Freedom251 › Kubernetes Ingress Controllers
NetScaler Ingress Controller
What NetScaler Ingress Controller is
NetScaler Ingress Controller configures NetScaler appliances from Kubernetes Ingress rules and directs traffic into Kubernetes clusters. It is intended for exposing services externally and managing application traffic across on-premises and public-cloud environments. The controller handles HTTP, HTTPS, TCP, TCP-SSL, and UDP, and supports layer 7 rewrite and responder policies through custom resource definitions. With NetScaler CPX, it provides layer 7 load balancing for east-west microservice traffic. It can manage CPX, BLX, VPX, or MPX appliances in single-tier or dual-tier topologies, running as a standalone pod or CPX sidecar. YAML manifests and Helm charts are supported deployment methods. Documented environments include Kubernetes 1.21+, GKE, EKS, AKS, OpenShift 3.11+, PKS, Diamanti, Mirantis Kubernetes Engine, VMware Tanzu, and Rancher. Integrations include Prometheus, Grafana, cert-manager, HashiCorp Vault, ExternalDNS, and OpenShift. Security features include certificate handling, authentication, OWASP policies, WAF policies, canary routing, and rate limiting. Pricing is on request; there is no free plan.
Who it suits
It suits teams exposing Kubernetes services and controlling traffic across self-hosted, on-premises, or public-cloud environments. Kubernetes operators needing NetScaler appliances, integrations, and WAF policies may find it relevant.
What it does well
- Supports HTTP, HTTPS, TCP, TCP-SSL, and UDP
- Works with multiple Kubernetes platforms
- Deploys with YAML or Helm
- Supports WAF and authentication policies
- Prometheus and Grafana monitoring integration
What to know first
- Pricing is available only on request
- No free plan
- Requires self-hosted deployment
- CPX licensing uses an ADM license server
Verdict
NetScaler Ingress Controller offers broad protocol, topology, platform, and security support for Kubernetes traffic management. It is best considered where NetScaler appliances and self-hosted operations fit the deployment environment.
Facts from NetScaler Ingress Controller's own pages
- Bare metal
- It can provide load balancing for services in bare metal Kubernetes clusters, where Kubernetes does not natively provide a load balancer implementation. · netscaler.com, 4 Oct 2026
- Certificate management
- It supports automatic TLS certificate provisioning and renewal through cert-manager, including certificate sources such as Let’s Encrypt and HashiCorp Vault. · docs.netscaler.com, 5 Oct 2026
- Cloud integrations
- The documentation describes deployments with Azure Kubernetes Service, Google Kubernetes Engine, Anthos, and Amazon EKS. · docs.netscaler.com, 5 Oct 2026
- CPX licensing
- The documented CPX licensing configuration uses a NetScaler ADM license server and specifies the CP1000 platform license. · docs.netscaler.com, 5 Oct 2026
- Deployment methods
- The controller can be deployed using YAML manifests or Helm charts. · github.com, 5 Oct 2026
- Deployment topologies
- The controller supports single-tier and dual-tier topologies, and can run as a standalone pod or as a sidecar alongside NetScaler CPX. · docs.netscaler.com, 4 Oct 2026
- East-west traffic
- With NetScaler CPX, it provides layer 7 load balancing for east-west traffic between microservices in a Kubernetes cluster. · docs.netscaler.com, 4 Oct 2026
- Headquarters
- Fort Lauderdale, Florida, USA · docs.netscaler.com, 28 Sept 2026
- Install method
- NetScaler says the Ingress Controller can be deployed using Helm charts. · docs.netscaler.com, 4 Oct 2026
- Integrations
- The documentation includes integration guidance for Prometheus and Grafana, cert-manager, HashiCorp Vault, ExternalDNS, and OpenShift. · docs.netscaler.com, 4 Oct 2026
- Intended use
- The product is described for exposing Kubernetes services to external users and managing application traffic across on-premises and public cloud environments. · netscaler.com, 4 Oct 2026
- Kubernetes platforms
- The documented platforms include Kubernetes v1.21 and later, GKE, EKS, AKS, OpenShift 3.11 and later, PKS, Diamanti, Mirantis Kubernetes Engine, VMware Tanzu, and Rancher. · docs.netscaler.com, 5 Oct 2026
- Kubernetes support
- Supported platforms include Kubernetes v1.21 and later, GKE, EKS, AKS, OpenShift 3.11 and later, PKS, Diamanti, Mirantis Kubernetes Engine, VMware Tanzu, and Rancher. · docs.netscaler.com, 4 Oct 2026
- Maker
- Cloud Software Group says Citrix and TIBCO merged in 2022; its contact page lists Fort Lauderdale, Florida, as headquarters. · cloud.com, 5 Oct 2026
- Monitoring
- NetScaler Metrics Exporter can export NetScaler statistics to Prometheus for visualization in Grafana. · docs.netscaler.com, 5 Oct 2026
- NetScaler appliances
- The controller manages NetScaler CPX, VPX, or MPX appliances; the licensing documentation specifies CPX platform license CP1000 and an ADM license server configuration. · docs.netscaler.com, 4 Oct 2026
- OpenShift integration
- It can run as an OpenShift router plug-in and supports unsecured routes, edge TLS termination, and passthrough termination. · docs.netscaler.com, 5 Oct 2026
- Pricing
- NetScaler’s pricing page lists subscription license options but directs buyers to contact a representative or service provider for pricing details. · netscaler.com, 5 Oct 2026
- Purpose
- The controller translates Kubernetes Ingress rules into configuration for NetScaler load balancers and routes traffic into Kubernetes clusters. · docs.netscaler.com, 5 Oct 2026
- Security capabilities
- The documentation lists support for TLS certificate handling, client and server authentication, OWASP Top 10 protection policies, and web application firewall policies. · docs.netscaler.com, 4 Oct 2026
- Security policies
- A WAF custom resource definition lets the controller apply web application firewall configuration to the Ingress NetScaler device. · docs.netscaler.com, 5 Oct 2026
- Source availability
- The public GitHub repository identifies the project as licensed under Apache License 2.0. · github.com, 5 Oct 2026
- Support
- NetScaler support experts follow up on support tickets submitted through the Citrix support portal, and users can also ask the NetScaler community. · netscaler.com, 4 Oct 2026
- Supported NetScaler types
- It can configure NetScaler CPX, BLX, VPX, or MPX according to Ingress rules. · docs.netscaler.com, 5 Oct 2026
Where NetScaler Ingress Controller stands on Freedom251
- Kubernetes Ingress Controllers#26 of 28