Egress
Control outbound traffic from your ambient mesh using ztunnel (L4) or a waypoint (L7).
Overview
Compare L4 ztunnel-native and L7 waypoint egress options for your ambient mesh.
L4 ztunnel-native egress Enterprise Alpha
Enforce L4 egress policy directly in ztunnel without deploying dedicated proxy pods.
L7 waypoint egress
Deploy a waypoint proxy as an egress gateway and enforce L7 policies such as HTTP authorization, …
Agengateway waypoint egress Enterprise Alpha
Use agentgateway as an egress waypoint to enforce Layer 7 policies on traffic leaving your ambient …
Advanced mTLS egress Enterprise Alpha
Enable mTLS traffic routing through an egress gateway based on source principal.