If you want to control traffic flow at the IP address or port level (OSI layer 3 or 4), then you might consider using Kubernetes NetworkPolicies for particular applications in your cluster. NetworkPolicies are an application-centric construct which allow you to specify how a pod is allowed to communicate with various network "entities" (we use the word "entity" here to avoid overloading the more common terms such as "endpoints" and "services", which have specific Kubernetes connotations) over the network. NetworkPolicies apply to a connection with a pod on one or both ends, and are not relevant to other connections.

External HTTP(S) Load Balancing is a proxy-based Layer 7 load balancer that enables you to run and scale your services behind a single external IP address.

Prerequisites
Configure a cluster with vSphere with Tanzu.
Create users or groups for all DevOps engineers who will access the namespace.
Create storage policies for persistent storage. Storage policies can define different types and classes of storage, for example, gold, silver, and bronze.
Create VM classes and content libraries for stand-alone VMs.
Create a content library for Tanzu Kubernetes releases for use with Tanzu Kubernetes clusters. See Creating and Managing Content Libraries for Tanzu Kubernetes releases.
Required privileges:
Namespaces.Modify cluster-wide configuration
Namespaces.Modify namespace configuration