• Single cluster
    • Multicluster
    • Overview
    • Architecture
    • Relay architecture
  • interactive_space Insights
      • Install the meshctl CLI
      • Licensing
      • System requirements
      • Installation options
    • Install with Helm
      • Best practices for production
          • Setup options
          • Certificate rotation overview
          • Insecure setup
            • Self-signed server certificate
            • BYO server certificate
            • Self-signed server certificate with managed client certificates
            • BYO server certificate with managed client certificate
              • OpenSSL
              • AWS
              • Vault
          • Istio CA overview
          • Bring your own Istio CAs with AWS
      • FIPS images
        • About Redis
        • Built-in Redis
        • Local Redis
        • External Redis
      • Control user access to your resources
    • Upgrade
    • Uninstall
    • Service mesh options
      • Overview
      • Supported Solo distributions of Istio
      • About
        • Install a managed ambient mesh with the Gloo Operator
        • Manually install an ambient mesh with Helm
        • Migrate from a sidecar mesh
        • Create a multicluster mesh with the Gloo Operator
        • Create a multicluster mesh with Helm
      • Add apps to the ambient mesh
      • Expose apps with an ingress gateway
      • Control in-mesh traffic with east-west gateways and waypoints
      • Control traffic with an egress gateway
      • Secure workload identites with SPIRE
      • Explore Layer 7 observability for ztunnels
        • Upgrade managed ambient meshes with the Gloo Operator
        • Upgrade ambient meshes with Helm
        • Install a managed sidecar mesh with the Gloo Operator
        • Migrate to Gloo-managed service meshes
        • Manually install a sidecar mesh with Helm
        • Create a multicluster mesh with the Gloo Operator
        • Create a multicluster mesh with Helm
      • Install Istio with EKS add-on
      • Install Istio with AKS Extension
      • Add apps to the service mesh
      • Expose apps with an ingress gateway
        • Upgrade managed ambient meshes with the Gloo Operator
        • Upgrade sidecar meshes with Helm
        • Upgrade with the Istio lifecycle manager (legacy)
    • About the telemetry pipeline
      • Overview
        • Overview
        • Explore the UI
          • Overview
          • External auth with Google
          • External auth with Dex
          • External auth with Okta
          • OIDC settings in Helm
          • RBAC for resources in the UI
        • Configure the UI for HTTPS
        • Connect the Gloo UI to OpenShift Prometheus
        • Overview
        • Run sample PromQL queries
        • Metrics
        • Alerts
        • Customization options
      • Jaeger
      • Istio access logs
      • Add Istio request traces
      • Add Istio insights
      • Collect compute instance metadata
      • Forward metrics to Datadog
      • Forward metrics to OpenShift
      • Enable logs
      • Gloo Mesh versions
      • Open Source attribution
      • Feature gates
      • Release notes
      • Solo distribution of Istio changelog
      • GatewayLifecycleManager
      • IstioHelm
      • Dashboard
      • IstioLifecycleManager
      • InsightsConfig
      • Helm chart overview
      • Gloo Platform
      • Gloo Platform CRDs
      • meshctl
      • meshctl check
      • meshctl check server
      • meshctl cluster
      • meshctl cluster deregister
      • meshctl cluster list
      • meshctl cluster register
      • meshctl dashboard
      • meshctl debug
      • meshctl debug report
      • meshctl experimental
      • meshctl experimental interop-check
      • meshctl install
      • meshctl license
      • meshctl license check
      • meshctl logs
      • meshctl proxy
      • meshctl uninstall
      • meshctl version
      • CVE lifecycle handling
      • Security and CVE scan results
    • Gloo component permissions
    • General debugging
    • Management server
    • Agent
      • Debug Istio
      • Istio and gateway lifecycle manager
      • Knative
    • UI graph
    • Observability pipeline
    • Redis
    • About Solo Support
    • Submit a request
    • Add support information
  • open_in_new Istio documentation
    • main
    • 2.8 (latest)
    • 2.7
    • 2.6
    • 2.5
    • GitHub
    • Twitter / X
  • to navigate
  • to select
  • to close
    • Home
    On this page

    These docs use the Kubernetes Gateway API to manage your service mesh. To manage your sidecar service mesh with Gloo Mesh Enterprise APIs instead, see the Gloo Mesh Enterprise docs.

    This version of the documentation is currently under development. Select latest from the version drop down or go to the landing page of the latest stable version.

    Gloo Mesh

    Version: main
    This version is in development and is subject to change. Instead, use the stable latest version.

    play_circle

    Get started

    Deploy Gloo Mesh to gain valuable insights into your Istio service meshes.

    lightbulb

    About

    Learn about the benefits, architecture, and deployment patterns of Gloo Mesh.

    interactive_space

    Insights

    Use the Gloo UI to evaluate the health and efficiency of your service mesh.

    settings

    Setup

    Prepare, customize, upgrade, and uninstall your Gloo Mesh setup.

    sailing

    Istio

    Review Solo distributions of Istio and how you can deploy them.

    query_stats

    Observability

    Monitor your Istio workload health, and access metrics, logs, and traces to troubleshoot issues.

    import_contacts

    Reference

    Review reference documentation for Gloo Mesh, such as API, CLI, Helm, and version reference.

    construction

    Troubleshooting

    Troubleshoot and debug your Gloo Mesh setup.

    handshake

    Get help and support

    Get help, training, and other forms of support.

    open_in_new

    Istio documentation

    Access the Istio documentation.

    Solo.io copyright 2025