BFE Ingress Controller
7.2#6 in kubernetes ingress controllersFree planFree planAPILinuxmacOSSelf-hosted
VisitBFE Ingress Controller vs Higress
What both publish
| Fact | BFE Ingress Controller | Higress |
|---|---|---|
| CNCF status | BFE is a CNCF Sandbox project, a category CNCF describes as experimental and not yet widely tested in production. | CNCF announced that Higress passed its TOC vote and joined the CNCF Sandbox on March 25, 2026. |
| Limit: operational complexity | Independent analysis says a fleet with API, UI and configuration management requires four separate deployments because the data plane and control-plane components are split. | The same evaluation judged Higress better suited to Kubernetes platform teams than developers expecting a conventional plain go mod installation. |
| Observability | Built-in metrics, logs and distributed tracing are provided for operations and troubleshooting. | The AI statistics plugin records token counts, first-token latency, total request latency and logs across gateway, route, service and model dimensions. |
| Security | The vendor says BFE is written in Go, a memory-safe language, and describes it as immune to buffer overflow vulnerabilities. | Listed protections include prompt-attack detection, sensitive-content identification, data privacy protection, and output-content filtering. |
| Security reporting | Security vulnerabilities should be reported privately to [email protected]. | The security policy directs vulnerability reports to GitHub Private Security Advisories and states that supported major lines are 2.x and 1.x. |
BFE Ingress Controller plans
- Open sourceFree
Higress plans
- Alibaba Cloud AI Gateway Serverless StandardPriced on request
- Higress CommunityFree
- Higress Community EditionFree
- Alibaba Cloud AI Gateway Serverless EnterprisePriced on request
- Feitian Exclusive EditionPriced on request
Pick BFE Ingress Controller if…
BFE suits operators seeking a self-hosted Layer 7 load balancer with content-based routing and tenant isolation. Its listed integrations and installation paths may also suit teams using the named ecosystem tools.
Pick Higress if…
Higress suits teams that need a self-hosted gateway for AI services and cloud-native traffic. It may also fit those needing MCP, Kubernetes gateway, or API lifecycle capabilities.