Contour is a Kubernetes ingress controller using Envoy proxy.
Contour is an Ingress controller for Kubernetes that works by deploying the Envoy proxy as a reverse proxy and load balancer. Contour supports dynamic configuration updates out of the box while maintaining a lightweight profile.
Contour also introduces a new ingress API (HTTPProxy) which is implemented via a Custom Resource Definition (CRD). Its goal is to expand upon the functionality of the Ingress API to allow for a richer user experience as well as solve shortcomings in the original design.
Contour requires Kubernetes version 1.16 or later, for v1 Custom Resource Definition support.
RBAC must be enabled on your cluster.
Getting started with Contour is as simple as one command. See the Getting Started document.
Thanks for taking the time to join our community and start contributing!
See Contour's roadmap to learn more about where we are headed.
A third party security audit was performed by Cure53 in December of 2020. You can see the full report here.
If you've found a security related issue, a vulnerability, or a potential vulnerability in Contour please let the Contour Security Team know with the details of the vulnerability. We'll send a confirmation email to acknowledge your report, and we'll send an additional email when we've identified the issue positively or negatively.
For further details please see our security policy.
See the list of releases to find out about feature changes.