• Single cluster
    • Multicluster  ENTERPRISE
    • Overview
    • Architecture
    • Relay architecture
      • Overview
      • Architecture
        • Overview
        • Enterprise features
        • Supported versions
      • Gloo Mesh and ambient
        • Gloo Operator
        • Helm
        • Migrate from a sidecar mesh
        • Add services to the mesh
        • Add ECS services to the mesh  ENTERPRISE
        • Add VMs to the mesh
          • Gloo Operator
          • Helm
        • Flat networking (advanced)
        • Add services to the mesh
        • Add ECS services to the mesh
        • Add VMs to the mesh
        • Overview
        • Make services available across clusters
        • About multitenancy and namespace sameness
        • Namespace flexibility with segments
        • Create segments
      • Overview
      • Ingress
      • East-west and waypoints
        • Standard egress setup
        • Advanced mTLS egress  ENTERPRISE
    • Resiliency
      • Overview
      • Secure workload identites with SPIRE  ENTERPRISE
      • Overview
      • Layer 7 observability for ztunnels  ENTERPRISE
        • Gloo Operator
        • Helm
      • Drain clusters in the mesh  ENTERPRISE
      • Uninstall
      • Service mesh options
        • Overview
        • Supported Solo distributions of Istio
        • Gloo Operator
        • Migrate to the Gloo Operator
        • Helm
        • EKS add-on
        • AKS extension
          • Gloo Operator
          • Helm
        • Flat networking (advanced)
    • Enroll apps
      • Overview
      • Ingress
      • Egress
    • Resiliency
    • Security
    • Observability
      • Gloo Operator
      • Helm
      • Istio lifecycle manager (deprecated)
        • Install the meshctl CLI
        • Licensing
        • System requirements
        • Installation options
      • Single cluster management
      • Multicluster management
      • Install in air-gapped environments
    • Explore the UI
    • Review insights
      • About the telemetry pipeline
      • Collect compute instance metadata
      • Collect Istio access logs
      • Collect Istio request traces with Jaeger
      • Enable logging
        • Overview
        • Run sample PromQL queries
        • Metrics
        • Alerts
        • Customization options
        • Forward metrics to Datadog
        • Forward metrics to OpenShift
      • Best practices for production
          • Setup options
          • Certificate rotation overview
          • Insecure setup
            • Self-signed server certificate
            • BYO server certificate
            • Self-signed server certificate with managed client certificates
            • BYO server certificate with managed client certificate
              • OpenSSL
              • AWS
              • Vault
          • Istio CA overview
          • Bring your own Istio CAs with AWS
      • FIPS images
        • Overview
          • Overview
          • External auth with Google
          • External auth with Dex
          • External auth with Okta
          • OIDC settings in Helm
          • RBAC for resources in the UI
        • Configure the UI for HTTPS
        • Connect the Gloo UI to OpenShift Prometheus
        • About Redis
        • Built-in Redis
        • Local Redis
        • External Redis
      • Control user access to your resources
    • Upgrade
    • Uninstall
      • Gloo Mesh (OSS APIs) versions
      • Open Source attribution
      • Feature gates
      • Release notes
      • Gloo Operator changelog
          • 1.28.2
          • 1.28.1-patch0
          • 1.28.1
          • 1.28.0-patch0
          • 1.28.0
          • 1.27.5
          • 1.27.4
          • 1.27.3-patch0
          • 1.27.3
          • 1.27.2
          • 1.27.1-patch1
          • 1.27.1-patch0
          • 1.27.1
          • 1.27.0-patch0
          • 1.27.0
          • 1.26.8
          • 1.26.7
          • 1.26.6
          • 1.26.5
          • 1.26.4
          • 1.26.3-patch1
          • 1.26.2-patch0
          • 1.26.3
          • 1.26.2
          • 1.26.1-patch0
          • 1.26.1
          • 1.26.0
          • 1.25.5-patch2
          • 1.25.5-patch1
          • 1.25.5-patch0
          • 1.25.5
          • 1.25.4
          • 1.25.3
          • 1.25.2-patch0
          • 1.25.2
          • 1.25.1
          • 1.25.0
          • 1.24.6-patch1
          • 1.24.6-patch1
          • 1.24.6-patch0
          • 1.24.6
          • 1.24.5
          • 1.24.4
          • 1.24.3
          • 1.24.2
          • 1.24.1
          • 1.24.1-patch1
          • 1.24.0
          • 1.23.6-patch3
          • 1.23.6-patch2
          • 1.23.6-patch1
          • 1.23.6-patch0
          • 1.23.6
          • 1.23.5
          • 1.23.4
          • 1.23.3
          • 1.23.2-patch1
          • 1.23.2
          • 1.23.1
          • 1.23.0-patch1
          • 1.23.0-patch0
          • 1.23.0
          • 1.22.8-patch2
          • 1.22.8-patch1
          • 1.22.8-patch0
          • 1.22.8
          • 1.22.7
          • 1.22.6
          • 1.22.5-patch0
          • 1.22.5
          • 1.22.4
          • 1.22.3-patch1
          • 1.22.3-patch0
          • 1.22.3
          • 1.22.1
          • 1.22.0
      • Dashboard
      • GatewayLifecycleManager
      • InsightsConfig
      • IstioHelm
      • IstioLifecycleManager
      • Gloo Operator APIs
      • Helm chart overview
      • Gloo Platform
      • Gloo Platform CRDs
      • Gloo Operator
        • meshctl
        • meshctl check
        • meshctl check server
        • meshctl cluster
        • meshctl cluster deregister
        • meshctl cluster list
        • meshctl cluster register
        • meshctl dashboard
        • meshctl debug
        • meshctl debug report
        • meshctl experimental
        • meshctl experimental interop-check
        • meshctl install
        • meshctl license
        • meshctl license check
        • meshctl logs
        • meshctl proxy
        • meshctl uninstall
        • meshctl version
        • Overview
        • istioctl bootstrap
        • istioctl ecs add-service
        • istioctl multicluster check
        • istioctl multicluster expose
        • istioctl multicluster link
      • CVE lifecycle handling
      • Security and CVE scan results
    • Gloo component permissions
    • General debugging
    • Management server
    • Agent
      • Debug Istio
      • Gloo Operator and ServiceMeshController
      • Multicluster peering
      • Knative
    • UI graph
    • Observability pipeline
    • Redis
    • About Solo Support
    • Submit a request
    • Add support information
  • open_in_new Istio documentation
    • Gloo Mesh (OSS APIs)
    • main
    • 2.11 (latest)
    • 2.10
    • 2.9
    • 2.8

    • Gloo Mesh (Gloo Platform APIs)
    • 2.11
    • 2.10
    • 2.9
    • 2.8
    • GitHub
    • Twitter / X
  • to navigate
  • to select
  • to close
    • Home
    • Istio ambient mesh
    On this page

    Istio ambient mesh

    Explore an Istio service mesh without sidecars by running an ambient mesh with Gloo Mesh (OSS APIs).

    article

    About

    Review conceptual information about ambient mesh and the Solo distributions of Istio that you can …

    article

    Single cluster

    Set up an ambient mesh setup in one cluster.

    article Enterprise

    Multicluster

    Get started with a multicluster ambient mesh that spans all of your clusters.

    article

    Traffic management

    Review options for configuring request routing and traffic management for apps in your ambient mesh.

    article

    Resiliency

    Review options for making your individual apps and overall ambient mesh more resilient.

    article

    Security

    Review security features that are built into ambient mesh, such as mTLS, and configure further …

    article

    Observability

    Review built-in and optional observability tools to monitor the health of your ambient mesh.

    article

    Operations

    Perform day-2 operations on your ambient mesh.

    Solo.io copyright 2026