Contour
Kubernetes ingress controller powered by Envoy
Contour is a Kubernetes ingress controller that uses the Envoy proxy as its data plane. It provides advanced routing through its HTTPProxy custom resource.
Key features
- Envoy-powered ingress
- HTTPProxy CRD
- Dynamic configuration
- TLS and delegation
Strengths
- Released under the Apache-2.0 license
- Kubernetes-ready with Helm charts available
- Active community (4k GitHub stars)
- Written in HTML
Is Contour secure?
No known vulnerabilities affect Contour's latest release (v1.33.7). OSV.dev lists 5 past advisories for the project; none of them applies to this release. No known vulnerabilities is not proof of security: it means none have been publicly catalogued.
- Most recent fixed advisory CVE-2026-50149, published 2026-08-19 (56 days ago), fixed in 1.33.5, 1.33.4
Source: OSV.dev, checked 2026-10-14. How this is measured.
Contour replaces
Health badge
Maintain Contour? Add its health score to your README. The badge links back to this page.
Compare Contour
2 head-to-head comparisons.
Similar reverse proxy & gateways apps
Caddy
Reverse Proxy & GatewaysFast, multi-platform web server with automatic HTTPS
Replaces Nginx, Apache
Traefik
Reverse Proxy & GatewaysCloud-native reverse proxy and load balancer
Replaces HAProxy, AWS ELB
Pi-hole
Reverse Proxy & GatewaysBlackhole for Internet advertisements with a GUI for management
Replaces NextDNS
acme.sh
Reverse Proxy & GatewaysPure shell ACME client for TLS certificates
Replaces Certbot
mitmproxy
Reverse Proxy & GatewaysInteractive HTTPS proxy for inspection and debugging
Replaces Charles Proxy, Fiddler
Kong Gateway
Reverse Proxy & GatewaysCloud-native, fast, scalable API gateway
Replaces AWS API Gateway, Apigee