Cilium Ingress & Gateway Architecture

Cilium Ingress & Gateway Architecture An architecture diagram generated by Archify. External Client · Internet users · External External Client Internet users Cloud Load Balancer · NLB / ALB · External Cloud Load Balancer NLB / ALB Gateway / Ingress · Gateway API or Ingress resource · Kubernetes Cluster › Cilium Ingress / Gateway Gateway / Ingress Gateway API or Ingress resource Cilium Envoy · L7 Proxy · Kubernetes Cluster › Cilium Ingress / Gateway Cilium Envoy L7 Proxy Service A · Backend · Kubernetes Cluster › Backend Services Service A Backend Service B · Backend · Kubernetes Cluster › Backend Services Service B Backend Service C · Backend · Kubernetes Cluster › Backend Services Service C Backend HTTPS request External Kubernetes Cluster Cilium Ingress / Gateway Backend Services Legend Backend Cloud External

Entry point

  • • Native support for the Cilium Ingress Controller and the Gateway API
  • • A LoadBalancer-type Service fronts it with an EKS NLB (shared / dedicated mode)

L7 handling

  • • The Cilium Envoy proxy performs L7 routing, TLS termination, and load balancing
  • • Requests are distributed to backend services by host and path rules