Freedom251 › Kubernetes Ingress Controllers
F5 BIG-IP Container Ingress Services
Visit F5 BIG-IP Container Ingress Services Alternatives Pricing

What F5 BIG-IP Container Ingress Services is
F5 BIG-IP Container Ingress Services (CIS) connects Kubernetes and Red Hat OpenShift environments to F5 BIG-IP, updating network services as container applications change. CIS watches Kubernetes resources and adjusts BIG-IP configuration; teams can manage BIG-IP through Kubernetes or OpenShift command-line tools and APIs. It supports forwarding traffic from BIG-IP to Kubernetes clusters through NodePort or ClusterIP and can use F5 AS3 declarations. Traffic management includes HTTP and URI routing, load balancing, scaling, health monitoring, and Blue/Green or A/B handling of application versions. F5 documents support for Kubernetes Ingress resources and OpenShift Routes, plus IngressLink to coordinate CIS with NGINX Ingress Controller. Listed overlay integrations include OpenShift SDN, Flannel, and Calico. BIG-IP data streams can export application and network statistics to third-party visibility and analytics tools, including Splunk. CIS is a control-plane component: F5 says traffic is not affected during a CIS outage, and a replacement replica can collect cluster state and reapply it to BIG-IP. Installation can be done with Helm or manually, and releases are available from Docker Hub and Red Hat Container Registry. The open-source software is free, but use requires a compatible licensed BIG-IP system, a Kubernetes or OpenShift cluster, and AS3 installed on BIG-IP. CIS requires administrative privileges on the BIG-IP iControl REST partition; the Kubernetes guide recommends a dedicated partition.
Who it suits
CIS suits network architects, network operations teams, AppDev and DevOps teams, and system infrastructure teams managing container applications with BIG-IP. It is intended for environments using Kubernetes or Red Hat OpenShift alongside a compatible licensed BIG-IP system.
What it does well
- Updates BIG-IP configuration as Kubernetes resources change.
- Supports NodePort and ClusterIP forwarding and F5 AS3 declarations.
- Provides HTTP and URI routing, load balancing, scaling, and health monitoring.
- Supports Blue/Green and A/B traffic management for application versions.
- Helm and manual installation options are documented.
- A CIS outage does not interrupt traffic, according to F5.
What to know first
- Requires a compatible, licensed BIG-IP system.
- Requires a Kubernetes or OpenShift cluster and AS3 installed on BIG-IP.
- Requires administrative privileges on the BIG-IP iControl REST partition.
- NodePortLocal is available only with Antrea CNI and enabled feature gates.
Limits
The free open-source software requires a compatible, licensed BIG-IP system, a Kubernetes or OpenShift cluster, and AS3 installed on BIG-IP. F5's current compatibility table lists tested Kubernetes v1.13–v1.35, OpenShift v3.11–v4.21.0, BIG-IP v12–v17, and AS3 v3.13–v3.56; F5 does not verify versions outside those ranges.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Open-source software | No charge · Requires a compatible, licensed BIG-IP system · Kubernetes or OpenShift cluster · AS3 installed on BIG-IP | Free |
As clouddocs.f5.com lists them, read 4 Oct 2026. The maker's own page has the final word.
Getting started
- Confirm that you have a compatible, licensed BIG-IP system, a Kubernetes or OpenShift cluster, and AS3 installed on BIG-IP.
- Choose a Helm-based or manual installation method from F5's documentation.
- Get a CIS release from Docker Hub or Red Hat Container Registry.
- Configure the required BIG-IP iControl REST access; F5's Kubernetes guide recommends a dedicated partition.
- Manage BIG-IP through Kubernetes or OpenShift CLI/API tools.
Verdict
Choose CIS if your Kubernetes or OpenShift environment needs to update F5 BIG-IP services as container applications change. It is free open-source software, but it depends on a compatible licensed BIG-IP system, a cluster, and AS3; check F5's verified compatibility versions before adopting it.
Questions
How much does CIS cost?
The open-source software is listed as free, billed no charge. It requires a compatible, licensed BIG-IP system, a Kubernetes or OpenShift cluster, and AS3 installed on BIG-IP.
Which orchestration environments does it integrate with?
F5 documents integrations with Kubernetes and Red Hat OpenShift, including Ingress resources and OpenShift Routes.
How does CIS handle traffic?
It supports NodePort or ClusterIP forwarding, HTTP and URI routing, load balancing, scaling, health monitoring, and Blue/Green and A/B traffic management.
How can CIS be installed?
F5 documents Helm-based and manual installation. Releases are available from Docker Hub and Red Hat Container Registry.
What happens to traffic if CIS goes down?
F5 describes CIS as a control-plane component and says traffic is not affected during an outage. A replacement replica gathers cluster state and reapplies it to BIG-IP.
Which versions are listed as tested?
F5 lists Kubernetes v1.13–v1.35, OpenShift v3.11–v4.21.0, BIG-IP v12–v17, and AS3 v3.13–v3.56. Versions outside those ranges are not verified by F5.
Facts from F5 BIG-IP Container Ingress Services's own pages
- Compatibility
- The current compatibility table lists tested Kubernetes versions v1.13–v1.35, OpenShift v3.11–v4.21.0, BIG-IP v12–v17, and AS3 v3.13–v3.56; unlisted versions are not verified by F5. · clouddocs.f5.com, 4 Oct 2026
- Credential privilege
- CIS requires administrative privileges on the BIG-IP iControl REST partition to configure objects, and its Kubernetes guide recommends a dedicated partition. · clouddocs.f5.com, 4 Oct 2026
- How it works
- CIS watches Kubernetes resources and updates BIG-IP configuration accordingly; users manage BIG-IP through Kubernetes or OpenShift native CLI/API. · clouddocs.f5.com, 4 Oct 2026
- Installation and downloads
- F5 documents Helm-based and manual installation and says CIS releases are available from Docker Hub and Red Hat Container Registry. · clouddocs.f5.com, 4 Oct 2026
- Intended users
- F5 identifies network architects, network operations, AppDev, DevOps, and system infrastructure teams as target customers. · clouddocs.f5.com, 4 Oct 2026
- Notable constraint
- F5 states NodePortLocal is available only with Antrea CNI and must be enabled in Antrea feature gates. · clouddocs.f5.com, 4 Oct 2026
- Observability
- BIG-IP data streams can export application and network statistics to third-party visibility and analytics tools, with Splunk given as an example. · f5.com, 4 Oct 2026
- Orchestration integrations
- F5 documents integrations with Kubernetes and Red Hat OpenShift, including Ingress resources and OpenShift Routes. · clouddocs.f5.com, 4 Oct 2026
- Other integrations
- F5 describes IngressLink as coordinating BIG-IP CIS with NGINX Ingress Controller, and lists overlay integrations including OpenShift SDN, Flannel, and Calico. · f5.com, 4 Oct 2026
- Purpose
- CIS integrates container orchestration environments with F5 BIG-IP to dynamically create L4/L7 services and load balance traffic as container applications change. · clouddocs.f5.com, 4 Oct 2026
- Routing and forwarding
- CIS can forward traffic from BIG-IP to Kubernetes clusters through NodePort or ClusterIP and supports F5 AS3 declarations. · clouddocs.f5.com, 4 Oct 2026
- Security
- F5 documents securing CIS BIG-IP credentials by storing them in HashiCorp Vault and synchronizing them to a Kubernetes Secret with External Secrets Operator. · clouddocs.f5.com, 4 Oct 2026
- Support boundary
- CIS is a control-plane component; the FAQ says traffic is not impacted during a CIS outage and that a replacement replica gathers cluster state and reapplies it to BIG-IP. · clouddocs.f5.com, 4 Oct 2026
- Traffic management
- CIS supports HTTP and URI routing, load balancing, scaling, health monitoring, and Blue/Green and A/B traffic management for app versions. · f5.com, 4 Oct 2026
Where F5 BIG-IP Container Ingress Services stands on Freedom251
- Kubernetes Ingress Controllers#10 of 28
