Tetrate Service BridgeVersion: 1.13.xFeature Status
The following table shows existing TSB features and their current phases. This table will be updated every major or minor release. For the definitions of the phases, please refer to Feature Definitions Terminology
| Description | Status | API | tctl | UI |
|---|---|---|---|---|
| Installation | ||||
| tctl install | Production | N/A | Y | N/A |
| Helm install | Production | N/A | N/A | N/A |
| Istio isolation boundaries | Production | N/A | N/A | N/A |
| Component status | Alpha | Y | N | N |
| Users & Access | ||||
| Automatic synchronization of users & teams from LDAP | Production | Y | Y | Y |
| Automatic synchronization of users & teams from Azure AD | Production | Y | Y | Y |
| Roles | Production | Y | Y | Y |
| Permissions | Production | Y | Y | Y |
| SSO with OIDC | Production | Y | Y | Y |
| Configuration | ||||
| Workspaces | Production | Y | Y | Y |
| Config Groups | Production | Y | Y | Y |
| Configuring Bridged Mode - Traffic | Production | Y | Y | Y |
| Configuring Bridged Mode - Security | Production | Y | Y | Y |
| Configuring Bridged Mode - Gateway | Production | Y | Y | Y |
| Configuring Direct Mode - Traffic | Production | Y | Y | Y |
| Configuring Direct Mode - Security | Production | Y | Y | Y |
| Configuring Direct Mode - Gateway | Production | Y | Y | Y |
| Configuring Direct Mode - IstioInternal | Production | Y | Y | Y |
| Configuration Profiles for Workloads | Beta | Y | Y | Y |
| Unified Gateway | Production | Y | Y | Y |
| Shared Unified Gateway | Alpha | Y | Y | N |
| Unified Gateway Installation & Management via MP | Alpha | Y | Y | N |
| EastWest Gateway | Production | Y | Y | Y |
| Gateway API support | Alpha [ref] | Y | N | Y |
| TCP Traffic | Beta | Y | Y | Y |
| Config Status Propagation | Production | Y | Y | Y |
| GitOps/Kubernetes CRD | Production | Y | N | N |
| Hierarchical Policies | Production | Y | Y | Y |
| Restricted Hierarchical Policies | Production | Y | Y | Y |
| Allow/Deny Rules | Beta | Y | Y | Y |
| Service Security Settings | Production | Y | Y | Y |
| Service Traffic Settings | Production | Y | Y | Y |
| Identity Propagation | Production | Y | Y | Y |
| Network Policy Recommendations | Alpha | N | N | N |
| Network Reachability Settings | Production | Y | Y | Y |
| Upstream Traffic Settings | Deprecated in TSB 1.10.0; End of Life in 1.14.0. Use outbound:upstreamTrafficSettings instead | Y | Y | Y |
| Tier 1 Gateway | Deprecated in TSB 1.10.0; End of Life in 1.14.0. Replaced by Unified Gateway | Y | Y | Y |
| Ingress Gateway (Tier 2) | Deprecated in TSB 1.10.0; End of Life in 1.14.0. Replaced by Unified Gateway | Y | Y | Y |
| Egress Gateway | Deprecated in TSB 1.10.0; End of Life in 1.14.0. Replaced by Unified Gateway | Y | Y | Y |
| Security Domain | Deprecated in TSB 1.12.0; End of Life in 1.14.0 | Y | Y | Y |
| Application | ||||
| Configuring API with OpenAPI Spec | Beta | Y | Y | Y |
| Application Resource (to expose APIs) | Deprecated in TSB 1.11.0; End of Life in 1.13.0. Replaced by Unified Gateway | N | N | N |
| API Gateway | ||||
| Rate limit | Production | Y | Y | Y |
| External authorization | Production | Y | Y | Y |
| OpenAPI Spec validation | Beta | Y | Y | Y |
| WASM Extensions | Production | Y | Y | Y |
| WAF | Beta | Y | Y | Y |
| Observability | ||||
| Service Metrics | Production | N | N | Y |
| Service Topology | Production | N | N | Y |
| Service Tracing | Production | N | N | Y |
| Service Registry | ||||
| Kubernetes services | Production | N | Y | Y |
| Istio ServiceEntries | Beta | N | Y | Y |
| VM Workloads | ||||
| tctl based VM Onboarding | Production | N | Y | N |
| Workload Onboarding for EC2 | Production | N | Y | N |
| Workload Onboarding for On-Premise workload | Beta | N | Y | N |
| Workload Onboarding for ECS | Beta | N | Y | N |
| Other | ||||
| Management Plane database replication | Beta | Y | N | N |
| Support for Ambient clusters | Alpha | Y | Y | Y |
| Segmentation | Pre-Alpha | N | N | N |