Egress Overview

Egress Overview An architecture diagram generated by Archify. Pod · Application workload · Architecture component Pod Application workload Envoy Sidecar · Intercepts outbound traffic · Service Mesh Envoy Sidecar Intercepts outbound traffic Egress Gateway · istio-egressgateway · Service Mesh Egress Gateway istio-egressgateway External Service · api.external.com · Architecture component External Service api.external.com outbound request VirtualService routing HTTPS 443 Service Mesh Legend Backend Security External

ServiceEntry

  • • Registers api.external.com as a MESH_EXTERNAL host
  • • resolution: DNS, port 443 HTTPS

Egress Gateway

  • • Gateway listens for api.external.com:443 in TLS PASSTHROUGH mode
  • • VirtualService routes mesh → istio-egressgateway → external service