Free and open first
Best Kubernetes Ingress Controllers in 2026
Routing external traffic into Kubernetes services involves choices about APIs, deployment, and the controls around incoming requests. Compared on ingress API model and deployment model, these controllers also vary in canary routing, rate limiting, and auth policies. TLS automation and web application firewall support provide further security-related comparison points. Free-plan availability and paid-from pricing add cost context. The entries include ngrok, Traefik Proxy, and agentgateway, as well as Airlock Microgateway. Consider which traffic-handling and security controls matter for your setup, and use the listed deployment details to assess how each option may fit your operating approach.
- 28 apps
- Research read 23 Sept 2026
- How the order is worked out
- 1
agentgateway
Free plan Open source APILinuxMac+3agentgateway brings routing, security, observability, and spend controls for model and agent traffic into a self-hosted gateway.
- 2
BFE Ingress Controller
Free plan Open source APILinuxMac+2Choose BFE if you need a free, self-hosted Layer 7 load balancer with content-based routing and tenant isolation.
- 3
Higress
Free plan Open source APILinuxMac+3Pick Higress if you need a self-hosted gateway for AI APIs, MCP services and cloud-native traffic, with routing, traffic controls and security functions.
- 4
Kusk Gateway
Free plan Open source APILinuxMac+3Kusk Gateway combines OpenAPI-driven Kubernetes configuration with validation, request controls, and an open-source dashboard. Its self-hosted model and Kubernetes focus are central considerations.
- 5
Traefik Proxy
Free plan Open source APILinuxMac+3Traefik Proxy combines dynamic routing, traffic management, security options, and observability in a self-hosted package.
- 6
Airlock Microgateway
Free plan APISelf-hosted - 7
Apache APISIX
Free plan APILinuxSelf-hostedAPISIX combines API and AI gateway functions with broad protocol and plugin support. Its self-managed model and separate commercial support are important considerations for teams evaluating it.
- 8
Envoy Gateway
Free plan APISelf-hostedEnvoy Gateway combines gateway configuration, traffic controls, and security features around Envoy Proxy. Check the release caveat and Kubernetes prerequisite when planning an installation.
- 9
Caddy Gateway
Free plan APILinuxSelf-hostedChoose Caddy Gateway if you already run Kubernetes and want a controller for Caddy using Gateway API resources.
- 10
F5 BIG-IP Container Ingress Services
Free plan APISelf-hostedChoose CIS if your Kubernetes or OpenShift environment needs to update F5 BIG-IP services as container applications change.
- 11
Contour
Free plan Self-hostedContour brings several Kubernetes ingress configuration models and documented security controls under an Envoy control plane.
- 12
HAProxy Ingress
Free plan LinuxSelf-hostedHAProxy Ingress offers flexible, free HAProxy routing for Kubernetes clusters. Check the Kubernetes version requirement and partial Gateway API support before relying on those capabilities.
- 13
kgateway
Free plan LinuxSelf-hostedkgateway combines ingress and API gateway controls with a broad set of documented traffic, security, and resilience features. Its self-hosted Kubernetes deployment is central to how teams use it.
- 14
ngrok
Free plan APILinuxMac+3ngrok combines secure tunnels with request policies and support for varied traffic types.
- 15
NGINX Gateway Fabric
Free plan LinuxSelf-hostedNGINX Gateway Fabric offers a free, self-hosted path to Kubernetes Gateway API traffic management with a wide set of documented routing and security options.
- 16
Skipper
Free plan LinuxMacSelf-hosted+1Choose Skipper if you need a self-hosted HTTP router with Kubernetes Ingress support and configurable routing and filters.
- 17
NGINX Ingress Controller
Free plan Self-hostedNGINX Ingress Controller provides Kubernetes traffic routing with a free NGINX Open Source option and additional capabilities under NGINX Plus.
- 18
N42 Gateway
Free plan LinuxSelf-hostedChoose N42 Gateway if you need a free, self-hosted controller that configures HAProxy from Kubernetes Ingress or Gateway API resources.
- 19
OpenNJet Ingress Controller
Free plan Self-hostedOpenNJet KIC offers a broad set of routing and proxy controls for self-hosted Kubernetes deployments.
- 20
LiteSpeed Ingress Controller
Free trial LinuxMacSelf-hosted+1LiteSpeed Ingress Controller combines Kubernetes ingress, caching, and security controls within LiteSpeed Web ADC. Review the default exposure behavior and monthly plan cost before choosing it.
- 21
Caddy Ingress Controller
Free plan - 22
Kong Ingress Controller
Free plan Linux - 23
HAProxy Enterprise
Paid APILinuxSelf-hostedHAProxy Enterprise combines broad protocol support, configurable routing, failover, security features, and Kubernetes tooling.
- 24
A10 Thunder Kubernetes Connector
Paid LinuxSelf-hostedChoose TKC if you run Kubernetes applications and want lifecycle changes to configure an external Thunder ADC automatically.
- 25
Varnish Gateway
Free plan
#1Places #1, #2, #3, #4, #5 on this list can be bought by the makers of the software on it. See the price