan@tetrate.io>

In order to compile envoy for iOS we need this commit
protocolbuffers/protobuf@0894e07
from protobuf. This also includes the previous commits that required us
to use a non-release version.

Signed-off-by: Keith Smiley <keithbsmiley@gmail.com>

…database, bazelbuild/bazel-skylib, gogo/protobuf (envoyproxy#6183)

Signed-off-by: Michael Payne <michael@sooper.org>

Signed-off-by: Rama Chavali <rama.rao@salesforce.com>

Follow up of envoyproxy#6168.

Risk Level: Low

Signed-off-by: Lizan Zhou <lizan@tetrate.io>

Signed-off-by: Lizan Zhou <lizan@tetrate.io>

…voyproxy#6174)

Description:

Add quic_thread_impl.h to QUICHE platform implementation.

QuicThreadImpl is implemented on top of Envoy::Thread. It is used by some tests and utility programs in QUICHE, but not in core QUICHE code.

Risk Level: minimal: code not used yet
Testing:

bazel test test/extensions/quic_listeners/quiche/platform:quic_platform_test --test_output=all --define quiche=enabled --experimental_remap_main_repo

bazel test test/extensions/quic_listeners/quiche/platform:quic_platform_test --test_output=all --define quiche=enabled --experimental_remap_main_repo -c opt

Docs Changes: none
Release Notes: none

Signed-off-by: Bin Wu <wub@google.com>

Signed-off-by: Christopher M. Luciano <cmluciano@us.ibm.com>

…lang/protobuf (envoyproxy#6192)

Signed-off-by: Michael Payne <michael@sooper.org>

Signed-off-by: Rama Chavali <rama.rao@salesforce.com>

…roxy#6146)

Signed-off-by: Bin Wu <wub@google.com>

Description:
Running make directly in LuaJIT source will break sandbox as the source directly is not writable. Copy it into current directly (which is tmpdir) to write into writable path.

Risk Level: Low
Testing: locally
Docs Changes:
Release Notes:
Fixes envoyproxy#6188.

Signed-off-by: Lizan Zhou <lizan@tetrate.io>

Update to rules_go 0.17.1 (release notes).

Risk Level: Low
Testing: bazel test //test/..., bazel build @envoy_api//envoy/... and local usage testing

Signed-off-by: Michael Payne <michael@sooper.org>

Signed-off-by: Ismo Puustinen <ismo.puustinen@intel.com>

Description: Code for Envoy to speak delta CDS with a management server. DELTA_GRPC added to config_source.proto's ApiTypes, to allow bootstrap configs to ask for incremental xDS.

Part of envoyproxy#4991. Was envoyproxy#5466; giving up on broken DCO craziness.

Risk Level: medium
Testing: new integration test

Signed-off-by: Fred Douglas <fredlas@google.com>

…nvoyproxy#6058)

Add quic_test_output_impl.(h|cc) to QUICHE platform implementation.

If environment variable "QUIC_TEST_OUTPUT_DIR" is set, tests using the QuicRecordTestOutput() function can save test output files to the $QUIC_TEST_OUTPUT_DIR directory.

Risk Level: minimal: code not used yet
Testing:

[No test output:] bazel test test/extensions/quic_listeners/quiche/platform:quic_platform_test --test_output=all --define quiche=enabled --experimental_remap_main_repo

[Test output saved to /tmp:] bazel test test/extensions/quic_listeners/quiche/platform:quic_platform_test --test_output=all --define quiche=enabled --experimental_remap_main_repo --action_env=QUIC_TEST_OUTPUT_DIR=/tmp

Docs Changes: none
Release Notes: none

Signed-off-by: Bin Wu <wub@google.com>

…6200)

This is needed to unblock envoyproxy#6196 while
libevent/libevent#741 (and consequently
envoyproxy#6083) go unresolved.

It's not particularly wonderful, but it will allow us to make progress independent of the libevent
work.

Risk level: Low
Testing: TSAN runs with envoyproxy#6196.

Signed-off-by: Harvey Tuch <htuch@google.com>

This otherwise conflicts with bazel's BUILD file naming so doing a
`bazel query` on this directory would result in an error.

Risk Level: Low

Signed-off-by: Keith Smiley <keithbsmiley@gmail.com>

Signed-off-by: Henry Yang <hyang@lyft.com>

…#6177)

Signed-off-by: Nicolas Flacco <nflacco@lyft.com>

Previously onUpstreamReset handled 3 separate cases: per try timeout,
global timeout, and a stream reset by the upstream. In anticipation of
adding a new case for envoyproxy#5841, it might make things cleaner to pull it
out.

This commit extracts the functionality of the old onUpstreamReset into
separate methods, and then has onPerTryTimeout, onGlobalTimeout, and
onUpstreamReset call the helper functions with the the appropriate
arguments.

Signed-off-by: Michael Puncel <mpuncel@squareup.com>

Signed-off-by: Michael Puncel <mpuncel@squareup.com>

Signed-off-by: Michael Puncel <mpuncel@squareup.com>

Signed-off-by: Michael Puncel <mpuncel@squareup.com>

Signed-off-by: Michael Puncel <mpuncel@squareup.com>

Signed-off-by: Michael Puncel <mpuncel@squareup.com>

Implements the hedge_on_per_try_timeout option in HedgePolicy config
which instructs the router filter to not cancel requests that hit the
per try timeout before sending a retry. This means the router must be
able to manage multiple simultaneous upstream requests and handle
deciding which response "wins" and canceling any other in flight
requests.

Finishes envoyproxy#5841.