Calico Ingress Gateway OverviewΒΆ

The Calico Ingress Gateway provides a Kubernetes Gateway API implementation for managing ingress traffic, using Envoy as the data plane. It is built on top of the tigera-operator, which is deployed during platform bootstrap.

The Calico Ingress Gateway (also referred to as the Tigera Gateway) implements the Kubernetes Gateway API. Enabling it deploys an Envoy Gateway controller, installs the Gateway API and Envoy Gateway CRDs, and creates a GatewayClass named tigera-gateway-class. You then define Gateway resources (listeners) and route resources (HTTPRoute, TCPRoute, TLSRoute) to direct external traffic to backend Kubernetes services.

The Calico Operator is the only supported method for managing the deployment and configuration of the Calico Ingress Gateway. See Calico Network Operator Overview (Tigera Operator).