Egress
Control outbound traffic from your ambient mesh using ztunnel (L4) or a waypoint (L7).
Overview of egress gateways
Control outbound traffic from your ambient mesh using ztunnel (L4) or a waypoint (L7).
L4 ztunnel-native egress Enterprise Alpha
Enforce L4 egress policy directly in ztunnel without deploying dedicated proxy pods.
L7 waypoint egress
Deploy a waypoint proxy as an egress gateway and enforce L7 policies such as HTTP authorization, …
Agengateway waypoint egress Enterprise Alpha
Use agentgateway as an egress waypoint to enforce Layer 7 policies on traffic leaving your ambient …
Advanced mTLS egress Enterprise Alpha
Enable mTLS traffic routing through an egress gateway based on source principal.
Migrate egress controls from sidecar to ambient
Map sidecar egress patterns (REGISTRY_ONLY, egress gateways, exportTo) to their ambient equivalents.