Gateway Api

The Gateway API is a standardized set of resources for routing HTTP, gRPC, and TCP traffic into and within Kubernetes clusters. It serves as a framework for defining load balancer listeners and routing rules for both Layer 4 and Layer 7 protocols, acting as a specification for ingress and service mesh traffic interfaces.

The project utilizes a role-oriented configuration that separates infrastructure provisioning from routing logic. It implements a class-based provider selection system to match requested infrastructure to specific controller implementations and employs a conformance-driven specification to ensure all implementations pass standardized tests.

The API covers a broad range of networking domains, including external ingress management, internal service mesh routing, and Layer 4 load balancing. It incorporates security and access control primitives such as backend TLS configuration, hostname ownership delegation to prevent route hijacking, and cross-namespace reference authorization.

The project includes a networking conformance suite used to verify that implementations adhere to the official API specifications.

Features

Ingress Controllers - Provides a standardized API for routing external web traffic into Kubernetes clusters using role-oriented configuration.

Ingress Controllers - Provides a standardized API to define entry points and route external HTTP, gRPC, and TCP traffic into Kubernetes clusters.

Service Mesh - Manages internal traffic flow between services within a cluster using routing rules associated with service resources.

Hostname Ownership Delegation - Prevents route hijacking by assigning specific hostnames to dedicated namespaces on gateway listeners.

Kubernetes Ingress Specifications - Implements a role-oriented API that separates infrastructure provisioning from traffic routing for cluster entry points.

Mesh Traffic Policy Management - Defines routing rules and policies for managing communication between internal services within a cluster.

Kubernetes Gateway API Standard - Provides the standardized set of resources for routing HTTP, gRPC, and TCP traffic in Kubernetes.

Layer 4 and Layer 7 Proxies - Provides a framework for defining load balancer listeners and routing rules for both Layer 4 and Layer 7 protocols.

Load Balancers - Triggers the automated provisioning of load balancer instances and network addresses based on requested infrastructure classes.

L4 and L7 Routing Abstractions - Abstracts traffic management into distinct layers for L4 TCP/UDP and L7 HTTP/gRPC routing.

Traffic Routing - Implements a standardized set of resources for directing HTTP and gRPC traffic to internal services.

Layer 4 TCP Routing - Directs TCP, UDP, and TLS traffic to expose non-HTTP services through standardized gateway implementations.

Route Binding Permissions - Implements selector-based controls to define which namespaces are authorized to attach routing rules to a gateway listener.

Role-Oriented Resource Separation - Separates infrastructure provisioning from routing logic by dividing configuration into gateway, route, and backend resources.

Protocol Conformance Testing - Verifies that networking implementations adhere to official specifications via a standardized test suite.

Protocol Conformance Suites - Provides a standardized test suite to ensure networking implementations adhere to the official API specifications.

Specification Conformance Validation - Defines a rigid set of resource schemas and behaviors verified through standardized conformance tests.

Controller Class Selection - Provides a class-based system to match requested infrastructure to specific controller implementations.

Selector-Based Rule Filtering - Uses label selectors to bind routing rules to gateway listeners and manage namespace influence.

gRPC Traffic Routing - Directs requests to gRPC services using protocol-specific routing rules to optimize high-performance API communication.

Hostname Delegation - Assigns hostnames and namespaces to specific gateway listeners to prevent route hijacking.

Cross-Namespace Reference Grants - Uses explicit permission objects to allow routing resources in one namespace to target services in another.

TLS Traffic Encryption - Defines how gateways communicate with backend services using TLS to secure traffic between the proxy and application.

Namespace Access Controls - Grants permission for resources in one namespace to reference objects in another to link services and routes.

kubernetes-sigsgateway-api

Features

Star history