Platform & DevOps·Traffic into and inside the cluster
everything leaving the cluster is funnelled through one hop, so there is one address to allow-list and one place to log it.
Egress gateway
Also calledegress proxy, outbound gateway
A dedicated exit point that all outbound traffic is routed through, giving a stable source identity and a single enforcement and audit point. It is how you satisfy a partner who allow-lists addresses without pinning your workloads to particular nodes. It is also a bottleneck and a failure domain of its own, which is the trade you are making in return for the control.