Intent-driven ingress traffic orchestration across clouds, on-prem environments, Kubernetes clusters, and VMs.
Manage ingress traffic from anywhere to anywhere with global service discovery, traffic policy configuration, and observability.
Achieve service level objective targets with dynamic load balancing across compute resources for platform teams.
Rollout applications faster with selfService publishing without network tickets for developers.
Intelligently gateways work synchronously to optimize traffic across Kubernetes, VMs, cloud APIs.
Reduce complexity by replacing disparate application load balancers and ingress controllers with Envoy.
Unlock app team productivity with safe self-service and consistent end-to-end observability.
Multiple Kubernetes Clusters, VMs, Cloud APIs, on-prem or in the cloud.
Global Service Registry
Routability and visibility for endpoints across all deployments.
Unified Routing Stack
Envoys consistently route and secure traffic from edge to endpoint.
Centralized Management
Tetrate-hosted or managed management plane.
Two-tier Envoy-based architecture with globally managed configuration that maximizes availability, security, and flexibility.
Availability
Dynamic failover by endpoint health, load, or custom weighting.
Traffic Shaping
Route by hostname, path, session, or perform app canary.
Security
Consistent mTLS, JWT, OAuth2, rate limiting, validation, logging end-to-end.
Top-down enforcement while enabling self-service to achieve productivity without sacrificing control.
Intent-driven
Easy integration with existing CI/CD tooling or UI.
Self-service with Guardrails
Built-in developer troubleshooting console protected with RBAC.
Defaults & Mandates
Configuration templates with customizable enforcement.
