Edge Stack

Fresh

by Ambassador Labs

Kubernetes ingress controller and API gateway with Envoy Proxy as the data plane, configured via CRDs (Mapping, Host, RateLimitService)Platform engineers managing Kubernetes clusters need a policy-driven, developer-friendly entry point for routing, auth, and traffic management that stays within the Kubernetes API surface and doesn't require a separate control planeFree tier

Kubernetes-native ingress controller and API gateway built on Envoy Proxy, providing programmable routing, OAuth2/JWT auth, rate limiting, TLS termination, and traffic shaping via Kubernetes custom resources.

Features

Envoy Proxy-based L7 routingall plansOAuth2 and JWT authenticationall plansRate limitingall plansTLS/mTLS terminationall plansCanary and weighted traffic splittingall plansKubernetes CRD-based configuration (Mapping, Host)all plansLocal cluster proxy (Telepresence)all plansTeam traffic intercept sharing (Telepresence)paid onlyAI API design and spec generation (Blackbird)paid onlyMulti-cluster federationenterprise onlyAdvanced security policies and RBACenterprise onlyDeveloper portalenterprise only

More from Ambassador Labs