HAProxy Enterprise Kubernetes Ingress Controller

The high-performance Kubernetes Ingress controller

The fastest and most secure way into your cluster.

Route external traffic into your Kubernetes clusters using the Ingress API. Secure, efficient, highly scalable, and perfectly integrated with Kubernetes tooling and workflows.

By cutting cloud compute footprint, it lowers your total cost of ownership while guaranteeing the uptime and security needed to safeguard your revenue.

Satisfaction score (per G2 Reviews)

Customer retention (annual renewals)

Years in production (at global scale)

“We deployed the HAProxy Enterprise Kubernetes Ingress Controller to further simplify our application delivery while also staying compliant with federal regulations.”

Martin Folkoff (Booz Allen Hamilton) Chief Technologist

Contact us or request a demo

Get direct access to our experts. We would love to help you with any question or request you might have.

Loading...

Ingress Controller Benefits

Master your Kubernetes app traffic

HAProxy Enterprise Kubernetes Ingress Controller acts as a proxy inside the cluster and maps incoming requests to multiple services. Greatly reduce the complexity of connecting external clients to your containerized applications.

Performance and cost-efficiency

Handle tens of thousands of requests per second on one instance — with the highest average throughput, lowest latency, and lowest CPU usage. Support your most demanding applications without breaking the bank.

Unmatched flexibility

Deploy inside or outside of Kubernetes according to your needs. Broad protocol support and multiple load-balancing algorithms support your K8s apps. Kubernetes API and CRD integration help you manage K8s how you want.

Security and reliability included

Implement transparent and industry-standard security for your Kubernetes applications with our embedded WAF, rootless design, and resilient architecture.

Avoid problems early

Verbose logging and statistics give insight into the health of your pods, current request rates, response times, and errors.

Solutions

One answer for everything Kubernetes

Our comprehensive Kubernetes networking solution for on-premises and cloud deployments also includes intelligent external load balancing, multi-cluster routing, and blue-green deployments, enabled by HAProxy Enterprise and HAProxy Fusion.

Learn more

Ingress Controller Features

Key HAProxy Enterprise Kubernetes Ingress Controller capabilities

Learn how to simplify your Kubernetes infrastructure, supercharge performance, and seamlessly secure your clusters.

Routing and Load Balancing Security Integration

5-handle_any_traffic__app__and_kubernetes_version

Simplify and accelerate your K8s ingress

Reduce complexity and take the guesswork out of K8s traffic management.

Consolidated routing

Route ingress traffic to the correct pod using one IP address and port, plus the Host header and request path.

Broad protocol support

Easily enable ingress at Layer 4 and Layer 7. Load balance HTTP(S), TCP, and gRPC traffic — with support for end-to-end HTTP/2.

High availability

Handle traffic spikes with ease with traffic overload protection, preserve your traffic during reloads, prevent cluster disruptions with robust CRDs, and enable advanced health checks to keep services running.

Powered by HAProxy Enterprise

Experience legendary performance, with battle-hardened code stemming from 25+ years of development and feedback. Harness HAProxy Enterprise's core performance, scalability, and security features.

kubernetes container with a security badge

Transparent, industry-standard protection

Protect your clusters and secure your external Kubernetes traffic.

A powerful WAF for every deployment

Enable the adaptable HAProxy Enterprise WAF — powered by our Intelligent WAF Engine — with an optional OWASP Core Rule Set (CRS) compatibility mode to protect your Kubernetes applications, without an extra subscription. Our multi-engine architecture reduces latency and false positives versus standard CRS implementations. Enable protections for all traffic routes or specific routes based on your security requirements.

High-performance SSL/TLS

Enable high-performance SSL/TLS with ultra-low latency and process requests without performance penalties. Implement SSL/TLS termination at the load balancer to reduce strain on backend servers.

Global rate limiting

Guard against application-layer attacks and prevent clients from making requests too frequently. Use CRDs to harness HAProxy stick table data from Global Profiling Engine (GPE) and rate limit based on a sliding window, URL path, URL parameter, and more.

Rootless design

Our Ingress Controller container image is fully rootless and operates seamlessly in read-only environments. This approach minimizes potential security risks and ensures compliance with strict security standards.

Standards-based ingress with tooling support

Use the latest K8s standards, containerization technologies, and tools to get the most from your infrastructure.

K8s API integration

Bring advanced traffic routing and dynamic provisioning to your infrastructure with the Ingress API and evolving Gateway API.

Robust CRD support

Custom resource definitions (CRDs) help maintain stability and compatibility across various deployments within the Kubernetes ecosystem, ensuring that different team updates do not disrupt overall cluster functionality.

Frontend Custom Resources

Easily configure the essential frontend sections within your HAProxy configuration — such as HTTP, HTTPS, and STATS — using specialized CRDs. Bring greater flexibility to your configurations while validating changes to your K8s resources.

User-defined annotations

Create fully-validated annotations and rules for the frontend and backend sections of your HAProxy configuration — generated by HAProxy Kubernetes Ingress Controller. Unlock all of HAProxy's powerful options and features using custom templates.

External metrics collection

Compile your vital runtime metrics and logs, and gain visibility at a glance into your cluster performance with Prometheus support.

Container friendly

HAProxy Enterprise Kubernetes Ingress Controller works seamlessly with Docker and GKE Autopilot for smarter deployment scalability and routing.

Integrations & partnerships

Seamless integrations with essential tech

What are users saying about HAProxy Enterprise Kubernetes Ingress Controller?

"Kubernetes service discovery is also important to us, so we interviewed top vendors. Of course, HAProxy was on that list... HAProxy came out on top, particularly with the top-notch support model, which we would come to appreciate as we worked out our infrastructure implementation."

Kevin Doerr Dartmouth

"I use HAProxy as a round robin point of ingress to k8s clusters. Works reliably and has never not worked."

Verified user in Defense and Space via G2

Featured Resources

Learn tips, tricks, and best practices for getting the most out of HAProxy Enterprise Kubernetes Ingress Controller — and stay up to date with new product developments.

See more resources

Blog

Announcing HAProxy Kubernetes Ingress Controller 3.2

HAProxy Kubernetes Ingress Controller 3.2 and HAProxy Enterprise Kubernetes Ingress Controller 3.2 have arrived! These releases add powerful, user-defined annotations and a new frontend CRD.

Using CRDs to improve quality of life in Kubernetes

In this webinar, you’ll learn how custom resources simplify ingress controller management and allow you to interact with the controller using familiar tools.

Watch now