User Guides

How to configure your mesh to take advantage of ambient mode.

Add workloads to the mesh

Understand how to add workloads to an ambient mesh.

Verify mutual TLS is enabled

Understand how to verify mTLS is enabled among workloads in an ambient mesh.

Ambient and Kubernetes NetworkPolicy

Understanding how CNI-enforced L4 Kubernetes NetworkPolicy interacts with Istio's ambient mode.

Use Layer 4 security policy

Supported security features when only using the secure L4 overlay.

Configure waypoint proxies

Gain the full set of Istio features with optional Layer 7 proxies.

Traffic Distribution

Control how traffic is distributed to endpoints in ambient mode.

Use Layer 7 features

Supported features when using a L7 waypoint proxy.

Extend waypoints with WebAssembly plugins

Describes how to make remote WebAssembly modules available for ambient mode.

Extend waypoints with Lua scripts

Describes how to extend ambient mode waypoint proxies using inline Lua scripts.

Troubleshoot connectivity issues with ztunnel

How to validate the node proxies have the correct configuration.

Troubleshoot issues with waypoints

How to investigate problems routing through waypoint proxies.