Kong Ingress Controller
Kong Ingress Controller: A free, extensible choice for Kong-centered Kubernetes API platforms. Ranked #3 of 28 in Kubernetes Ingress Controllers by our editors (9.1/10); pricing: Free plan; best for kong-integrated Kubernetes API platforms.
At a glance
- Editor score9.1 / 10
- PricingFree plan
- Best forKong-integrated Kubernetes API platforms
- Free planYes
- Paid fromFree
- Ingress API modelBoth
- Facts checked23 Sep 2026
Where it wins
- Supports both Kubernetes Ingress and Gateway API resources
- Combines routing, health checks, rate limiting, auth, and TLS handling
- Connects with Kong Gateway, Konnect, Operator, and cert-manager
Where it doesn't
- The Kong Canary Release plugin is not suitable for Kubernetes-native use
- Its Kong ecosystem model may exceed simple ingress requirements
- Custom plugins and broad policy controls suit platform teams more than casual use
Our verdict on Kong Ingress Controller
Kong Ingress Controller runs Kong Gateway in Kubernetes and translates Kubernetes Ingress, HTTPRoute, and other Gateway API resources into Kong Gateway configuration. It is designed for platform and infrastructure teams managing Kubernetes clusters and API traffic. The controller supports HTTP, TCP, UDP, and TLS routing, load balancing across Kubernetes service endpoints, active and passive health checking, weighted traffic distribution, authentication, authorization, rate limiting, and plugin-based request processing. It can be installed with Helm or the Kong Operator and deployed with self-managed Kong Gateway or Kong Konnect environments.
Its strongest fit is breadth within the Kong ecosystem. Integrations include Kong Gateway, Kong Konnect, Kong Operator, cert-manager, Istio, Prometheus, and Grafana. TLS certificate rotation through cert-manager adds an automation path for certificate operations, while Kong plugins extend rate limiting, authentication, authorization, and request processing. The controller also supports both Ingress and Gateway API models, giving teams a choice between established Kubernetes resources and newer Gateway API resources. These capabilities make it suitable for teams that want ingress routing tied to a wider API management platform rather than an isolated traffic entry point.
The open-source model and free plan make Kong Ingress Controller accessible for self-hosted Kubernetes deployments. Its trade-off is an operating model built around Kong Gateway and related platform components, which may be more than a small team needs for straightforward ingress. Kubernetes-native canary deployments should use Gateway API; Kong documents the Canary Release plugin as unsuitable for that use. Choose Kong Ingress Controller when Kong integrations, policy plugins, and multi-service traffic control are priorities. Consider a narrower controller when the requirement is limited to basic routing with minimal platform scope.
Your product? Our editors can test Kong Ingress Controller in depth and publish a review, labelled as paid · from $149/mo →
Kong Ingress Controller pricing
Kong Ingress Controller fact sheet
| Free plan | Yes |
|---|---|
| Paid from | Free |
| Ingress API model | Both |
| TLS automation | Yes |
| Canary routing | Not verified |
| Rate limiting | Yes |
| Web application firewall | Not verified |
| Auth policies | Yes |
| Deployment model | Both |
| Deployment | Self-hosted, Cloud |
| Platforms | Linux |
| Support | Community, Docs |
| Built for | Small business, Mid-market, Enterprise (editorial estimate) |
| Integrations | 5 integrations: Kong Gateway, Kong Konnect, Kong Gateway Operator, cert-manager, Kubernetes Gateway API |
| Pricing | Free plan (source) |
| Website | developer.konghq.com |
| Facts checked | 23 Sep 2026 |
Kong Ingress Controller integrations
Kong Ingress Controller lists 5 integrations on its own site.
- Kong Gateway
- Kong Konnect
- Kong Gateway Operator
- cert-manager
- Kubernetes Gateway API
Alternatives to Kong Ingress Controller
- Traefik ProxyA broad self-hosted ingress proxy with discovery, multi-protocol routing, and observability.9.3
- NGINX Ingress ControllerA free, self-hosted controller for routing, TLS, traffic policies, and edge integrations.9.2
- ContourA flexible self-hosted choice for teams that want Envoy, Ingress, and Gateway API support.9.0
See all Kong Ingress Controller alternatives →
Kong Ingress Controller vs the competition
- Kong Ingress Controller vs Traefik Proxy
- Kong Ingress Controller vs NGINX Ingress Controller
- Kong Ingress Controller vs Contour
- Kong Ingress Controller vs HAProxy Ingress
- Kong Ingress Controller vs kgateway
- Kong Ingress Controller vs Apache APISIX
Compare Kong Ingress Controller with any tool side by side →
Used Kong Ingress Controller? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Kong Ingress Controller for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Kong Ingress Controller is listed in our Kubernetes Ingress Controllers directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/kong-ingress-controller/"><img src="https://www.itechguides.com/best/badge/kong-ingress-controller.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update