Traffic security
In this section
Secure traffic using Let's Encrypt and cert-manager
Issue and manage TLS certificates for NGINX Gateway Fabric using Let's Encrypt and cert-manager.
Securing frontend client traffic using mutual TLS
Configure mutual TLS so NGINX Gateway Fabric validates client certificates on HTTPS listeners.
Securing backend traffic using mutual TLS
Encrypt traffic between NGINX Gateway Fabric and backend pods using mutual TLS.
Configure basic authentication
Configure HTTP basic authentication with the AuthenticationFilter CRD in NGINX Gateway Fabric.
Configure OpenID Connect (OIDC) authentication
How to configure OpenID Connect authentication in NGINX Gateway Fabric using the `AuthenticationFilter` custom resource definition (CRD).
Configure external authentication
How to configure external authentication in NGINX Gateway Fabric using the `ExternalAuth` filter on HTTPRoute.
Configure JSON Web Token (JWT) authentication
How to configure JSON Web Token (JWT) authentication in NGINX Gateway Fabric using the `AuthenticationFilter` custom resource definition (CRD).
Configure JSON Web Token (JWT) claim validation
How to configure JSON Web Token (JWT) claim validation in F5 NGINX Gateway Fabric using the `AuthenticationFilter` custom resource definition (CRD).
Configure Cross-Origin Request Sharing (CORS)
Configure Cross-Origin Resource Sharing (CORS) with HTTPCORSFilter in NGINX Gateway Fabric.
Define IP address allowlists and denylists
Create an AccessPolicy to define IP address allowlists or denylists for a Gateway, HTTPRoute, or GRPCRoute.