Listing Thumbnail

    F5 NGINX Ingress Controller (Premium Edition)

     Info
    Sold by: NGINX, Inc. 
    Deployed on AWS
    Free Trial
    NGINX Ingress Controller (based on NGINX Plus) combines the speed and performance of NGINX with the trust and security behind the power of F5. NGINX Ingress Controller is high-performing, production-ready, and suitable for long-term deployment. We focus on providing stability across releases, with features that can be deployed at enterprise scale.
    4.5

    Overview

    Play video

    NGINX Ingress Controller is a best-in-class traffic management solution for cloud-native apps in Kubernetes and containerized environments in Amazon EKS. Get your free 30-day trial today!

    In a CNCF survey, nearly two-thirds of respondents reported using the NGINX Ingress Controller (more than all other controllers combined) and NGINX Ingress Controller has been downloaded more than 10 million times on DockerHub. Combining the speed and performance of NGINX with the trust and security behind the power of F5, NGINX Ingress Controller is synonymous with high-performing, scalable, and secure modern apps in production.

    This is the official implementation of NGINX Ingress Controller (based on NGINX Plus) from NGINX. It is high-performance, production-ready, and suitable for long-term deployment. We focus on providing stability across releases, with features that can be deployed at enterprise scale. Included in this subscription is NGINX's award-winning support.

    Highlights

    • Advanced app-centric configuration: Use role-based access control and self-service to set up security guardrails, so your teams can manage their apps securely and with agility. Enable multi-tenancy, reusability, simpler configs, and more.
    • Visibility and performance monitoring: Pinpoint undesirable behaviors and performance bottlenecks to simplify troubleshooting and make fixes faster.

    Details

    Delivery method

    Supported services

    Delivery option
    EKSDelivery

    Latest version

    Operating system
    Linux

    Deployed on AWS
    New

    Introducing multi-product solutions

    You can now purchase comprehensive solutions tailored to use cases and industries.

    Multi-product solutions

    Features and programs

    Buyer guide

    Gain valuable insights from real users who purchased this product, powered by PeerSpot.
    Buyer guide

    Financing for AWS Marketplace purchases

    AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
    Financing for AWS Marketplace purchases

    Pricing

    Free trial

    Try this product free for 30 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.

    F5 NGINX Ingress Controller (Premium Edition)

     Info
    Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
    Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator  to estimate your infrastructure costs.

    Usage costs (1)

     Info
    Dimension
    Description
    Cost/unit/hour
    Hours
    Container Hours
    $0.53

    How can we make this page better?

    Tell us how we can improve this page, or report an issue with this product.
    Tell us how we can improve this page, or report an issue with this product.

    Legal

    Vendor terms and conditions

    Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .

    Content disclaimer

    Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.

    Usage information

     Info

    Delivery details

    EKSDelivery

    Supported services: Learn more 
    • Amazon EKS
    Container image

    Containers are lightweight, portable execution environments that wrap server application software in a filesystem that includes everything it needs to run. Container applications run on supported container runtimes and orchestration services, such as Amazon Elastic Container Service (Amazon ECS) or Amazon Elastic Kubernetes Service (Amazon EKS). Both eliminate the need for you to install and operate your own container orchestration software by managing and scheduling containers on a scalable cluster of virtual machines.

    Additional details

    Usage instructions

    This container requires Kubernetes and can be deployed to EKS. Review the installation instructions https://docs.nginx.com/nginx-ingress-controller/installation/  and utilize the deployment resources available https://github.com/nginxinc/kubernetes-ingress/tree/v3.7.2/deployments  Use this image instead of building your own.

    Support

    Vendor support

    To engage our support team, please first activate your account at http://www.myf5.com , where you'll be able to register and open a support case. For info on MyF5 support, please see our complete help article at

    AWS infrastructure support

    AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.

    Product comparison

     Info
    Updated weekly

    Accolades

     Info
    Top
    10
    In Application Development, Network Infrastructure, Security
    Top
    25
    In Application Stacks
    Top
    25
    In Network Infrastructure

    Customer reviews

     Info
    Sentiment is AI generated from actual customer reviews on AWS and G2
    Reviews
    Functionality
    Ease of use
    Customer service
    Cost effectiveness
    2 reviews
    Insufficient data
    Insufficient data
    Insufficient data
    Insufficient data
    Positive reviews
    Mixed reviews
    Negative reviews

    Overview

     Info
    AI generated from product descriptions
    Kubernetes Traffic Management
    NGINX Plus-based ingress controller for managing traffic in Kubernetes and containerized environments in Amazon EKS
    Role-Based Access Control
    Role-based access control implementation enabling secure app management with self-service configuration capabilities
    Multi-Tenancy Support
    Multi-tenancy architecture allowing multiple teams to manage applications within shared infrastructure with isolation
    Performance Monitoring and Visibility
    Built-in visibility and performance monitoring capabilities for identifying performance bottlenecks and troubleshooting application behavior
    Enterprise-Scale Deployment
    Production-ready architecture designed for enterprise-scale deployments with stability across releases and long-term operational support
    Reverse Proxy and HTTP Acceleration
    Reverse proxy and HTTP accelerator that speeds up websites and reduces streaming latency for content delivery
    Content Caching Technology
    Caching technology that reduces backend server load by up to 99% while delivering all types of content faster
    Integrated Load Balancing and API Gateway
    Integrated functionality combining content cache, reverse proxy, load balancer, API gateway, web server, and SSL terminator
    Origin Shield Protection
    Origin shield mechanism that helps web services thrive under pressure and protects against traffic spikes
    Multi-Protocol Content Delivery
    Support for delivering websites, APIs, and video content with performance acceleration capabilities
    AI-Powered Data Management
    F5 AI Data Fabric enables generation of insights, management, and governance for data from different applications and products across multiple data lakes and data sources.
    Multi-Cloud Network Connectivity
    Global hub-and-spoke transit orchestration for connecting all cloud properties including public, private, network and edge clouds.
    Integrated Security Stack
    Unified software stack combining router, load balancer, network firewall, web application firewall (WAF), API security and API gateway capabilities.
    Layer 3-7 DDoS Protection
    L3-L7 DDoS defense capabilities for protecting applications and APIs deployed across distributed environments.
    Unified Management Portal
    Single SaaS-based console for SecOps, NetOps, and DevOps to manage and deploy virtual networks, connections, distributed applications, and API security.

    Contract

     Info
    Standard contract
    No
    No
    No

    Customer reviews

    Ratings and reviews

     Info
    4.5
    32 ratings
    5 star
    4 star
    3 star
    2 star
    1 star
    78%
    19%
    3%
    0%
    0%
    8 AWS reviews
    |
    24 external reviews
    External reviews are from G2  and PeerSpot .
    Filip Grasheski

    Routing traffic securely in cloud clusters has reduced costs and simplified configuration

    Reviewed on Jun 01, 2026
    Review provided by PeerSpot

    What is our primary use case?

    I have used NGINX Ingress Controller  in a couple of projects as a controller that is supposed to route traffic to Kubernetes  clusters. One of the main reasons I chose it is because it is a free product with a lot of documentation that is very easy to set up. It has a great community around it to help with answering questions and providing feedback on architecture.

    In one of the projects where I used NGINX Ingress Controller  to route traffic in Kubernetes  clusters, we have a cluster running in Azure  AKS with several services deployed as pods on a multi-node cluster. An F5 NGINX  controller routes the traffic that comes through the load balancer, the Azure  Standard Load Balancer, and then routes it using the ingress controller to the different pods. There is a lot of configuration involved, including whitelisting specific IP ranges and headers in order to add an additional security layer to the traffic routing mechanism.

    What is most valuable?

    NGINX Ingress Controller offers a lot of different configurations, making it very flexible in terms of how you can configure the routing and traffic steering. It supports all kinds of header-based routing, regex capabilities, canary releases, and TLS terminations. I have used it a few times as a reverse proxy as well, and many security controls can be configured.

    Out of all those features, including flexible configurations, header-based routing, regex, TLS termination, and security controls, I find myself using the routing and security controls the most.

    The obvious positive impact of NGINX Ingress Controller is the cost saving. I have seen those savings in terms of cost compared to other enterprise products which come with a cost to implement, maintain, and support.

    What needs improvement?

    I do not see anything that frustrates me about NGINX Ingress Controller or that I wish was different. There are a few gimmicks that need learning, such as annotations and precedence over annotations and config maps that could be a bit clearer at times, but other than that, I do not see a lot of other things that would annoy me in my work with NGINX Ingress Controller.

    For how long have I used the solution?

    I have used NGINX Ingress Controller for approximately four to five years, give or take, in different projects.

    What do I think about the stability of the solution?

    NGINX Ingress Controller is stable.

    What do I think about the scalability of the solution?

    NGINX Ingress Controller scales very effectively because it can be deployed on a cluster, so it performs pretty much the same as anything running on Kubernetes.

    How are customer service and support?

    I have not used the customer support for NGINX Ingress Controller.

    Which solution did I use previously and why did I switch?

    I have used different solutions before, but I have not switched between them. Those were different projects with different requirements.

    How was the initial setup?

    NGINX Ingress Controller is very easy to set up, easy to deploy, and easy to maintain.

    What about the implementation team?

    I did not purchase NGINX Ingress Controller through the Azure marketplace.

    What was our ROI?

    The only measurable thing I can say about return on investment is money saved in comparison to other commercial products.

    What's my experience with pricing, setup cost, and licensing?

    I do not have any experience with pricing, setup cost, and licensing because I have used the open-source version.

    Which other solutions did I evaluate?

    I have evaluated other options before choosing NGINX Ingress Controller, including Traffic and Kong.

    What other advice do I have?

    Regarding NGINX Ingress Controller's AI capabilities, I do not have any experience with its governance and security. I have not used NGINX Ingress Controller's AI capabilities, so I cannot speak to the accuracy and reliability of its output. My overall review rating for NGINX Ingress Controller is 9.

    reviewer2813076

    Routing microservices has become streamlined and now saves our team significant time

    Reviewed on May 29, 2026
    Review provided by PeerSpot

    What is our primary use case?

    NGINX Ingress Controller  is primarily used for routing in my team's Kubernetes  cluster where we run multiple microservices. We deployed NGINX Ingress Controller  on a cluster with around 20 microservices and different endpoints that we wanted to route requests to, so we specified all the paths we wanted to route to in the YAML files.

    Apart from my current projects, I have also used NGINX Ingress Controller in some open-source deployments where I needed to route requests.

    How has it helped my organization?

    The overall time and manual work have been reduced since we started using NGINX Ingress Controller. Earlier we used some other routing tools, but NGINX  fits quite well in our Kubernetes  cluster setup, making it easy to deploy and get running. NGINX Ingress Controller has helped my team reduce workload, particularly in the time saved.

    What is most valuable?

    The best part of NGINX Ingress Controller is how it works, particularly the annotation feature, which allows us to specify all our details through annotations, making it quite easy to integrate with our system.

    The rewrite path is one of the annotations provided by NGINX Ingress Controller, which lets us route requests to a different path based on specified weights. For example, we can send 50% of the requests to one endpoint and 50% to another.

    What needs improvement?

    The annotation part of NGINX Ingress Controller is good, but it can be tedious when there are many features to specify in the annotation section, which sometimes gets messy and could be improved. However, there is a new project called Gateway APIs that has solved that problem.

    The annotation part itself could be improved, as overall it was good but sometimes having everything in the annotation section can be a bit cumbersome.

    Overall NGINX Ingress Controller is a good tool to use, but the main drawback is the annotation part, as managing many paths and features can get quite tedious and complicated.

    For how long have I used the solution?

    I have been using NGINX Ingress Controller for more than three years now across my different projects.

    What do I think about the stability of the solution?

    NGINX Ingress Controller is stable in my experience.

    What do I think about the scalability of the solution?

    The scalability of NGINX Ingress Controller is overall good for our needs.

    How are customer service and support?

    The customer support for NGINX Ingress Controller is good. I would rate the customer support for NGINX Ingress Controller around a 7 or 8.

    Which solution did I use previously and why did I switch?

    We were earlier using HAProxy  to route requests, but we found it quite confusing and complicated, which is why we switched to NGINX Ingress Controller.

    How was the initial setup?

    The main advantage of NGINX Ingress Controller is the deployment and ease of use. The way we deploy NGINX Ingress Controller is quite easy, as we just need the Helm install command or we can directly apply the YAMLs, which makes it unique.

    What was our ROI?

    We have seen a return on investment from using NGINX Ingress Controller, specifically in needing fewer people.

    What's my experience with pricing, setup cost, and licensing?

    The pricing for NGINX Ingress Controller is overall acceptable, and I would not say it is great. The setup cost was also acceptable, and the licensing was straightforward.

    Which other solutions did I evaluate?

    Before choosing NGINX Ingress Controller, we evaluated options such as F5 and HAProxy , but we eventually started with NGINX .

    What other advice do I have?

    NGINX Ingress Controller's governance and security features of AI capabilities are good, with all the basic guardrails available.

    The accuracy and reliability of NGINX Ingress Controller's AI capabilities are not 100%. Sometimes it hallucinates and requires more prompting to get what I want exactly, but overall it is a good feature that still needs improvements.

    NGINX Ingress Controller is a good tool to use. If you have a Kubernetes cluster, then it is easy to deploy and use, though you might face issues with the annotation part. I would give this review a rating of 9.

    Mohammad_Hasan

    Centralized routing has simplified API traffic and has reduced DevOps overhead for our teams

    Reviewed on May 24, 2026
    Review provided by PeerSpot

    What is our primary use case?

    My main use case for NGINX Ingress Controller  is load balancing as well as an API Gateway to perform reverse proxy for our backend applications.

    A specific example of how I use it as a load balancer and API Gateway in my environment is that we have our own DNS resolver, which we use ACME with as a free DNS resolving service. We bind it to the Ingress Controller and add our own rules and hosts to specific Ingress resources to bypass and forward all requests to the specific backends. This helps balance the load by making replicas on-demand.

    Regarding my main use case, we implement custom configurations as well as custom port mappings and annotations. We use specific server snippets and follow security best practices to drop SSL terminations at the Ingress level instead of in the backend.

    What is most valuable?

    The best features NGINX Ingress Controller  offers for my team include all of the commonly available features in the community version. The community version is now obsolete, and Kubernetes  wants to move users to something else like the API Gateway feature, but we are still using NGINX Ingress Controller. The features are excellent.

    While the features are exceptional, ease of use is not as straightforward because certain configurations probably require the paid version. We are using the free version, and in some cases, features like DNS Route 53  are not available in the free version, so we have to address that use case with alternative solutions.

    NGINX Ingress Controller has positively impacted my organization by allowing us to handle many requests from different applications and customers, serving as the frontier of all our backend applications. It performs very well and is both scalable and lightweight. It integrates easily with Kubernetes , so it can be configured and used effectively.

    What needs improvement?

    NGINX Ingress Controller can be improved with better documentation. Good documentation in the Bitnami Helm chart would have made implementation easier for us, as we had to search for many things back and forth. Most of the information we found was confused with the community version of NGINX Controller , which created confusion initially. I would appreciate an AI-based solution so that we could easily find the actual use case relevant to our situation.

    For how long have I used the solution?

    I have been using NGINX Ingress Controller for five years.

    What do I think about the stability of the solution?

    In my experience, NGINX Ingress Controller is stable.

    What do I think about the scalability of the solution?

    Scalability and lightweight design have helped my team greatly. We recently had issues when multiple backend applications were accessed simultaneously from the same client browser, which caused slowdowns after a certain number of requests, around four or five of the same backend application or different backend applications from the same client. We configured this using a custom annotation configuration with HTTP/2, which solved the overall slow performance easily. NGINX Ingress Controller scales well and is very lightweight. The product manager appreciated the solution because it requires just a simple configuration in the Ingress resource, so no backend application changes are needed. NGINX Ingress Controller scales effectively to support whole load balancing scenarios, routing everything to the specific backend services.

    Which solution did I use previously and why did I switch?

    I have not previously used a different solution before NGINX Ingress Controller. Plain  NGINX  was my first experience, and we stick with it because it serves all our purposes.

    What was our ROI?

    I have seen a return on investment from using NGINX Ingress Controller, as I need fewer employees. I do not have to maintain a large DevOps team for this purpose. Any developer can set up and configure NGINX Ingress Controller if they have adequate knowledge on how to set up an Ingress Controller. It saves time because it is easier to set up, though I am uncertain how it translates to monetary savings.

    What other advice do I have?

    My advice to others looking into using NGINX Ingress Controller is to review the documentation first and ensure it serves your purpose. On a scale of one to ten, I rate NGINX Ingress Controller overall as a nine. I chose nine because I do not know the complete use case of the product, so I do not give it a perfect ten. That is my opinion, and while I have encountered some problems and hurdles, I have overcome all of them. It has worked very well for my purposes.

    reviewer2843991

    Centralized access has simplified public services but documentation still needs improvement

    Reviewed on May 21, 2026
    Review provided by PeerSpot

    What is our primary use case?

    My main use case for NGINX Ingress Controller  is as a single point of entry in a public exposed service. I have a service exposed with a public IP through the internet with NGINX Ingress Controller .

    How has it helped my organization?

    NGINX Ingress Controller has positively impacted my organization since I have been using it in production for over three to four years. The positive impact of NGINX Ingress Controller is that it has simplified the configuration at scale for multiple teams.

    It has simplified things for multiple teams by creating templates so that each team could use basic Ingress templates, allowing this to be scaled.

    What is most valuable?

    The best features NGINX Ingress Controller offers include TLS termination and some annotations. TLS termination and annotations help my workflow or setup because I don't need to create certificate objects, and I could use NGINX Ingress Controller along with cert-manager to do it.

    What needs improvement?

    I think NGINX Ingress Controller can be improved by not being deprecated. Better documentation could be an improvement as well.

    For how long have I used the solution?

    I have been using NGINX Ingress Controller for six years.

    What do I think about the stability of the solution?

    NGINX Ingress Controller is stable.

    What do I think about the scalability of the solution?

    NGINX Ingress Controller's scalability is acceptable with HPA.

    How was the initial setup?

    The setup process was straightforward.

    What other advice do I have?

    My advice to others looking into using NGINX Ingress Controller is to evaluate other options, perhaps with Gateway API instead.

    Freddy Pinto

    Improving Cloud Workload Security Through Smarter Traffic Routing and Observability

    Reviewed on May 20, 2026
    Review from a verified AWS customer

    What is our primary use case?

    My main use case for NGINX Ingress Controller  has been in Kubernetes -based consulting work, especially when a team needs a controlled and observable entry point for application traffic.

    In a typical setup, a user or client application sends a request to a public endpoint. That request first reaches an external load balancer, depending on the environment — for example, a cloud load balancer, MetalLB in a lab or bare-metal setup, or another external load-balancing layer. From there, the traffic is forwarded to the NGINX Ingress Controller  running inside the Kubernetes  cluster.

    That is where NGINX Ingress Controller becomes important. It evaluates the Kubernetes Ingress rules, applies routing decisions based on hostnames and paths, and forwards the request to the right Kubernetes Service. The Service then sends the traffic to the correct backend pods, such as web pods, API pods, or authentication pods.

    What I value most is that NGINX Ingress Controller is not just a way to expose services. It gives teams a practical control point for TLS termination, HTTP routing, rewrites, annotations, timeouts, security headers, rate limits, and observability. But it needs to be operated carefully. In production, the biggest risk is usually not NGINX  itself, but weak configuration, missing monitoring, unclear ownership, or unsafe upgrades.

    How has it helped my organization?

    NGINX Ingress Controller helped by giving teams a predictable entry point for Kubernetes workloads. Instead of exposing services one by one, traffic could be routed through a controlled layer for TLS, host/path routing, rewrites, headers, logs, and metrics. The main benefit was operational clarity: better visibility, safer exposure of services, and fewer ad hoc networking decisions.

    What is most valuable?

    The best features are Kubernetes-native routing, TLS termination, flexible host/path rules, annotations, ConfigMaps, and observability when metrics and logs are configured well. In practice, it turns ingress into a clear control point for HTTP/HTTPS traffic. The trade-off is governance: annotations, rate limits, certificates, and upgrades need discipline.

    What needs improvement?

    I would improve diagnostics and guardrails. A built-in support bundle command that safely collects controller config, events, logs, versions, certificate status, and redacted error data would help teams troubleshoot faster. I would also like stronger policy controls around risky annotations, rate limits, TLS expiry, and upgrade validation. It should help security, but not pretend to replace Zero Trust or vulnerability management.

    For how long have I used the solution?

    I have been using NGINX Ingress Controller for more than two years.

    What do I think about the stability of the solution?

    I consider it stable when deployed with disciplined configuration. In my experience, the controller itself is not usually the weak point. Problems tend to come from unclear annotations, certificate issues, poor observability, under-sized resources, or upgrades without staging. With good operational practices, it is reliable.

    What do I think about the scalability of the solution?

    Scalability is strong because it fits naturally into Kubernetes. You can run multiple controller replicas, use resource requests/limits, autoscaling, and a load balancer in front of it. The important point is to test the whole path: controller capacity, backend services, TLS, rate limits, observability, and failure behavior under load.

    How are customer service and support?

    My experience with support was mostly community/self-managed. In the environments I worked with, the client did not use NGINX Plus  or premium support, so issues were handled through internal expertise, documentation, and consulting help when needed. For mission-critical production use, I would consider paid support or a supported controller path.

    Which solution did I use previously and why did I switch?

    Yes. Before using NGINX Ingress Controller, I worked with more traditional network controls such as Layer 3 firewalls and manual routing rules. They were useful, but not enough for cloud-native workloads because Kubernetes needs application-aware routing by host, path, TLS, and service. That gap pushed me toward an ingress controller.

    How was the initial setup?

    The initial setup is usually straightforward for a basic lab or small environment, but production setup is more complex. Installing the controller is not the hard part. The real work is DNS, TLS, load balancer integration, annotations, observability, resource sizing, security headers, staging, and upgrade/rollback discipline.

    What about the implementation team?

    In the implementations I worked with, I did not rely on a dedicated integrator or reseller. The solution was deployed as part of the Kubernetes environment, and in one context it was obtained through AWS Marketplace . Most of the value came from internal/consulting implementation discipline rather than from a third-party integrator.

    What was our ROI?

    Yes. The ROI comes from reducing networking complexity and improving the safety of exposing Kubernetes services. Instead of handling every service separately, teams get a consistent ingress layer for TLS, routing, headers, logs, and metrics. The value is strongest when it prevents downtime, misrouting, expired certificates, or insecure exposure.

    What's my experience with pricing, setup cost, and licensing?

    My experience was positive because the implementation I worked with was deployed as part of the Kubernetes stack, without premium NGINX support. That made the initial cost low. The real cost is operational: proper configuration, monitoring, certificate management, testing, upgrades, and people who understand Kubernetes ingress behavior.

    Which other solutions did I evaluate?

    I considered lower-level approaches such as iptables and traditional firewall/load-balancer rules. They can work, but they become hard to maintain as the number of services grows. NGINX Ingress Controller is easier to operate in Kubernetes because routing lives closer to the application model. The trade-off is that annotations and controller configuration must be governed carefully.

    What other advice do I have?

    I would rate it 9/10 when it is operated intentionally. My advice is not to treat it as just a YAML shortcut. Use it with clear ownership, staging, controlled annotations, TLS monitoring, logs, metrics, resource limits, and rollback plans. For new designs or long-term roadmaps, also evaluate Gateway API or a supported controller path.

    Which deployment model are you using for this solution?

    Hybrid Cloud

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    View all reviews