Running Ambassador in Production

This section of the documentation is designed for operators and site reliability engineers who are managing the deployment of Ambassador. Learn more below:

• Global Configuration: The Ambassador module is used to set system-wide configuration.
• Exposing Ambassador to the Internet: Host CRD defines how Ambassador is exposed to the outside world, managing TLS, domains, and such.
• Load Balancing: Ambassador supports a number of different load balancing strategies as well as different ways to configure service discovery
• Gzip Compression
• Deploying Ambassador: On Amazon Web Services | Google Cloud | general security and operational notes, including running multiple Ambassadors on a cluster
• TLS/SSL: Simultaneously Routing HTTP and HTTPS | HTTP -> HTTPS Redirection | Mutual TLS | TLS origination
• Statistics and Monitoring: Integrating with Prometheus, DataDog, and other monitoring systems
• Extending Ambassador Ambassador can be extended with custom plug-ins that connect via HTTP/gRPC interfaces. Custom Authentication | The External Auth protocol | Custom Logging | Rate Limiting | Distributed Tracing
• Troubleshooting: Diagnostics | Debugging)
• Ingress: Ambassador can function as an Ingress Controller
• Error Response Overrides: Ambassador can override 4xx and 5xx responses with custom response bodies