• play_circle Get started
    • Overview
    • Architecture
    • Deployment patterns
    • Custom resources
    • Gateway proxies
      • BackendConfigPolicy
      • GlooTrafficPolicy
      • HTTPListenerPolicy
      • Global policy attachment
      • Policy merging
    • Helm
    • ArgoCD
    • Sample app
    • Licensing
    • Advanced
    • Migrate from kgateway
    • Default proxy setup
      • Listener overview
      • HTTP
      • HTTPS
      • SNI
      • TCP
      • TLS passthrough
    • Customize the proxy
    • Horizontal Pod Autoscaling (HPA)
    • HTTP/1.0 and HTTP/0.9
        • Kubernetes services
        • gRPC services
        • Static
          • Overview
          • Access AWS Lambda with a credentials secret
          • Access AWS Lambda with a service account
          • Configure cross-account Lambda access
          • Transform responses
    • Buffering
    • Direct response
    • Dynamic Forward Proxy (DFP)
    • External processing (ExtProc)
      • Overview
      • Request headers
      • Response headers
      • Gateway health checks
      • Backend health checks
    • HTTP2
      • Header
      • Host
      • HTTP method
      • Path
      • Query parameter
      • Host
      • HTTPS
      • Path
      • Host
      • Path
      • Overview
      • Basic example
      • Delegation via labels
      • Multiple parents
      • Multi-level delegation
      • Header and query match
        • Native Gateway API policies
        • Kgateway policies
      • Simple load balancing
      • Consistent hashing
      • Session persistence
    • Traffic splitting
        • About simple transformations
        • Templating language
        • Inject response headers
        • Decode base64 headers
        • Update request paths and methods
        • Create redirect URLs
        • Change response status
        • Update response body
        • About staged transformations
        • Templating language
        • Append headers
        • Extract headers
        • Add headers to body
        • Extract query parameters
        • Update response body
        • Enrich access logs
    • Weighted routing
    • HTTP connection settings
    • Mirroring
    • Outlier detection
      • About
      • Request retries
      • Per-try timeout
    • TCP keepalive
      • About timeouts
      • Request timeouts
      • Idle timeouts
      • Idle stream timeouts
      • Per-try timeouts
    • Access logging
    • Backend TLS
    • CORS
    • CSRF
      • About
      • Basic auth
      • External service
      • API keys
        • About OAuth
        • Access token validation
        • Authorization code
        • More OAuth features
        • Keycloak as an IdP
      • BYO ext auth service
      • Overview
      • Basic JWT policy
      • Provider example
      • About
      • Local rate limiting
        • Envoy API
        • Set-style API
      • BYO global rate limit service
    • About Solo Enterprise for agentgateway
    • Setup
      • About
        • Amazon Bedrock
        • Anthropic
        • Azure OpenAI
        • Gemini
        • OpenAI
        • OpenAI Compatible
        • Vertex
      • Manage API keys
      • Model failover
      • Enrich prompts
      • Set up prompt guards
        • Advanced guardrails
        • Guardrail Webhook API
      • Stream responses
      • Call functions
      • Rate limit AI requests
      • Observe traffic
      • View traces
    • Inference routing
      • About
      • Static MCP
      • Dynamic MCP
      • Connect via HTTPS
      • Secure access to MCP servers
      • Control access to tools
      • About
      • Connect to an agent
    • Configuration
    • CEL-based RBAC
    • Routes
        • Ingress to single cluster mesh
        • Ingress to multicluster mesh
        • Basic ingress
        • Ingress with Gloo Mesh virtual destinations
      • Set up the UI
      • Explore the UI
      • Review insights
      • Expose the UI via HTTPS
    • OTel stack
    • Control plane metrics
    • Gateway proxy metrics
    • Debug
    • Upgrade
    • Uninstall
      • Gloo Gateway API
      • Kubernetes Gateway API
      • Kgateway API
      • Gloo Gateway CRDs
      • Gloo Gateway
      • Release notes
      • Gloo Gateway changelog
      • Kgateway changelog
    • Software Bill of Materials (SBOM)
    • Version support
    • Port reference
      • Install the gloo gateway CLI
        • gloo gateway analyze
        • gloo gateway check
        • gloo gateway describe
        • gloo gateway get
      • Visualize resource dependencies
    • About Solo Support
    • Submit a request
    • 2.0.x (latest)
    • 1.20.x
    • 1.19.x
    • 1.18.x
    • 1.17.x
    • GitHub
    • Twitter / X
  • to navigate
  • to select
  • to close
    • Home
    • Traffic management
    On this page

    Traffic management

    Learn how you can manipulate incoming traffic and route requests to services in your cluster.

    article

    Destination types

    article

    Buffering

    article

    Direct response

    article

    Dynamic Forward Proxy (DFP)

    article

    External processing (ExtProc)

    article

    Header control

    article

    Health checks

    Enable health checks on the gateway proxy or your backends to automatically monitor their …

    article

    HTTP2

    article

    Matching

    article

    Redirects

    article

    Rewrites

    article

    Route delegation

    article

    Session affinity

    Manage how the gateway proxy selects backend services for incoming client requests, including …

    article

    Traffic splitting

    article

    Transformations

    article

    Weighted routing

    Configure weights for your HTTPRoute rules to control the traffic distribution.

    Solo.io copyright 2025