ducing-ambient-mesh/ambient-waypoint.png alt="When additional features are needed, ambient mesh deploys waypoint proxies, which ztunnels connect through for policy enforcement"></a></div><figcaption>When additional features are needed, ambient mesh deploys waypoint proxies, which ztunnels connect through for policy enforcement</figcaption></figure><p>Ambient mesh uses HTTP CONNECT over mTLS to implement its secure tunnels and insert waypoint proxies in the path, a pattern we call <a href=/v1.25/docs/ambient