Table of contents

Table of contents

1. Airlock Secure Access Hub

2. About this document

2.1. How information is structured in this manual

2.2. Leveled prerequisites

2.3. Warning tiers in this document

2.4. Additional panel types

2.5. Advanced Lucene searches within this online help

3. About Airlock Microgateway

3.1. Airlock Microgateway license editions and support

3.2. Online labs

3.3. Release and support information

4. How to establish security controls

4.1. Empower your counterpart

4.1.1. Blueprints

4.1.2. Templates

4.1.3. Enforce policies

4.1.4. Assess the active configuration

4.1.5. Monitor and analyze

4.1.6. Education and guidelines

4.1.7. Establish GitOps principles

5. System architecture

5.1. Kubernetes cluster without a service mesh

5.2. Kubernetes cluster with an Istio service mesh

5.3. Kubernetes cluster with Cilium

5.4. Installation mode types

6. Getting started – installation and follow-ups

7. Setup requirements and installation information

7.1. Requirements and limitations

7.2. Container image repositories and registries

7.2.1. Verify the image signature

7.2.2. Using a custom image registry

7.3. Installation

7.3.1. Kubernetes

7.3.2. OpenShift

7.4. Uninstallation and upgrade instructions

8. Configuration

8.1. Microgateway Operator

8.2. Microgateway CNI

8.3. Microgateway Engine sidecar injection and configuration

8.3.1. CR SidecarGateway

8.4. Microgateway Session Agent

8.4.1. CR SessionHandling

8.4.2. CR RedisProvider

8.5. Labels and annotations for Airlock Microgateway

9.1. Configuration and monitoring of licenses

9.1.1. Monitor the licensed throughput

9.2. Reducing false-positive blocks

9.3. Logging configuration and output formatting

9.4. Grafana dashboards for metric and log visualization

9.5. Using Microgateway Prometheus metrics

10.1. Completion, validation and tooltips in Visual Studio Code

11. Troubleshooting and support

11.1. Tips for troubleshooting

11.2. Pod is not ready

11.3. List Pods with SidecarGateway selectors

11.4. Listing the SidecarGateway status

11.5. Envoy Admininistration interface

11.6. Inspect the Envoy configuration

11.7. Several SidecarGateway CRs point to the same Pod

11.8. Troubleshooting Microgateway CNI Helm test

11.9. Troubleshooting Microgateway Operator Helm test

11.10. Troubleshooting for network routing issues in the application pod

11.10.1. Network Validator sanity check

11.11. HTTP protocol selection

12. Reference documentation

12.1. Airlock Microgateway API reference documentation

12.2. Available metrics in Prometheus format

12.3. Access log field reference

12.4. License texts