I'm positively surprised that Dropbox (at least from what I understood from the post) didn't require lots of changes or patches on top of the upstream codebase of Envoy to migrate their traffic!
Compared to NGINX though, it was relatively easy to push these fixes upstream. Community is very welcoming to outside contributions.
[1] https://dropbox.tech/infrastructure/how-we-migrated-dropbox-...