apache/apisix-ingress-controller
Apisix Ingress Controller
This project is a Kubernetes ingress controller that functions as an API gateway and traffic manager for containerized environments. It operates by monitoring cluster events and translating native ingress resource definitions into active routing configurations, ensuring that external traffic is directed to internal services according to declarative specifications.
The controller distinguishes itself through its ability to act as a specialized gateway for artificial intelligence models, providing a secure entry point that enforces rate limits, content moderation, and prompt guardrails. It supports dynamic configuration updates, allowing traffic management policies to be modified in real-time without restarting the gateway process. Furthermore, the system utilizes a plugin-based architecture that enables custom logic injection and centralized policy orchestration across multiple service endpoints.
Beyond its core routing capabilities, the project provides comprehensive tools for API security, including request authentication and consumer management. It facilitates protocol bridging between diverse network communication standards and maintains system health through integrated performance monitoring and the export of operational metrics. The architecture supports flexible deployment modes, allowing for the scaling of traffic handling capacity across varied infrastructure environments.
Features
- Ingress Controllers - Acts as a Kubernetes ingress controller that translates cluster resources into active routing configurations for API management.
- Ingress Gateways - Directs external traffic to internal services by translating native cluster resource definitions into active gateway routing configurations.
- AI Request Routers - Directs incoming requests to multiple language model providers through a single endpoint while balancing traffic loads and enforcing rate limits.
- AI Request Routing - Directs traffic to multiple language model providers through a unified endpoint while enforcing rate limits and security guardrails.
- AI Security Gateways - Provides a secure entry point that routes requests to language models while applying rate limits and prompt guardrails.
- Kubernetes Traffic Controllers - Automates the conversion of native ingress definitions into gateway configurations for containerized environments.
- Traffic Management Gateways - Manages load balancing, request retries, and timeout policies to ensure reliable performance across distributed backend service environments.
- Traffic Routing Rules - Directs external traffic to internal services by managing routing rules as a primary cluster entry point.
- API and Frontend Authentication - Secures network endpoints by verifying user identities and managing access credentials for individual consumers.
- API Gateway Security - Routes HTTP, gRPC, and WebSocket requests while enforcing security policies and load balancing.
- Model Context Protocol - Exposes and controls external system tools through a secure interface to facilitate structured interactions between AI models and private data.
- Traffic Resilience Policies - Defines load balancing, retry logic, and timeout thresholds to ensure reliable request handling for backend services.
- Event-Driven Configuration Synchronization - Monitors cluster events to trigger immediate updates to the gateway configuration whenever infrastructure resources are modified.
- Configuration Hot-Reloading - Updates active traffic management policies in real-time without restarting the gateway process to ensure continuous service availability.
- Traffic Orchestration - Automates network traffic flow and service connectivity across distributed containerized environments using declarative configuration.
- Configuration Translation - Converts high-level infrastructure specifications into low-level gateway routing rules and plugin configurations through automated mapping logic.
- Kubernetes Controllers - Watches cluster resource changes and reconciles the actual state of the gateway infrastructure to match desired configuration definitions.
- Protocol Translation Bridges - Translates and routes data between diverse network protocols like HTTP, gRPC, and WebSockets to ensure seamless connectivity.
- Gateway API Traffic Configurations - Supports custom plugins, load balancing algorithms, and routing logic to tailor traffic management to specific infrastructure requirements.
- API Access Control - Manages authentication credentials and plugin settings for individual consumers to control access levels across network endpoints.
- API Request Authentication - Verifies user identity and secures endpoints using standard authentication protocols to ensure authorized access.
- Centralized Policy Administration - Applies shared settings and security guardrails across multiple service endpoints from a single source of truth.
- Plugin Configurations - Applies shared settings across multiple routes from a central resource to ensure consistent policy enforcement.
- Extensible Plugin Architectures - Allows custom logic and traffic processing modules to be injected into the request lifecycle to modify gateway behavior.
- Gateway Observability - Collects and exports operational performance metrics from gateway infrastructure to support real-time monitoring.
- Metrics Exports - Exports internal performance and operational data in standard formats to support real-time observability and traffic analysis.
- Load Balancing and Ingress - Ingress controller for K8s.
