The FR team has found that Envoy 1.23 is no longer supported by envoy, but is the latest version that can run in FR due to a RHEL8 limitation. We should explore using Caddy for the TLS proxy sidecar since it is supported and works on RHEL8.

The main driver for this is that CVEs came out that were not applied to Envoy 1.23. The FR team had to re-compile their own binary from a fork and that is not a good solution moving forward.