Skip to content

For the complete documentation index, see llms.txt. Markdown versions of all docs pages are available by appending .md to any docs URL.

Agentic mesh

Page as Markdown
Deploy agentgateway as a waypoint proxy to enforce Layer 7 policies for apps in your ambient mesh.
Warning
The agentgateway waypoint feature is in the alpha state. Alpha features are likely to change, are not fully tested, and are not supported for production. For more information, see Solo feature maturity.
Note
This feature requires the following licenses. Contact your account representative to obtain valid licenses.
  • Your ambient mesh must be installed with the Solo distribution of Istio and an Enterprise-level license for Solo Enterprise for Istio.
  • A Solo Enterprise for agentgateway license.
Solo Enterprise for agentgateway is a lightweight, AI-aware proxy that you can deploy as a waypoint in your ambient mesh using the enterprise-agentgateway-waypoint GatewayClass. The agentgateway control plane runs alongside the Istio control plane and is compatible with multicluster and multi-network ambient mesh peering. Unlike the community istio-waypoint, agentgateway uses a CEL-based policy model (EnterpriseAgentgatewayPolicy) with no EnvoyFilter dependency, and adds native support for AI workloads: routing to LLM providers, token-based rate limiting, and MCP targets.
Use agentgateway as a waypoint when you need:
  • CEL-based authorization: Match on source identity, HTTP method, path, and header attributes in a single policy expression, without writing EnvoyFilters.
  • AI and agentic workloads: Route traffic to OpenAI, Anthropic, or other LLM providers and configure MCP backends for agent-to-tool communication.
  • Rate limiting: Apply request-based, token-based, or CEL-based limits to services using RateLimitConfig.
  • Multicluster mesh: Deploy across clusters in a Solo distribution of Istio peering topology with full multi-network support.
  • Workload identity propagation: Forward or exchange WIMSE Workload Identity Tokens for outbound requests to external services.
For the community istio-waypoint GatewayClass, see Configure waypoints.
Get started

About agentic mesh Enterprise Alpha
Learn how the agentic mesh architecture uses cryptographic workload identity, AI-aware policy …
Install agentgateway as a waypoint Enterprise Alpha
Install agentgateway and deploy it as a waypoint proxy in your ambient mesh.
AI backends Alpha
Use AgentgatewayBackend resources to route waypoint traffic to AI providers like OpenAI and …
Policies Alpha
Apply Layer 7 authorization policies and traffic routes to services using an agentgateway waypoint.
Egress gateway Alpha
Use agentgateway as an egress waypoint to enforce Layer 7 policies on traffic leaving your ambient …
Ingress gateway
Use agentgateway as an ingress gateway to route external traffic into your ambient mesh.
Migrate from Istio waypoints to agentgateway waypoints Enterprise Alpha
Run Istio and agentgateway waypoints alongside each other in the same mesh, and migrate services …
OperationsSolo UI