mTLS

Secure the relay connection between the Gloo management server and agent by using mutual TLS. To learn more about available relay certificate setups, see Setup options.

Choose between the following options:

• Self-signed server certificate with managed client certificates: Use Gloo Gateway self-signed root and intermediate CA certificates and use these credentials to create the server TLS certificate for the Gloo management server and the client TLS certificate for the Gloo agent.

• BYO server certificate with managed client certificate: Use your preferred PKI provider to create custom certificates for the Gloo management server and use Gloo Gateway's built-in capability to automatically issue client TLS certificates for Gloo agents.

• BYO server and client certificates: Bring your own server and client TLS certificates and manage the TLS certificate lifecycle yourself.