Does Envoy on Windows support FIPS?

Note

On August 31, 2023 the Envoy project ended official Windows support due to a lack of resources. We will continue to accept patches related to the Windows build. Until further notice, Windows builds are excluded from Envoy CI, as well as the Envoy release and security processes.

Envoy uses BoringSSL which is a slimmed down TLS implementation. At the time of writing, BoringSSL does not support a FIPS mode on Windows. As a result, Envoy does not offer support for FIPS on Windows.

If FIPS is a requirement for you, please reach out to the contributors.