Security and Authentication

The Ambassador Edge Stack makes securing microservices easy with a comprehensive set of security functionality, including automatic TLS, authentication, rate limiting, WAF integration, and fine-grained access control.

Get Started Free Get a Demo

API Gateway Security and Authentication Features

Authentication

Secure access to your services and integrate with popular identity providers. Declare access control policies and control who has access to specific services.

Read the Docs:

Single Sign-On with OAuth/OIDC →

Session Management →

JWT Validation →

Multi-Domain Authentication →

Access Control →

WAF Integration

The Ambassador Edge Stack integrates with Signal Sciences Next-Gen WAF to screen for all incoming traffic at the cluster edge.

Read the Docs:

Signal Sciences and Ambassador →

Learn More:

Announcement →

Rate Limiting

Ensure your services remain available, even when under heavy load.

Read the Docs:

Global Rate Limiting →

Per-User Rate Limiting →

SNI and Automatic HTTPS

The Ambassador Edge Stack enables automatic TLS setup via ACME integration and serving multiple Hosts behind a single IP address, each with their own certificate.

Read the Docs:

Automatic HTTPS →

Server Name Indication (SNI) →

Custom Request Filters

Custom request filters allow you to execute custom logic in Filters. Inspect or validate an incoming request, and add custom Authorization headers.

Read the Docs:

Custom Request Filters →

Edge Stack Can Be Installed with Edge CTL Which Includes a Free TLS Tool

Set up automatic Kubernetes TLS on a unique domain in minutes.

Setting up Kubernetes TLS requires you to gain access to your organization's domain (which can take months) and manage ongoing certificates. Ambassador Edge Stack is the easiest way to get Kubernetes Ingress TLS configured. Edge Stack includes everything you need: a certificate manager, a certificate, and most importantly, a temporary domain pre-configured to get you up and running.