Rethink platform engineering and developer impact in the age of AI. Tune in to our webinar on Thursday, May 22.

Easily upgrade to Edge Stack.

The best Kubernetes-native API gateway for microservices.

Trusted by developers at

Seamlessly transition.

If you're using the open-source Emissary-Ingress for your API Gateway, upgrading to Kubernetes-native Ambassador Edge Stack is straightforward and brings additional powerful features. With Edge Stack, you gain capabilities like scalable HTTPs, TCP, Websockets and gRPC traffic management with L4/L7 load balancing, circuit breakers, and rate limiting, robust security features like a web application firewall (WAF), built-in authentication and SSO options, Swagger/OpenAPI Dev Portal documentation and observability.

Modern cloud-native performance.

Built on Envoy Proxy, this gateway delivers high performance and efficiency, reducing resource requirements while enhancing speed and scalability.

Cutting-edge ecosystem.

Supported by leading cloud-native companies like IBM, Google, and Microsoft, Envoy Proxy ensures rapid innovation and reliable, community-driven updates.

Exclusive HTTP/3 support.

As the only gateway with built-in HTTP/3 support, Edge Stack provides advanced protocol capabilities, keeping your API at the forefront of technology.

Key features

HTTP protocols
All HTTP protocols from HTTP/1 to HTTP/3, WebSockets, gRPC, and raw TCP connections.
Network security with cert-manager integration
Supports TLS origination and termination options, includes automatic certificate provisioning using the ACME protocol and Let’s Encrypt (TLS, mTLS and CORS).
Web application firewal (WAF)
Filter, monitor and block malicious HTTP/S traffic in real time to protect web applications from threat vectors
Observability
Monitoring of Rate, Error, and Duration (RED) metrics using Prometheus or compatible systems.
Rate limiting
Built-in, advanced rate limit capabilities.
Authentication
Comprehensive, built-in authentication for OAuth2, OIDC, JWT, and a variety of SSO integrations including Google, SAML, Okta, Keycloak, Auth0, Entra, and others.
Advanced routing
Routing based on headers, path, host, parameters, and more.
Support
Standard business or priority support for testing, deployment and production issues, and dedicated CSM.

Migrate to a cloud-native API gateway easily.

Hitless reloads.

Keep your API gateway online with dynamic, downtime-free reconfiguration—ideal for evolving microservices architectures.

Decentralized configuration.

Empower platform and developer teams with Kubernetes CRD-based routing, reducing deployment bottlenecks and boosting productivity.

Enhanced performance.

Achieve up to 5x higher request throughput, reducing resource costs and maximizing performance for both encrypted and unencrypted traffic.

Migrate to Edge Stack.

Simplify and secure your application environment with the best-in-class, Kubernetes-native API Gateway.