Contour

What Contour is

Contour is an open-source, self-hosted Kubernetes ingress controller that provides the control plane for Envoy, the edge and service proxy. It accepts Kubernetes Ingress v1, its HTTPProxy custom resource, and Gateway API, and can update ingress configuration dynamically with minimal dropped connections. For multi-team clusters, it supports multiple ingress configuration types and can run as either a Kubernetes deployment or daemonset. Administrators can delegate access to wildcard certificates. Documented security features include TLS termination, client authorization, rate limiting, JWT verification, and IP filtering. Contour and Envoy expose metrics for Prometheus scraping, and the documentation includes guides for cert-manager, Gatekeeper, and AWS Network Load Balancer. The project is tested with Kubernetes 1.21 and later and is designed for cluster administrators and application developers. It is free, with community support through its GitHub project page.