tls_inspector: create JA3 client fingerprint (#18853)

JA3 fingerprint information is available at https://github.com/salesforce/ja3 and at https://ja3er.com.

Fixes #16622

Signed-off-by: Jason Miller <jason.miller@stackpath.com>
Co-authored-by: Ryland Degnan <rdegnan@twitter.com>

Mirrored from https://github.com/envoyproxy/envoy @ a305c74da5d4e0cfe4e11c7db5e72c9a79c54801

envoy/extensions/filters/listener/tls_inspector/v3/tls_inspector.proto

@@ -2,6 +2,8 @@ syntax = "proto3";
 
 package envoy.extensions.filters.listener.tls_inspector.v3;
 
+import "google/protobuf/wrappers.proto";
+
 import "udpa/annotations/status.proto";
 import "udpa/annotations/versioning.proto";
 
@@ -17,4 +19,7 @@ option (udpa.annotations.file_status).package_version_status = ACTIVE;
 message TlsInspector {
   option (udpa.annotations.versioning).previous_message_type =
       "envoy.config.filter.listener.tls_inspector.v2.TlsInspector";
+
+  // Populate `JA3` fingerprint hash using data from the TLS Client Hello packet. Default is false.
+  google.protobuf.BoolValue enable_ja3_fingerprinting = 1;
 }