--- schema_version: "1" id: c4b9245284d2092c6ea66b5e2e8e32b6156ec880ff83fe98669931db58a15580 title: Omni Gateway Deployment Models collection: mulesoft version: current locale: en-us portal_url: https://docs.salesforce.com/mulesoft/current/en-us/gateway/latest/gateway-architecture-basic-deployments.md canonical_url: https://docs.mulesoft.com/gateway/latest/gateway-architecture-basic-deployments source_site: docs.mulesoft.com content_type: documentation content_hash: 5bfc1c372d199a4ef74b7e2d8a6dc8f492b0a99694a8c48a902eb766df36098b description: MuleSoft Documentation Site release: "1.14" latest: true --- --- product: Omni Gateway version: 1.14 is-latest-version: true --- # Omni Gateway Deployment Models > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Omni Gateway supports multiple deployment models, which apply to both Connected Mode and Local Mode: - [Standalone deployment](#standalone-deployment) - [Ingress deployment](#ingress-deployment) - [Egress deployment](#egress-deployment) - [Sidecar deployment](#sidecar-deployment) You can extend the deployment models in this overview to all technological stacks that have the appropriate network controls applied. For more information about routing configuration modes, see [Routing Configuration Methods](#routing-configuration-methods). All the following diagrams show Omni Gateway running in Connected Mode. For Omni Gateway running in Local Mode, the only difference is that Anypoint Platform would not be present in the deployment model. This does not affect how information flows between Omni Gateway and the upstream and downstream services. ## Standalone Deployment In a standalone deployment, Omni Gateway acts as a standalone service that protects one or more integration API flows by managing internal traffic. As the following diagram shows, all traffic is inside an organization-owned network. The traffic passes through Omni Gateway before reaching the consumer APIs. ![In a standalone deployment, Omni Gateway and the consumer applications are in the same network.](/mulesoft/current/en-us/gateway/latest/_images/ad-standalone-deployment.png) ## Ingress Deployment Similar to standalone deployment, in an ingress deployment, Omni Gateway acts as a standalone service that protects one or more integration API flows. However, in an ingress deployment, Omni Gateway manages external traffic entering the internal network. Ingress deployment is the most common deployment model. Omni Gateway can act as both an ingress and an egress gateway. As the following diagram shows, all external traffic passes through Omni Gateway before reaching the consumer APIs. Omni Gateway is typically deployed behind a load balancer, and the consumer application does not belong to the same network as Omni Gateway or the APIs. ![In an ingress deployment, Omni Gateway and the consumer applications are in different networks.](/mulesoft/current/en-us/gateway/latest/_images/ad-ingress-deployment.png) > [!NOTE] Ingress deployment is not the same as a Kubernetes Ingress controller or Ingress > `Resource`. For more information about routing configuration, see > [Routing Configuration Methods](#routing-configuration-methods). ## Egress Deployment An egress deployment is the opposite deployment model of an ingress deployment. Omni Gateway still acts as a standalone service that protects one or more integration API flows. However, in an egress deployment, Omni Gateway manages internal traffic exiting the internal network, for example, API requests to non-organization-owned APIs. Omni Gateway can act as both an ingress and an egress gateway. As the following diagram shows, all internal traffic from the consumer application passes through Omni Gateway before reaching the external APIs. ![A diagram of Anypoint Platform depicting the flow of data between the platform, an Omni Gateway, APIs, and a user](/mulesoft/current/en-us/gateway/latest/_images/ad-egress-deployment.png) ## Sidecar Deployment In a sidecar deployment, each Omni Gateway deployment only protects the APIs exposed by its protected service. A new Omni Gateway replica is added with each new protected service. As the following diagram shows, traffic in a sidecar deployment passes through Omni Gateway to the respective consumer API. The consumer application can belong to the same network as Omni Gateway or an external network. ![In a sidecar deployment, Omni Gateway and the consumer application are in the same Kubernetes pod.](/mulesoft/current/en-us/gateway/latest/_images/ad-sidecar-deployment.png) ## Routing Configuration Methods There are different routing configuration methods dependent on what mode Omni Gateway is running in or what technological stack Omni Gateway is deployed on. How connections between Omni Gateway and services are configured is independent of the deployment model. ### Control Plane In control plane routing configuration, Omni Gateway and service connections are configured in a remote control plane. For Omni Gateway, the control plane is Anypoint Platfrom. Control plane configuration is only available in Omni Gateway Connected Mode. ### Custom Resource Definitions (CRDs) In custom resource definitions (CRDs) routing configuration, Omni Gateway and service connections are configured in custom resource yaml files. For Omni Gateway, the CRDs are `APIinstance`, `Service`, `PolicyBinding`, and `Configuration` and are defined in the [Declarative Configuration Reference Guide](https://docs.mulesoft.com/gateway/latest/local-configuration-reference-guide). In Omni Gateway CRDs define connections in Local Mode but are also necessary for some connections in Connected Mode. ### Kubernetes Ingress Resource Omni Gateways running in Local Mode and deployed on Kubernetes can use Kubernetes `Ingress` resources to define connection routing. When routing is defined via `Ingress` resources, Omni Gateway acts as an Ingress Controller. `Ingress` resources are only avaliable in Kubernetes Local Mode. You can use `Ingress` resources and CRDs simultaneously. For more information about how to configure Omni Gateway as an Ingress Controller, see [Configure Omni Gateway as an Ingress Controller in Local Mode](https://docs.mulesoft.com/gateway/latest/gateway-k8-ingress-class). ## See Also - [Integration Use Cases](https://docs.mulesoft.com/gateway/latest/gateway-architecture-uc-overview) - [Redis Shared Storage Models](https://docs.mulesoft.com/gateway/latest/gateway-architecture-shared-storage)