<p>I am trying to proxy all outbound traffic coming from a Kube cluster. Presumably, the topology  would look something like this:</p>

<p><a href="https://i.stack.imgur.com/p89r8.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/p89r8.png" alt="enter image description here"></a></p>

<p>Preferably, I'm looking for a lightweight solution that doesn't require the installation of additional components, sidecars or a ton of configuration but I'm not entirely sure what the solution landscape looks like.</p>

<p>It feels straightforward enough so I'm hoping there's a straightforward solution.</p>

<p>For reference, I'm using an AKS cluster.</p>

<p>I don't know if this can be done with vanilla kubernetes. But what you are requesting sounds an awful lot like Istio.io "Egress Gateway" Feature.</p>

<p><a href="https://istio.io/docs/tasks/traffic-management/egress/egress-gateway/" rel="nofollow noreferrer">https://istio.io/docs/tasks/traffic-management/egress/egress-gateway/</a></p>

<p>Though theoretically, you could program your application to always contact your proxy and then block egress to other ips using a Kubernetes <a href="https://kubernetes.io/docs/concepts/services-networking/network-policies/" rel="nofollow noreferrer">Network Policy</a> resource.</p>

<p>Another theoretical suggestion I can think of (though I've never done it) is to set up a default gateway for your AKS VNet and route all outgoing traffic to your proxy.</p>
