Security

Use Gloo policies to secure the traffic within your service mesh environment.

Concepts

Learn about how to secure your service mesh.

Access policy

Control access for workloads in your service mesh.

CORS

Specify external domains that can access your routes with cross-origin resource sharing.

External authentication and authorization

Set up an external authentication, such as basic, passthrough, API key, OAuth, OPA, or LDAP.

JWT

Control access or route traffic based on verified claims in a JSON web token (JWT).

Rate limiting

Control the rate of requests to destinations within the service mesh.