Skip to content
This version of the documentation is currently under development. Select the stable version from the version drop down.

For the complete documentation index, see llms.txt. Markdown versions of all docs pages are available by appending .md to any docs URL.

Egress

Page as Markdown
Control outbound traffic from your ambient mesh using ztunnel (L4) or a waypoint (L7).
Overview of egress gateways
Control outbound traffic from your ambient mesh using ztunnel (L4) or a waypoint (L7).
L4 ztunnel-native egress Enterprise Alpha
Enforce L4 egress policy directly in ztunnel without deploying dedicated proxy pods.
L7 waypoint egress
Deploy a waypoint proxy as an egress gateway and enforce L7 policies such as HTTP authorization, …
Agengateway waypoint egress Enterprise Alpha
Use agentgateway as an egress waypoint to enforce Layer 7 policies on traffic leaving your ambient …
Advanced mTLS egress Enterprise Alpha
Enable mTLS traffic routing through an egress gateway based on source principal.
Migrate egress controls from sidecar to ambient
Map sidecar egress patterns (REGISTRY_ONLY, egress gateways, exportTo) to their ambient equivalents.
IngressTraffic splitting