Emissary-Ingress Has a Free API: Kubernetes-Native API Gateway Built on Envoy

#kubernetes #networking #api #devops

Why Emissary-Ingress

Emissary-Ingress (formerly Ambassador) is a Kubernetes-native API gateway built on Envoy Proxy. It understands Kubernetes resources natively — no separate configuration files.

Install

helm repo add datawire https://app.getambassador.io
helm install emissary datawire/emissary-ingress -n emissary --create-namespace

Route Traffic

apiVersion: getambassador.io/v3alpha1
kind: Mapping
metadata:
  name: api-mapping
spec:
  hostname: api.example.com
  prefix: /api/v1/
  service: api-service:8080
  timeout_ms: 5000
  retry_policy:
    retry_on: 5xx
    num_retries: 3

Rate Limiting

apiVersion: getambassador.io/v3alpha1
kind: RateLimit
metadata:
  name: api-rate-limit
spec:
  domain: ambassador
  limits:
    - pattern:
        - generic_key: "api"
      rate: 100
      unit: minute

Authentication

apiVersion: getambassador.io/v3alpha1
kind: AuthService
metadata:
  name: auth
spec:
  auth_service: auth-service:3000
  proto: http
  allowed_request_headers:
    - Authorization
  allowed_authorization_headers:
    - X-User-ID

Key Features

Envoy-based — battle-tested proxy
K8s native — CRDs for all configuration
Rate limiting — per-user, per-route
Auth — external auth service integration
TLS — automatic with cert-manager
Canary routing — weight-based traffic splitting
CNCF Incubating — production-ready

Resources

Need to extract API gateway configs, traffic data, or routing rules? Check out my Apify tools or email spinov001@gmail.com for custom solutions.

DEV Community