Technology · Ebook

Emissary-Ingress: An Envoy API Gateway for Kubernetes

by Shriira Press

Emissary-Ingress is a Kubernetes-native API gateway and ingress controller built on the Envoy proxy — the managed front door that routes, secures, controls, and observes the API traffic entering your cluster. This free book teaches it from the ground up: the API gateway problem and what Emissary-Ingress is, the ingress and gateway landscape, its architecture (the control-plane/data-plane split, configuring Envoy, the self-service model), getting traffic in (load balancers, the Host resource), Mappings (the core routing resource), TLS and secure traffic (cert-manager, mTLS), authentication and authorization (the external auth model), rate limiting and traffic management (canary, traffic splitting, shadowing), observability and resilience (metrics, tracing, timeouts, retries, circuit breaking) and the Gateway API, and operating it in practice. Ten focused chapters with clear diagrams that demystify how external API traffic gets into a Kubernetes cluster — routed, secured, controlled, and observed — through an Envoy-powered API gateway.

Contents

1. 1Preface
2. 2Chapter 1 — What Emissary-Ingress Is
3. 3Chapter 2 — The Ingress and API Gateway Problem
4. 4Chapter 3 — Emissary-Ingress Architecture
5. 5Chapter 4 — Getting Traffic In
6. 6Chapter 5 — Mappings: The Heart of Routing
7. 7Chapter 6 — TLS and Secure Traffic
8. 8Chapter 7 — Authentication and Authorization
9. 9Chapter 8 — Rate Limiting and Traffic Management
10. 10Chapter 9 — Observability, Resilience, and the Gateway API
11. 11Chapter 10 — Operating Emissary-Ingress in Practice