Secure, scale, and ship your microservices

Open Source Kubernetes-Native API Gateway built on the Envoy Proxy

Current version: Ambassador 0.40.2 Read the blog post


Reduce your time-to-customer for Kubernetes microservices. Scale your edge operations. Enable your microservices teams to secure, scale, and ship their microservices, so your ops teams don’t have to.


Join thousands of other businesses

NvidiaApp DirectMicrosoftKubeflowFalabellaChick Fil A

Ambassador is designed for both developers and operators

Ambassador gives developers and operators decentralized control of the edge, enabling you to ship your services faster.

For Developers

Detect issues

Detect issues and determine root cause faster. Automatic L7 metrics collection, distributed tracing, and integration with popular monitoring systems.

Test Safely

Test safely with real production traffic. Dynamically adjust traffic weights per route for canary releases. Copy and route production traffic with traffic shadowing.


Decentralized self-service configuration. Manage your Ambassador configuration as part of your Kubernetes workflow, without waiting for centralized operations.

Modern protocols

Use modern protocols. Support for gRPC, WebSockets, and HTTP/2.


Incrementally migrate to Kubernetes. Use Ambassador as a facade for both your legacy applications and clud-native applications, and migrate without impacting your customers.

For Operators


Kubernetes-native, with high availability and scale. Integrated Kubernetes health checks. Scale with horizontal pod autoscaler.

YAML Config

Simple YAML config. No need to learn a new configuration language or invest in new tooling.

GitOps Friendle

GitOps friendly. Fully declarative configuration. Store all configuration under source control.


Secure your services. Encrypt all L7 connections with TLS. Require authentication on all inbound requests. Prevent denial of service with rate limiting.

Blazingly Fast

Blazingly fast. Handle thousands of requests per second on a single pod. Reconfigure Ambassador in milliseconds with no connection drops.

Reduce time-to-customer for Kubernetes microservices

Scale your edge operations with a GitOps style workflow enabled by Ambassador’s decentralized, declarative configuration model.

The Old WayThe New Way

Ambassador is powered by Envoy Proxy

Ambassador is a specialized control plane that translates Kubernetes annotations to Envoy configuration. All traffic is directly handled by the high-performance Envoy Proxy.