Extending Envoy for custom use cases
BoringSSL private key methods
As of this writing there is no high level extension developer documentation. The are a good way to learn what is possible.
An example of how to add a network filter and structure the repository and build dependencies can be found at envoy-filter-example.