Skupper
Skupper is a free, open-source application interconnect for creating private networks across sites and platforms.
What Skupper is
Skupper is a free, open-source application interconnect for creating private networks across sites and platforms. It forwards local service traffic between sites over existing IP networks, connecting services across network boundaries without VPNs or special firewall rules. Skupper forms an isolated application network with logical service addresses, and its product page says application services are never exposed on the public internet. Router connections use mutual TLS with a private, dedicated certificate authority, and each router has its own certificate. Skupper can distribute requests among service instances according to capacity and configured link costs, balance new TCP connections across workloads at different sites, and reroute traffic when a workload becomes unavailable. Multi-key listeners support weighted distribution and priority-based failover across routing keys. The project lists remote resource access, platform migration, application resiliency, and highly distributed applications as use cases. Kubernetes controllers can be installed from YAML, Helm charts, or an Operator; local-system sites require the CLI. Sites and service exposure can also be managed with CLI commands or declarative YAML using Site, Listener, and Connector resources. Skupper code and documentation use the Apache License version 2.0. Stateful applications that need a controlled order for traffic redirection require failover orchestration implemented separately.
Good
- Connects sites over existing IP networks
- Uses mutual TLS for router connections
- Supports weighted distribution and priority-based failover
- Available under Apache License 2.0
Watch out
- Stateful failover orchestration must be implemented separately
- Local-system sites require the CLI
- Cluster-scoped Kubernetes installation requires cluster-admin access
Who it suits
Skupper may suit teams connecting services across sites or platforms, including for remote resource access, migration, resiliency, or distributed applications. It is relevant to users managing Kubernetes or local-system sites who can work with its CLI or declarative YAML.
Verdict
Skupper provides an application-focused way to connect services across network boundaries, with encrypted router links and traffic distribution features. Teams with stateful applications needing ordered redirection must supply that failover orchestration separately.
The facts
Each one read from Skupper's own pages, with the date it was checked.
What it does
- API
- The site shows a declarative API with Site, Listener, and Connector resources for defining sites and service exposure.checked 4 Oct 2026
- Connectivity
- Skupper forwards local service traffic to remote clusters through a secure virtual application network.checked 4 Oct 2026
- Current release
- The releases page identifies Skupper 2.2.2, released on 17 August 2026, as the latest release.checked 4 Oct 2026
- Deployment
- On Kubernetes, the controller can be installed using YAML, Helm charts, or an Operator; local-system sites require the CLI.checked 4 Oct 2026
- Exposure
- The maker says Skupper networks are isolated from external access and application services are not exposed on the public internet.checked 4 Oct 2026
- Failover
- Skupper reroutes traffic to available sites when a workload becomes unavailable, but it does not orchestrate failover for stateful applications that need ordered redirection.checked 4 Oct 2026
- Failover limit
- Skupper does not provide orchestrated failover for stateful applications that require control over traffic redirection order; that orchestration must be implemented separately.checked 4 Oct 2026
- Isolation
- Skupper creates isolated application-focused networks with logical service addresses.checked 4 Oct 2026
- Kubernetes installation
- The controller can be installed from YAML manifests, Helm charts, or an Operator; cluster-scoped installation requires cluster-admin access.checked 4 Oct 2026
- License
- Skupper is an open-source project licensed under Apache License 2.0.checked 4 Oct 2026
- Load balancing
- Skupper balances new TCP connections across workloads in distinct sites and reroutes traffic when a workload becomes unavailable.checked 4 Oct 2026
- Load balancing strategies
- Multi-key listeners support weighted distribution and priority-based failover across routing keys.checked 4 Oct 2026
- Management
- Sites and service exposure can be managed through a CLI or declarative YAML workflows.checked 4 Oct 2026
- Network model
- Skupper routers carry application messages between services at different sites, with routing patterns including anycast and multicast.checked 4 Oct 2026
- Product
- Skupper is an application interconnect for building private networks across multiple sites and platforms.checked 4 Oct 2026
- Routing
- Skupper supports cross-site routing and can distribute requests among service instances according to capacity and configured link costs.checked 4 Oct 2026
- Security
- Skupper secures router connections with mutual TLS using a private, dedicated certificate authority, and uniquely identifies each router with its own certificate.checked 4 Oct 2026
- Support
- The project directs users to its Google Groups mailing list for questions and GitHub issues for bugs and enhancement requests.checked 4 Oct 2026
- Use cases
- The site lists remote resource access, platform migration, application resiliency, and highly distributed applications as use cases.checked 4 Oct 2026
Where it runs
- Platforms
- Skupper works on Kubernetes, Docker, Podman, and Linux.checked 4 Oct 2026
Alternatives to Skupper
- 1
Antrea
Free planOpen sourceAPILinuxSelf-hostedWindows7.2Free plan - 2
Network Service Mesh
Free planOpen sourceAPILinuxSelf-hosted7.0Free plan - 3

Aviatrix Kubernetes Firewall
WebSelf-hosted6.2 - 4
kube-network-policies
Free planLinuxSelf-hosted6.2Free plan - 5

Calico Open Source
Free planLinuxSelf-hostedWindows6.1Free plan - 6

Cilium
Free planLinuxSelf-hosted6.0Free plan
