Emissary-ingress

6.9easy start · #7 of 28
in API Gateway Software

Free to practise onyes
Free trialnot on record
Well documentedyes
Runs where you worknot on record

Runs on Linux, self-hosted.

Emissary-ingress is ranked #7 of 28 in API gateway software on The Geeks Club. It runs on Linux, Self-hosted. There is a free plan.

Emissary-ingress plans and pricing

All plans

Emissary-ingress Free Open-source Kubernetes API gateway emissary-ingress.dev · 3 Oct 2026

Compared on API gateway software

Free plan: Yes
Deployment model: self-hosted
Supported protocols: HTTP, HTTPS, HTTPPROXY, HTTPSPROXY, TCP, TLS, gRPC, HTTP/3
Authentication methods: Basic authentication, external HTTP or gRPC authentication service, client certificate validation, mutual TLS
Rate limiting: Yes
Request transformation: Yes

Best Emissary-ingress alternatives

See all 20

Kong Gateway 0 of 4 in the starter kit Lesson 17.8 Tyk Gateway 0 of 4 in the starter kit Lesson 27.7 Gravitee API Gateway 0 of 4 in the starter kit Lesson 37.3 KrakenD API Gateway 0 of 4 in the starter kit Lesson 47.2 Tyk API Management 0 of 4 in the starter kit Lesson 57.0 Amazon API Gateway 0 of 4 in the starter kit Lesson 66.9

The record

What it does: Emissary-ingress is an open-source Kubernetes-native API gateway, Layer 7 load balancer, and Kubernetes Ingress built on Envoy Proxy.
For: Emissary was designed for cloud-native organizations where developers have operational responsibility for their services, and for use by developers and operators.
Self-service: Developers can add, remove, merge, or separate services through Kubernetes resources or annotations.
Canary deployments: Developers can control how much production traffic is routed to a service through annotations.
Architecture: Emissary persists state in Kubernetes instead of requiring a separate database, and uses Envoy for traffic routing and proxying.
Protocol support: Emissary supports gRPC and HTTP/2 routing.
Authentication and rate limiting: Emissary can check incoming requests with an external authentication service and a third-party rate limit service before routing them.
Diagnostics: Emissary includes a diagnostics service for debugging configuration issues.
Istio integration: Emissary can act as the edge proxy for Istio, routing external traffic to the internal service mesh.
Consul integration: Emissary supports Consul service discovery and can use the Ambassador Consul Connector for mTLS authentication and encryption with Consul Connect services.
Client certificate security: Emissary can validate client certificates using a provided CA certificate, enabling client-side mutual TLS.
Installation: The recommended installation method is Helm; Kubernetes YAML is another documented option.
Community support: The project directs users to its CNCF Slack channel for community questions and to GitHub issues for bugs.
Price from: Free

Where it ranks on The Geeks Club

Best API Gateway Software in 2026#7 of 28

Is Emissary-ingress yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote Emissary-ingress

Sources

emissary-ingress.dev· checked 3 Oct 2026
emissary-ingress.dev/docs/4.1/about/features-and-benefits/· checked 3 Oct 2026
emissary-ingress.dev/docs/4.1/howtos/consul/· checked 3 Oct 2026
emissary-ingress.dev/docs/4.1/howtos/client-cert-validation/· checked 3 Oct 2026
emissary-ingress.dev/docs/4.1/topics/install/· checked 3 Oct 2026
emissary-ingress.dev/docs/4.1/about/support/· checked 3 Oct 2026