All of the functionality previously available in Ambassador Pro is now available for free with the Ambassador Edge Stack Community Edition! Click here to learn more →

Ambassador Pro

Secure, scale, and ship your microservices

Reduce your time-to-customer for Kubernetes microservices. Scale your edge operations. Ambassador Pro enables your microservice teams to secure, scale, and ship their microservices, so your ops teams don’t have to.



Accelerate Kubernetes services development, and get to production faster.

Preview your service in production

Integrated Telepresence support lets developers preview "under development" service in production, without impacting end users.

Deployment Support

Ambassador can accelerate your migration to Kubernetes. Deployment support helps you with Ambassador and Kubernetes migration, before you move to production.


Create and run custom filters that manipulate incoming requests. Manage on a per route / per host basis.



Protect your services at the edge without changing application code.

Easy, seamless Single Sign-On

Secure access to your services. Ambassador Pro integrates with popular Identity Providers such as Auth0 and Keycloak to provide a seamless OAuth / OpenID Connect authentication flow for your services.

Restrict access to specific services

Declare access control policies, and control who has access to specific services.

End-to-end TLS Encryption

Integrate with the Consul Connect service mesh for end-to-end TLS.

Mitigate denial-of-service attacks

Insure your services remain available, even when under heavy load. Configure rate limits on a per-service basis.

Configure authentication across multiple domains

Publish services across multiple domains from a single Kubernetes cluster and Ambassador Pro installation.

JWT validation

Validate JSON Web Tokens.

API Keys Coming Soon!

Protect APIs with long-lived API keys.



Release updates quickly and safely. Rapidly identify and troubleshoot problems.

Community and torture tested builds

Certified builds undergo additional validation, with specific fixes for mission critical deployments.

Set limits for service usage for specific users

Prevent a single client from consuming too many resources with per-user rate limiting.

Production Support

We offer both business hour and 24x7 Sev 1 support for Ambassador.

Kubernetes Native & Built on Envoy Proxy

Get started now!

Ambassador Pro Tutorials

Join thousands of other organizations automating edge operations

NvidiaApp DirectMicrosoftPTCTicketmasterChick Fil A

"Ambassador is a great productivity tool, and provides a single point of reference for all of our services. We’ve also saved a lot of money and complexity since we’ve eliminated many of our ELBs. Ambassador has been very stable and robust for our needs."

Paris Apostolopoulos

Lead Software Engineer, Ticketmaster

"Ever since the inception of Kubernetes, we’ve witnessed a community of ideas coming together and evolving best practices. Ambassador is one of the building blocks we adopted and are proud to be contributing to."

Alexandre Gervais

Staff Software Engineer, AppDirect

"Regarding Ambassador, all I hear around our company is pure joy."

Carlos Yakimov

Solutions Architect, Falabella

"Ambassador provides a simple, decentralized way of managing Envoy files through annotations which allows us to declare the state of the routing tier directly to code and simplify the dev-ops process"

Christopher Lane

Enterprise Architect, Chick-Fil-A