Networking for Kubernetes solutions

From lightweight microservices to advanced centralized governance, deliver and secure Kubernetes apps at scale.

Deliver, secure, and scale applications, APIs, and AI workloads on Kubernetes

Kubernetes solves core operational challenges, but it does not control how traffic behaves. As organizations manage multiple clusters, tenants, and teams, this control can lead to fragmented tooling, inconsistent security, limited end-to-end visibility, and systems that are harder to operate. The F5 Application Delivery and Security Platform (ADSP) extends enterprise-grade solutions for networking, security, and observability into modern Kubernetes environments. With a centralized control layer, teams can standardize Kubernetes networking, support AI inference workloads, and scale securely without operational overhead.

Standardize Kubernetes application delivery

Standardize across environments on a proven, enterprise-grade platform trusted by Platform and DevOps teams.

Extend ADC investments to Kubernetes

Bridge traditional ADC environments with Kubernetes to preserve investments while enabling modern application delivery.

Ensure AI-readiness

Power AI workloads with AI-optimized application delivery on Kubernetes, the leading platform for AI apps.

Govern at scale

Apply consistent traffic management and security policies to achieve end-to-end visibility across clusters, tenants, teams, and environments.

Traffic control across Kubernetes architectures

F5 delivers Kubernetes traffic control through complementary, Kubernetes-native solutions that fit different architectures and operating models.

F5 NGINX

NGINX is a lightweight reverse proxy, load balancer, and API gateway that is deeply embedded in cloud-native architectures for delivering lightweight microservices in Kubernetes. With F5 NGINX Ingress Controller and NGINX Gateway Fabric, it supports both Ingress and the emerging Gateway API standard, enabling teams to deliver services, route traffic, enforce policies, and secure APIs and AI workloads using Kubernetes-native workflows. Best suited for organizations where platform engineering and DevOps teams own and operate Kubernetes.

F5 NGINX

F5 BIG-IP Next for Kubernetes

BIG-IP Next for Kubernetes is designed for organizations that need advanced capabilities across deterministic control of ingress and egress, microsegmentation and strict multi-tenancy, and high-performance traffic handling for large-scale or latency-sensitive workloads. Best suited where NetOps extends control into Kubernetes environments, it brings a proven, high-performance data plane with consistent security and policy enforcement into the traffic path, enabling centralized governance and predictable control across clusters, teams, and environments.

F5 BIG-IP Next for Kubernetes

F5 BIG-IP Container Ingress Services (CIS)

BIG-IP CIS equips NetOps teams extend existing BIG-IP Application Delivery Controller investments into Kubernetes. By connecting Kubernetes resources to BIG-IP, BIG-IP CIS allows organizations to manage ingress traffic, enforce consistent application delivery and security policies, and support containerized applications using familiar BIG-IP operational models. Well suited for enterprises where BIG-IP remains the standard control point and Kubernetes adoption needs to align with existing NetOps practices.

F5 BIG-IP Container Ingress Services (CIS)

CNCF Gold Member logo

Gold membership in the Cloud Native Computing Foundation

F5 is committed to fostering and supporting cloud native Kubernetes innovation within the CNCF, including resources for complex AI inference workloads.

Learn more

Explore Kubernetes networking use cases

Ingress for Kubernetes

Ingress for Kubernetes

As organizations standardize on Kubernetes for production applications, they require ingress that’s proven, secure, and production-ready. F5 delivers enterprise-grade ingress through F5 NGINX Ingress Controller and BIG-IP Container Ingress Services, combining open-source flexibility with commercial support and long-term stability.

Teams secure apps, APIs, and AIs at ingress with Kubernetes-native WAF protection, enabling consistent policy enforcement across the enterprise. BIG-IP users can seamlessly extend existing traffic management and security into Kubernetes—preserving operational models while enabling cloud-native modernization.

application vulnerability mitigation
F5 NGINX Ingress Controller

Proven, trusted, production-ready ingress solution.

F5 WAF for NGINX

Enforce and scale app and API security across distributed architectures and hybrid environments.

F5 BIG-IP Container Ingress Services

Extend BIG-IP traffic management and security into Kubernetes.

F5 BIG-IP Next for Kubernetes

Scalable, multi-tenant ingress and egress control for Kubernetes clusters.

F5 NGINXaaS for Azure

Supports consistent app delivery across Azure-hosted Kubernetes environments.

F5 NGINXaaS for Google Cloud

Supports consistent app delivery across Google Cloud Kubernetes environments.

[@portabletext/react] Unknown block type "span", specify a component for it in the `components.types` prop

Gateway API

Gateway API

Modern Kubernetes platforms require a single gateway to deliver applications, APIs, and AI workloads—eliminating tool sprawl and complexity. NGINX Gateway Fabric implements a conformant Gateway API solution to provide a consistent, extensible connectivity model built on Kubernetes-native APIs and CRDs.

Enable advanced routing, traffic splitting, weighted load balancing, and policy-driven governance while cleanly separating platform and developer responsibilities. The same gateway delivers API, app, and AI inference traffic with visibility and control.

Gateway API
F5 NGINX Gateway Fabric

Production-grade Gateway API with support for model-aware routing.

F5 WAF for NGINX

Secure modern apps and APIs running on F5 NGINX with Kubernetes-ready WAF

[@portabletext/react] Unknown block type "span", specify a component for it in the `components.types` prop

AI factory load balancing

AI factory load balancing

Scaling AI inference and training workloads requires more than traditional load balancing. GPU-intensive prompts consume memory and compute unpredictably, creating contention, cache pressure, and uneven utilization across clusters.

F5 delivers high-performance L4–L7 traffic management purpose-built for Kubernetes-based AI environments, including GPUaaS and on-prem deployments. By continuously evaluating memory availability, KV cache pressure, request queue depth, and backend health, F5 intelligently routes traffic to balance GPU load, reduce latency, improve stability and maximize infrastructure efficiency.

Learn more

application vulnerability mitigation

F5 BIG-IP Next for Kubernetes

Scalable, multi-tenant ingress and egress control for Kubernetes clusters.

F5 NGINX Gateway Fabric

Production-grade Gateway API with support for model-aware routing.

[@portabletext/react] Unknown block type "span", specify a component for it in the `components.types` prop

Multi-cluster and multi-tenancy

Multi-cluster and multi-tenancy

As Kubernetes expands to multi-cluster, hybrid, and multicloud deployments, teams need a consistent application connectivity layer for ingress, security, and observability. Without it, ingress sprawl leads to policy drift, inconsistent TLS, duplicated tools, and poor visibility.

An enterprise-grade traffic and security plane integrated with Kubernetes automation solves this. Using declarative CRDs and orchestration events, teams can automate routing, load balancing, TLS, DNS steering, and policy per cluster—ensuring multi-tenant isolation, HA/DR, and end-to-end telemetry without new silos.

bot defense
F5 BIG-IP Container Ingress Services

Extend BIG-IP traffic management and security into Kubernetes.

F5 BIG-IP Next for Kubernetes

Scalable, multi-tenant ingress and egress control for Kubernetes clusters.

F5 NGINX Gateway Fabric

Production-grade Gateway API with support for model-aware routing.

F5 NGINX Ingress Controller

Proven, trusted, production-ready Ingress solution

F5 NGINXaaS for Azure

Supports consistent app delivery across Azure-hosted Kubernetes environments.

F5 NGINXaaS for Google Cloud

Supports consistent app delivery across Google Cloud Kubernetes environments.

Egress for Kubernetes

Egress for Kubernetes

AI workloads often require multi-tenant Kubernetes clusters to maximize GPU investments and infrastructure ROI. As AI apps integrate sensitive data, secure access becomes critical.

While Kubernetes namespaces provide logical separation inside a cluster, true zero trust security demands the separation is maintained in the network segmentation beyond it.

Organizations need a Kubernetes-aware solution that maps namespaces and policies to network-level controls—enforcing isolation, protecting data, and securing AI environments end to end.

Egress for Kubernetes
F5 BIG-IP Next for Kubernetes

Scalable, multi-tenant ingress and egress control for Kubernetes clusters.

[@portabletext/react] Unknown block type "span", specify a component for it in the `components.types` prop

Observability for Kubernetes

Observability for Kubernetes

Kubernetes workloads are dynamic and ephemeral, making consistent visibility into app performance difficult.

Telemetry is often fragmented across logs, metrics, and traces, slowing troubleshooting across hybrid and multicloud clusters.

A modern observability strategy uses OpenTelemetry for standardized data pipelines and eBPF-based telemetry for low-overhead, kernel-level insight—without app changes. Combined with automation, teams gain real-time visibility into traffic, latency, errors, and dependencies, enabling proactive performance and policy management at scale.

Observability for Kubernetes
F5 NGINX Gateway Fabric

Production-grade Gateway API with support for model-aware routing.

F5 NGINX Ingress Controller

Ensure consistent protection across distributed apps and environments with SaaS WAF

F5 BIG-IP eBPF Observability

Extends BIG-IP Cloud-Native Edition with real-time, kernel-level visibility into Kubernetes traffic without sidecars or app-level instrumentation.

F5 BIG-IP Container Ingress Services

Extend BIG-IP traffic management and security into Kubernetes.

Reference architecture

The following set of reference architecture diagrams are designed to help you understand application delivery in Kubernetes.

Networking in Kubernetes

networking-for-kubernetes_arch-diagram-01

Production-grade Networking for Kubernetes

networking-for-kubernetes_arch-diagram-02

Enterprise-grade Networking for Kubernetes

networking-for-kubernetes_arch-diagram-03

Strategic Networking for Kubernetes

networking-for-kubernetes_arch-diagram-04

Technology alliances

Red Hat logo
NVIDIA logo
Rancher logo

Resources

Articles & eBooks

[@portabletext/react] Unknown block type "span", specify a component for it in the `components.types` prop

[@portabletext/react] Unknown block type "span", specify a component for it in the `components.types` prop

Recent news

[@portabletext/react] Unknown block type "span", specify a component for it in the `components.types` prop

[@portabletext/react] Unknown block type "span", specify a component for it in the `components.types` prop

Videos

[@portabletext/react] Unknown block type "span", specify a component for it in the `components.types` prop

Frequently asked questions

Kubernetes is an open-source container scheduler and orchestration platform that automates the deployment, scaling, networking, and lifecycle management of containerized applications. It provides abstractions such as pods, services, and ingress to decouple applications from underlying infrastructure, enabling portability across on-prem, cloud, and edge environments. Kubernetes is widely used to run microservices, APIs, and increasingly AI/ML workloads due to its scalability, resilience, and ecosystem support. The Kubernetes project is hosted by the Cloud-Native Computing Foundation (CNCF), a subsidiary of the non-profit Linux Foundation. In addition, there are many different software and SaaS vendor distributions of Kubernetes available.

Cost-effective Kubernetes starts with controlling operational overhead. A primary operational focus should be on standardizing networking, traffic management, and security rather than layering point tools per cluster or cloud. Organizations reduce operational cost by reusing a consistent ingress and Gateway API architecture, templating deployments, and improving utilization through intelligent load balancing and observability. Performance is preserved by using production-grade networking that supports high throughput, low latency, and automation via Kubernetes-native APIs and GitOps workflows.

F5 optimizes Kubernetes networking for AI/ML by providing intelligent traffic management that goes beyond basic round-robin load balancing. F5 supports model-aware routing, high-throughput L3–L7 traffic handling, and deterministic performance required for GPU-backed inference and training workloads.

As organizations expand their use of Kubernetes, it can be easy to create cluster sprawl and Kubernetes cloud service sprawl. This typically creates fragmentation across networking, security, and observability. Different ingress controllers, cloud load balancers, and policy models lead to configuration drift, inconsistent security enforcement, and limited end-to-end visibility. Operational complexity increases as teams manage multiple control planes and toolchains. Without a properly designed connectivity layer, scaling Kubernetes across clusters and clouds results in higher cost, slower troubleshooting, and reduced reliability.

The easiest way to run Kubernetes at the edge is to use a lightweight, consistent Kubernetes distribution combined with centralized networking and security control. Edge environments require predictable performance, components that are lightweight, minimal operational overhead, and support for intermittent connectivity. By standardizing ingress, traffic routing, and security policies across core, cloud, and edge, teams can deploy Kubernetes at scale while maintaining visibility, isolation, and automation without relying on cloud-specific services.