Egress
Control outbound traffic from your ambient mesh using ztunnel (L4) or a waypoint (L7).
Egress control in an ambient mesh determines how outbound traffic from your workloads reaches external services and what policies are enforced before traffic leaves the cluster. In an ambient mesh, ztunnel captures outbound traffic from every pod on the node. For traffic destined for external services, you configure an egress gateway that ztunnel routes matched traffic through before releasing connections from the cluster.