Source File:


A Gateway describes a single Listener (bind address:port) and the routing configuration to upstreams that are reachable via a specific port on the Gateway Proxy itself.

"ssl": bool
"bindAddress": string
"bindPort": int
"useProxyProto": .google.protobuf.BoolValue
"proxyNames": []string
Field Type Description Default
ssl bool if set to false, only use virtual services without ssl configured. if set to true, only use virtual services with ssl configured.
bindAddress string the bind address the gateway should serve traffic on.
bindPort int bind ports must not conflict across gateways for a single proxy.
options top level optional configuration for all routes on the gateway.
status Status indicates the validation status of this resource. Status is read-only by clients, and set by gloo during validation.
metadata Metadata contains the object metadata for this resource.
useProxyProto .google.protobuf.BoolValue Enable ProxyProtocol support for this listener.
httpGateway Only one of httpGateway or tcpGateway can be set.
tcpGateway Only one of tcpGateway or httpGateway can be set.
proxyNames []string Names of the Proxy resources to generate from this gateway. If other gateways exist which point to the same proxy, Gloo will join them together. Proxies have a one-to-many relationship with Envoy bootstrap configuration. In order to connect to Gloo, the Envoy bootstrap configuration sets a role in the node metadata Envoy instances announce their role to Gloo, which maps to the {{ .Namespace }}~{{ .Name }} of the Proxy resource. The template for this value can be seen in the Gloo Helm chart Note: this field also accepts fields written in camel-case. They will be converted to kebab-case in the Proxy name. This allows use of the Gateway Name Helm value for this field Defaults to ["gateway-proxy"].


"virtualServices": []
"virtualServiceSelector": map<string, string>
"virtualServiceNamespaces": []string
Field Type Description Default
virtualServices [] Names & namespace refs of the the virtual services which contain the actual routes for the gateway. If the list is empty, all virtual services in the same namespace as this gateway will apply, with accordance to ssl flag on Gateway above. The default namespace matching behavior can be overridden via virtual_service_namespaces flag below. Only one of virtualServices or virtualServiceSelector should be provided.
virtualServiceSelector map<string, string> Select virtual services by their label. This will apply only to virtual services in the same namespace as the gateway resource, unless virtual_service_namespaces is provided below. Only one of virtualServices or virtualServiceSelector should be provided.
virtualServiceNamespaces []string Expand the search by providing a list of valid search namespaces here, or search all namespaces by setting ‘*‘.
options HTTP Gateway configuration.


"tcpHosts": []
Field Type Description Default
tcpHosts [] TCP hosts that the gateway can route to.
options TCP Gateway configuration.