Implementing group-based authorization at the ingress level ensures that sensitive applications are only accessible to authorized user groups. This post covers implementing zero-trust ingress with Traefik + Authorino where different ingress routes are only visible to specific user groups.
This final post brings together everything from the egress gateway series with a comprehensive comparison of all 8 solutions, decision matrices for different scenarios, cost analysis, and practical migration strategies.
Cloud providers offer managed NAT services that provide egress control for Kubernetes clusters without the operational overhead of self-managed solutions. This post covers native cloud NAT options from AWS, GCP, and Azure with practical configuration examples.
Squid is a mature, full-featured HTTP proxy and caching server that can be deployed on Kubernetes for egress control. This post explores using traditional proxy technology for modern Kubernetes egress requirements with access control, caching, and comprehensive logging.
Deploying a custom Envoy proxy as an egress gateway provides maximum flexibility and control over outbound traffic. This post explores building a self-hosted egress solution using Envoy’s advanced features without the complexity of a full service mesh.
Monzo’s Egress Operator is an open-source Kubernetes operator that automates the provisioning and management of AWS NAT Gateways for Kubernetes egress traffic. This post explores a cloud-native approach to egress gateway management with Kubernetes-native CRDs.
Kube-OVN is an open source Kubernetes CNI based on Open vSwitch that provides enterprise-grade networking features including Egress Gateway and Floating IP - completely free and open source. This post explores Kube-OVN’s egress capabilities as another robust open source alternative.
Antrea is an open source Kubernetes CNI based on Open vSwitch that provides advanced networking features including Egress Gateway - completely free and open source. This post explores Antrea’s egress capabilities as a true open source alternative.