Stable, supported Kubernetes ingress
Deploy proven NGINX-powered ingress with advanced traffic management, security, observability, and enterprise support.
Enterprise-grade Kubernetes ingress controller
A supported, production-ready ingress alternative
Teams need a stable and enterprise-backed alternative to community-maintained NGINX ingress controllers. F5 NGINX Ingress Controller provides a low-risk migration path while adding long-term support, security updates, and a clear product roadmap for production environments.
- Proven at production scale: Trusted by enterprises running business-critical workloads globally
- Security and lifecycle assurance: Regular CVE fixes, updates, and published support timelines
- Enterprise support and roadmap: Backed by a fully staffed team with clear lifecycle and support commitments
Advanced capabilities for production environments
NGINX Plus enhances ingress with the enterprise-grade capabilities required for mission-critical workloads. From advanced traffic control to deep observability and integrated security, it ensures reliable, scalable, and secure delivery for modern applications, APIs, and AI workloads.
- Built-in authentication: Support for JWT, OAuth2, and external identity providers
- Zero downtime configuration: Instant and dynamic upstream and config updates via API, without reloads or downtime
- Real-time observability: Insights into 200+ live metrics to monitor performance and troubleshoot faster
Integrated security directly at ingress
F5 Web Application Firewall (WAF) solutions for NGINX deliver container-native security integrated directly into the ingress layer. Protect applications and APIs while ensuring consistent policy enforcement across hybrid multi-cloud environments, reduced latency, and simplified operations.
- Inline WAF protection: Secure apps and APIs directly in the data path.
- OWASP Top 10 coverage: Protect against common threats with advanced inspection.
- Centralized policy enforcement: Apply consistent security policies across services and clusters.
Extend existing F5 BIG-IP investments into Kubernetes
Organizations running F5 BIG-IP can integrate with Kubernetes environments effortlessly. Automate downstream configuration, eliminate manual workflows, and extend proven traffic management and security policies into modern application architectures without disruption.
- Deploy stable endpoints for Kubernetes apps: Expose Kubernetes services as consistent endpoints for BIG-IP, simplifying traffic routing and integration.
- Sync changes in real time: Dynamically update BIG-IP as pods scale, eliminating manual reconfiguration and reducing drift using CIS.
- Eliminate manual workflows: Streamline the deployment and scaling of Kubernetes services by removing repetitive, error-prone operational steps.
Product Overview
Kubernetes-native ingress architecture
NGINX Ingress Controller runs inside Kubernetes, translating Ingress NGINX resources into high-performance NGINX configurations. A control plane watches Kubernetes APIs and dynamically updates the NGINX data plane, enabling real-time routing, load balancing, and security. This architecture ensures scalable, reliable application delivery across environments.
Core Capabilities
F5 NGINX Ingress Controller delivers Kubernetes-native ingress with advanced routing, observability, security, and enterprise support—combining open source flexibility with NGINX Plus capabilities for production.
Advanced L7 routing
Route traffic by host, path, headers, and methods.
Traffic splitting
Enable canary releases with weighted routing.
Zero downtime configuration
Update routing instantly without reloads using API.
Built-in security
Take advantage of WAF and mTLS enforcement.
Authentication controls
Implement JWT, OAuth2, and access policies.
Real-time observability
Monitor traffic with metrics and live insights.
Enterprise support
Expert support for production-grade Kubernetes environments.
Resources
FEATURED

The Ingress NGINX alternative: F5 NGINX Ingress Controller for the long term
Learn more about F5’s long-term, supported alternative to community-maintained solutions.
Read the article