gateway-routing

Expose Kubernetes services via Gateway API with TLS and Coraza WAF.

24|3|Updated Mar 31, 2022

Search Tags:#kubernetes #waf #tls #gateway #gateway-api #coraza

Ready to run

npx skills add https://github.com/ionfury/homelab --skill gateway-routing

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: gateway-routing
Source: https://github.com/ionfury/homelab/tree/main/.claude/skills/gateway-routing
Command: npx skills add https://github.com/ionfury/homelab --skill gateway-routing

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Gateway routing, TLS certificates, and WAF configuration for Kubernetes platforms, enabling safe exposure of services via Gateway API with minimal operational overhead.

Core Features & Use Cases

Route services using Kubernetes Gateway API with internal and external gateways.
Manage TLS certificates via cert-manager using Let's Encrypt or internal CA.
Integrate Coraza WAF on the external gateway and tune rules for safe, high-availability traffic.
Provide guidance for debugging TLS, routing, and gateway issues across environments.

Quick Start

Create an HTTPRoute for a new service and verify end-to-end TLS through the external gateway.

Frequently Asked Questions about gateway-routing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I route Kubernetes services securely using Gateway API?▼

Secure Kubernetes Gateway API routing is configured by creating HTTPRoute resources attached to internal or external gateways, with TLS termination handled via cert-manager certificates for safe service exposure.

Can I use cert-manager with Let's Encrypt for Kubernetes Gateway API TLS?▼

Cert-manager supports Gateway API TLS by issuing certificates from Let's Encrypt for external gateways or an internal CA for internal gateways, ensuring automated end-to-end encryption.

How do I set up a dual-gateway configuration for homelab Kubernetes?▼

A dual-gateway homelab setup uses separate internal and external Gateway API listeners, allowing you to isolate private services while exposing public ones with TLS and WAF protection.

Does Coraza WAF work with Kubernetes Gateway API for external traffic?▼

Coraza WAF integrates with the external Gateway API gateway to inspect and filter internet-facing traffic, allowing you to tune Web Application Firewall rules for safe external service exposure.

Why is my Gateway API HTTPRoute not routing traffic correctly?▼

HTTPRoute traffic failures often stem from invalid gateway selection or missing TLS attachments; troubleshooting involves validating HTTPRoute parentRefs and Coraza WAF policy attachments across internal and external gateways.

What is the best way to debug TLS issues on a Kubernetes Gateway API gateway?▼

Debugging Gateway API TLS issues involves verifying cert-manager certificate readiness, checking gateway listener configurations, and ensuring HTTPRoutes correctly attach to TLS-enabled parent gateways.