Freedom251 › Container Networking Software
Skupper

What Skupper is
Skupper is an open-source application interconnect for creating private networks that link services across sites and platforms. It forwards local service traffic between remote clusters over existing IP networks, using isolated application-focused networks with logical service addresses. Its application-layer approach connects services across network boundaries without VPNs or special firewall rules; the product page states that application services are never exposed on the public internet.
Router connections are secured with mutual TLS through a private, dedicated certificate authority, and each router has its own certificate. Skupper can balance new TCP connections across workloads at different sites, distribute requests according to capacity and configured link costs, and reroute traffic when a workload becomes unavailable. Multi-key listeners support weighted distribution and priority-based failover across routing keys. The project identifies remote resource access, platform migration, application resiliency, and highly distributed applications as use cases. Sites and service exposure can be managed with a CLI or declarative YAML resources. Kubernetes installations can use YAML manifests, Helm charts, or an Operator; local-system sites require the CLI. Stateful applications that need a controlled order for traffic redirection require separate failover orchestration. Skupper is free under Apache License 2.0.
Who it suits
Skupper suits teams connecting services across multiple sites or platforms, including use cases such as migration, remote resource access, and resilient distributed applications. It is also relevant to users working with Kubernetes, containers, Linux systems, virtual machines, or bare-metal environments.
What it does well
- Connects services across network boundaries without VPNs or special firewall rules.
- Uses mutual TLS and certificates unique to each router.
- Balances new TCP connections across workloads at distinct sites.
- Supports weighted distribution and priority-based routing strategies.
- Offers CLI and declarative YAML management.
What to know first
- Stateful applications needing ordered traffic redirection require separate orchestration.
- Cluster-scoped Kubernetes installation requires cluster-admin access.
Limits
Skupper does not orchestrate failover for stateful applications that require control over traffic redirection order; that orchestration must be implemented separately. Cluster-scoped Kubernetes installation requires cluster-admin access.
Getting started
- Visit the Skupper website.
- Choose a Kubernetes installation using YAML manifests, Helm charts, or an Operator, or use the CLI for local-system sites.
- For a cluster-scoped Kubernetes installation, obtain cluster-admin access.
- Define sites and service exposure with the CLI or declarative Site, Listener, and Connector resources.
- Use the Google Groups mailing list for questions or GitHub issues for bugs and enhancement requests.
Verdict
Choose Skupper when you want an open-source way to connect application services across sites over existing IP networks. Look elsewhere if your stateful workloads require Skupper itself to orchestrate failover in a specific redirection order.
Questions
Is Skupper free?
Yes. Skupper is open source, and its code and documentation are licensed under Apache License version 2.0.
Does Skupper offer a free trial?
No free trial is listed; Skupper is free.
Which platforms does Skupper support?
Listed platforms include API, Linux, macOS, self-hosted, and Windows. Supported environments also include Kubernetes, Docker, Podman, virtual machines, and bare metal.
Does Skupper expose application services to the public internet?
The product page states that application services are never exposed on the public internet.
What happens if a workload becomes unavailable?
Skupper can reroute traffic to available sites. Stateful applications requiring an ordered redirection need separate orchestration.
How can I get help with Skupper?
The project directs questions to its Google Groups mailing list and bug or enhancement requests to GitHub issues.
Facts from Skupper's own pages
- API
- The site shows a declarative API with Site, Listener, and Connector resources for defining sites and service exposure. · skupper.io, 4 Oct 2026
- Connectivity
- Skupper forwards local service traffic to remote clusters through a secure virtual application network. · skupper.io, 4 Oct 2026
- Current release
- The releases page identifies Skupper 2.2.2, released on 17 August 2026, as the latest release. · skupper.io, 4 Oct 2026
- Deployment
- On Kubernetes, the controller can be installed using YAML, Helm charts, or an Operator; local-system sites require the CLI. · skupper.io, 4 Oct 2026
- Exposure
- The maker says Skupper networks are isolated from external access and application services are not exposed on the public internet. · skupper.io, 4 Oct 2026
- Failover
- Skupper reroutes traffic to available sites when a workload becomes unavailable, but it does not orchestrate failover for stateful applications that need ordered redirection. · skupper.io, 4 Oct 2026
- Failover limit
- Skupper does not provide orchestrated failover for stateful applications that require control over traffic redirection order; that orchestration must be implemented separately. · skupper.io, 4 Oct 2026
- Isolation
- Skupper creates isolated application-focused networks with logical service addresses. · skupper.io, 4 Oct 2026
- Kubernetes installation
- The controller can be installed from YAML manifests, Helm charts, or an Operator; cluster-scoped installation requires cluster-admin access. · skupper.io, 4 Oct 2026
- License
- Skupper is an open-source project licensed under Apache License 2.0. · skupper.io, 4 Oct 2026
- Load balancing
- Skupper balances new TCP connections across workloads in distinct sites and reroutes traffic when a workload becomes unavailable. · skupper.io, 4 Oct 2026
- Load balancing strategies
- Multi-key listeners support weighted distribution and priority-based failover across routing keys. · skupper.io, 4 Oct 2026
- Management
- Sites and service exposure can be managed through a CLI or declarative YAML workflows. · skupper.io, 4 Oct 2026
- Network model
- Skupper routers carry application messages between services at different sites, with routing patterns including anycast and multicast. · skupper.io, 4 Oct 2026
- Platforms
- Skupper works on Kubernetes, Docker, Podman, and Linux. · skupper.io, 4 Oct 2026
- Product
- Skupper is an application interconnect for building private networks across multiple sites and platforms. · skupper.io, 4 Oct 2026
- Routing
- Skupper supports cross-site routing and can distribute requests among service instances according to capacity and configured link costs. · skupper.io, 4 Oct 2026
- Security
- Skupper secures router connections with mutual TLS using a private, dedicated certificate authority, and uniquely identifies each router with its own certificate. · skupper.io, 4 Oct 2026
- Support
- The project directs users to its Google Groups mailing list for questions and GitHub issues for bugs and enhancement requests. · skupper.io, 4 Oct 2026
- Use cases
- The site lists remote resource access, platform migration, application resiliency, and highly distributed applications as use cases. · skupper.io, 4 Oct 2026
Where Skupper stands on Freedom251
- Container Networking Software#16 of 28