Hi all, I have questions regarding APISIX. I am currently evaluating ingress controllers for k8s. We are deploying our cluster with EKS and using AWS ApiGateway redirecting to an ALB. Inside the cluster we have an ALB controller running. I want to get rid of the complexity of AWS ApiGateway and multiple ALBs. The plan is to also move the functionality of the ApiGateway to the ingress controller. (It is mainly proxy and authorization) I have worked with Nginx, Traefik and HAProxy before, but they do not fit my use case. Then I saw that Apache APISIX (https://apisix.apache.org/) offers a lot of functionality on the first view. Does anyone have experiences with APISIX, how it behaves, how the maintenance is, how easy/hard the plugin integration is?

Hadn't come across this before (mainly used Emissary Ingress and briefly Traefik for Ingress Gateway duties, for the same reasons you mentioned) but interesting to see another alternative, thanks for sharing! Would be curious to hear also if others have experience

I also found this comparison of ingress controllers https://docs.google.com/spreadsheets/d/191WWNpjJ2za6-nbG4ZoUMXMpUK8KlCIosvQB0f-oq3k/edit#gid=907731238 Looks APISIX supports the most Authentication types in the free tier

That's a great comparison, thanks! (we're looking to evaluate ingress controllers at $newJob so this resource is really handy)

Have you looked at cilium api gateway?

Yes i checked cilium. For many things it looks great. But as far as i know it does not support authorization. Or did i missed their some features

They do have an Envoy proxy that might do that part https://isovalent.com/labs/cilium-envoy-l7-proxy/ (Full disclosure, I have no experience of using this in cilium)

Thanks! looks promising, I will check if this can help with my problem

I am not sure about your specific needs, but Kong Gateway operates as an ingress controller. Having it as a cluster LoadBalancer will achieve what you described nicely.

Wow this is a helpful thread