standard
gateway.networking.k8s.io/v1 API providing the Gateway and HTTPRoute resources that front the MCP backend on port 3000.
No evidence-backed relationships are recorded.
Solo's agentgateway runs Coraza as a shared extension, and the write-up's own warning is that a WAFPolicy without HeadersAndBody mode and a JSON body processor will pass every payload while looking healthy.
Reality
Written as separate entries, a country check and a model allowlist become alternatives, so a caller from a restricted jurisdiction gets through by naming an approved model, and the policy still reports Accepted and Attached.
Reality
AWS ends App Mesh support in September 2026. One team scored the replacements on weighted criteria, wrote a rollback for every step, and moved about 40 services in two phases with no outage.
Reality
The filter is a spec field inside an HTTPRoute rule rather than an Nginx annotation, which is what makes it a genuine migration unblocker. The compute saving depends on a maxAge default of five seconds that you have to override.
Reality
A dev.to walkthrough on agentgateway makes a narrow point worth taking seriously: an agent that retries on failure will keep hitting an unrated MCP server until something gives.
Reality