--- title: "Calico Ingress Gateway" source: "https://www.tigera.io/tigera-products/ingress-gateway/" description: "Manage and secure inbound Kubernetes traffic with Calico Ingress Gateway, offering Envoy-based routing and a built-in WAF for protected application access." --- Solution # Calico Ingress Gateway Modern enterprise-grade ingress traffic control for Kubernetes. [Start Free](https://www.calicocloud.io/) [Get a Demo](https://www.tigera.io/demo/) ![Calico's Ingress Gateway](https://embed-ssl.wistia.com/deliveries/9a3fd5b44897d029beb8afc341e479f1.jpg?image_crop_resized=612x344) ## Benefits Optimize external traffic flow with a scalable, customizable ingress management solution based on the Envoy Gateway ![Enterprise building icon with a checkmark.](https://www.tigera.io/app/uploads/2024/06/icon-84x84-Enterprise-hardened-proven.svg) ### Enterprise-Hardened Distribution of Envoy Gateway A 100% upstream Envoy Gateway distribution ensures reliable, scalable, and customizable ingress traffic management that is fully compatible with the Gateway API ![Padlock icon on a circuit board representing network security and observability.](https://www.tigera.io/app/uploads/2024/06/icon-84x84-network-security.svg) ### Unified Network Security and Observability Combine ingress, egress, network policy management, cluster mesh, and observability within a single platform for improved efficiency ![An icon showing a square with four outward arrows.](https://www.tigera.io/app/uploads/2024/06/icon-84x84-Unparallel-scalability-efficient-resource-utilization.svg) ### Scalable and Optimized Traffic Flow Management Efficiently manage and scale high volumes of ingress traffic across multiple Kubernetes clusters with enhanced reliability and control ## Trusted by Customers Worldwide [![Orange logo](https://www.tigera.io/app/uploads/2022/03/logo-Orange.png)](http://www.orange.com/en) [![Essentra logo](https://www.tigera.io/app/uploads/2022/04/logo-Essentra.png)](https://www.essentra.com/en) [![Siemens Healthineers logo](https://www.tigera.io/app/uploads/2022/09/logo-siemens-healthineers.png)](https://www.siemens-healthineers.com/) [![RBC logo](https://www.tigera.io/app/uploads/2024/05/logo-RBC.png)](https://www.rbcroyalbank.com/) [![Marsh McLennan logo](https://www.tigera.io/app/uploads/2022/03/logo-Marsh-and-McLennan.png)](http://www.mmc.com/) [![Presidio logo](https://www.tigera.io/app/uploads/2024/05/logo-Presidio.png)](https://www.presidio.com/) [![Box logo](https://www.tigera.io/app/uploads/2022/03/logo-box.png)](http://www.box.com/home) [![Nvidia logo](https://www.tigera.io/app/uploads/2024/05/logo-Nvidia.png)](https://www.nvidia.com/) [![FM Global logo](https://www.tigera.io/app/uploads/2023/03/logo-FM-Global.png)](https://www.fmglobal.com/) [![Upwork logo](https://www.tigera.io/app/uploads/2022/12/logo-upwork.png)](https://www.upwork.com/) [![GoDaddy logo](https://www.tigera.io/app/uploads/2023/03/logo-GoDaddy.png)](https://www.godaddy.com/) [![Arvato Systems logo](https://www.tigera.io/app/uploads/2025/01/logo-Arvato-systems.png)](https://www.arvato-systems.com/) [![Aldagi logo](https://www.tigera.io/app/uploads/2022/10/logo-aldagi.png)](https://aldagi.ge/en/) [![NBC Universal logo](https://www.tigera.io/app/uploads/2022/09/logo-NBC-Universal.png)](https://www.nbcuniversal.com/) [![Chipotle logo](https://www.tigera.io/app/uploads/2024/05/logo-Chipotle.png)](https://www.chipotle.com/) [![Meridianlink logo](https://www.tigera.io/app/uploads/2022/03/logo-Meridianlink.png)](http://www.meridianlink.com/) [![Mulligan Funding logo](https://www.tigera.io/app/uploads/2022/03/logo-MulliganFunding.png)](https://www.mulliganfunding.com/) [![HanseMerkur logo](https://www.tigera.io/app/uploads/2022/03/logo-HanseMerkur.png)](http://www.hmrv.de/en) [![Fiserv logo](https://www.tigera.io/app/uploads/2022/12/logo-fiserv.png)](https://www.fiserv.com/) [![Berenberg logo](https://www.tigera.io/app/uploads/2022/03/logo-BERENBERG.png)](http://www.berenberg.de/en/) [![eHealth logo](https://www.tigera.io/app/uploads/2023/10/logo-eHealth.png)](https://www.tigera.io/ehealth-case-study/) [![Coinmetrics logo](https://www.tigera.io/app/uploads/2022/03/logo-coinmetrics.png)](http://coinmetrics.io/) ![Kubernetes Gateway API Diagram](https://www.tigera.io/app/uploads/2025/02/diagram-Kubernetes-Gateway-API.png) ### Enterprise-Hardened Envoy Gateway Built on a 100% upstream distribution of Envoy Gateway, a leading OSS implementation of the Kubernetes Gateway API, Calico provides a standardized, vendor-neutral approach to managing Kubernetes ingress traffic. Enterprise hardening includes CVE-protection. [Learn More](https://docs.tigera.io/calico/latest/about/kubernetes-training/about-kubernetes-ingress) ![Calico Ingress Gateway Examples Diagram](https://www.tigera.io/app/uploads/2025/02/diagram-Calico-Ingress-Gateway-Examples.png) ### Advanced Traffic Control Enable granular control over ingress traffic through header-based routing, retries, fault injection, rate limiting, and traffic splitting. Also includes integrated load balancing to reduce latency and ensure high availability of application data. [Learn More](https://www.tigera.io/blog/everything-you-need-to-know-about-kubernetes-ingress-networking/) ![Role Oriented Gateway Diagram](https://www.tigera.io/app/uploads/2025/02/diagram-Role-Oriented-Gateway-02.png) ### Role-Oriented Gateway Delegate specific configurations to application developers while allowing cluster-wide settings to be managed by cluster admins or DevOps teams. [Learn More](https://www.tigera.io/learn/guides/kubernetes-security/kubernetes-gateway-api/) ![Seamless Deployment](https://www.tigera.io/app/uploads/2025/02/Seamless-Deployment-1200x628-1.png) ### Seamless Deployment Easily installed and managed via the Calico Operator, enabling a smooth, hassle-free setup. [Learn More](https://docs.tigera.io/calico/latest/reference/installation/api) ## Available on Microsoft Azure, AWS, and Google Marketplace Get started right away on Azure, AWS, or Google Cloud—every Calico component you need to get up and running is ready to go. [On Azure](https://azuremarketplace.microsoft.com/en-ca/marketplace/apps/tigerainc1620235671643.calicocloudsaas?tab=overview) [On AWS](https://aws.amazon.com/marketplace/pp/prodview-pq3tgvtlj3wce) [On Google Cloud](https://console.cloud.google.com/marketplace/product/tigera-public/calico-cloud?inv=1&invt=Ab27_g&project=tigera-public) ![Microsoft Azure, AWS, and Google Cloud logos.](https://www.tigera.io/app/uploads/2025/07/Solution-cloud-marketplace-AWS-Azure-03.svg) ## Customer Testimonial Here’s what our customers are saying about us ![Quotation marks](https://www.tigera.io/app/themes/tigera2021/dist/img/quotes-sign.svg) Rafay recommends Calico as the default networking and security solution for customers using the Rafay Kubernetes Operations Platform. No one should run Kubernetes without Calico networking and security. Mohan Atreya Senior VP of Product and Solutions, Rafay ![Rafay Logo](https://www.tigera.io/app/uploads/2023/04/logo-Rafay-170x60-1.png) [Learn More](https://www.tigera.io/rafay-aws-case-study/) [Read Customer Stories](https://www.tigera.io/customer-stories/) ## Featured Resources Developer-created resources to help you secure your Kubernetes deployment ![What Is the Kubernetes Gateway API?](https://www.tigera.io/app/uploads/2024/11/Kubernetes-Gateway-API-Key-Features-Use-Cases-and-Examples-Blue-380x200.png) Learn Guide ### What Is the Kubernetes Gateway API? Learn how to manage and control ingress traffic in Kubernetes with the Gateway API in this guide. [Read More](https://www.tigera.io/learn/guides/kubernetes-security/kubernetes-gateway-api/) ![What’s New in Calico: Winter 2025](https://www.tigera.io/app/uploads/2025/02/Whats-new-in-Calico-Winter-2025-380x200.png) Blog ### What’s New in Calico: Winter 2025 Discover the latest Calico Winter 2025 updates, including the new Calico Ingress Gateway! [Read More](https://www.tigera.io/blog/whats-new-in-calico-winter-2025/) ![A Detailed Look at the Calico Ingress Gateway](https://www.tigera.io/app/uploads/2025/03/A-Detailed-Look-at-the-Calico-Ingress-Gateway-380x200.png) Blog ### A Detailed Look at the Calico Ingress Gateway Learn how Calico’s Ingress Gateway streamlines Kubernetes traffic and enhances observability. [Read More](https://www.tigera.io/blog/a-detailed-look-at-the-calico-ingress-gateway/) [All Resources](https://www.tigera.io/resources/) ![Calico Logo](https://www.tigera.io/app/uploads/2026/01/Calico-logo-2026-black-text.svg) ## Ready to Get Started? Get started for free or request a demo to see Calico in action