Table of contents

Table of contents

1. Airlock Secure Access Hub

2. About this document

2.1. How information is structured in this manual

2.2. Leveled prerequisites

2.3. Warning tiers in this document

2.4. Additional panel types

2.5. Advanced Lucene searches within this online help

3. About Airlock Microgateway

3.1. Airlock Microgateway editions and support

3.2. Release and support information

4. How to establish security controls

4.1. Empower your counterpart

4.1.1. Blueprints

4.1.2. Templates

4.1.3. Enforce policies

4.1.4. Assess the active configuration

4.1.5. Monitor and analyze

4.1.6. Education and guidelines

4.1.7. Establish GitOps principles

5. Getting started – installation and follow-ups

5.1. Online labs

6. System architecture

6.1. Kubernetes cluster without a service mesh

6.2. Kubernetes cluster with an Istio service mesh

6.3. Kubernetes cluster with Cilium

7. Setup requirements and installation information

7.1. Requirements and limitations

7.2. Container image repositories and registries

7.2.1. Verify the image signature

7.2.2. Using a custom image registry

7.3. Installation

7.3.1. Kubernetes

7.3.2. OpenShift

7.4. Uninstallation and upgrade instructions

8. Configuration

8.1. Microgateway Operator

8.2. Microgateway CNI

8.3. Microgateway Engine

8.3.1. CR SidecarGateway

8.4. Labels and annotations for Airlock Microgateway

9.1. Licensing and license-dependent behavior

9.1.1. Monitor the licensed throughput

9.2. Reducing false-positive blocks

9.3. Logging configuration and output formatting

9.4. Microgateway as a data source for Prometheus metrics

10.1. Completion, validation and tooltips in Visual Studio Code

11. Troubleshooting and support

11.1. Tips for troubleshooting

11.2. Pod is not ready

11.3. List Pods with SidecarGateway selectors

11.4. Listing the SidecarGateway status

11.5. Envoy Admininistration interface

11.6. Inspect the Envoy configuration

11.7. Several SidecarGateway CRs point to the same Pod

11.8. Troubleshooting Microgateway CNI Helm test

11.9. Troubleshooting Microgateway Operator Helm test

11.10. Troubleshooting for network routing issues in the application pod

11.10.1. Network Validator sanity check

12. Reference documentation

12.1. Airlock Microgateway API and OperatorConfig reference

12.2. Available metrics in Prometheus format

12.3. Default access log field reference

12.4. License texts