Tutorials

Hands-on walkthroughs, from your first route to mutual TLS, shared gateways, rate limiting, a WAF and authentication (each one builds on the previous).

Each tutorial is self-contained and scoped to one use case. They assume a cluster with krouter installed and increase in complexity; if you are new to the Gateway API, do them in order.

Hello, HTTP

Expose a web application through your first Gateway and HTTPRoute.

Beginner

TLS termination

Serve HTTPS with certificates from a standard Kubernetes Secret, rotated without downtime.

Beginner

Traffic management

Canary releases with weights, redirects, rewrites, header filters, mirrors, timeouts and CORS.

Intermediate

Routing gRPC

GRPCRoute with method and header matching, and cleartext HTTP/2 to your backends.

Intermediate

L4: TCP, UDP and TLS

Forward raw TCP streams, UDP flows, and TLS by SNI (passthrough or terminated at the gateway).

Intermediate

Mutual TLS

Validate client certificates at the gateway and re-encrypt to backends with verified identities.

Advanced

Multi-team gateways

Share one gateway safely across namespaces with allowedRoutes, ReferenceGrants and ListenerSets.

Advanced

Rate limiting

Throttle clients per route with token buckets configured from ConfigMaps: keys, bursts and per-route overrides.

Intermediate

Web application firewall

Put the embedded OWASP Core Rule Set in front of a route, layer your own SecLang rules from ConfigMaps, and ship full rulesets as files.

Advanced

Authentication

Put a login in front of an application: directory-backed credentials, group authorization, identity headers, and bearer tokens for APIs.

Advanced