- Home
- API Gateway Software
- Emissary-ingress
Emissary-ingress
What it is
Emissary-ingress is a free, open-source Kubernetes-native API gateway, Layer 7 load balancer, and Ingress built on Envoy Proxy. It routes traffic using Envoy and stores its state in Kubernetes rather than requiring a separate database. Developers can manage services through Kubernetes resources or annotations, including directing a selected share of production traffic to a service for canary deployments. Emissary supports HTTP, HTTPS, proxy, TCP, TLS, gRPC, and HTTP/3 traffic. It can check requests through external HTTP or gRPC authentication services, apply rate limiting, transform requests, and validate client certificates, including mutual TLS. A diagnostics service helps investigate configuration issues. Emissary can serve as an edge proxy for Istio and supports Consul service discovery. The project recommends Helm for installation and also documents Kubernetes YAML. It is intended for cloud-native organizations where developers have operational responsibility for services, as well as developers and operators. The deployment model is self-hosted. The project directs community questions to its CNCF Slack channel and bug reports to GitHub issues.
For and against
For
- Free and open source.
- Supports gRPC and HTTP/2 routing.
- Can direct a chosen share of traffic for canary deployments.
- Includes request authentication and rate limiting.
- Stores state in Kubernetes without a separate database.
Against
- Deployment is self-hosted.
- Installation is documented through Helm or Kubernetes YAML.
- Community questions and bug reports use separate channels.
The verdict
Emissary-ingress provides Kubernetes-based gateway and traffic management capabilities with authentication, rate limiting, and diagnostics. It is aimed at teams prepared to operate a self-hosted deployment and manage it through Kubernetes.
Who it suits
Emissary-ingress suits developers and operators in cloud-native organizations who manage services through Kubernetes. It may fit teams needing gateway routing, traffic controls, and integration with Istio or Consul.
Plans and prices
Emissary-ingress
Open-source Kubernetes API gateway
Read 3 Oct 2026 · emissary-ingress.dev
On the record
- Architecture
- Emissary persists state in Kubernetes instead of requiring a separate database, and uses Envoy for traffic routing and proxying.emissary-ingress.dev · read 3 Oct 2026
- Authentication and rate limiting
- Emissary can check incoming requests with an external authentication service and a third-party rate limit service before routing them.emissary-ingress.dev · read 3 Oct 2026
- Canary deployments
- Developers can control how much production traffic is routed to a service through annotations.emissary-ingress.dev · read 3 Oct 2026
- Client certificate security
- Emissary can validate client certificates using a provided CA certificate, enabling client-side mutual TLS.emissary-ingress.dev · read 3 Oct 2026
- Community support
- The project directs users to its CNCF Slack channel for community questions and to GitHub issues for bugs.emissary-ingress.dev · read 3 Oct 2026
- Consul integration
- Emissary supports Consul service discovery and can use the Ambassador Consul Connector for mTLS authentication and encryption with Consul Connect services.emissary-ingress.dev · read 3 Oct 2026
- Diagnostics
- Emissary includes a diagnostics service for debugging configuration issues.emissary-ingress.dev · read 3 Oct 2026
- For
- Emissary was designed for cloud-native organizations where developers have operational responsibility for their services, and for use by developers and operators.emissary-ingress.dev · read 3 Oct 2026
- Installation
- The recommended installation method is Helm; Kubernetes YAML is another documented option.emissary-ingress.dev · read 3 Oct 2026
- Istio integration
- Emissary can act as the edge proxy for Istio, routing external traffic to the internal service mesh.emissary-ingress.dev · read 3 Oct 2026
- Protocol support
- Emissary supports gRPC and HTTP/2 routing.emissary-ingress.dev · read 3 Oct 2026
- Self-service
- Developers can add, remove, merge, or separate services through Kubernetes resources or annotations.emissary-ingress.dev · read 3 Oct 2026
- What it does
- Emissary-ingress is an open-source Kubernetes-native API gateway, Layer 7 load balancer, and Kubernetes Ingress built on Envoy Proxy.emissary-ingress.dev · read 3 Oct 2026
