Considering Switch from NGINX Ingress to Gateway API for Home Setup

[MateusAmin]

I have several services sharing one IP that are routed by domain name and are leverage the Oauth2 annotations for NGINX Ingress. All service were TLS terminated at the ingress with the help of Cert Manager, until now.

Now, I have one pod that required TLS to itself and I have not been able to get NGINX Ingress to play nice, and it is motivating a switch I have had my eye on for awhile. I was hoping I could benefit from some of your expertise before making the jump.

Requirements:

• Upstream TLS: I know I can do passthrough but is it like NGINX Ingress that when I enable it for one it disables L7 features (oauth2 in this case :/) for the rest? I see there are also active discussions about have a UpstreamTSL mode?
• Cert Manger: I think I am solid here.
• Oauth2: I do not see any Oauth2 annotations but would it be possible to use the HTTP redirects/rewrites here?

Thanks for reading!

EDIT: I am just browsing the API and it's looking like for passthrough I need a two Gateways and a second public IP. With one Gateway doing TLS termination and the other doing passthrough. So maybe I should focus on doing rencryption.

EDIT 2: I am got it working with NGINX Ingress (a miss configured port forward :/) so now my motivation has dropped but this API is more intuitive.

[MateusAmin]

I am got it working with NGINX Ingress and now my motivation for the switch has dropped. So I am going to 'close' this.