Ingress

The hanzo ingress commands.

Also for this capability: API · CLI · MCP · SDKs

Your edge: automatic TLS certificates and hostname routing to any backend, changed live.

hanzo ingress routes list

Every command takes --json for the raw response and --help for its own flags. Sign in once with hanzo auth login; the commands below use that session, and the org they act in is the one it carries.

Command	What it does
`hanzo ingress status`	Reports the ingress edge's live posture: the role this instance runs in (app or edge), whether its listeners are bound and on which addresses, the ACME posture (staging flag and certificate cache directory), how many hosts the compiled route table currently serves, and how many the ACME HostPolicy will issue a certificate for.

Middlewares

Command	What it does
`hanzo ingress middlewares create`	Creates or replaces one edge transform and hot-applies it.
`hanzo ingress middlewares get <id>`	Returns one of the caller org's edge transforms by id.
`hanzo ingress middlewares list`	Returns every edge transform the caller's org has configured, ordered by id.
`hanzo ingress middlewares rm <id>`	Removes one of the caller org's edge transforms and hot-applies the change.
`hanzo ingress middlewares set <id>`	Creates or replaces one edge transform and hot-applies it.

Routes

Command	What it does
`hanzo ingress routes create`	Creates or replaces one routing rule and hot-applies the new table — there is no config file and no restart.
`hanzo ingress routes get <id>`	Returns one of the caller org's routing rules by id.
`hanzo ingress routes list`	Returns every routing rule the caller's org has configured, ordered by id.
`hanzo ingress routes rm <id>`	Removes one of the caller org's routing rules and hot-applies the shrunken table, freeing its host for another claim.
`hanzo ingress routes set <id>`	Creates or replaces one routing rule and hot-applies the new table — there is no config file and no restart.

Services

Command	What it does
`hanzo ingress services create`	Creates or replaces one backend pool and hot-applies it.
`hanzo ingress services get <id>`	Returns one of the caller org's backend pools by id.
`hanzo ingress services list`	Returns every backend pool the caller's org has configured, ordered by id.
`hanzo ingress services rm <id>`	Removes one of the caller org's backend pools and hot-applies the change.
`hanzo ingress services set <id>`	Creates or replaces one backend pool and hot-applies it.

TLS

Command What it does

hanzo ingress tls get Returns the caller org's ACME intent together with the edge-wide TLS facts it lands in: which role this instance runs in, whether its listeners are bound, every host the ACME HostPolicy will issue a certificate for (the union across ALL orgs of TLS-marked routes and configured extraHosts, because one process holds one certificate cache), and the ACME directory and account email the process was started with.

hanzo ingress tls replace Replaces the caller org's ACME intent and hot-applies what can be hot-applied.

Command	What it does
`hanzo ingress tls get`	Returns the caller org's ACME intent together with the edge-wide TLS facts it lands in: which role this instance runs in, whether its listeners are bound, every host the ACME HostPolicy will issue a certificate for (the union across ALL orgs of TLS-marked routes and configured extraHosts, because one process holds one certificate cache), and the ACME directory and account email the process was started with.
`hanzo ingress tls replace`	Replaces the caller org's ACME intent and hot-applies what can be hot-applied.

Was this page useful?

PreviousGateway NextDomain