Edge Traffic Management

A variety of advanced examples for managing traffic at the edge (i.e., ingress and egress traffic) of an Istio service mesh.

Ingress Gateway without TLS Termination

Describes how to configure SNI passthrough for an ingress gateway.

TLS Origination for Egress Traffic

Describes how to configure Istio to perform TLS origination for traffic to external services.

Configure an Egress Gateway

Describes how to configure Istio to direct traffic to external services through a dedicated gateway.

Egress Gateway with TLS Origination

Describes how to configure an Egress Gateway to perform TLS origination to external services.

Configure Egress Traffic using Wildcard Hosts

Describes how to enable egress traffic for a set of hosts in a common domain, instead of configuring each and every host separately.

SNI Monitoring and Policies for TLS Egress Traffic

Describes how to configure SNI monitoring and apply policies on TLS egress traffic.

Connect to an External HTTPS Proxy

Describes how to configure Istio to let applications use an external HTTPS proxy.

Securing Kubernetes Ingress with Cert-Manager

Demonstrates how to obtain Let's Encrypt TLS certificates for Kubernetes Ingress automatically using Cert-Manager.