Emissary-ingress

Linux · Self-hosted

Freedom report

Two barsScore 6.4

Free tierA free tier is on its own pricing page
Open codeNo open-source code on record
Runs widely1 of 6 device platforms
DocumentedPlans, terms and facts published

Emissary-ingress is ranked #5 of 27 in API gateway software on Freedom251. It runs on Linux, Self-hosted. There is a free plan.

Emissary-ingress plans and pricing

All plans

Emissary-ingress Free Open-source Kubernetes API gateway emissary-ingress.dev · 3 Oct 2026

Compared on API gateway software

Free plan: Yes
Deployment model: self-hosted
Supported protocols: HTTP, HTTPS, HTTPPROXY, HTTPSPROXY, TCP, TLS, gRPC, HTTP/3
Authentication methods: Basic authentication, external HTTP or gRPC authentication service, client certificate validation, mutual TLS
Rate limiting: Yes
Request transformation: Yes

Best Emissary-ingress alternatives

See all 12

Two bars Gravitee API Gateway Free tier No. 1$2,500/mo6.6 One bar Kong Gateway Free tier No. 2Free6.5 Two bars KrakenD API Gateway Free tier No. 3Free6.5 One bar Tyk Gateway Free tier No. 4Free6.5 One bar Envoy Gateway Free tier No. 6Free6.3 One bar Google Cloud Endpoints Free tier No. 7$1.50/mo6.3

The record

What it does: Emissary-ingress is an open-source Kubernetes-native API gateway, Layer 7 load balancer, and Kubernetes Ingress built on Envoy Proxy.
For: Emissary was designed for cloud-native organizations where developers have operational responsibility for their services, and for use by developers and operators.
Self-service: Developers can add, remove, merge, or separate services through Kubernetes resources or annotations.
Canary deployments: Developers can control how much production traffic is routed to a service through annotations.
Architecture: Emissary persists state in Kubernetes instead of requiring a separate database, and uses Envoy for traffic routing and proxying.
Protocol support: Emissary supports gRPC and HTTP/2 routing.
Authentication and rate limiting: Emissary can check incoming requests with an external authentication service and a third-party rate limit service before routing them.
Diagnostics: Emissary includes a diagnostics service for debugging configuration issues.
Istio integration: Emissary can act as the edge proxy for Istio, routing external traffic to the internal service mesh.
Consul integration: Emissary supports Consul service discovery and can use the Ambassador Consul Connector for mTLS authentication and encryption with Consul Connect services.
Client certificate security: Emissary can validate client certificates using a provided CA certificate, enabling client-side mutual TLS.
Installation: The recommended installation method is Helm; Kubernetes YAML is another documented option.
Community support: The project directs users to its CNCF Slack channel for community questions and to GitHub issues for bugs.
Price from: Free

Where it ranks on Freedom251

Best API Gateway Software in 2026#5 of 27

Is Emissary-ingress yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote Emissary-ingress

Sources

emissary-ingress.dev· checked 3 Oct 2026
emissary-ingress.dev/docs/4.1/about/features-and-benefits/· checked 3 Oct 2026
emissary-ingress.dev/docs/4.1/howtos/consul/· checked 3 Oct 2026
emissary-ingress.dev/docs/4.1/howtos/client-cert-validation/· checked 3 Oct 2026
emissary-ingress.dev/docs/4.1/topics/install/· checked 3 Oct 2026
emissary-ingress.dev/docs/4.1/about/support/· checked 3 Oct 2026