• Single cluster
    • Multicluster
    • Overview
    • Architecture
    • Relay architecture
  • interactive_space Insights
      • Install the meshctl CLI
      • Licensing
      • System requirements
      • Installation options
    • Install with Helm
      • Best practices for production
          • Setup options
          • Certificate rotation overview
          • Insecure setup
            • Self-signed server certificate
            • BYO server certificate
            • Self-signed server certificate with managed client certificates
            • BYO server certificate with managed client certificate
              • OpenSSL
              • AWS
              • Vault
          • Istio CA overview
          • Bring your own Istio CAs with AWS
      • FIPS images
        • About Redis
        • Built-in Redis
        • Local Redis
        • External Redis
      • Control user access to your resources
    • Upgrade
    • Uninstall
    • Service mesh options
      • Overview
      • Supported Solo distributions of Istio
      • About
        • Install Gloo-managed ambient meshes (alpha)
        • Upgrade Gloo-managed service meshes
        • Install ambient service meshes with Helm
        • Upgrade ambient service meshes with Helm
      • Add apps to the ambient mesh
      • Expose apps with an ingress gateway
      • Control in-mesh traffic with east-west gateways and waypoints
      • Explore Layer 7 observability for ztunnels
      • Control traffic with an egress gateway
        • Install Gloo-managed service meshes
        • Migrate to Gloo-managed service meshes
        • Upgrade Gloo-managed service meshes
        • Install sidecar service meshes with Helm
        • Upgrade sidecar service meshes with Helm
      • Install Istio with EKS add-on
      • Install Istio with AKS Extension
      • Add apps to the service mesh
      • Expose apps with an ingress gateway
      • Upgrade with the Istio lifecycle manager (legacy)
    • About the telemetry pipeline
      • Overview
        • Overview
        • Explore the UI
          • Overview
          • External auth with Google
          • External auth with Dex
          • External auth with Okta
          • OIDC settings in Helm
          • RBAC for resources in the UI
        • Configure the UI for HTTPS
        • Connect the Gloo UI to OpenShift Prometheus
        • Overview
        • Run sample PromQL queries
        • Metrics
        • Alerts
        • Customization options
      • Jaeger
      • Istio access logs
      • Add Istio request traces
      • Add Istio insights
      • Collect compute instance metadata
      • Forward metrics to Datadog
      • Forward metrics to OpenShift
      • Enable logs
      • Gloo Mesh versions
      • Open Source attribution
      • Feature gates
      • Release notes
      • Solo distribution of Istio changelog
      • GatewayLifecycleManager
      • IstioLifecycleManager
      • Dashboard
      • InsightsConfig
      • Helm chart overview
      • Gloo Platform
      • Gloo Platform CRDs
      • meshctl
      • meshctl check
      • meshctl check server
      • meshctl cluster
      • meshctl cluster deregister
      • meshctl cluster list
      • meshctl cluster register
      • meshctl dashboard
      • meshctl debug
      • meshctl debug report
      • meshctl experimental
      • meshctl experimental check-impact
      • meshctl experimental interop-check
      • meshctl install
      • meshctl license
      • meshctl license check
      • meshctl logs
      • meshctl proxy
      • meshctl uninstall
      • meshctl version
      • CVE lifecycle handling
      • Security and CVE scan results
    • Gloo component permissions
    • General debugging
    • Management server
    • Agent
      • Debug Istio
      • Istio and gateway lifecycle manager
      • Knative
    • UI graph
    • Observability pipeline
    • Redis
    • About Solo Support
    • Submit a request
    • Add support information
  • open_in_new Istio documentation
    • main
    • 2.7 (latest)
    • 2.6
    • 2.5
    • GitHub
    • Twitter / X
  • to navigate
  • to select
  • to close
    • Home
    • Setup
    • Advanced setup
    On this page

    These docs use the Kubernetes Gateway API to manage your service mesh. To manage your sidecar service mesh with Gloo Mesh Enterprise APIs instead, see the Gloo Mesh Enterprise docs.

    Advanced setup

    Configure advanced settings for a customized Gloo Mesh setup.

    article

    Best practices for production

    Review the following recommended practices for preparing optional security measures and setting up …

    article

    Certificate management

    Understand and prepare certificates for your POC or production installation of Gloo Mesh.

    article

    FIPS images

    Install FIPS-compliant images for Gloo and Istio.

    article

    Redis

    Review options to back up Gloo components such as the management, rate limiting, or external auth …

    article

    Control user access to your resources

    Use Kubernetes RBAC to control user access to Gloo resources in your clusters.

    Solo.io copyright 2025