Contour
Contour: A flexible self-hosted choice for teams that want Envoy, Ingress, and Gateway API support. Ranked #4 of 28 in Kubernetes Ingress Controllers by our editors (9.0/10); pricing: Free plan; best for teams wanting Envoy with flexible APIs.
At a glance
- Editor score9.0 / 10
- PricingFree plan
- Best forTeams wanting Envoy with flexible APIs
- Free planYes
- Paid fromFree
- Ingress API modelBoth
- Facts checked21 Sep 2026
Where it wins
- Supports both Kubernetes Ingress and Gateway API
- Adds canary routing, rate limiting, TLS, and external authorization
- Envoy provides reverse-proxy and load-balancing capabilities
Where it doesn't
- Requires self-hosted Kubernetes deployment and operations
- Some TLS automation depends on cert-manager integration
- External authorization requires a separate authorization service
Our verdict on Contour
Contour is an open-source Kubernetes ingress controller for cluster administrators and application developers operating self-hosted Kubernetes environments. It provides a control plane for Envoy and supports Kubernetes Ingress v1, the Contour-specific HTTPProxy custom resource, and Gateway API. Deployment options include Kubernetes Deployments and DaemonSets, making it suited to teams managing their own cluster infrastructure rather than looking for a vendor-hosted service.
Its strongest fit is the combination of API flexibility and traffic-management depth. Teams can use dynamic configuration updates, weighted traffic splitting for canary releases, local and global rate limiting, TLS termination, and external authorization through an authorization service. Multi-team ingress delegation supports shared clusters where application teams need delegated configuration. Integration with Kubernetes, Envoy, and cert-manager keeps the main ecosystem centered on established cluster and edge components.
Contour is a practical choice when Envoy is central to the architecture and the team wants both current Gateway API support and Kubernetes Ingress compatibility. The tradeoff is operational ownership: deployment, configuration, and ongoing maintenance remain with the team running Kubernetes. TLS automation relies on cert-manager, while external authorization relies on an authorization service, so those capabilities involve connected components. Teams wanting self-hosted control and flexible routing should consider Contour; teams seeking a hosted ingress service or a narrower operational footprint should look elsewhere.
Your product? Our editors can test Contour in depth and publish a review, labelled as paid · from $149/mo →
Contour pricing
Contour fact sheet
| Free plan | Yes |
|---|---|
| Paid from | Free |
| Ingress API model | Both |
| TLS automation | Yes |
| Canary routing | Yes |
| Rate limiting | Yes |
| Web application firewall | Not verified |
| Auth policies | Yes |
| Deployment model | Self-hosted |
| Deployment | Self-hosted |
| Support | Community, Docs |
| Built for | Small business, Mid-market, Enterprise (editorial estimate) |
| Integrations | 3 integrations: Envoy, cert-manager, Kubernetes |
| Pricing | Free plan |
| Website | projectcontour.io |
| Facts checked | 21 Sep 2026 |
Contour integrations
Contour lists 3 integrations on its own site.
- Envoy
- cert-manager
- Kubernetes
Alternatives to Contour
- Traefik ProxyA broad self-hosted ingress proxy with discovery, multi-protocol routing, and observability.9.3
- NGINX Ingress ControllerA free, self-hosted controller for routing, TLS, traffic policies, and edge integrations.9.2
- Kong Ingress ControllerA free, extensible choice for Kong-centered Kubernetes API platforms.9.1
See all Contour alternatives →
Contour vs the competition
- Contour vs Traefik Proxy
- Contour vs NGINX Ingress Controller
- Contour vs Kong Ingress Controller
- Contour vs HAProxy Ingress
- Contour vs kgateway
- Contour vs Apache APISIX
Compare Contour with any tool side by side →
Used Contour? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Contour for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Contour is listed in our Kubernetes Ingress Controllers directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/contour-kubernetes-ingress-controller/"><img src="https://www.itechguides.com/best/badge/contour-kubernetes-ingress-controller.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update