- Home
- Microsegmentation Software
- Kube-router
Kube-router
What it is
Kube-router is a free, open-source networking solution for Kubernetes clusters on Linux and self-hosted environments. It handles pod networking, service load balancing, and Kubernetes Network Policies. For service traffic, it uses Linux IPVS/LVS to provide Layer 4 balancing for ClusterIP, NodePort, and LoadBalancer services. BGP exchanges pod routes between nodes, and the software can advertise service virtual IPs to Layer 3 BGP peers for ECMP load balancing. Network Policies are enforced using iptables, ipset, and conntrack. Kube-router can run as a node agent or as a Pod in a DaemonSet on each node. The project documents deployment with kops, kubeadm, k0s, k3s, and generic Kubernetes clusters; kops 1.6.2 and later officially includes integration. It provides a CNI plugin and egress control, with support for Kubernetes, containerd, CRI-O, cloud environments, and on-premises or bare-metal clusters. DaemonSet pods require privileged access; node-agent deployments require the ipset package on every node. The project generally supports its current major.minor release.
For and against
For
- Free and open source
- Supports Kubernetes Network Policies
- Can advertise service VIPs for ECMP balancing
- Documents several Kubernetes deployment options
Against
- DaemonSet pods require privileged access
- Node-agent setup requires ipset on each node
- Support generally covers only the current major.minor release
The verdict
Kube-router combines pod networking, service balancing, and policy enforcement for Kubernetes. Operators should account for its privileged-access or ipset requirements and its limited release support policy.
Who it suits
Kube-router may suit operators who need networking for Kubernetes clusters running on Linux, in cloud environments, or on self-hosted infrastructure. Its deployment requirements are relevant for teams choosing between DaemonSet and node-agent operation.
Plans and prices
Open source
Open-source Kubernetes networking solution
Read 7 Oct 2026 · kube-router.io
On the record
- BGP load balancing
- It can advertise service virtual IPs to L3 fabric BGP peers for ECMP network load balancing.kube-router.io · read 7 Oct 2026
- Deployment
- Kube-router can run as an agent or as a Pod through a DaemonSet on each node.kube-router.io · read 7 Oct 2026
- Integrations
- The project documents deployment with kops, kubeadm, k0s, k3s, and generic Kubernetes clusters.kube-router.io · read 7 Oct 2026
- kops support
- The site states that kops version 1.6.2 and above officially includes integration with kube-router.kube-router.io · read 7 Oct 2026
- Maintainer
- The project site identifies Murali Reddy as building kube-router with project maintainers and community contributors.kube-router.io · read 7 Oct 2026
- Network policies
- It implements Kubernetes Network Policies using iptables, ipset, and conntrack.kube-router.io · read 7 Oct 2026
- Pod networking
- For pod networking, kube-router uses BGP to exchange pod routes between nodes.kube-router.io · read 7 Oct 2026
- Purpose
- Kube-router is a turnkey Kubernetes networking solution designed for operational simplicity and performance.kube-router.io · read 7 Oct 2026
- Requirements
- DaemonSet pods require privileged access, and running as a node agent requires the ipset package on each node.kube-router.io · read 7 Oct 2026
- Security
- Starting with version 2.9.0, the optional GoBGP admin gRPC server binds to 127.0.0.1 by default to address unauthenticated remote access to the control plane.kube-router.io · read 7 Oct 2026
- Service proxy
- It uses Linux IPVS/LVS to provide L4 load balancing for Kubernetes ClusterIP, NodePort, and LoadBalancer services.kube-router.io · read 7 Oct 2026
- Support policy
- Kube-router generally supports only the current major.minor release, with bug fixes and security patches applied to the latest release.kube-router.io · read 7 Oct 2026
